$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: wVjWPZcknEPIpj9oLlLJwV9htrJOGIMhhJAivVVYZiE= Subject key identifier: 1B:3D:A4:08:A6:F0:07:52:70:CE:83:2F:1A:69:54:1F:0E:AD:28:97 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 01A1DE399F2752C41CE0F735C6969758E220 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 181E Signing time: Sun 15 Nov 2026 08:01:20 +0000 Manifest this update: Sun 15 Nov 2026 08:01:20 +0000 Manifest next update: Mon 16 Nov 2026 08:01:20 +0000 Files and hashes: 1: 3GqxL9BgsfVA5m2ZDkR-ZLLIX9A.roa (hash: Pri0BDp61F1x6W2ZNNi8m6bCY1kGNmKIt3J8iAi4+nI=) 2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: /WWiPUGgVWSBSoce4kbAKd+gw30HZp8viN5iBh7adDo=) 10: kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa (hash: riEmPQV4v2zfq30QZ7AZjXHbnN49xJeD9nNq0fiSPhg=) 11: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 12: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 13: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 14: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 15: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:39:9f:27:52:c4:1c:e0:f7:35:c6:96:97:58:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Nov 15 08:01:20 2026 GMT Not After : Nov 16 08:01:20 2026 GMT Subject: CN=1b3da408a6f0075270ce832f1a69541f0ead2897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:5a:23:2c:90:6e:61:96:9f:c8:f2:c1:8d: 0c:10:5d:dc:60:ee:83:5d:78:fc:d3:a7:ba:02:b6: 72:15:29:89:0c:9e:95:1c:6f:88:fa:e6:8e:fd:ba: c3:44:a1:55:48:06:f1:5b:f5:e8:89:1c:f5:61:e7: 28:d3:b8:ff:ae:c4:89:b1:d9:cc:37:05:37:14:d6: e8:f4:db:d4:f7:b0:b5:c8:5a:b0:05:42:74:46:39: 21:d8:5c:4f:2c:19:60:bb:fb:07:eb:75:fd:b2:2a: db:f1:3c:5c:54:64:fd:db:fb:72:2b:b2:fc:64:14: 5d:bf:93:dc:5c:dc:aa:e3:bc:46:2e:c3:73:5b:26: 0f:4f:2f:3e:0f:98:01:bd:7a:72:58:80:3c:4b:3e: 91:68:73:a3:28:55:bf:f0:b4:23:e5:f9:90:a3:20: d5:13:f6:d9:81:d1:dc:97:f1:30:da:d4:72:24:3d: 79:0d:d4:75:c8:4d:74:80:2d:09:10:fb:8e:5e:a5: 32:65:b7:52:40:f3:63:04:b0:02:8b:16:02:57:f2: 88:1c:00:a3:ae:bd:d0:59:3c:58:a4:07:38:04:03: 15:1c:b6:0f:50:7c:bc:26:e2:97:7c:e7:43:cd:b8: 10:cf:fd:cf:e4:17:1c:2d:b1:3b:ad:72:e7:aa:2a: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3D:A4:08:A6:F0:07:52:70:CE:83:2F:1A:69:54:1F:0E:AD:28:97 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:74:74:30:19:0f:cf:5d:c5:f9:53:e0:f9:3a:c0:94:f1:e9: 39:91:8b:a9:4b:93:de:3d:44:40:8f:e9:4c:ea:30:46:e0:64: bd:ee:58:64:d8:bd:f2:68:fe:82:b9:5e:85:ca:a5:35:89:99: 0a:b3:d6:f7:b1:64:bd:88:14:c6:cb:68:90:66:ac:1d:8b:eb: 5a:d1:f4:9b:3d:6d:76:87:6e:15:61:c5:0f:19:9a:73:34:8a: d2:f1:84:e7:4d:c8:0a:54:e8:85:5f:d0:64:f5:19:e1:49:e7: e1:77:10:5f:8b:99:c7:2a:f6:d0:42:b4:36:53:ef:0b:27:10: 5b:2a:85:33:00:4e:75:cc:89:6e:df:ee:a2:f8:32:34:4e:86: 7f:2d:5e:d3:95:6a:34:4f:ba:77:4c:30:a1:4f:a3:ea:cf:66: 67:02:6a:bf:38:b5:97:4a:bb:d1:15:cc:38:4a:d7:7e:2c:00: 05:20:ab:8d:9f:6c:6a:56:8a:5d:13:a1:ef:16:e9:08:69:26: 49:0f:7e:e3:53:24:fc:cf:44:ab:8d:f4:5e:41:ce:10:e9:af: 4c:fb:42:09:bf:cd:2d:9d:5a:4e:b9:0b:56:42:cd:fc:ea:ac: 21:a9:d5:bc:fd:d5:d1:e3:b9:97:33:89:1a:96:d3:3b:67:91: b9:9a:14:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeOZ8nUsQc4Pc1xpaXWOIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYxMTE1MDgwMTIwWhcNMjYxMTE2MDgwMTIwWjAzMTEwLwYDVQQD EygxYjNkYTQwOGE2ZjAwNzUyNzBjZTgzMmYxYTY5NTQxZjBlYWQyODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdlaIyyQbmGWn8jywY0MEF3cYO6D XXj806e6ArZyFSmJDJ6VHG+I+uaO/brDRKFVSAbxW/XoiRz1Yeco07j/rsSJsdnM NwU3FNbo9NvU97C1yFqwBUJ0Rjkh2FxPLBlgu/sH63X9sirb8TxcVGT92/tyK7L8 ZBRdv5PcXNyq47xGLsNzWyYPTy8+D5gBvXpyWIA8Sz6RaHOjKFW/8LQj5fmQoyDV E/bZgdHcl/Ew2tRyJD15DdR1yE10gC0JEPuOXqUyZbdSQPNjBLACixYCV/KIHACj rr3QWTxYpAc4BAMVHLYPUHy8JuKXfOdDzbgQz/3P5BccLbE7rXLnqiqmewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBs9pAim8AdScM6DLxppVB8OrSiXMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3R0MBkP z13F+VPg+TrAlPHpOZGLqUuT3j1EQI/pTOowRuBkve5YZNi98mj+grlehcqlNYmZ CrPW97FkvYgUxstokGasHYvrWtH0mz1tdoduFWHFDxmaczSK0vGE503IClTohV/Q ZPUZ4Unn4XcQX4uZxyr20EK0NlPvCycQWyqFMwBOdcyJbt/uovgyNE6Gfy1e05Vq NE+6d0wwoU+j6s9mZwJqvzi1l0q70RXMOErXfiwABSCrjZ9salaKXROh7xbpCGkm SQ9+41Mk/M9Eq430XkHOEOmvTPtCCb/NLZ1aTrkLVkLN/OqsIanVvP3V0eO5lzOJ GpbTO2eRuZoUnA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:55:11 2026 by rpki-client