$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: hoAtZJgRufUSNAHYcqT8Fv8pOGkr3J82+eeqzVUlQII= Subject key identifier: 00:03:3D:47:A3:D0:BA:FD:16:65:4B:84:0F:6E:9E:B0:69:24:50:35 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 01A1DE02E7331090B74F6FBEBF8541E8F1E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 1317 Signing time: Sun 15 Nov 2026 07:01:34 +0000 Manifest this update: Sun 15 Nov 2026 07:01:34 +0000 Manifest next update: Mon 16 Nov 2026 07:01:34 +0000 Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=) 2: 9UWbCEXqjRhjC5AwqWBCIFK_AT4.asa (hash: UFf7/mopkwyI/qLLTDxzlcrPF+4ju/94DUIEHv1Zj3E=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: O5ey4KLmszOuqOHaVMTYdve61OyfaNu//2L1z8yOIwI=) 4: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=) 5: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=) 6: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=) 7: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=) 8: TpSktW1NAsZq923aUoE53pMX0hw.roa (hash: ljs6mrp9Kdtic0OnoNEza6FCINLSHSxZypr5fLwF++Q=) 9: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=) 10: egQEbfnW1MXHUAUDIXi9mc2fB-c.roa (hash: 1BkfZIfCGpyU9bVzsVuHecgL4efqavb1+AuIHnc1Rt8=) 11: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=) 12: w1zIh0CnKegnO0T7ra_SO9YilV8.roa (hash: KzpnZqdHE55q0MkGU3Ic0fB1a+0zqfLi5dqRW/lkoPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:02:e7:33:10:90:b7:4f:6f:be:bf:85:41:e8:f1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Nov 15 07:01:34 2026 GMT Not After : Nov 16 07:01:34 2026 GMT Subject: CN=00033d47a3d0bafd16654b840f6e9eb069245035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:9c:d9:89:96:d2:51:f6:e8:05:8f:0c:a2: 46:7b:da:4a:d5:19:b2:12:81:e5:ac:73:ac:14:46: 73:e1:3a:a0:b8:36:ea:e3:bc:71:c0:c0:5b:b9:48: 2e:fc:c4:7f:b8:39:25:9e:95:4e:f4:14:22:9d:ba: 80:65:be:d5:cc:10:fb:7d:e2:5b:ee:64:84:a8:9b: 70:35:59:ee:85:c8:c8:1c:f8:ab:ba:cf:97:f4:e4: aa:64:29:05:d5:87:a3:7e:56:fb:ec:0b:ff:ba:ba: a8:69:69:4b:b2:1f:d8:02:a4:be:d8:85:58:f2:f8: 51:c2:f7:a9:dd:ab:ec:0d:d2:dd:24:02:34:ad:78: e7:45:29:d6:72:e1:a8:45:c4:14:f0:8b:bb:7d:35: 34:9b:2f:1e:85:6f:33:3e:01:95:69:d5:19:34:6e: 38:50:b3:4d:9c:93:ae:f6:1a:46:01:5f:2b:6e:43: ac:ff:80:4c:de:0c:b0:17:c4:15:44:c7:c8:2a:e6: 99:d6:97:7c:37:16:3c:ad:23:81:39:ae:5c:4f:e2: 76:d5:89:ae:fb:19:8e:eb:62:55:48:fc:1d:52:01: 7e:fc:02:bc:6d:b4:ab:2d:27:77:8f:c5:cd:32:a6: be:b1:99:2d:6c:8b:26:33:5e:f9:2c:29:0b:70:60: 37:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:03:3D:47:A3:D0:BA:FD:16:65:4B:84:0F:6E:9E:B0:69:24:50:35 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:59:9e:96:a8:dd:65:0f:cf:16:29:d5:0b:94:e6:e9:e1:64: cf:38:7f:b5:fb:98:61:d5:5b:9f:eb:cd:d2:3e:d8:ac:c0:df: a6:18:01:1e:41:f2:42:4f:e1:e5:f3:82:da:4a:c7:7a:96:17: 71:3c:7c:47:9d:27:56:5c:34:6b:98:b3:21:fb:99:98:27:3c: 8b:41:f0:56:6d:3c:52:ad:39:2f:61:8d:26:9d:f1:2a:67:53: 74:74:42:f3:81:7a:a0:14:b2:1e:22:62:81:40:d8:f4:ab:00: 0f:29:cc:ae:8e:4e:db:ee:f5:d5:23:ea:b1:f7:27:16:53:88: 0a:22:7b:69:7a:62:c6:c6:cb:6b:73:d3:35:82:35:e7:bf:a2: f7:14:d8:88:84:1f:30:51:92:97:91:f7:5f:1e:38:e1:b2:86: c1:73:c6:f3:fc:80:3a:03:f9:b1:11:ed:5d:62:c1:1a:a1:fd: 9d:d0:79:33:aa:be:bd:03:8b:10:3c:c3:9a:18:4c:b7:54:09: f9:c2:5f:c1:9b:d6:e2:74:c4:c9:fc:62:8a:77:2f:08:ff:32: 27:68:bf:c6:f8:3d:84:43:f0:4b:76:67:12:a9:c4:ac:16:0a: a7:a5:84:b2:e4:ac:00:74:f6:79:c5:85:d9:5e:02:61:22:54: 29:84:43:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeAuczEJC3T2++v4VB6PHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYxMTE1MDcwMTM0WhcNMjYxMTE2MDcwMTM0WjAzMTEwLwYDVQQD EygwMDAzM2Q0N2EzZDBiYWZkMTY2NTRiODQwZjZlOWViMDY5MjQ1MDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD+c2YmW0lH26AWPDKJGe9pK1Rmy EoHlrHOsFEZz4TqguDbq47xxwMBbuUgu/MR/uDklnpVO9BQinbqAZb7VzBD7feJb 7mSEqJtwNVnuhcjIHPirus+X9OSqZCkF1Yejflb77Av/urqoaWlLsh/YAqS+2IVY 8vhRwvep3avsDdLdJAI0rXjnRSnWcuGoRcQU8Iu7fTU0my8ehW8zPgGVadUZNG44 ULNNnJOu9hpGAV8rbkOs/4BM3gywF8QVRMfIKuaZ1pd8NxY8rSOBOa5cT+J21Ymu +xmO62JVSPwdUgF+/AK8bbSrLSd3j8XNMqa+sZktbIsmM175LCkLcGA3owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAADPUej0Lr9FmVLhA9unrBpJFA1MB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlmelqjd ZQ/PFinVC5Tm6eFkzzh/tfuYYdVbn+vN0j7YrMDfphgBHkHyQk/h5fOC2krHepYX cTx8R50nVlw0a5izIfuZmCc8i0HwVm08Uq05L2GNJp3xKmdTdHRC84F6oBSyHiJi gUDY9KsADynMro5O2+711SPqsfcnFlOICiJ7aXpixsbLa3PTNYI157+i9xTYiIQf MFGSl5H3Xx444bKGwXPG8/yAOgP5sRHtXWLBGqH9ndB5M6q+vQOLEDzDmhhMt1QJ +cJfwZvW4nTEyfxiincvCP8yJ2i/xvg9hEPwS3ZnEqnErBYKp6WEsuSsAHT2ecWF 2V4CYSJUKYRDIg== -----END CERTIFICATE-----Generated at Sun Nov 15 17:08:48 2026 by rpki-client