$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: SlEy7JOj+JpqxObSn5KNk1fsHg9d6v4PI0RJGCjaQVQ= Subject key identifier: 76:E1:4D:E4:A1:69:6D:01:A0:69:1F:E7:A7:FB:31:9C:BD:0C:02:56 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 01A1DF1556DC9B8E42F71275421139F94FC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 103B Signing time: Sun 15 Nov 2026 12:01:19 +0000 Manifest this update: Sun 15 Nov 2026 12:01:19 +0000 Manifest next update: Mon 16 Nov 2026 12:01:19 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 2kDI2fX-vOvB11NNeAS3cg-93eM.asa (hash: NA7gOR6dP2dN+8of3Z/jNBI4ucvB9u9QIPByWzroYZo=) 3: 4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (hash: 5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=) 4: D20r0Dc3ziO-pvHNC0RCH6WWn4M.asa (hash: iaKS5DFhrhjGhN9Po/Gl1SfI1i51StPCSZ9Lx4T3V/o=) 5: JLWdtgjMTs_4Sq7DTqKgddlwfrY.asa (hash: 9mBXiLiJ86zw/4udWl2MUcosM1kylDDeUDtsF/0LHfI=) 6: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (hash: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=) 7: L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (hash: WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=) 8: OGZW3EGUH5W_Sl4Rah9ArDm_EJo.asa (hash: q8G/683GpwIgrnSyD7lVID7X1jS34HiXZGHtfK+B8v4=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: p5zNzQPaIB94IBWFj0Evjw09b6Y.asa (hash: eOPidDTFtzDIvGAErv5iz3BORzDmQalbdnPuHerit6s=) 13: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: sCRRFPC0kQkonYuSpT5hAaVHgVhV6Sn7/80H8uWIcyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:15:56:dc:9b:8e:42:f7:12:75:42:11:39:f9:4f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Nov 15 12:01:19 2026 GMT Not After : Nov 16 12:01:19 2026 GMT Subject: CN=76e14de4a1696d01a0691fe7a7fb319cbd0c0256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:60:17:b0:fa:17:7f:d4:d9:ac:68:b5:e4: 70:2e:ee:8b:75:e5:ea:44:9e:05:03:a7:63:c3:3d: 4e:40:5f:84:a3:c5:40:1f:73:ee:33:6e:2f:79:2a: 5d:91:f0:ff:4d:42:b6:51:be:3e:d8:22:1d:65:b9: 27:12:7f:54:9a:15:a9:e0:83:17:a4:4d:15:41:72: f7:eb:a9:12:6d:be:21:d6:c5:68:4c:dd:cf:e1:ca: 2c:48:7c:84:3c:7f:11:f7:1d:b4:f4:24:ff:77:10: b8:7d:d8:71:33:0a:22:11:a5:ce:6e:d2:34:db:14: 99:82:4c:3c:23:6a:17:59:8c:87:89:d0:9f:22:49: bf:83:0a:e7:22:e8:fa:02:db:a0:86:ed:bb:84:a8: 6c:dc:b4:8f:0b:13:b1:ec:0e:3c:7b:85:4e:f4:81: 88:3a:e5:25:bb:71:2b:33:ee:1b:50:b1:9a:7b:9a: 01:b3:a7:8e:5b:14:59:b1:4d:c7:f5:6e:26:b2:e0: 27:f7:5b:d8:89:32:9c:81:5f:b3:eb:01:8b:39:ef: 15:6d:71:bf:ac:5e:c2:b7:13:94:d6:f6:0f:e1:e2: 84:d2:0e:9d:97:cf:46:6a:85:ae:74:ae:68:36:1d: 04:b3:49:3f:5b:59:1b:8a:18:24:21:fd:b5:1a:3e: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E1:4D:E4:A1:69:6D:01:A0:69:1F:E7:A7:FB:31:9C:BD:0C:02:56 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:19:4b:be:85:71:44:96:8b:ba:c0:9e:c3:e6:45:78:b5:fe: 82:55:99:51:db:13:bb:e8:9d:e6:dd:c3:48:45:71:19:9e:0a: f6:cf:27:f1:5e:f4:e0:5d:28:22:ca:80:3f:ff:fd:88:8e:1a: 6a:9f:b5:b2:a0:29:76:4f:20:2c:62:c6:bd:6e:90:fc:64:1c: 36:50:8b:3b:f7:45:ce:d4:35:bf:df:58:26:16:cb:67:16:c2: 90:c8:56:d5:5d:bb:d6:61:97:40:ca:7e:e9:bf:6f:5c:dd:70: cd:a5:5c:79:a2:34:75:a8:7c:01:5c:28:2a:a7:fe:67:2d:a7: 3f:fd:ac:cc:0c:d8:eb:0c:53:38:ca:66:27:a5:64:6a:0c:68: a5:12:2f:48:cf:93:bb:15:6c:4a:80:b2:c9:1f:6a:bf:cf:88: ff:dc:96:d0:5f:9d:de:cc:cc:e6:e7:b4:24:3b:bc:12:02:e0: 0d:0f:27:07:8e:61:61:0d:b4:5d:43:e8:c7:4a:75:a4:32:0a: d5:d3:88:cd:9e:0f:9f:8f:cf:d4:17:67:ac:cd:68:cf:3d:5a: bf:ed:4e:13:a1:84:f7:ff:c1:66:1b:9d:4d:5e:ae:8c:32:e1: 59:f8:fe:e7:58:ef:fd:40:d9:83:88:6b:06:09:68:f3:71:38: b9:76:34:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfFVbcm45C9xJ1QhE5+U/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYxMTE1MTIwMTE5WhcNMjYxMTE2MTIwMTE5WjAzMTEwLwYDVQQD Eyg3NmUxNGRlNGExNjk2ZDAxYTA2OTFmZTdhN2ZiMzE5Y2JkMGMwMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7BgF7D6F3/U2axoteRwLu6LdeXq RJ4FA6djwz1OQF+Eo8VAH3PuM24veSpdkfD/TUK2Ub4+2CIdZbknEn9UmhWp4IMX pE0VQXL366kSbb4h1sVoTN3P4cosSHyEPH8R9x209CT/dxC4fdhxMwoiEaXObtI0 2xSZgkw8I2oXWYyHidCfIkm/gwrnIuj6Atughu27hKhs3LSPCxOx7A48e4VO9IGI OuUlu3ErM+4bULGae5oBs6eOWxRZsU3H9W4msuAn91vYiTKcgV+z6wGLOe8VbXG/ rF7CtxOU1vYP4eKE0g6dl89GaoWudK5oNh0Es0k/W1kbihgkIf21Gj6cDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbhTeShaW0BoGkf56f7MZy9DAJWMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExlLvoVx RJaLusCew+ZFeLX+glWZUdsTu+id5t3DSEVxGZ4K9s8n8V704F0oIsqAP//9iI4a ap+1sqApdk8gLGLGvW6Q/GQcNlCLO/dFztQ1v99YJhbLZxbCkMhW1V271mGXQMp+ 6b9vXN1wzaVceaI0dah8AVwoKqf+Zy2nP/2szAzY6wxTOMpmJ6VkagxopRIvSM+T uxVsSoCyyR9qv8+I/9yW0F+d3szM5ue0JDu8EgLgDQ8nB45hYQ20XUPox0p1pDIK 1dOIzZ4Pn4/P1BdnrM1ozz1av+1OE6GE9//BZhudTV6ujDLhWfj+51jv/UDZg4hr Bglo83E4uXY0VQ== -----END CERTIFICATE-----Generated at Sun Nov 15 21:52:08 2026 by rpki-client