$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft File: jNgCUSzLdFsqG48xVxTr45OVQD4.mft (raw, json) Hash identifier: gmoZMjq9ESm+NiX1HpnvI4V/4aUgr8UoTA3okETnVNQ= Subject key identifier: 84:DE:01:B3:19:D2:75:4A:85:FA:5A:48:5C:E1:98:45:37:3E:1C:95 Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e Certificate serial: 01A1DD5E110419838BFA72BAB941CDBCC478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft Manifest number: 0294 Signing time: Sun 15 Nov 2026 04:01:31 +0000 Manifest this update: Sun 15 Nov 2026 04:01:31 +0000 Manifest next update: Mon 16 Nov 2026 04:01:31 +0000 Files and hashes: 1: A8zbeGZ_vFlIfUY9owp1LFdY0Qg.roa (hash: sGkTFzp72t2CXwG6Zrb6GXvi4fJs4oeqeT4NK3rHJ/w=) 2: AuCsa89iuYaLVAW-p74YRDf9z-g.roa (hash: 6v+ocE4bgTY3ojTY1zPl5Q/QHvA7Jiy2d14yNwi0ioo=) 3: FH-HegbkfJBlYkgQDtIOilA52FA.roa (hash: vevNPAkCNe2NwwbA5K2E0UcTudDJF5vZ0Hu7+zSCHDA=) 4: FOFTEst8oF0q0X3OdQgxLZ9oed8.roa (hash: g3Bb+RZcj9ZCWcwsCCB0Hz+Q7AkmMt0+i5iC3617N+w=) 5: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (hash: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=) 6: TUcYiqaHQaxrNd_59aAcfp5PzUc.roa (hash: UNkyO1RUoB9S8RFsmJ0fXaMIKW0xpN0m4jI2P8DIeTc=) 7: WbwwutC6DmoQCpS_cnHm2C8PgEQ.roa (hash: xYQzg16giCNV2eF02/LXWh87czuHOXsA41TWL+xRxDQ=) 8: WffXez4tRjvK8i61Xgp9_xyDej0.roa (hash: bMn3sIVFMxXy7m8YFxKTE0In+3PMB96dpHT4q7pYfYw=) 9: _g-mbRccilTY3nTUOwN_eMWOWNM.roa (hash: PFOjrpvcs36xAtEQUCcZ7UtM4lx/TlcWr0/AHB/QrO8=) 10: elz0WJjsYxFbofiz3y1iAAJK_EM.roa (hash: BrIsc5PixFvDSlwXziognZwHw3nQTaQ45c/0aGBgjy0=) 11: f8ecESrOsn9MFiGqQHTUNRhkk_Q.roa (hash: oRnKHoXYfu4DTJMJhojrARb5BzI7Ijs/MPUpU079JVg=) 12: hYM7beFU-i68zuT-E-AP85h8fdI.roa (hash: Q6rivTFhzgG3KkdlD6+HA7Kyl4SyGQidk6P1eN7a4CU=) 13: hp01qqaG6ojwTceGwUYjwpMc_FA.roa (hash: +EoDWRDS7zIW8lYYUpVakjrqTS94dDcew7HVE2+smMs=) 14: jNgCUSzLdFsqG48xVxTr45OVQD4.crl (hash: 061WVZZrv+QSQ4LzMz5E6BguRefftlz4z79WJpwbLMI=) 15: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (hash: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:5e:11:04:19:83:8b:fa:72:ba:b9:41:cd:bc:c4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e Validity Not Before: Nov 15 04:01:31 2026 GMT Not After : Nov 16 04:01:31 2026 GMT Subject: CN=84de01b319d2754a85fa5a485ce19845373e1c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:cf:0b:79:de:67:b2:6e:ac:6b:cc:90:41: bc:c7:3d:9d:f1:d1:1d:26:02:6f:dc:cd:04:61:b5: e2:26:6c:5e:8d:e0:ff:6f:d4:c7:a4:85:87:47:05: e5:4e:54:ca:04:82:3f:c6:d5:59:0f:3c:73:30:4e: d9:50:cc:50:bd:15:11:e5:2d:bf:4c:05:86:d8:10: ba:0c:62:bd:72:68:aa:c1:17:60:62:9c:ad:30:e5: e8:76:ca:7d:20:fa:66:d9:5a:2f:a8:94:ae:8d:0e: c9:09:84:f2:3b:a8:9a:0f:01:38:eb:be:c7:ee:8e: