$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: IGFk36Kc7qv1WrkD7sdhixKeAbaucH/DaJvyfsK5YMg= Subject key identifier: C4:E4:DE:B6:59:72:2C:11:E8:D2:7F:ED:94:44:11:9E:9E:7A:06:D9 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 01A1DA5CB9BC3E9C2820F5A09DD742CA0B1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 1299 Signing time: Sat 14 Nov 2026 14:01:12 +0000 Manifest this update: Sat 14 Nov 2026 14:01:12 +0000 Manifest next update: Sun 15 Nov 2026 14:01:12 +0000 Files and hashes: 1: 4gQR9v1XwiLdTiSTiRMKrI8lrqc.roa (hash: MRbBk3qGxjhuCccskdZqQQxK0ZzrsYaT8isRc260EmM=) 2: 5KWHRpNfymzUQ2B3Ea2cQyyJGcY.roa (hash: LfQjs5A5ZwTBP33RPHEo3Y4xjeF10rJHbd8wCZMoub0=) 3: B4KYwS05QgHpINLFLm8jx9WAMUE.roa (hash: Y/ZtdGLIxiXNc+93eNU6l9a/8sOjOG7FjbIkKfPBPaw=) 4: CHlF7hxgiJMCvSrfgZpDmvUe7vo.roa (hash: 3cUTX1iPlbQoeoEy9GPcHhj4EZ6G/JFPu4+djGhZwgU=) 5: DTEIYKQEg-3cc4nyovdTEVZXI84.roa (hash: hLN894n7D6L17mAkhT/VjLR/oKc26Wp5ltD2GzuEB80=) 6: DnQ7ttyDp-n0qH7kJOUMT7Ovd20.roa (hash: pJz32/L309cCRg1kd6bXr/IK1eG3h4nDSk2kO5saa98=) 7: JV4tsenikcUJ5aMnjNBdbcekaPE.roa (hash: PNp+LkFobf83gsUva0tfRNy52whV7WCfMpt/jax/3kY=) 8: J__1HHACshyPBDOUFdqrFfiSJ_s.asa (hash: P4+NQewmqawZRA1cbeRpbU6AVi0HkrkZVkGActNtwQ4=) 9: O5MpWWAIngvdNCIvP59Ugg-k22w.roa (hash: IIiXMVL+EFWSPDF6ZVIvXgN6h4ljFTOq3BqqTal5ll8=) 10: TFWQMBrTQ_CUA4Cak7djWi9jRiA.roa (hash: iHPrQntxBQ8Yfodv7+5kSSwaLAG1oIn9WUEjo4EhvoI=) 11: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=) 12: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=) 13: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=) 14: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=) 15: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: MyFzYRjakt7L02SiyCRVcHlp4ENzVo4+3U8D+U9IVIw=) 16: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=) 17: icJ83CBbDvFQpi1w8Hj4BK7Axwk.roa (hash: CKkLwTTQ3XocqCldCg44Vv/FxtinExcVSUkafGMYqnU=) 18: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=) 19: xakVfcHMl_3waxWLag9wjIyIEyY.roa (hash: 8zAufra/LX45mNIP6WBoxyrn6rEShlzjSf5RR8HSpQA=) 20: zqTDWnmSlSWX01iiSNinTnu0Zp4.roa (hash: ZNxewe66vaT/4odCrv5OwpxaOR47BEPKOgzkNOaHMeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:5c:b9:bc:3e:9c:28:20:f5:a0:9d:d7:42:ca:0b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Nov 14 14:01:12 2026 GMT Not After : Nov 15 14:01:12 2026 GMT Subject: CN=c4e4deb659722c11e8d27fed9444119e9e7a06d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ef:4a:83:7a:50:91:55:bf:b9:5e:af:54:58: bd:8e:8e:f2:77:23:9e:ef:8c:4d:3e:74:fb:39:f9: 8c:90:af:90:e7:7c:ea:c8:02:54:be:58:a3:b0:af: 57:3e:9a:5e:99:fb:5b:9e:8c:dd:e6:bd:65:b2:db: c4:08:17:07:6d:c1:76:21:56:75:bf:a9:ff:19:9b: 