$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json) Hash identifier: 2vhQWqGSXGx30EW+6tG3gcWqUZ5A2kShHqlDpdfBolU= Subject key identifier: D7:D5:4E:21:61:AF:A4:91:0C:99:2C:FB:8B:A1:25:DD:B1:31:0A:D9 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 01A1DE3945F711615096402C04130497A1FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft Manifest number: 1C3F Signing time: Sun 15 Nov 2026 08:00:57 +0000 Manifest this update: Sun 15 Nov 2026 08:00:57 +0000 Manifest next update: Mon 16 Nov 2026 08:00:57 +0000 Files and hashes: 1: 209LRc36fwwaooG93ZeC5gy1UlI.roa (hash: +31HKgDaFf6ohmz1C+Gt1Gm1LmNeUNqVhwrGkJQK7M8=) 2: 38F3RhCLEsplC_HqN7PLuMebFpk.roa (hash: 6eU7O6bTo+2h8a0CcTBhs9xpRuFRC3NSIJyb5rSHg6Q=) 3: 3D06yHKsQUT2InNv-XYHYJNizhE.roa (hash: zLhnPwPaGX9vwv1QODripvvpDNjoIcslM2JNSKiHBGk=) 4: 65B1GOVkxXjJrshc0mICtXdttks.roa (hash: v/Erj5878S/I6twSq1r+QfsnI9wSz6cQHP4aCN2xgSQ=) 5: 6qpiCml-pX5lqW7GJPxkWzV-tfE.roa (hash: 1nonVA7UmTQNKF9oF+gcOnGfYBqyjkprOt68rdCUHlU=) 6: CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa (hash: D0AkvGqvJcSeNCKrZrX6Ol+lOOi31FLHD7gwA2ojdmc=) 7: RJdXAmRIYON2t23ktCIHd8uSCB4.roa (hash: aNwYdoL7m0apdla4B71+6x9/Kd4cRca2EXzWghgiLbk=) 8: U_NSMLG6xRjNHvQqLv4sSdrMj6g.roa (hash: Lcs96/KeQbbV0PYiU+5eXr9BjnqbEF6UxXOt8NrMfTM=) 9: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: RN0OKOZfnXMNz/ZpDRolO4ps4+uJRMd6lU5mjO8zSuw=) 10: YQMWpzmpat9VSqkQJDmg6zzAUyY.roa (hash: wz9ra1D4ED2OTttPMC9atMBr3/acW7W3gVbW4pLIiBU=) 11: a83HWrg-gm9J-fFeKvhIGb_9S94.roa (hash: 7tyP+V2kqb4zIzwdt4KQm1MNZgFnJhNfaOUQGqGaGfA=) 12: amgcdNKE5tv8cGii42ckAYiCH7M.roa (hash: JER9hBTtwxkDbdt6FDk1qkYipiZ//Jc0pr2hGz53NTo=) 13: jgtHPz0hHWBt5Xl7SCDgx0o8acA.roa (hash: Q4Jg75rnECTsBPWfSZVlu71w1aiQZFMvZNYZmL3tMRQ=) 14: p_vuW19MT_pOoS_uhZlFlQcB3PM.roa (hash: XksudWJQvxHlarktOcrWkaKumMYDC3pnq1BMdKx75bE=) 15: pa0maz8RzdAqPBYglEiUl6FWmh0.roa (hash: bOE0FSBYTEFSINx3pLoAdJvRYXXPgXPd0w77jq5s09o=) 16: qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (hash: +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=) 17: rmbNOlT11Y0vmokiNgeLI05NKhI.roa (hash: BuA3h42+P1TM5X/zoS1KTDulUo41R66I7Fn4rVqrUqs=) 18: zNwjbISK5avijA3i46y9IHGbFLY.roa (hash: