$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: WzrkC5itbmj6pxKswd0FAmskhPxi3C6qtML2ualcAWk= Subject key identifier: FB:15:AF:F8:A3:BD:2A:98:24:CA:B6:BC:CE:9D:36:85:36:D0:10:B5 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 01A1DCB8E61AFAC1FCFE6EF914D45F4DADF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 18EA Signing time: Sun 15 Nov 2026 01:01:07 +0000 Manifest this update: Sun 15 Nov 2026 01:01:07 +0000 Manifest next update: Mon 16 Nov 2026 01:01:07 +0000 Files and hashes: 1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=) 2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: yzoIzBqbBkgVt8qAXgwR1Ul/cdprwZnsWa+HyNjpQgM=) 4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=) 5: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=) 6: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=) 7: guDVQz5a26MDVkeh11eOZPnPOyA.roa (hash: ijihf7ldBohOHrMCvTZdHMfG9DJ0Wyv9gdIpH2Rqk8s=) 8: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=) 9: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=) 10: wlkqPCWXMJsz1R99hgzE3_VYv5c.roa (hash: KrKqWLoyfi0cuRqfEdDLZj1DmY6m+y1d1kGaimNA4oE=) 11: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:b8:e6:1a:fa:c1:fc:fe:6e:f9:14:d4:5f:4d:ad:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Nov 15 01:01:07 2026 GMT Not After : Nov 16 01:01:07 2026 GMT Subject: CN=fb15aff8a3bd2a9824cab6bcce9d368536d010b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:14:5c:0e:f7:59:10:42:62:41:f6:fc:aa:42: 3c:96:3d:9d:48:0f:db:60:94:1d:fe:49:ea:d3:07: 23:5d:cc:a8:f5:5e:d2:ca:79:14:23:75:1b:b1:1c: 5b:87:f3:44:fd:f7:9d:14:f5:1d:81:cf:f3:3d:57: 8e:72:1c:ad:47:22:5f:6f:b2:4b:ea:78:fd:08:0f: ad:ad:d7:66:f3:6b:32:de:dd:ea:9b:a2:2e:c5:46: 88:a0:1a:72:78:66:ab:9b:78:4b:c2:94:8a:53:9b: 24:39:26:01:40:2f:86:01:64:ee:67:d0:db:76:65: 40:6d:13:59:1a:b5:da:5e:5f:ee:a4:a2:e9:a2:a3: dd:18:c4:68:d0:ef:00:c9:36:44:60:3a:bc:93:dc: aa:f4:8c:41:2a:b1:35:8c:23:7c:fb:fb:61:89:ba: 16:e9:d7:1b:ae:fe:6a:55:fb:cb:b1:54:1f:5b:80: c4:3b:f3:ac:f0:9b:ab:2d:2e:fa:30:cb:78:2f:92: 29:ad:d0:ff:94:93:a9:a3:4c:48:0e:b1:61:dd:38: 09:cd:45:60:5a:81:48:ca:b0:ec:7c:4b:b0:ff:a4: 06:75:58:cc:51:b5:35:fb:eb:eb:76:97:8f:8d:ab: de:a3:00:2f:0d:86:74:b8:38:17:37:b5:bb:b3:83: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:15:AF:F8:A3:BD:2A:98:24:CA:B6:BC:CE:9D:36:85:36:D0:10:B5 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c4:0e:db:f7:71:7b:9f:8c:84:ac:19:db:47:af:fd:68:50: 79:71:1d:9b:e2:76:b6:b1:35:0a:87:2e:8b:1a:8b:84:b8:0d: 37:7e:d0:02:36:b1:ca:d4:45:bb:37:65:fb:9a:6d:49:0d:01: 4c:7f:8f:1c:74:7d:83:b6:1d:53:bf:b9:70:ab:bf:ea:26:e1: fb:68:91:21:73:6f:05:36:e9:c4:3f:39:95:31:b8:25:b6:6a: 31:e1:1f:bc:ab:88:4c:13:32:00:a0:d0:bd:02:87:dd:da:bd: b6:cc:f8:b3:e2:56:f9:da:cb:1a:11:53:07:47:e6:38:10:c5: 66:eb:97:dd:db:3c:b3:b5:28:fe:ee:ab:f2:6f:f9:fb:ed:31: b5:4d:87:da:01:68:2e:0e:80:ec:bc:7d:89:32:88:f3:d0:e5: a5:b5:7e:6f:fb:18:e8:00:69:ed:d1:20:ba:bd:0a:fb:18:bf: 93:4b:2c:e9:b3:0b:27:f9:09:aa:f2:da:bc:84:b9:e3:f9:d3: d4:a7:10:4d:c4:6e:d1:14:33:3e:29:57:a2:4a:0f:66:d2:fc: 26:82:6c:bd:24:23:85:73:af:99:1a:f4:10:4a:59:48:22:2d: 17:b3:2c:c9:6c:78:78:21:da:63:b2:83:38:cc:18:bd:3d:50: c8:e3:99:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcuOYa+sH8/m75FNRfTa3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYxMTE1MDEwMTA3WhcNMjYxMTE2MDEwMTA3WjAzMTEwLwYDVQQD EyhmYjE1YWZmOGEzYmQyYTk4MjRjYWI2YmNjZTlkMzY4NTM2ZDAxMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BRcDvdZEEJiQfb8qkI8lj2dSA/b YJQd/knq0wcjXcyo9V7SynkUI3UbsRxbh/NE/fedFPUdgc/zPVeOchytRyJfb7JL 6nj9CA+trddm82sy3t3qm6IuxUaIoBpyeGarm3hLwpSKU5skOSYBQC+GAWTuZ9Db dmVAbRNZGrXaXl/upKLpoqPdGMRo0O8AyTZEYDq8k9yq9IxBKrE1jCN8+/thiboW 6dcbrv5qVfvLsVQfW4DEO/Os8JurLS76MMt4L5IprdD/lJOpo0xIDrFh3TgJzUVg WoFIyrDsfEuw/6QGdVjMUbU1++vrdpePjaveowAvDYZ0uDgXN7W7s4PhzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsVr/ijvSqYJMq2vM6dNoU20BC1MB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcQO2/dx e5+MhKwZ20ev/WhQeXEdm+J2trE1CocuixqLhLgNN37QAjaxytRFuzdl+5ptSQ0B TH+PHHR9g7YdU7+5cKu/6ibh+2iRIXNvBTbpxD85lTG4JbZqMeEfvKuITBMyAKDQ vQKH3dq9tsz4s+JW+drLGhFTB0fmOBDFZuuX3ds8s7Uo/u6r8m/5++0xtU2H2gFo Lg6A7Lx9iTKI89DlpbV+b/sY6ABp7dEgur0K+xi/k0ss6bMLJ/kJqvLavIS54/nT 1KcQTcRu0RQzPilXokoPZtL8JoJsvSQjhXOvmRr0EEpZSCItF7MsyWx4eCHaY7KD OMwYvT1QyOOZBQ== -----END CERTIFICATE-----Generated at Sun Nov 15 11:45:33 2026 by rpki-client