$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: riJN/LBzJuO3GBWvsXIXmRBTD5XM+XEcdlZROJOuatk= Subject key identifier: FF:3D:E3:D4:30:73:97:B8:B0:14:5B:FE:B0:01:C9:7B:C6:EC:B0:1B Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 01A1DF1543664F3C8C9BD038697433BA3EAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 1320 Signing time: Sun 15 Nov 2026 12:01:14 +0000 Manifest this update: Sun 15 Nov 2026 12:01:14 +0000 Manifest next update: Mon 16 Nov 2026 12:01:14 +0000 Files and hashes: 1: 5TYhGp_kIGX1aC5SowRSds_cO7g.roa (hash: r0v8wy6PUphoahBNOqyXh6UQXpTAKY3QGCRRPROhVEU=) 2: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 3: W0ABeVRPOoNO8PasrYPB2rhUM8w.roa (hash: QxhBi04IxFOQ0eGgsBewu6/f3tV5CCU/6mc7SSfjH9k=) 4: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 5: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=) 6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: 6EospCwE50OTzWX3+Mnn+7I6Y8ATweMguu9GDM2ikSk=) 7: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 8: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 9: sxc3XP3wIjkgcKzDoebLsZJV7Ks.roa (hash: KXGzwEscHT7RBDFgZkCPpiRngDs4fiL55gxmqiqbp8c=) 10: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:15:43:66:4f:3c:8c:9b:d0:38:69:74:33:ba:3e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Nov 15 12:01:14 2026 GMT Not After : Nov 16 12:01:14 2026 GMT Subject: CN=ff3de3d4307397b8b0145bfeb001c97bc6ecb01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:11:5b:8a:30:b4:34:fe:b0:48:28:0a:d1:40: c0:f7:af:76:3a:a1:2a:3a:c6:49:ab:48:31:cc:25: b1:43:48:8a:b6:fa:71:e4:dd:0f:61:5c:90:88:73: f5:64:bf:7e:34:48:3f:2f:04:12:54:90:02:9e:f4: 17:5b:ad:bb:da:d7:38:ad:24:8d:da:eb:27:22:ff: 20:67:c8:62:3b:62:91:f2:3e:f2:2d:9a:17:d7:2d: 90:12:62:b6:3f:58:14:3c:28:a7:93:d0:d3:d2:22: 90:20:fd:71:56:e7:63:a6:16:de:52:ac:f6:90:35: d8:d7:2b:01:79:af:0f:8b:5d:34:79:ef:79:9d:74: 83:0e:a0:d6:20:2f:71:65:3c:39:53:19:5d:0e:32: 7b:7b:79:93:f3:b0:12:f4:80:1d:4e:95:ac:e4:d5: 62:92:db:42:f6:a8:f1:37:0e:1f:0b:86:76:2c:50: 97:ba:d5:96:f8:91:1b:91:93:26:21:b8:73:af:fd: 3b:b4:14:4b:6d:bf:58:a8:8a:17:70:df:f4:64:87: 1f:cc:a8:39:36:6f:10:7c:17:6f:a6:d2:9f:ce:3d: f5:31:4c:13:48:cb:6b:c0:e0:d0:ff:4d:4c:4a:1b: 38:35:ed:f0:33:5d:ba:d1:82:e2:ec:fa:c1:16:7e: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3D:E3:D4:30:73:97:B8:B0:14:5B:FE:B0:01:C9:7B:C6:EC:B0:1B X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a8:9c:7e:5a:65:f6:3d:65:53:fd:e4:a7:94:49:53:59:9d: 3b:cc:5f:1f:29:85:f7:d6:24:a7:33:b3:d3:81:78:38:c8:4a: 18:c1:c0:41:7f:00:32:46:a4:94:4f:a3:78:bb:d8:47:ce:c6: ca:55:e3:1f:c0:75:60:14:b2:e0:16:63:52:e9:7d:9b:a6:7d: 06:5d:9e:0e:4f:38:f5:9a:c6:14:7b:15:a5:a1:7c:da:84:c1: ce:23:1a:34:de:4a:b9:71:fe:cd:66:75:d1:3c:91:8e:31:ff: 11:32:8e:17:66:5d:1e:d5:d8:03:a4:8b:41:4e:08:c4:63:12: 97:bf:b8:e5:ce:ef:85:4e:97:ed:94:2b:a2:88:bb:22:a4:71: de:c9:75:d3:4d:ec:d1:c5:70:92:03:5b:31:d0:46:bd:92:97: a6:9e:a1:50:77:5d:6d:ea:bd:e5:11:71:13:93:5c:3d:2d:ed: 51:0d:76:eb:02:73:a0:47:82:b5:a4:39:8c:8d:b9:e1:e0:90: bd:ff:ea:2c:05:54:cd:40:c7:72:9f:ae:6c:39:50:0f:64:94: ed:bc:e6:ec:a4:c7:c8:25:79:3f:87:62:5d:df:36:12:55:0f: 42:6a:3b:ce:25:1f:af:e5:92:cd:dc:4c:ad:50:ea:48:e0:e4: 01:5e:39:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfFUNmTzyMm9A4aXQzuj6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYxMTE1MTIwMTE0WhcNMjYxMTE2MTIwMTE0WjAzMTEwLwYDVQQD EyhmZjNkZTNkNDMwNzM5N2I4YjAxNDViZmViMDAxYzk3YmM2ZWNiMDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhFbijC0NP6wSCgK0UDA9692OqEq OsZJq0gxzCWxQ0iKtvpx5N0PYVyQiHP1ZL9+NEg/LwQSVJACnvQXW6272tc4rSSN 2usnIv8gZ8hiO2KR8j7yLZoX1y2QEmK2P1gUPCink9DT0iKQIP1xVudjphbeUqz2 kDXY1ysBea8Pi100ee95nXSDDqDWIC9xZTw5UxldDjJ7e3mT87AS9IAdTpWs5NVi kttC9qjxNw4fC4Z2LFCXutWW+JEbkZMmIbhzr/07tBRLbb9YqIoXcN/0ZIcfzKg5 Nm8QfBdvptKfzj31MUwTSMtrwODQ/01MShs4Ne3wM1260YLi7PrBFn7FrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8949Qwc5e4sBRb/rAByXvG7LAbMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqicflpl 9j1lU/3kp5RJU1mdO8xfHymF99YkpzOz04F4OMhKGMHAQX8AMkaklE+jeLvYR87G ylXjH8B1YBSy4BZjUul9m6Z9Bl2eDk849ZrGFHsVpaF82oTBziMaNN5KuXH+zWZ1 0TyRjjH/ETKOF2ZdHtXYA6SLQU4IxGMSl7+45c7vhU6X7ZQrooi7IqRx3sl1003s 0cVwkgNbMdBGvZKXpp6hUHddbeq95RFxE5NcPS3tUQ126wJzoEeCtaQ5jI254eCQ vf/qLAVUzUDHcp+ubDlQD2SU7bzm7KTHyCV5P4diXd82ElUPQmo7ziUfr+WSzdxM rVDqSODkAV45VQ== -----END CERTIFICATE-----Generated at Sun Nov 15 20:49:05 2026 by rpki-client