$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: jzkGYOAKFs1JTap7Ws5K0tldGuju6d8KFrxqxVRAmzw= Subject key identifier: 6A:F8:CE:22:22:50:2A:D3:00:7E:1E:69:8B:02:B9:04:85:ED:BF:FA Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 01A1DC4AF11B956F63B70C737A4121FBCE59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 1C00 Signing time: Sat 14 Nov 2026 23:01:01 +0000 Manifest this update: Sat 14 Nov 2026 23:01:01 +0000 Manifest next update: Sun 15 Nov 2026 23:01:01 +0000 Files and hashes: 1: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (hash: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=) 2: 1-HMehk4Z5593y_16dRGWIQyy-Ng.roa (hash: EurbSdpdbDWY2LP7kxCHMWSabQW2ttzuwZ+l6NbR48o=) 3: 1-UoxoSMEC7fhgBoOjZVdac590gk.roa (hash: 5bAv8KKm/MXSzBl8Q7+F+Ol4WLDtdAozCIXNu5GOvJM=) 4: 1-X4bKI6-aRWPTWyha2-mcJDV5oc.roa (hash: 6cLgqkkczMgwqjoX9O8ZUYIiYWMo+g0mz7AzYqMvkpM=) 5: 1_KRUxZDt1nOEzN5je4zDlX6DKk.roa (hash: ZiFYtKQxpjSVcy7fwBfCh1IAGdVcF01miZ/J0ijhbvg=) 6: CDjWTyoS71DXASo2Nj7eHKZDgBU.roa (hash: 0MjLF8Ccc2qdY2KgDxvd+hMdzbz7ozx3zfAkryxvvg0=) 7: EPBqQkdx7GD5hYF24Z7UGR81Qo8.roa (hash: d9xe8thzz0W/d4MTXJUjxHzBqyaFRNrSeI5OVZiP6OY=) 8: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=) 9: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=) 10: KXN5i1ksyLJ3gWuszNVJ4lkPFkA.roa (hash: yrzgi/xgwBaka39UCK/DNXA3vvLMwfJcozcKOOGIcnk=) 11: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=) 12: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 13: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=) 14: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 15: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 16: _yYeoQViTIjqsYE0h5QCAQRGd04.roa (hash: ZBg3y/n8GjKrQaC1IigA7ZREsnmFDIrXAnas9eg3WXo=) 17: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: +E8ghIB0hBRfq/W9GkHyZTZHCIFNsXAnaeSWFCQz3gM=) 18: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 20: rqm1V5tbsI8BVPLwQqMpU9HsTvM.roa (hash: kK5Lre4ke8T7RVSthZIaXfJkjjEm07UzsHJnItRj210=) 21: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 22: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 23: x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa (hash: Sqa+wceVkaOOyPhxXULzb2svO17UJ0RHxLUOfuxIaDY=) 24: xm5rLebeuc7oaSjRe_mW9yrd7D8.roa (hash: hHiFRvAT7BEhkvXlVt37YLHfgymkAvzsvrr1jEmcw4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:4a:f1:1b:95:6f:63:b7:0c:73:7a:41:21:fb:ce:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Nov 14 23:01:01 2026 GMT Not After : Nov 15 23:01:01 2026 GMT Subject: CN=6af8ce2222502ad3007e1e698b02b90485edbffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:85:d1:7e:29:0e:3a:ca:1b:93:c2:2b:1b: 43:99:8b:f2:11:14:d5:38:07:07:ef:a1:c0:93:c4: 5a:2f:8e:d5:33:b0:c0:16:68:b6:18:22:fa:59:35: 