
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: fKsGdtJgWfhcpAw0qceY6rFI845+nSNTJU/SwZW9Vvo=
Subject key identifier: DB:C9:89:3C:3B:04:C7:49:53:1D:A4:58:F1:65:F2:41:5E:C7:AE:34
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A1DACAC7D6CA974071996C61AF16C71193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 1812
Signing time: Sat 14 Nov 2026 16:01:24 +0000
Manifest this update: Sat 14 Nov 2026 16:01:24 +0000
Manifest next update: Sun 15 Nov 2026 16:01:24 +0000
Files and hashes: 1: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (hash: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=)
2: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
3: 0ktKC-f4nDyI1i5cUIWyitRoyGM.roa (hash: pRXCJVbRDGRpG1mXoJ+u7IH5zOUK6pPz7zPKHQVprAA=)
4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
6: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
7: Hq7KSfGbAabjKZnXngUy09CKrlo.roa (hash: iLEIXofURIxZfA42GaocsCdFXbCIkXKJ+whds6C0PiU=)
8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
11: MTfYuDupOZ8EKCi-cknXFTLRkO0.roa (hash: RTLFO/MqJcOk7O9hGvJVoHZCD/NBbtH1miZAgX+NBmY=)
12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: 9+r9td5qQCZumUC9D2J/gRzAE1E10npyXC2i+51BlOM=)
13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
14: S8AKTEHCvMkHQfsn_Sm9RE-DF1w.roa (hash: vrgwS8Ru/0HG13wh+v7ryxf6pZvHlJ0P+Yy4dpbSB6s=)
15: U0WYCTLb3BL8Dcqp9joVtMgVw-g.roa (hash: p+ru4cW+r6HSaCaeHZW8AaCBmqzOtYP77c4DAVcoILk=)
16: UWRpSa8c3Oh0mUYHXzQ6Q0qiIEs.roa (hash: 7iN0psfk1zyhVafop58DDcr20Feix7iaz6X07bxtzdE=)
17: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (hash: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=)
18: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
19: Yyjf5T4j8_LR2l_PDiqgZEKgorE.roa (hash: B9q3Gxf6cFCpQX15KKaR42uMVgZHY+iDJ+t7F3N4anA=)
20: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
21: eNOyh-lgZ8k4Su-Bw5zL7NInVSE.roa (hash: /DzV6jPAVXMkA9K8CeiljFOrs28pNmDlQTHpI9cOuwM=)
22: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
23: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
24: ndjowxfAoyYeMp0r3Sv0cUgWMrc.roa (hash: t3U5a9jeFTpwLqazJteiTXIy8kMtT9VQPKdjkLgNQ/w=)
25: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
26: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
27: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:c7:d6:ca:97:40:71:99:6c:61:af:16:c7:11:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 14 16:01:24 2026 GMT
Not After : Nov 15 16:01:24 2026 GMT
Subject: CN=dbc9893c3b04c749531da458f165f2415ec7ae34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:39:d3:e3:aa:c1:68:eb:57:18:13:53:55:
ed:99:18:65:b0:81:06:1e:24:0e:07:f4:22:66:95:
d9:25:14:ea:47:9b:58:b1:bd:f7:c4:32:65:cd:a0:
97:1f:44:a5:1b:4f:d2:5c:26:4f:16:44:5d:16:a4:
