$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: UrRE6lCn//G6tMn+I2I3zlIL+nMwRtlt82J/Xu/zRiI= Subject key identifier: D6:70:A0:AB:13:18:32:DE:A4:1B:2A:FC:2D:DE:5A:67:7E:50:CF:DC Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 01A1DEA74E6ABDC15CAE1A200335010855D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 1667 Signing time: Sun 15 Nov 2026 10:01:08 +0000 Manifest this update: Sun 15 Nov 2026 10:01:08 +0000 Manifest next update: Mon 16 Nov 2026 10:01:08 +0000 Files and hashes: 1: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=) 2: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=) 3: GT1TKA4rV1OP_xJGzsCFQYpWhGg.roa (hash: HG/pHQ1DuBKD68MX3r3/b2+tAgjgwKx/kNjIgxZtYug=) 4: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=) 5: a9jE-TX9k6OHwBgKQbFeNgu9t74.roa (hash: HbwU/n/E/rQdZGHVXYtZfsfswxUEspontCNM306GAQg=) 6: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: AqLfX0Y/VLCQJj75ya763Xx0ljhuvLC3IbXoDowfcKA=) 7: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=) 8: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=) 9: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=) 10: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=) 11: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=) 12: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=) 13: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=) 14: z-nb9OR5wIGAbyf08ty4Ed8fMZg.roa (hash: FLCXcVtn+EsJj17lJtNlohF0/PRzkddHbk2X/6qv4zM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:a7:4e:6a:bd:c1:5c:ae:1a:20:03:35:01:08:55:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Nov 15 10:01:08 2026 GMT Not After : Nov 16 10:01:08 2026 GMT Subject: CN=d670a0ab131832dea41b2afc2dde5a677e50cfdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:be:7f:d4:1d:1d:79:f5:24:79:8c:87:44: 0f:95:6a:dc:89:bf:3e:4b:d3:34:df:e1:1c:53:d4: 47:95:73:3b:77:44:a4:80:6a:f6:47:0c:17:03:a0: a4:90:a8:a2:c5:3c:f3:7e:27:ef:7d:7b:15:ec:81: fe:9a:80:c1:97:8b:a9:05:d2:df:fc:bb:06:89:49: 1a:dd:23:74:f4:79:87:ca:6f:f2:9a:ef:95:92:75: ec:ca:58:ab:b7:11:82:9e:7c:e3:30:c4:e6:e6:e3: 96:c6:10:81:c4:b2:d6:12:9e:e6:9b:4b:a5:81:e3: 7f:4a:08:e4:8e:24:6d:e8:bd:74:5c:1b:10:b2:d9: 11:38:bc:98:48:42:dd:e4:18:af:7a:53:19:10:40: b4:c0:7a:42:70:85:9c:85:8c:72:2d:7b:c9:95:50: 6e:2d:26:17:61:3d:ed:27:b7:63:6f:66:51:4d:a1: 2c:55:a9:e7:5e:bf:f8:1e:87:b9:60:0a:b9:ad:8a: d1:a0:b2:5c:3b:02:7b:f8:46:92:5c:a6:2e:04:6e: 63:a4:45:fd:27:6c:f8:b4:ff:e9:ab:59:6e:7e:87: 9d:9e:e7:97:3f:14:ca:ce:53:67:22:b9:0d:28:54: d4:d9:ae:b2:a6:41:b2:b8:17:aa:e6:8f:3e:d1:b2: 53:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:70:A0:AB:13:18:32:DE:A4:1B:2A:FC:2D:DE:5A:67:7E:50:CF:DC X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:28:a4:66:8e:07:79:e1:2d:c6:6f:c0:02:4f:b8:48:bc:ba: 5f:3a:14:ed:43:c5:05:ac:52:92:c2:cb:dc:de:f1:e6:2d:c9: 44:34:56:9a:37:2c:cb:07:b7:52:70:5d:a8:91:a5:36:aa:43: d0:4a:e5:60:44:09:92:e3:b5:2e:18:1a:ad:18:a4:ac:fe:3e: 04:ef:17:bc:43:16:05:38:87:fb:9a:45:34:02:a0:33:44:86: 18:39:cc:2a:8d:07:e9:ad:e0:84:10:cd:aa:ae:da:63:5a:39: 3c:62:be:7b:b4:57:62:84:29:fb:6b:2e:f5:58:29:68:2d:cc: 8f:4e:da:94:21:ea:ec:86:05:dd:a1:f4:14:ba:22:5d:f3:c8: a1:71:f5:41:14:56:d1:69:14:62:f1:cb:7b:41:22:66:49:35: c5:81:5d:43:b0:ff:5e:fb:5f:58:9b:7d:2c:4f:8a:50:df:42: 33:b3:c6:20:d5:d0:52:cf:1f:fc:9e:87:25:c5:bf:03:65:0b: fd:bb:59:2c:4a:aa:9f:77:80:c7:64:fc:00:e4:6f:f5:f3:4d: 57:3b:90:3a:2d:4e:a7:92:bc:4b:55:4f:b8:10:f3:b1:71:3f: f3:72:0e:46:52:7a:0e:3d:12:2c:bc:14:fc:33:8d:49:83:70: ee:15:1e:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHep05qvcFcrhogAzUBCFXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYxMTE1MTAwMTA4WhcNMjYxMTE2MTAwMTA4WjAzMTEwLwYDVQQD EyhkNjcwYTBhYjEzMTgzMmRlYTQxYjJhZmMyZGRlNWE2NzdlNTBjZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9q+f9QdHXn1JHmMh0QPlWrcib8+ S9M03+EcU9RHlXM7d0SkgGr2RwwXA6CkkKiixTzzfifvfXsV7IH+moDBl4upBdLf /LsGiUka3SN09HmHym/ymu+VknXsylirtxGCnnzjMMTm5uOWxhCBxLLWEp7mm0ul geN/SgjkjiRt6L10XBsQstkROLyYSELd5BivelMZEEC0wHpCcIWchYxyLXvJlVBu LSYXYT3tJ7djb2ZRTaEsVannXr/4Hoe5YAq5rYrRoLJcOwJ7+EaSXKYuBG5jpEX9 J2z4tP/pq1lufoednueXPxTKzlNnIrkNKFTU2a6ypkGyuBeq5o8+0bJTNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZwoKsTGDLepBsq/C3eWmd+UM/cMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiikZo4H eeEtxm/AAk+4SLy6XzoU7UPFBaxSksLL3N7x5i3JRDRWmjcsywe3UnBdqJGlNqpD 0ErlYEQJkuO1LhgarRikrP4+BO8XvEMWBTiH+5pFNAKgM0SGGDnMKo0H6a3ghBDN qq7aY1o5PGK+e7RXYoQp+2su9VgpaC3Mj07alCHq7IYF3aH0FLoiXfPIoXH1QRRW 0WkUYvHLe0EiZkk1xYFdQ7D/XvtfWJt9LE+KUN9CM7PGINXQUs8f/J6HJcW/A2UL /btZLEqqn3eAx2T8AORv9fNNVzuQOi1Op5K8S1VPuBDzsXE/83IORlJ6Dj0SLLwU /DONSYNw7hUeqA== -----END CERTIFICATE-----Generated at Sun Nov 15 17:04:42 2026 by rpki-client