21:d5:fd:82:74:ac:31:bf:7a:7f:90:0f:ba:29:79: f7:32:0e:fb:cf:e1:35:a1:c6:5f:b4:c7:23:3f:c8: 77:72:45:5b:e3:0c:63:14:87:55:84:c0:5e:3b:32: bb:24:01:c2:40:59:9e:05:d7:d4:e9:55:71:1f:6d: fa:b9:1d:dd:a7:b0:db:2b:65:a1:ea:ab:d3:f7:c8: e9:4b:d7:ea:9b:af:14:8d:48:19:c9:c9:1d:4a:80: 52:bd:5e:4b:73:ab:0d:1f:7d:6f:24:43:8f:11:de: 4c:4d:51:ac:4e:f9:2a:d2:d6:80:10:34:61:5f:a9: 4d:a0:30:b5:9b:7f:4a:70:ce:2d:fd:a0:19:d6:31: 55:c3:32:0d:3b:09:65:95:23:18:ac:9f:a9:3b:cd: b6:02:03:42:9d:81:2d:a6:f0:1a:b6:0a:8f:ff:68: 08:44:00:98:2c:1a:7d:a3:78:8b:37:7f:a0:90:e5: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E4:DE:B6:59:72:2C:11:E8:D2:7F:ED:94:44:11:9E:9E:7A:06:D9 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:cf:9e:d0:db:69:1c:cf:20:93:07:f2:1a:42:a9:66:b7:82: 9c:06:01:fe:ab:ef:3e:f2:04:74:c3:32:0c:c2:e9:31:28:a0: 56:1e:c9:e6:20:5b:3c:32:b6:7f:92:c9:6d:ad:c1:1d:48:2e: 45:6b:50:b7:2c:54:37:6c:84:8c:48:a8:f0:cb:7d:67:ef:dc: 34:06:47:c2:12:6f:ef:a1:93:52:32:28:09:39:fc:af:85:63: a3:36:19:6f:7f:ab:7d:88:79:3a:59:31:ef:cc:33:74:f1:d8: 9b:20:99:1b:74:73:ce:5d:eb:04:b9:53:e7:33:1e:93:1a:28: 51:5e:b2:67:56:49:19:c7:46:13:81:d7:ef:bc:ee:f5:23:95: 8b:fe:21:79:0f:bb:54:d2:40:99:b6:31:59:94:14:ae:22:28: ae:38:40:8b:b8:04:0a:f0:7e:10:1e:ca:24:00:3d:d4:c9:91: f0:a0:1b:5c:97:4a:f4:21:cf:9b:6b:a2:45:49:45:1c:0d:e8: db:aa:0e:43:31:0a:32:91:29:b4:53:5e:01:ed:8c:8f:f9:11: 69:d1:aa:4a:1d:9a:29:c3:02:f6:1d:3c:c8:c5:17:56:3d:4b: e6:98:51:48:9e:94:68:75:a1:78:12:2a:1d:65:1e:4f:6f:2b: 3b:dd:a9:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHaXLm8PpwoIPWgnddCygseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYxMTE0MTQwMTEyWhcNMjYxMTE1MTQwMTEyWjAzMTEwLwYDVQQD EyhjNGU0ZGViNjU5NzIyYzExZThkMjdmZWQ5NDQ0MTE5ZTllN2EwNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O9Kg3pQkVW/uV6vVFi9jo7ydyOe 74xNPnT7OfmMkK+Q53zqyAJUvlijsK9XPppemftbnozd5r1lstvECBcHbcF2IVZ1 v6n/GZsh1f2CdKwxv3p/kA+6KXn3Mg77z+E1ocZftMcjP8h3ckVb4wxjFIdVhMBe OzK7JAHCQFmeBdfU6VVxH236uR3dp7DbK2Wh6qvT98jpS9fqm68UjUgZyckdSoBS vV5Lc6sNH31vJEOPEd5MTVGsTvkq0taAEDRhX6lNoDC1m39KcM4t/aAZ1jFVwzIN OwlllSMYrJ+pO822AgNCnYEtpvAatgqP/2gIRACYLBp9o3iLN3+gkOVb9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTk3rZZciwR6NJ/7ZREEZ6eegbZMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8+e0Ntp HM8gkwfyGkKpZreCnAYB/qvvPvIEdMMyDMLpMSigVh7J5iBbPDK2f5LJba3BHUgu RWtQtyxUN2yEjEio8Mt9Z+/cNAZHwhJv76GTUjIoCTn8r4VjozYZb3+rfYh5Olkx 78wzdPHYmyCZG3Rzzl3rBLlT5zMekxooUV6yZ1ZJGcdGE4HX77zu9SOVi/4heQ+7 VNJAmbYxWZQUriIorjhAi7gECvB+EB7KJAA91MmR8KAbXJdK9CHPm2uiRUlFHA3o 26oOQzEKMpEptFNeAe2Mj/kRadGqSh2aKcMC9h08yMUXVj1L5phRSJ6UaHWheBIq HWUeT28rO92pPw== -----END CERTIFICATE-----Generated at Sat Nov 14 22:32:02 2026 by rpki-client