$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft File: xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json) Hash identifier: 9/bwi6l+AR+fFEwPsq3k9BfR+eidJAKdzbc+JGC9zxs= Subject key identifier: AB:F5:F9:E1:BE:E8:24:41:B9:79:08:A4:8D:78:49:04:46:62:97:C5 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 01A1DE39494F2792FC6AB9B1A23660C833D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft Manifest number: 1CA4 Signing time: Sun 15 Nov 2026 08:00:58 +0000 Manifest this update: Sun 15 Nov 2026 08:00:58 +0000 Manifest next update: Mon 16 Nov 2026 08:00:58 +0000 Files and hashes: 1: 1-MjPGa6a53IbnyZwW_IHAr61-zc.roa (hash: kZzBRFBi/2P9qSc5Z6+RyZ3kz7bsXv3WNDSRuvOzN+g=) 2: 1-QbP-OlL5C49Pz6xfC6dPI6n2LQ.roa (hash: b1isReMzje2eOqP7q5KK1YgmNcLYTYhlgMv1rOjAxw8=) 3: 1B0hQuEvoERQUbCoQ4g3NWvH9SY.roa (hash: 60ReKNnC1eB2w7lgYP2EUuG8gzwLkYsPdDD/C9cGvuw=) 4: 2ndwCQa5uK9SGXTw7amvh8YViz0.roa (hash: MNshJXo3vLTUpr4S/CLHnaCG5DDaH89yW7YggkO0OtA=) 5: 4IHfy85ZaLrvd3K3s3DC-8GPnFs.roa (hash: +XyFXE8DW9cD5zOpH1SHE+em22K2wucEzZ/Vryu10i0=) 6: 6CRDymwFt79mzvWnLpOF6bfqp_k.roa (hash: huEM2FNwHHsVHVv7H74bhAuZJD9zQfLotNqyWe2iUkw=) 7: 6pzxly1r6duo4bfTPPly5YdWLj4.roa (hash: jY7kyQJckoR7mZf1iNKgGtuPt/cOspaKF8OuIn7JaVk=) 8: 8UcCO2rCLB3doWwj0_cnd72i3sk.roa (hash: 8wMVwllRWA2vkCvL+tKtJBtxlrqHB+VrRwSMnB1Man8=) 9: 9j9sttA7-pwRegaPk1VlnrRWS3U.roa (hash: Owzuz3jwroudSlMKP0r25OA5dCFvcWEYO49vZ3Eif3g=) 10: AsR8PMxYeWP89FOuspLxoZEjj1U.roa (hash: ARY4kS+u5n58uyYcSBSAEiIPAoo4CIZkyZRdQCxQau0=) 11: GFODE-DZ21eHroatRJKIqVrZsaA.roa (hash: oAdEbCipvHFNYnI86ODFnZBMhLMWx82ptyOpEbw1Egk=) 12: IbfTWIENtav2Gb-9A4BMXMtftZI.roa (hash: 0UUeRTn6dWpbmAIk5t/xVrewmG/jaZ2du/1VLqKtqQ8=) 13: Ip1p585eSEewb0IONkaOYazW_0Q.roa (hash: h1M4blMde36vPMnlEH2IroJd96qzWruE2brZEpd0Sp0=) 14: JBSiUErmHLZ6L_XK9FcbRuOw9Gk.roa (hash: lxmLANsYlOzxv7LhRW+mHrlEBHMpue+1ddw6TCsuRlY=) 15: JYBgPKpA16-8lG6M4O7EPuTiVw4.roa (hash: mBzvoCHcL+VOx9e/kdW43sQh2RmNJVbq5CtoJwcYdSg=) 16: NsHDsBlsQAGgspNiM-HwDV4swTc.roa (hash: eQMEYl3+MQxyvaK6givVIiWlfkYaPSu2MObxqH2imYo=) 17: SKs9_-z9CvxWDqdk_Ffn5anOaBQ.roa (hash: OEJ9Aa8kLtFDP4uhJyWVkU3KW/M60tTKjQlgHf0Fgbw=) 18: TizLz_RtqcQjN9lGzJGaC8FzeDM.roa (hash: uLfdO+lKVjA/KdCMSJZIRciSMOLy+9+itlBgtmnFcVQ=) 19: V4refFyh6ltSMJ1zdDJO0na4eQM.roa (hash: 9x0HEEKUvclD2vVHGseZaoa9RjzKqYZyjMhfIIhJ7tw=) 20: X18nP2YXusglmmwBliQYUGVmd64.roa (hash: sJN+6yrZAWGfme0noZ5x+K33dl/pCeBb/hwCFWl81W8=) 