21:ff:12:06:43:15:6b:61:6e:af:6d:36:67:4e:7b:
ac:f3:63:e7:c2:76:0d:5b:29:a7:f7:95:81:e6:54:
22:4b:f9:60:07:cd:ec:66:b9:f2:25:07:e8:bd:22:
89:0f:a8:8c:b1:6d:21:24:f6:0b:a7:3d:bd:b5:ff:
15:0c:d7:91:ba:2c:70:72:97:a8:9f:b3:cd:29:31:
d1:7a:22:5d:42:d4:a2:92:8b:ef:dc:c4:4d:41:3b:
5e:63:2c:08:7d:e8:ba:b0:47:d0:12:54:98:cb:5a:
a2:81:26:4c:ad:6b:08:86:3f:1f:f1:ce:e8:2f:f0:
a2:ec:a3:ef:9b:8c:30:f1:b4:b9:e4:12:97:91:24:
e4:24:75:6b:74:48:2e:b4:e5:d8:e3:45:2c:77:96:
03:a3:5f:bc:97:78:70:e6:d5:3e:02:08:8a:c1:bc:
64:50:35:03:c8:bc:ec:a2:9d:8f:19:59:21:55:84:
cf:f2:48:9c:0b:da:73:e2:3d:d3:ca:70:d6:28:29:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C9:89:3C:3B:04:C7:49:53:1D:A4:58:F1:65:F2:41:5E:C7:AE:34
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:40:5b:1f:6d:2b:f1:ba:e3:b4:62:7d:10:1b:7b:bd:65:a9:
74:9a:1a:7c:58:72:24:92:9d:fe:23:2a:ad:7e:d7:0f:66:ef:
b0:70:53:39:88:a4:8f:81:17:05:e4:e3:8a:f8:a5:30:44:f4:
3b:f3:d3:1f:7c:ab:8c:3e:c5:6a:70:ce:5a:ac:28:6e:16:ed:
22:ea:2d:0d:68:6e:5a:4d:ce:d2:89:f2:5a:b7:1d:25:12:c7:
8a:ca:34:c3:28:6b:06:fb:6d:4f:8f:7a:e2:3e:96:bf:70:b8:
1a:9f:9e:2e:6f:4a:dc:72:6e:1a:2c:2c:d7:0c:a5:69:33:52:
e6:54:4d:9a:46:2f:44:01:38:21:5c:a3:dd:11:b2:24:ad:1f:
94:74:1b:c9:6b:a2:5b:96:71:81:76:e3:a5:f6:00:3a:b7:82:
28:36:b9:e7:43:54:4b:a5:dd:23:aa:df:6f:cf:63:c1:87:07:
fb:43:a6:46:3a:55:0f:4f:17:8a:16:78:b0:5a:25:de:07:40:
dd:a6:3c:e3:cf:fa:2d:9d:31:f0:cf:50:04:f1:66:11:99:76:
17:bd:2c:d0:93:d6:58:56:d6:6b:7c:c4:e3:9b:9e:a1:89:70:
7c:df:1e:52:3b:60:74:d4:e1:3c:ba:5f:07:37:fb:e7:76:2f:
62:8c:65:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHaysfWypdAcZlsYa8WxxGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYxMTE0MTYwMTI0WhcNMjYxMTE1MTYwMTI0WjAzMTEwLwYDVQQD
EyhkYmM5ODkzYzNiMDRjNzQ5NTMxZGE0NThmMTY1ZjI0MTVlYzdhZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZw50+OqwWjrVxgTU1XtmRhlsIEG
HiQOB/QiZpXZJRTqR5tYsb33xDJlzaCXH0SlG0/SXCZPFkRdFqQh/xIGQxVrYW6v
bTZnTnus82PnwnYNWymn95WB5lQiS/lgB83sZrnyJQfovSKJD6iMsW0hJPYLpz29
tf8VDNeRuixwcpeon7PNKTHReiJdQtSikovv3MRNQTteYywIfei6sEfQElSYy1qi
gSZMrWsIhj8f8c7oL/Ci7KPvm4ww8bS55BKXkSTkJHVrdEgutOXY40Usd5YDo1+8
l3hw5tU+AgiKwbxkUDUDyLzsop2PGVkhVYTP8kicC9pz4j3TynDWKCmZMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvJiTw7BMdJUx2kWPFl8kFex640MB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUBbH20r
8brjtGJ9EBt7vWWpdJoafFhyJJKd/iMqrX7XD2bvsHBTOYikj4EXBeTjivilMET0
O/PTH3yrjD7FanDOWqwobhbtIuotDWhuWk3O0onyWrcdJRLHiso0wyhrBvttT496
4j6Wv3C4Gp+eLm9K3HJuGiws1wylaTNS5lRNmkYvRAE4IVyj3RGyJK0flHQbyWui
W5ZxgXbjpfYAOreCKDa550NUS6XdI6rfb89jwYcH+0OmRjpVD08XihZ4sFol3gdA
3aY848/6LZ0x8M9QBPFmEZl2F70s0JPWWFbWa3zE45ueoYlwfN8eUjtgdNThPLpf
Bzf753YvYoxlxQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:24:29 2026 by rpki-client