$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: J7Igb9CkGqd5h7I6MSen+y1tySKgZ04yOFMIRKqhLu8= Subject key identifier: 0B:C6:2E:A1:56:40:78:3C:78:5A:27:9E:C4:0F:EA:C8:14:D9:BF:38 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 01A1DBDCFA2B0CD0E0792E13B9B030196F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1B07 Signing time: Sat 14 Nov 2026 21:00:54 +0000 Manifest this update: Sat 14 Nov 2026 21:00:54 +0000 Manifest next update: Sun 15 Nov 2026 21:00:54 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: HBl0Rm6dfrf1iY_U4mwPAhkoRow.asa (hash: et/qeDGZyKGUPEo1y4cBbfd4+Rbg7wAH2t0FCOQmWMU=) 6: LfkCmSO1I7GGpJ0of5l-0c5AGBc.asa (hash: UgfWuPDLjqxThrUgxhNFddbI4VXPReh33QeUjBvYjVs=) 7: LuOgAc37LU8V7dGgdj8hy6ymH64.asa (hash: pkN431oI3RFQuibIh8RwZRrzTHAA18y2t6J/hjni00c=) 8: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 9: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 10: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: pNb7mKugPQvORjcEoS83fMkbVzr/tBinwdJydNjtzAo=) 11: cIcqaLXZmekavhCmoIAJhBRw3JE.roa (hash: 8QflktthB1MZE1m+SbfCOvT58wwBH/AnF87SL9k5yss=) 12: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 13: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 14: oaZumtYBqB2DBSwMpqnmqOIkGm0.roa (hash: 9YqR7q1fJK+xrhMWwkV3smWMIV3JZ5y1OxTGOkJ6aPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:dc:fa:2b:0c:d0:e0:79:2e:13:b9:b0:30:19:6f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Nov 14 21:00:54 2026 GMT Not After : Nov 15 21:00:54 2026 GMT Subject: CN=0bc62ea15640783c785a279ec40feac814d9bf38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:7e:28:1f:8f:26:3c:07:e1:df:0f:b0:59: 22:ad:76:f7:98:f9:34:a1:0e:15:c1:a5:12:3e:67: 5e:4d:03:3b:6c:c3:26:bc:0d:2c:a8:41:24:8f:55: 55:d7:d5:04:eb:cf:90:33:4c:34:d4:47:a8:fd:a9: ea:0a:25:dc:23:6c:ba:1a:e6:43:02:2a:a3:ac:86: 30:b4:55:ae:a2:59:22:0c:ba:15:83:c2:07:7e:cb: f0:8d:fa:69:75:07:d2:c9:32:aa:e5:5c:13:69:d1: 86:79:d7:55:9b:d0:f2:a9:58:16:52:b3:40:50:4e: 03:d7:a2:14:32:63:61:83:90:ae:38:e4:b1:dc:83: 20:d1:fd:9d:b4:96:66:77:22:c2:02:25:f4:7a:ca: f5:c4:40:47:c0:8c:5f:c4:26:b9:a4:58:50:6e:36: 7b:a3:cf:37:ea:d8:cf:a5:96:b1:99:68:2b:46:fc: 00:c3:a4:df:b2:9f:17:a5:56:e5:8a:0a:5b:98:0d: af:18:55:9a:02:22:2a:cf:c3:94:d3:e6:7f:fc:7a: cf:a0:29:fc:3c:1b:9e:19:5e:b5:f5:5e:dd:bd:cf: 86:ee:13:16:4b:e6:30:c8:60:6d:32:f9:b2:02:06: 2c:36:1c:00:9d:8f:58:77:6c:53:16:f3:08:03:bc: 7e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C6:2E:A1:56:40:78:3C:78:5A:27:9E:C4:0F:EA:C8:14:D9:BF:38 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:67:58:2d:e5:e1:d2:9b:db:a1:52:87:2c:ff:4b:b4:47:cd: 89:ca:a4:29:3f:4f:5a:0a:1b:a3:db:bb:49:6c:ba:94:e0:80: 73:57:52:01:84:39:2c:fc:01:70:29:f8:46:e6:fd:de:2e:42: 2a:1c:95:bd:a4:54:f9:73:e6:92:7f:b1:c8:60:bf:df:02:ec: aa:c4:a2:a9:87:62:83:8a:98:6d:3c:f1:97:a2:ef:4c:1e:6c: fb:e4:18:3a:67:69:8e:47:65:eb:17:77:cc:1f:67:b5:d3:f1: 60:ae:31:e7:b9:52:33:26:4e:33:a6:b8:4d:1b:39:eb:f6:e7: aa:70:84:ab:a0:82:93:d1:10:d9:c4:28:e5:88:5d:f5:de:cd: 86:80:bd:63:9c:98:3f:86:96:7a:67:af:f9:3e:54:19:a4:5f: 1e:da:e5:e8:97:c6:db:e9:7a:71:cc:06:30:e2:48:b6:41:e3: 99:7c:b9:f7:68:e8:43:3f:e2:09:5e:79:e6:0e:5c:87:7c:55: 60:93:80:97:4f:0c:d2:3d:fe:e9:22:09:f5:e0:af:88:a6:bf: a5:1c:ac:d8:84:41:94:e1:ec:5c:a8:71:89:fb:d8:53:b8:c4: 4b:88:39:ce:db:a5:e5:0f:8a:d9:91:45:1b:7b:6c:62:60:45: e3:00:35:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHb3PorDNDgeS4TubAwGW8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYxMTE0MjEwMDU0WhcNMjYxMTE1MjEwMDU0WjAzMTEwLwYDVQQD EygwYmM2MmVhMTU2NDA3ODNjNzg1YTI3OWVjNDBmZWFjODE0ZDliZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww1+KB+PJjwH4d8PsFkirXb3mPk0 oQ4VwaUSPmdeTQM7bMMmvA0sqEEkj1VV19UE68+QM0w01Eeo/anqCiXcI2y6GuZD AiqjrIYwtFWuolkiDLoVg8IHfsvwjfppdQfSyTKq5VwTadGGeddVm9DyqVgWUrNA UE4D16IUMmNhg5CuOOSx3IMg0f2dtJZmdyLCAiX0esr1xEBHwIxfxCa5pFhQbjZ7 o8836tjPpZaxmWgrRvwAw6Tfsp8XpVbligpbmA2vGFWaAiIqz8OU0+Z//HrPoCn8 PBueGV619V7dvc+G7hMWS+YwyGBtMvmyAgYsNhwAnY9Yd2xTFvMIA7x+cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvGLqFWQHg8eFonnsQP6sgU2b84MB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmdYLeXh 0pvboVKHLP9LtEfNicqkKT9PWgobo9u7SWy6lOCAc1dSAYQ5LPwBcCn4Rub93i5C KhyVvaRU+XPmkn+xyGC/3wLsqsSiqYdig4qYbTzxl6LvTB5s++QYOmdpjkdl6xd3 zB9ntdPxYK4x57lSMyZOM6a4TRs56/bnqnCEq6CCk9EQ2cQo5Yhd9d7NhoC9Y5yY P4aWemev+T5UGaRfHtrl6JfG2+l6ccwGMOJItkHjmXy592joQz/iCV555g5ch3xV YJOAl08M0j3+6SIJ9eCviKa/pRys2IRBlOHsXKhxifvYU7jES4g5ztul5Q+K2ZFF G3tsYmBF4wA1Zw== -----END CERTIFICATE-----Generated at Sun Nov 15 06:44:48 2026 by rpki-client