$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json) Hash identifier: u3DOrZR0DOob7Wau2M6uZlP1eOmQF1adWAtmYmnjDtM= Subject key identifier: E5:87:F1:1B:3C:27:B2:A4:D2:80:1F:8A:F7:9B:91:EF:16:E8:71:52 Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 01A1DACA8C864B56ABE0A2AF5ACF45A355E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft Manifest number: 1B20 Signing time: Sat 14 Nov 2026 16:01:09 +0000 Manifest this update: Sat 14 Nov 2026 16:01:09 +0000 Manifest next update: Sun 15 Nov 2026 16:01:09 +0000 Files and hashes: 1: 0lpbV27AN-RWXlo8EoDNHkn_WFo.roa (hash: 6Kk8nKuXT+iDhxODfuxvlj4oC1k4gGbREeQuyIoqN44=) 2: 3a7na1VrOyD4j9eANMYFxWbuuXA.roa (hash: zi3twxBdnTcqBHYcetTlSiGtn2VDXgmL6wD/jF3qYjQ=) 3: 3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa (hash: AfMPl1I4FCjIX3coVGZnaX03RsdIkobHgk2ozUg0CRU=) 4: KrEjWh12m9Ky0XdHMs-AV4DW__Q.roa (hash: htLgSYFv0aza897YRzqYZzsiSWGM3XLxPit9x6cKCoM=) 5: QFNxEKmMB0w9c_fcbUm6kZIgIiU.roa (hash: yRObraxWQ+KSiz/NMpv1EAHhy6xFZ3g/Tjjo6DSAkhE=) 6: SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa (hash: KVtsT0fMQgVAG+EfM+vPhmS8z1w+vo6LbjbuGgZDfvk=) 7: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: sAwdJaZrI8mPv1Entw/NUETUgrOHoz1FcbrwRSrR6og=) 8: UYXgcCIK5zcKT9TlB3oRxLcPw4c.roa (hash: ZKu5onIAs6YBld/h2tSRXhaOsFitxQIlAPhxGco8hos=) 9: UvcJIP9GU_V2Mt4tyf-MC05D4z4.roa (hash: Irba1/9xm6DmXZQD7UmL9JlVgVcOaYu4q1AwZlIIIho=) 10: XfkL7_PpVycbprVLaH4OE4tT8zw.roa (hash: Oii2pbC7CFv3HCPeNrmN9q1EffMqA0bBjcOQLdxIuL0=) 11: _K246O-pbv3LImR_NbGl0Uuk0ms.roa (hash: 4aM+aELc7GT7SUF0gs3npOnDB0xgu8gqvceBuJ4g3W0=) 12: aDqWfD8qVv5mTmy_YKlw0knE910.roa (hash: Nt6HJPyyJEcO8XZlWiN2Qky5erL1hvtr6Hh2B65imCI=) 13: cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa (hash: oSg1p4d3f/Ek/TgEvq1Kl3nuuVmFt2QEXW8+ntmYEbw=) 14: dX-rNWvNzQQp4mkv-p-E7vQ4jvE.roa (hash: tzroMUcOp9V01Z5SuKmv3L+kiGKSKimIDzFfo75M/VM=) 15: e2-M3_roN4thnHrSRcYhd3A5tEE.roa (hash: HtHoJrcFJ7Tr7k+ozWHjO7whHbckIcy4WmHKQ/7ZFj4=) 16: hJ_DSrWaO3ObBm5-hhe295ZUGZU.roa (hash: sBGo0ebfgaJ7zl4GXpc60jYy9/bgceVEOmE1IuNRiO8=) 17: hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa (hash: X6Ep2QeB8bOGHavV+XJT5rALDucLiATYg1DR3vQrIUc=) 18: iI_SDTDKoORMx-kq45a1qjOTuZk.roa (hash: J2K/cush+bx+VMhqbDSKLYwVdG3Sbi2stgQnJe6Lx8g=) 19: kwWZWud0oDxj9bqRYQSnO1fTRms.roa (hash: pxOltO+Vbwb+oDFmvBF+y18EOaW3vQK3U1vDji5y33Q=) 20: m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa (hash: n8StrjuRMyFGihImcOgaJXRS+zodWuJUHk2aQxkkkuU=) 21: niKMcxvkNHwtFE1swRnZRa7V130.roa (hash: 5BhfKtNxHPXceWh2gh+NnT77omNb+6j7lXfyG61q2BY=) 22: o5XpHbYzECM8PxBWg33FKmpPLyo.roa (hash: /s+OXvlcKVVirwj5hJhUGVZIhqNKlLQOjzuXK++kB0A=) 23: ptwWAfUIQhVLhqDQn5RDQ5c7CTA.roa (hash: Nd7kZjPWVNNkDzbbN1dtVJihtNFnEpHnC+VpDFqPs8A=) 24: xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa (hash: 944aX9Q9tSThrEugzQqJaCWIZrVcCyB9vKNFlU0FXPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:ca:8c:86:4b:56:ab:e0:a2:af:5a:cf:45:a3:55:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Nov 14 16:01:09 2026 GMT Not After : Nov 15 16:01:09 