$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: RLr6Qx0koP9yEiN6ZAAdiCh/s1OYmUpIkCsNlkHdSBY= Subject key identifier: E0:C0:92:CD:62:6E:82:1B:37:87:3F:9B:27:6E:3F:6C:90:D4:85:98 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 01A1DBDD28278675210496A87A7CECEBDBB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 18A2 Signing time: Sat 14 Nov 2026 21:01:06 +0000 Manifest this update: Sat 14 Nov 2026 21:01:06 +0000 Manifest next update: Sun 15 Nov 2026 21:01:06 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 3AjTzCwcAHqDzpj5JCDbz-EVZeM.roa (hash: 1ng0z2xlVsIrhjI/xq8uP8HCudf7NZZ8XBg+YLJwkNk=) 3: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 4: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 5: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 6: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 7: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 8: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 9: M-KPLxG9kRua3jww0tVvkGPTnsU.roa (hash: ieuTmf07XkxLPO0zu/suKGOPUrNWciqHfBXvEgPva2w=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 12: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 13: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: AYqPDPlLRBNHOVhbtzNfqHrhI2xuOS3/L/Fyd6kaLbM=) 14: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 15: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 16: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 17: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:dd:28:27:86:75:21:04:96:a8:7a:7c:ec:eb:db:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Nov 14 21:01:06 2026 GMT Not After : Nov 15 21:01:06 2026 GMT Subject: CN=e0c092cd626e821b37873f9b276e3f6c90d48598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5e:ee:24:a0:10:9a:07:b3:74:4f:77:14:cb: 71:0f:18:0c:70:62:ed:ee:a0:7b:af:2b:19:de:98: b7:23:84:60:10:8e:35:2d:02:61:05:d9:2a:23:00: 10:d9:8b:9b:86:36:af:04:08:93:35:03:9e:dd:83: 00:25:a2:38:89:9e:f1:55:4a:c4:50:01:93:a2:fd: 21:42:42:71:8d:a1:dd:37:1f:a1:b2:7e:e1:e6:24: e2:7e:ae:b6:b9:04:91:77:22:36:56:3f:22:8e:88: ba:c3:a4:8e:5c:5c:56:87:17:95:40:50:ad:35:e1: 6d:7d:2c:cc:03:cd:bf:cf:8f:58:2a:af:ba:53:00: 6c:c9:86:00:0d:55:cb:94:19:98:43:79:7b:43:42: 17:f6:1b:3b:f3:74:81:e4:e0:d9:d6:1f:68:97:ed: 37:cd:7d:7b:06:02:20:d0:e7:bd:43:4c:5e:1d:4a: d7:f5:34:26:d7:f5:23:8b:b5:99:8b:d2:37:01:ee: 47:e9:23:b0:0d:b2:ba:e9:3d:cc:95:bc:de:01:17: 7a:cd:14:98:92:b5:6d:40:c3:0e:97:41:d3:2f:68: 4f:e4:ed:7f:b5:4b:cf:71:75:3c:3b:5c:eb:0e:a6: 7f:4c:28:01:9f:76:66:17:33:32:6f:6c:1f:59:c7: af:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C0:92:CD:62:6E:82:1B:37:87:3F:9B:27:6E:3F:6C:90:D4:85:98 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ac:9c:03:79:69:3e:89:39:3b:79:7d:c7:a3:b7:58:3b:47: 27:b1:ee:e3:ae:95:12:b1:0c:df:62:7f:88:bf:d4:89:bd:58: 1f:23:31:17:8a:01:01:3c:30:9b:cc:31:23:e6:bd:c8:d0:bb: 19:21:7d:12:b4:7a:99:1a:40:12:98:58:c0:37:13:3a:50:74: 5c:1f:31:58:84:a1:4b:1b:c7:10:79:25:c4:10:67:e8:f3:b8: 1b:3c:10:39:b7:b8:12:ad:e2:b7:65:60:bb:a0:e0:92:7a:81: 55:9f:95:88:0b:50:db:67:dc:39:c4:ee:2a:74:05:a7:87:51: ea:6b:d7:e7:b7:8c:43:dd:6d:5a:83:70:7b:82:bb:5a:a0:c1: 0c:33:09:eb:cd:18:ff:5e:33:f6:c0:2d:c0:13:2d:f5:39:c5: 7e:54:a7:4d:6b:1c:a2:19:26:c2:97:2a:17:42:69:95:5d:1e: dc:1e:9f:18:67:cb:ab:52:3b:66:30:de:02:de:e1:08:d1:5e: e6:67:03:e7:98:4f:e5:70:3b:e6:29:52:1e:25:f9:a4:63:9d: d3:6f:e7:64:4f:86:b1:40:c5:d8:77:97:b9:f8:4f:64:9d:26: 93:d5:4c:c5:f7:32:26:a4:74:fc:70:33:a4:6f:b8:bd:e8:84: 29:66:cc:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHb3SgnhnUhBJaoenzs69uyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYxMTE0MjEwMTA2WhcNMjYxMTE1MjEwMTA2WjAzMTEwLwYDVQQD EyhlMGMwOTJjZDYyNmU4MjFiMzc4NzNmOWIyNzZlM2Y2YzkwZDQ4NTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol7uJKAQmgezdE93FMtxDxgMcGLt 7qB7rysZ3pi3I4RgEI41LQJhBdkqIwAQ2YubhjavBAiTNQOe3YMAJaI4iZ7xVUrE UAGTov0hQkJxjaHdNx+hsn7h5iTifq62uQSRdyI2Vj8ijoi6w6SOXFxWhxeVQFCt NeFtfSzMA82/z49YKq+6UwBsyYYADVXLlBmYQ3l7Q0IX9hs783SB5ODZ1h9ol+03 zX17BgIg0Oe9Q0xeHUrX9TQm1/Uji7WZi9I3Ae5H6SOwDbK66T3MlbzeARd6zRSY krVtQMMOl0HTL2hP5O1/tUvPcXU8O1zrDqZ/TCgBn3ZmFzMyb2wfWcevLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODAks1iboIbN4c/myduP2yQ1IWYMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6ycA3lp Pok5O3l9x6O3WDtHJ7Hu466VErEM32J/iL/Uib1YHyMxF4oBATwwm8wxI+a9yNC7 GSF9ErR6mRpAEphYwDcTOlB0XB8xWIShSxvHEHklxBBn6PO4GzwQObe4Eq3it2Vg u6DgknqBVZ+ViAtQ22fcOcTuKnQFp4dR6mvX57eMQ91tWoNwe4K7WqDBDDMJ680Y /14z9sAtwBMt9TnFflSnTWscohkmwpcqF0JplV0e3B6fGGfLq1I7ZjDeAt7hCNFe 5mcD55hP5XA75ilSHiX5pGOd02/nZE+GsUDF2HeXufhPZJ0mk9VMxfcyJqR0/HAz pG+4veiEKWbMbg== -----END CERTIFICATE-----Generated at Sun Nov 15 06:28:54 2026 by rpki-client