32:b5:25:71:f0:a5:1d:6c:44:c5:8f:85:0b:a5:fb: f3:23:2e:a1:15:f9:8b:bb:11:05:db:0c:81:03:07: 9e:14:91:34:a6:86:1f:ec:10:d1:36:e5:67:bf:86: c6:5d:76:fb:de:65:ea:0e:5a:0b:55:f1:6a:f1:5d: 85:35:4d:ce:68:86:71:ab:49:8d:a9:b7:f8:67:86: b4:6b:fa:2a:0b:58:97:c1:a1:01:cb:48:cb:99:eb: 09:b8:1a:fb:b4:52:69:17:04:14:d9:0a:67:8f:c4: ed:26:e4:42:f5:82:e6:c4:96:8d:31:a2:ad:d5:65: 7c:52:50:dd:80:a0:b4:83:59:99:22:3b:15:b9:e5: eb:37:57:1e:2d:0a:3a:1a:f9:ee:de:52:7f:fb:1f: e6:33:a8:18:a0:46:a6:09:d5:11:b4:23:43:30:2b: 1f:fc:d0:a4:63:c5:17:86:40:34:92:42:02:de:10: 70:1e:83:63:f4:a8:9c:4e:87:f3:6a:52:65:4a:b0: de:16:38:b7:55:8b:ae:fc:5c:49:19:3a:c2:ad:d1: f9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F8:CE:22:22:50:2A:D3:00:7E:1E:69:8B:02:B9:04:85:ED:BF:FA X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c6:f5:4c:08:bc:df:76:84:28:0d:e2:71:35:84:52:a6:25: 65:b7:ba:77:33:d0:73:70:ff:b4:64:6d:3f:7a:8f:43:f2:83: b9:68:5a:d0:12:cc:27:e3:25:4f:1b:2d:9f:bc:15:83:c6:20: 03:f0:f3:eb:f5:77:05:00:b0:4d:83:19:64:5a:fa:86:80:91: ea:86:17:34:30:bd:75:17:7d:ed:d1:db:bb:e6:5d:72:d5:38: be:9a:62:65:db:db:00:ba:96:90:a8:ca:3e:2e:0d:ce:95:da: ef:5f:60:db:70:b4:29:23:6a:45:59:f4:6d:f0:18:e1:8a:67: 67:84:76:b6:a1:b5:f3:55:c7:72:b0:2c:43:cc:ad:6c:d5:a9: 39:b4:5f:2a:8b:0e:c2:4d:0d:bd:aa:db:13:2a:91:da:69:be: e0:5a:6b:83:63:17:5a:f3:6e:4e:b9:7c:7f:ec:8e:23:77:b9: 85:1e:c3:f9:9b:20:97:03:09:cf:6d:44:b5:ef:79:49:d8:5f: 97:d9:b5:83:90:f0:f6:a9:0b:7d:dc:ae:41:41:5d:6e:37:fe: bc:44:15:5b:d5:4f:e0:10:38:be:39:5f:19:a5:46:45:f7:d5: 76:02:35:8d:91:55:b7:77:b5:60:66:88:4e:ca:b0:84:1f:31: 4b:01:54:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcSvEblW9jtwxzekEh+85ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYxMTE0MjMwMTAxWhcNMjYxMTE1MjMwMTAxWjAzMTEwLwYDVQQD Eyg2YWY4Y2UyMjIyNTAyYWQzMDA3ZTFlNjk4YjAyYjkwNDg1ZWRiZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwByF0X4pDjrKG5PCKxtDmYvyERTV OAcH76HAk8RaL47VM7DAFmi2GCL6WTUytSVx8KUdbETFj4ULpfvzIy6hFfmLuxEF 2wyBAweeFJE0poYf7BDRNuVnv4bGXXb73mXqDloLVfFq8V2FNU3OaIZxq0mNqbf4 Z4a0a/oqC1iXwaEBy0jLmesJuBr7tFJpFwQU2Qpnj8TtJuRC9YLmxJaNMaKt1WV8 UlDdgKC0g1mZIjsVueXrN1ceLQo6Gvnu3lJ/+x/mM6gYoEamCdURtCNDMCsf/NCk Y8UXhkA0kkIC3hBwHoNj9KicTofzalJlSrDeFji3VYuu/FxJGTrCrdH5HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGr4ziIiUCrTAH4eaYsCuQSF7b/6MB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMb1TAi8 33aEKA3icTWEUqYlZbe6dzPQc3D/tGRtP3qPQ/KDuWha0BLMJ+MlTxstn7wVg8Yg A/Dz6/V3BQCwTYMZZFr6hoCR6oYXNDC9dRd97dHbu+ZdctU4vppiZdvbALqWkKjK Pi4NzpXa719g23C0KSNqRVn0bfAY4YpnZ4R2tqG181XHcrAsQ8ytbNWpObRfKosO wk0NvarbEyqR2mm+4Fprg2MXWvNuTrl8f+yOI3e5hR7D+ZsglwMJz21Ete95Sdhf l9m1g5Dw9qkLfdyuQUFdbjf+vEQVW9VP4BA4vjlfGaVGRffVdgI1jZFVt3e1YGaI TsqwhB8xSwFUiw== -----END CERTIFICATE-----Generated at Sun Nov 15 08:40:30 2026 by rpki-client