$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: 00RTBxmF+ximp8lja/h4PyrXhkC0PUucs5hvDuL3254= Subject key identifier: AD:66:C7:D3:40:D0:D1:54:76:B7:18:87:11:CB:3B:11:9A:70:3B:F1 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 01A1DC4B3D5AE610A68F77D454BB4A99DF7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1B0C Signing time: Sat 14 Nov 2026 23:01:20 +0000 Manifest this update: Sat 14 Nov 2026 23:01:20 +0000 Manifest next update: Sun 15 Nov 2026 23:01:20 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: tvOuZLFWMguKiOA8N5o2hwIBIlXpfCf9I6/JY1QDxw0=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:4b:3d:5a:e6:10:a6:8f:77:d4:54:bb:4a:99:df:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Nov 14 23:01:20 2026 GMT Not After : Nov 15 23:01:20 2026 GMT Subject: CN=ad66c7d340d0d15476b7188711cb3b119a703bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:55:5f:49:e0:7d:cb:5c:c1:7d:88:94:81:6b: f1:41:bc:8d:fb:e1:6e:df:69:fa:76:f8:ed:7d:af: e9:13:3b:97:0b:ed:d3:90:78:f2:f3:5f:69:9f:c6: 38:60:54:d9:ba:60:9d:69:e6:e6:6d:2f:e4:a4:30: 2d:06:ea:cf:c5:5c:14:e5:71:27:21:cc:51:26:95: c6:71:c1:f6:f1:c8:99:f4:8a:ab:fd:c4:97:cb:da: bd:61:3f:e8:71:79:7a:32:0a:2b:be:55:45:44:31: cc:2d:97:0c:a5:57:70:34:a8:17:4b:7d:93:1b:91: cd:60:7e:26:c8:26:b2:65:37:50:a8:00:c0:d9:d4: 4c:73:3e:dd:01:95:43:63:48:d9:23:13:d8:94:5d: c1:b4:38:65:55:91:77:21:26:b3:7e:9d:b7:25:9f: 37:ff:19:36:29:91:ef:1e:e9:eb:da:3d:09:a6:ed: fc:4e:34:64:8b:fb:23:bc:a9:85:0e:d7:48:73:e0: dd:a1:b7:db:aa:8a:90:b2:c2:43:6e:eb:6a:1f:f8: 17:ac:6a:80:98:a3:af:9e:6a:cf:cf:65:45:1a:a3: d2:0a:40:84:53:1b:31:7e:eb:31:a3:b6:6d:5d:a2: 36:98:b6:c9:d3:dc:fd:c0:7b:34:fb:81:f4:13:34: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:66:C7:D3:40:D0:D1:54:76:B7:18:87:11:CB:3B:11:9A:70:3B:F1 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:90:a1:b1:1a:0e:36:42:8c:de:9c:6d:df:37:1a:1b:b4:a5: 8d:74:96:28:d8:7a:fc:f3:26:50:6d:bf:c8:53:f3:b6:d3:41: 2d:75:54:b6:b9:44:53:06:81:31:d4:34:b4:ca:a0:fb:f2:34: 35:64:23:87:ed:07:95:bb:c3:ad:b5:99:ea:36:62:4f:03:2a: a1:3c:57:ee:3c:64:4e:27:10:d4:cc:b9:ab:e1:f9:7e:f7:17: 24:ba:39:5e:37:43:43:3d:9a:d4:f1:ad:17:31:bb:21:4d:c7: 09:a7:ef:eb:a1:ee:2f:d8:0e:2e:ef:a2:24:ef:f5:df:31:13: 1f:7a:d3:5c:eb:f5:ba:30:69:00:2e:f0:fd:66:99:bc:4c:2b: 19:2c:d2:71:0d:f4:3f:4e:b0:7c:d6:49:d2:b9:04:b2:bc:c2: d5:03:92:ed:c4:d1:82:51:e4:03:ae:8e:02:03:df:70:25:af: e7:d5:69:85:eb:28:52:65:e3:61:02:73:ba:d4:9d:a7:95:4f: 1f:79:7b:50:d6:c1:1e:b8:f1:22:7c:91:81:42:72:ad:4c:41: 34:77:ad:f0:69:71:05:1e:47:c8:ce:81:39:28:95:44:10:4a: 7f:3d:06:a7:9b:64:5c:3e:9f:ca:54:3f:b7:3c:60:4f:e5:28: 1c:7d:4b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcSz1a5hCmj3fUVLtKmd96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYxMTE0MjMwMTIwWhcNMjYxMTE1MjMwMTIwWjAzMTEwLwYDVQQD EyhhZDY2YzdkMzQwZDBkMTU0NzZiNzE4ODcxMWNiM2IxMTlhNzAzYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lVfSeB9y1zBfYiUgWvxQbyN++Fu 32n6dvjtfa/pEzuXC+3TkHjy819pn8Y4YFTZumCdaebmbS/kpDAtBurPxVwU5XEn IcxRJpXGccH28ciZ9Iqr/cSXy9q9YT/ocXl6MgorvlVFRDHMLZcMpVdwNKgXS32T G5HNYH4myCayZTdQqADA2dRMcz7dAZVDY0jZIxPYlF3BtDhlVZF3ISazfp23JZ83 /xk2KZHvHunr2j0Jpu38TjRki/sjvKmFDtdIc+DdobfbqoqQssJDbutqH/gXrGqA mKOvnmrPz2VFGqPSCkCEUxsxfusxo7ZtXaI2mLbJ09z9wHs0+4H0EzQ8mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1mx9NA0NFUdrcYhxHLOxGacDvxMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZChsRoO NkKM3pxt3zcaG7SljXSWKNh6/PMmUG2/yFPzttNBLXVUtrlEUwaBMdQ0tMqg+/I0 NWQjh+0HlbvDrbWZ6jZiTwMqoTxX7jxkTicQ1My5q+H5fvcXJLo5XjdDQz2a1PGt FzG7IU3HCafv66HuL9gOLu+iJO/13zETH3rTXOv1ujBpAC7w/WaZvEwrGSzScQ30 P06wfNZJ0rkEsrzC1QOS7cTRglHkA66OAgPfcCWv59VphesoUmXjYQJzutSdp5VP H3l7UNbBHrjxInyRgUJyrUxBNHet8GlxBR5HyM6BOSiVRBBKfz0Gp5tkXD6fylQ/ tzxgT+UoHH1LXw== -----END CERTIFICATE-----Generated at Sun Nov 15 01:22:20 2026 by rpki-client