2026 GMT Subject: CN=e587f11b3c27b2a4d2801f8af79b91ef16e87152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:ce:25:af:e5:80:79:d7:6c:c7:a9:a8:62: 8a:26:07:a9:72:1f:df:02:40:be:a3:01:15:00:e4: b3:cc:9a:e3:f2:0c:27:70:5a:eb:9e:f1:89:f8:08: c8:3d:85:8d:e1:11:13:31:a0:f7:b4:f7:6e:d4:64: 82:4c:f0:c2:3d:6b:72:49:08:33:8d:2e:90:36:16: 95:5e:7a:0b:ea:a6:24:ac:91:73:2c:c9:bf:e4:b5: e4:c8:ec:22:0d:a6:74:e0:01:fc:90:e0:50:62:db: 78:43:6f:47:b1:13:73:97:c1:6d:78:7a:93:97:0b: 72:42:61:b9:2e:fb:c1:f3:4d:60:6b:c7:84:db:ce: 6f:d3:cc:cc:3a:69:61:13:7c:07:2f:66:18:e9:56: 75:3b:19:05:d7:df:c2:20:47:ec:df:9b:e4:76:2c: e9:b3:d2:eb:c1:fa:a3:e2:71:1a:a1:55:41:38:91: bd:1a:c1:45:e9:92:64:7e:41:cf:16:35:d4:cb:94: b7:c8:ca:7a:34:58:5c:26:ed:74:72:aa:96:8c:70: 90:8c:20:f0:0f:8b:86:1c:d7:92:ea:80:04:b5:78: ce:5d:7d:27:80:77:a2:4d:74:68:af:e7:98:33:d3: fd:0e:09:5a:92:5e:d7:cf:94:05:86:40:20:e6:64: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:87:F1:1B:3C:27:B2:A4:D2:80:1F:8A:F7:9B:91:EF:16:E8:71:52 X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:11:2d:db:2e:27:a7:9e:13:5a:77:48:6e:8b:33:f5:8c:fc: 6e:05:4a:4e:13:f3:3a:5f:0b:54:16:08:31:df:b5:e1:07:bb: 9c:f9:6c:28:5e:dd:b8:9b:77:d7:d2:6e:de:48:44:4d:af:d8: bf:65:11:84:1a:00:94:5a:8b:b6:1e:27:61:16:a5:66:6b:e5: e7:86:b4:9c:04:71:c6:47:57:01:b3:c7:b7:ae:70:45:f8:54: 9b:94:7f:ef:1c:6e:84:62:f0:3a:80:cf:33:73:6d:8b:1a:8d: fa:9d:d1:ce:bc:6f:8d:00:da:4b:5e:fe:7f:dd:ee:bd:bb:0e: 19:c5:9c:e6:03:00:3c:03:62:6f:c9:da:c9:f5:09:25:13:0e: c9:e4:bd:1c:41:e4:f0:d2:31:2d:7d:9b:3a:ac:e6:03:6e:aa: f9:e7:a8:d2:03:b4:d3:e3:ce:25:43:81:c6:fc:8b:52:a5:b9: 8b:65:1d:11:42:b9:58:e3:6a:cf:09:2d:f8:14:f2:b0:ad:15: 0d:21:6f:6f:98:71:63:ee:4e:f0:a0:2f:a3:22:2d:46:b0:8f: 53:05:14:8e:2c:eb:e3:7a:a9:52:04:19:99:ea:d6:23:8e:90: 49:1b:a1:08:52:20:cd:fd:bc:6e:c9:a8:57:18:e0:ed:92:84: 3e:c1:10:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHayoyGS1ar4KKvWs9Fo1XlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYxMTE0MTYwMTA5WhcNMjYxMTE1MTYwMTA5WjAzMTEwLwYDVQQD EyhlNTg3ZjExYjNjMjdiMmE0ZDI4MDFmOGFmNzliOTFlZjE2ZTg3MTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+/OJa/lgHnXbMepqGKKJgepch/f AkC+owEVAOSzzJrj8gwncFrrnvGJ+AjIPYWN4RETMaD3tPdu1GSCTPDCPWtySQgz jS6QNhaVXnoL6qYkrJFzLMm/5LXkyOwiDaZ04AH8kOBQYtt4Q29HsRNzl8FteHqT lwtyQmG5LvvB801ga8eE285v08zMOmlhE3wHL2YY6VZ1OxkF19/CIEfs35vkdizp s9Lrwfqj4nEaoVVBOJG9GsFF6ZJkfkHPFjXUy5S3yMp6NFhcJu10cqqWjHCQjCDw D4uGHNeS6oAEtXjOXX0ngHeiTXRor+eYM9P9Dglakl7Xz5QFhkAg5mQGNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWH8Rs8J7Kk0oAfivebke8W6HFSMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxEt2y4n p54TWndIbosz9Yz8bgVKThPzOl8LVBYIMd+14Qe7nPlsKF7duJt319Ju3khETa/Y v2URhBoAlFqLth4nYRalZmvl54a0nARxxkdXAbPHt65wRfhUm5R/7xxuhGLwOoDP M3NtixqN+p3RzrxvjQDaS17+f93uvbsOGcWc5gMAPANib8nayfUJJRMOyeS9HEHk 8NIxLX2bOqzmA26q+eeo0gO00+POJUOBxvyLUqW5i2UdEUK5WONqzwkt+BTysK0V DSFvb5hxY+5O8KAvoyItRrCPUwUUjizr43qpUgQZmerWI46QSRuhCFIgzf28bsmo Vxjg7ZKEPsEQ4A== -----END CERTIFICATE-----Generated at Sun Nov 15 01:18:45 2026 by rpki-client