bc:bc:bc:d1:9d:1d:3e:03:67:cb:f1:3a:bb:4f:ec: ef:36:bf:be:a6:7f:c5:1c:1b:41:e7:03:bb:8a:51: 1f:88:ed:7a:81:e9:82:ac:a5:2f:4a:28:cc:22:d7: 58:fd:18:c1:fc:06:d9:b3:85:fe:7d:66:51:a3:24: 82:be:e3:b6:87:d3:b7:6e:34:d7:8d:be:56:2c:87: 81:e4:7e:eb:e3:fc:8e:95:21:fa:9c:00:67:36:29: a1:40:43:ad:70:ab:12:e2:0f:41:9e:79:5b:f5:43: 24:49:37:8f:73:fc:59:9a:eb:fd:a7:72:36:c7:f9: 5f:d2:bd:dc:fd:9b:e1:08:5f:70:db:e9:7a:a7:a3: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DE:01:B3:19:D2:75:4A:85:FA:5A:48:5C:E1:98:45:37:3E:1C:95 X509v3 Authority Key Identifier: keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e9:26:35:3a:28:62:da:36:9a:07:b5:ab:17:07:b3:e5:ff: b6:53:b5:e9:3f:d0:23:80:54:bb:41:90:39:3f:5b:a0:56:ed: 6e:ca:04:71:21:20:61:39:c9:fc:a8:3b:b8:8a:0d:99:13:59: 6f:26:27:bc:e4:17:0a:d7:37:a6:32:3f:a2:4c:28:37:7e:37: d1:90:d6:6e:dc:f7:e8:ae:ac:de:2e:3b:4d:87:86:5e:9e:cb: a4:c5:60:f0:e1:0d:47:70:20:f2:80:ed:03:bd:48:5f:0c:02: 69:cd:79:a4:1c:0f:20:91:43:a9:08:17:f3:17:e0:84:14:dd: c1:a5:90:85:09:68:00:a2:d9:a6:cb:b8:87:87:d1:1f:b9:21: 72:07:c6:f4:bd:4d:65:a8:d2:8b:b5:9c:34:62:8f:22:52:c9: fc:65:1e:f8:aa:15:e1:e6:43:c4:44:89:b6:0b:9f:aa:5b:e7: 51:9a:b4:4d:28:c0:94:dc:13:0b:8e:39:c2:2d:a2:09:fe:a4: 46:61:40:12:b0:6f:39:f7:50:d9:d5:9a:72:5b:e7:e4:ed:10: fb:9b:e8:c7:b4:6a:33:26:d0:96:83:5f:b9:3f:37:f6:eb:f4: 7c:ff:73:ab:03:81:80:82:3d:8f:9f:e7:47:d2:d5:5d:dc:f6: 82:d6:47:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdXhEEGYOL+nK6uUHNvMR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5 NTQwM2UwHhcNMjYxMTE1MDQwMTMxWhcNMjYxMTE2MDQwMTMxWjAzMTEwLwYDVQQD Eyg4NGRlMDFiMzE5ZDI3NTRhODVmYTVhNDg1Y2UxOTg0NTM3M2UxYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HzPC3neZ7JurGvMkEG8xz2d8dEd JgJv3M0EYbXiJmxejeD/b9THpIWHRwXlTlTKBII/xtVZDzxzME7ZUMxQvRUR5S2/ TAWG2BC6DGK9cmiqwRdgYpytMOXodsp9IPpm2VovqJSujQ7JCYTyO6iaDwE4677H 7o68vLzRnR0+A2fL8Tq7T+zvNr++pn/FHBtB5wO7ilEfiO16gemCrKUvSijMItdY /RjB/AbZs4X+fWZRoySCvuO2h9O3bjTXjb5WLIeB5H7r4/yOlSH6nABnNimhQEOt cKsS4g9Bnnlb9UMkSTePc/xZmuv9p3I2x/lf0r3c/ZvhCF9w2+l6p6PohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITeAbMZ0nVKhfpaSFzhmEU3PhyVMB8GA1UdIwQY MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt MzhlMDY4NTM2ZTZiLzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOkmNToo Yto2mge1qxcHs+X/tlO16T/QI4BUu0GQOT9boFbtbsoEcSEgYTnJ/Kg7uIoNmRNZ byYnvOQXCtc3pjI/okwoN3430ZDWbtz36K6s3i47TYeGXp7LpMVg8OENR3Ag8oDt A71IXwwCac15pBwPIJFDqQgX8xfghBTdwaWQhQloAKLZpsu4h4fRH7khcgfG9L1N ZajSi7WcNGKPIlLJ/GUe+KoV4eZDxESJtgufqlvnUZq0TSjAlNwTC445wi2iCf6k RmFAErBvOfdQ2dWaclvn5O0Q+5vox7RqMybQloNfuT839uv0fP9zqwOBgII9j5/n R9LVXdz2gtZH0w== -----END CERTIFICATE-----Generated at Sun Nov 15 12:20:29 2026 by rpki-client