$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: XGuMWCs0GeDJ3Jl4rucn/hifkQta7/uijFa6AflTVc4= Subject key identifier: AA:34:F2:F9:3B:BB:D6:C2:3C:23:2C:78:C7:EC:E7:EA:4F:DD:5A:63 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 01A1DC822BC7986CEC1B82D27F16D1D39FFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 14CB Signing time: Sun 15 Nov 2026 00:01:20 +0000 Manifest this update: Sun 15 Nov 2026 00:01:20 +0000 Manifest next update: Mon 16 Nov 2026 00:01:20 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: 1X2Hvbs0PYBFgEy5ImmV__Z8DLU.roa (hash: ZYPgd8y7IbdDC/ULthuJT2ywhyruHxgA10Z3lq1KLhA=) 3: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 4: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 5: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 6: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 7: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 8: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 9: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 10: fCzKSf8kNId6flq9rFoMynX2BPY.roa (hash: yrez/pejBMoRk5GkTGlPJ7xFz3dihFoF3UxjS+9WX/U=) 11: mQVVU0yW21pC8IYFai3gUt7H-pE.roa (hash: H5zFgqItky5UWDxQkcovYBDjwRGeK4Gj998+PN5ijik=) 12: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: u7pScIVpwWUEOu7GhmxFZgPEnLZD3i/92iW3+PtA6Xo=) 13: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 00:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:82:2b:c7:98:6c:ec:1b:82:d2:7f:16:d1:d3:9f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Nov 15 00:01:20 2026 GMT Not After : Nov 16 00:01:20 2026 GMT Subject: CN=aa34f2f93bbbd6c23c232c78c7ece7ea4fdd5a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c3:64:ca:0c:05:62:f3:7d:ee:2e:55:b3:8f: 2b:09:ec:f6:35:e0:1c:97:16:87:cc:73:d5:24:2f: df:bc:17:e5:41:67:89:7a:22:96:db:5c:e9:79:a0: 3a:f9:57:9d:a8:76:ea:9a:fa:47:b6:7d:d8:c1:2b: 48:1c:9b:c4:0c:a1:4d:08:28:c5:9a:a1:4a:f6:3d: 8c:c1:3e:0f:7c:e5:98:b4:16:41:f8:3b:a9:c7:65: 77:93:b8:54:8a:88:dd:c4:0f:a2:d9:1f:23:0a:37: 4d:2f:12:b9:c9:14:ad:06:9d:62:e2:b2:6d:3b:ce: 07:08:9f:d2:47:8f:dc:b0:79:76:10:d1:b1:5f:66: 49:43:16:b1:ff:e2:e7:51:23:3d:ae:cf:bf:7f:94: 4b:a6:c0:fe:72:b4:13:2b:07:91:07:ac:8e:41:8d: d8:2f:94:7c:c3:75:06:d9:b9:35:0a:9d:d1:31:e6: 73:ee:c4:11:a3:06:6a:fa:d7:4c:bb:aa:b2:79:f7: 74:03:e1:cf:99:c6:cf:91:f4:0c:49:9d:bf:10:1f: 22:5f:7d:ba:ab:29:6c:6f:ca:ea:4e:1d:97:40:05: ed:85:71:59:49:11:4d:26:34:5f:bd:a8:94:02:f2: d3:ef:17:60:26:6d:ad:af:4f:30:ff:18:19:62:fa: c1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:34:F2:F9:3B:BB:D6:C2:3C:23:2C:78:C7:EC:E7:EA:4F:DD:5A:63 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5d:2b:0b:da:37:bc:2a:7e:44:79:c5:74:60:5c:41:57:66: 4a:76:48:cb:a9:1f:23:cf:7b:a6:ca:70:d4:82:7a:b7:19:75: 71:bb:d0:86:fa:96:31:98:00:0a:3a:6e:44:b3:da:53:10:e3: 60:73:46:ad:92:18:14:60:5c:ec:8b:ca:31:d3:57:15:f3:cc: 38:72:07:c6:26:14:5c:5c:db:68:f1:f8:1a:01:6e:a3:e6:03: 28:d7:de:bd:39:0c:1e:05:bc:8b:e1:4d:57:23:da:d8:ca:ca: 48:45:de:24:16:52:85:ca:86:6d:ed:d0:ca:87:31:30:5b:7e: c5:cb:51:90:d9:bd:7f:6e:43:b4:37:39:62:46:ef:fc:09:8b: 5a:b0:79:a0:57:b0:b1:d9:35:73:3f:9a:f9:84:99:09:24:ce: 6f:46:ef:7a:e6:14:07:af:00:19:51:34:2e:ff:68:80:db:67: ab:47:eb:fb:6f:11:20:89:18:06:03:68:a9:c5:57:a0:7a:0d: 15:03:e6:a9:dd:c6:9f:2e:48:0d:b9:cf:0f:16:b4:dc:28:a5: 53:0c:70:4f:8f:05:52:e3:73:38:97:f0:25:6e:5e:c2:ca:f0: 58:c5:df:0f:f2:31:c6:a6:09:05:e9:5d:2d:a9:2b:04:6c:77: 8b:b3:37:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcgivHmGzsG4LSfxbR05/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYxMTE1MDAwMTIwWhcNMjYxMTE2MDAwMTIwWjAzMTEwLwYDVQQD EyhhYTM0ZjJmOTNiYmJkNmMyM2MyMzJjNzhjN2VjZTdlYTRmZGQ1YTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsNkygwFYvN97i5Vs48rCez2NeAc lxaHzHPVJC/fvBflQWeJeiKW21zpeaA6+VedqHbqmvpHtn3YwStIHJvEDKFNCCjF mqFK9j2MwT4PfOWYtBZB+Dupx2V3k7hUiojdxA+i2R8jCjdNLxK5yRStBp1i4rJt O84HCJ/SR4/csHl2ENGxX2ZJQxax/+LnUSM9rs+/f5RLpsD+crQTKweRB6yOQY3Y L5R8w3UG2bk1Cp3RMeZz7sQRowZq+tdMu6qyefd0A+HPmcbPkfQMSZ2/EB8iX326 qylsb8rqTh2XQAXthXFZSRFNJjRfvaiUAvLT7xdgJm2tr08w/xgZYvrBwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKo08vk7u9bCPCMseMfs5+pP3VpjMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV0rC9o3 vCp+RHnFdGBcQVdmSnZIy6kfI897pspw1IJ6txl1cbvQhvqWMZgACjpuRLPaUxDj YHNGrZIYFGBc7IvKMdNXFfPMOHIHxiYUXFzbaPH4GgFuo+YDKNfevTkMHgW8i+FN VyPa2MrKSEXeJBZShcqGbe3QyocxMFt+xctRkNm9f25DtDc5Ykbv/AmLWrB5oFew sdk1cz+a+YSZCSTOb0bveuYUB68AGVE0Lv9ogNtnq0fr+28RIIkYBgNoqcVXoHoN FQPmqd3Gny5IDbnPDxa03CilUwxwT48FUuNzOJfwJW5ewsrwWMXfD/IxxqYJBeld LakrBGx3i7M30Q== -----END CERTIFICATE-----Generated at Sun Nov 15 08:35:21 2026 by rpki-client