21: _3MDT8Gy0-1_oi8AP5rLRwjHdsk.roa (hash: 4DO3O5i8TjpE42VVK4xk3/T857l7OoZi0oGhZQlmD2k=) 22: aNCB0MRwtkc25I0-Qrh0aYDQyY0.roa (hash: ZvDUECfWFTA4cY7l+6B7u9xlDXwtZPQA3gTH4xyd5VU=) 23: e_8LCfE_pngkPg3O5n81H_tyTro.roa (hash: z2GpZJjZPHBgpOqNxe6EdKGnVRgsgNAoxLNBM3PnZwY=) 24: f_W3cs_ecWHdG6K3evMumWzr_vo.roa (hash: J+lU3UAd31ssl7BE3T3uw9sHoucxFu+hegq+C0LD7U0=) 25: gYtsibPnBXBPb2nY_SAs-atiQiI.roa (hash: wZHUmXk6L4SjfoRfOx34od7ZFq/bTnT1ojNinmzWm5o=) 26: ks2Ide1WxAbJ0usJnuY9q7RlLSY.roa (hash: ItIUrv9B2UX7ToX8RQLw22/2GA3tCSuwSFRKIVwMms0=) 27: ku-pFyguE5cHtF69_qC9IQyhWD4.roa (hash: SRmdiGErBs4riF+x6opmEUXvpJ+dRiQ3pdAIUM1No24=) 28: nQxBt3f4W-r1paalMa6N4pPP6ZU.roa (hash: 9ffTVmqYk+m4WshwCCBOW6WAFzu1MVlR9JFD/Da94cA=) 29: oYv6_07zThQHF8CipgbN29WGuhE.roa (hash: nmZBXtgtF19/QeEP/NyujtcF74fB+KnDvO9PBvqdCdE=) 30: pPdJc_g7J9FjsKbnsWcQjWaRbgQ.roa (hash: k6Styv321cogEzOvWQNWhd0ddvtWhbMw7NOEI52o9sI=) 31: qV4BzWghOJcIjFL2t572uLzc5A8.roa (hash: /tlNW3pQSqKGNUqp2nGES7Pv5A/y9d61Lu+dWRJiM1c=) 32: ql1haZnROI_A4gtMJ1WOjV3AQNw.roa (hash: etq9X6mBNiExqhsqPZrAcoPMp4nhVPKjSDDkz+uku0Y=) 33: rqeGtyDTlh1RD0Bl6ekz0kfmROw.roa (hash: 2K+J256SefSCQUxPHkRrXtSFRiGIJpB2gFkBQ7pPKWE=) 34: ryt3ye7Vir3TU8n8omiofTS7hqY.roa (hash: rr//RbIxX5Xi9wQUjZY+06Kfd80TItSLVfcu1moq5dI=) 35: sT5KoPqBR9hWIqcan89qLP2ngMY.roa (hash: Tf/jpmzd0632KCJcZl8n9+tQX5OQtBbOgPiAN04i5Wk=) 36: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: DkorwdoGCWpXfvhitenXouKVQV2Rw60ybvBjrAqY5fw=) 37: zYFfWUlh-P5ldgkEaLd32AaEmqc.roa (hash: d8sg18toB2rZYXSV8ZWT01bPiWhaZN7thdAndhNnLhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:39:49:4f:27:92:fc:6a:b9:b1:a2:36:60:c8:33:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Nov 15 08:00:58 2026 GMT Not After : Nov 16 08:00:58 2026 GMT Subject: CN=abf5f9e1bee82441b97908a48d784904466297c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:82:6b:e3:40:da:bf:25:43:97:be:97:f0:f4: 5b:79:10:ad:89:12:28:b5:07:3d:c7:55:f4:32:5b: 96:9d:3f:9d:ef:ca:9c:bf:07:8c:07:50:f1:cd:e2: 3f:d8:c1:13:8f:9e:0e:ed:22:06:6e:53:75:18:45: 9d:34:8e:ec:bf:21:c3:7c:9e:6f:74:0c:be:d4:88: ba:5d:88:85:77:a7:73:bc:68:2b:3f:ec:f2:d5:59: 9d:68:04:73:dd:92:e9:46:12:36:ab:38:d6:63:ed: f0:76:2c:ff:ec:a4:43:ee:21:de:d7:b4:69:fa:52: e7:5b:b8:ca:75:80:aa:a3:3e:02:b6:71:9b:17:87: d6:9f:79:4b:de:16:b9:39:9f:5c:5c:66:85:44:3b: db:69:12:b3:98:a3:2f:5c:ff:60:1f:64:9c:cc:7f: d8:bd:df:5a:b8:40:a1:02:9a:1e:ba:56:c6:0d:7b: 75:1d:04:17:0e:71:f6:8b:6e:72:12:aa:1f:e5:98: d2:78:28:88:97:34:ca:66:e7:f9:f2:b5:f3:9a:34: 9e:fa:fa:26:e8:35:7c:30:06:d5:cd:e7:4c:60:b4: af:9c:c8:91:78:5c:d3:f0:7a:ea:ac:de:33:d1:e8: 58:d0:6c:f0:87:bd:fd:dc:b9:3e:aa:34:32:69:02: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F5:F9:E1:BE:E8:24:41:B9:79:08:A4:8D:78:49:04:46:62:97:C5 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:8b:23:b8:67:3f:23:f8:e5:db:0f:74:2f:58:30:7d:35:c3: eb:b7:29:a0:93:c9:ca:98:4b:82:b5:c1:aa:73:09:06:17:dc: d2:f8:be:16:c5:48:c6:fe:75:06:08:26:a3:be:66:fa:4a:ff: 05:17:a7:f5:1d:fa:66:ca:ff:5c:5b:5e:7e:b0:39:ca:77:45: f3:4e:a8:9d:44:59:32:c4:66:4c:7a:52:29:5f:65:f7:87:19: dc:9f:1f:ee:9a:c1:09:be:6b:51:ee:7e:b8:4a:55:dc:4b:30: 41:6d:6d:a4:67:98:e6:a7:13:d3:13:d9:6f:a5:c8:d0:90:a7: 04:47:a9:c2:31:2c:4a:fe:13:b5:eb:67:67:96:25:1e:af:13: 0e:e1:e8:c9:3d:04:26:4a:39:ee:9c:b0:76:88:b5:a1:b0:45: 78:ef:c3:31:1e:ac:eb:ab:5e:80:d8:c0:44:c1:95:cf:cd:b6: 87:0e:a9:78:55:18:8c:f1:d1:b7:2e:1c:78:67:2d:41:2a:f2: 3d:e6:1e:e9:9e:e7:41:b8:1f:85:ba:b3:46:bc:0e:ec:9c:61: 58:ac:e3:d3:eb:61:3c:39:13:ce:05:0c:13:35:0a:ab:b2:68: 76:46:b5:0a:c0:f5:8f:15:ee:6f:e4:80:d9:82:9a:25:01:8c: f1:82:51:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeOUlPJ5L8armxojZgyDPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYxMTE1MDgwMDU4WhcNMjYxMTE2MDgwMDU4WjAzMTEwLwYDVQQD EyhhYmY1ZjllMWJlZTgyNDQxYjk3OTA4YTQ4ZDc4NDkwNDQ2NjI5N2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YJr40DavyVDl76X8PRbeRCtiRIo tQc9x1X0MluWnT+d78qcvweMB1DxzeI/2METj54O7SIGblN1GEWdNI7svyHDfJ5v dAy+1Ii6XYiFd6dzvGgrP+zy1VmdaARz3ZLpRhI2qzjWY+3wdiz/7KRD7iHe17Rp +lLnW7jKdYCqoz4CtnGbF4fWn3lL3ha5OZ9cXGaFRDvbaRKzmKMvXP9gH2SczH/Y vd9auEChApoeulbGDXt1HQQXDnH2i25yEqof5ZjSeCiIlzTKZuf58rXzmjSe+vom 6DV8MAbVzedMYLSvnMiReFzT8HrqrN4z0ehY0Gzwh7393Lk+qjQyaQLPtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKv1+eG+6CRBuXkIpI14SQRGYpfFMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYsjuGc/ I/jl2w90L1gwfTXD67cpoJPJyphLgrXBqnMJBhfc0vi+FsVIxv51Bggmo75m+kr/ BRen9R36Zsr/XFtefrA5yndF806onURZMsRmTHpSKV9l94cZ3J8f7prBCb5rUe5+ uEpV3EswQW1tpGeY5qcT0xPZb6XI0JCnBEepwjEsSv4TtetnZ5YlHq8TDuHoyT0E Jko57pywdoi1obBFeO/DMR6s66tegNjARMGVz822hw6peFUYjPHRty4ceGctQSry PeYe6Z7nQbgfhbqzRrwO7JxhWKzj0+thPDkTzgUMEzUKq7Jodka1CsD1jxXub+SA 2YKaJQGM8YJRng== -----END CERTIFICATE-----Generated at Sun Nov 15 10:28:29 2026 by rpki-client