WSiODWfBhlqFMMi3wYTLpfHI3pUjnJ5tu+k2ZH3CI4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:39:45:f7:11:61:50:96:40:2c:04:13:04:97:a1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Nov 15 08:00:57 2026 GMT Not After : Nov 16 08:00:57 2026 GMT Subject: CN=d7d54e2161afa4910c992cfb8ba125ddb1310ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:4f:eb:e6:76:b5:aa:49:5d:2a:2e:08:70: 99:9a:6d:0e:6b:17:2c:6f:ab:93:c2:ed:9e:14:a6: e0:3b:cf:34:6e:49:d3:af:55:ea:4f:be:c6:7c:40: 4e:e6:6d:b3:c3:a3:6c:ca:41:37:7b:a7:8e:57:a1: bf:49:c0:9f:54:24:27:54:b7:41:b6:ac:54:c9:59: 13:b1:0c:b9:cb:53:e2:d1:17:ed:26:80:f6:26:c7: c3:76:09:9b:55:f3:b7:3a:7c:60:f2:57:0d:60:bb: 95:d7:4a:2c:61:ae:2b:4a:91:02:6e:7c:2f:0c:08: 27:ae:01:ee:04:70:f1:e7:ed:42:09:69:81:84:56: b8:94:f9:39:b8:63:e1:af:8e:7d:14:bb:4c:41:3e: d7:b7:bf:c2:13:78:ff:a0:46:f0:30:ca:84:44:c7: 16:f7:2f:95:a6:5b:a4:f7:c3:1f:cb:c1:f4:dd:99: 62:5b:48:27:92:59:10:72:f2:94:2f:bc:25:7a:fd: de:87:e8:72:bf:32:53:07:4e:01:12:cf:b4:b0:d8: 44:18:18:ce:fb:8e:bc:06:1a:ec:a8:da:1c:48:5a: c3:09:94:72:43:48:4e:d8:6d:ce:1d:f8:b3:81:b5: 68:fb:4c:18:cc:67:8b:a5:d4:35:fd:ea:d6:e5:ff: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D5:4E:21:61:AF:A4:91:0C:99:2C:FB:8B:A1:25:DD:B1:31:0A:D9 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:34:c6:ab:59:1f:e4:fb:4b:33:72:b4:b6:2b:2e:88:9f:dd: a3:e1:f5:fc:37:9c:e5:bc:11:0b:08:a8:83:cf:af:b8:1f:17: 9e:93:b9:bd:ef:04:e8:86:5f:75:cb:ac:18:93:35:81:72:d3: a3:1c:b6:e3:89:95:7f:ca:ee:fa:35:62:fd:61:4f:c8:8a:8b: ad:8e:df:aa:14:a5:7b:d5:e0:81:3f:78:8f:1a:4f:25:8d:3c: 0d:e8:5e:3d:12:33:60:82:83:7a:37:9e:ea:d5:7d:0d:53:af: 1e:39:ab:9c:03:29:71:e6:75:68:87:bd:b7:c6:ad:77:33:78: 3c:43:8a:25:20:da:fa:01:fd:2f:b0:75:14:96:5c:a3:19:8d: 11:12:e0:2f:f3:4a:c7:a3:dc:26:48:a7:a2:04:7b:eb:68:cf: b7:15:b7:23:fc:13:5b:d7:d5:d3:fb:17:25:46:39:e4:97:24: 84:4c:77:d5:42:a3:37:30:9a:e5:b6:c7:48:40:58:e6:6b:5f: 8c:26:26:34:0c:60:74:f3:7b:2c:84:aa:4d:21:e7:da:cc:49: 15:91:85:17:a1:5d:43:9c:91:a6:cc:36:ea:e4:d4:2c:f4:fa: b0:9f:e3:8b:2f:be:ea:ce:25:34:7b:3e:88:30:da:21:95:f5: 6a:6f:f6:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeOUX3EWFQlkAsBBMEl6H/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYxMTE1MDgwMDU3WhcNMjYxMTE2MDgwMDU3WjAzMTEwLwYDVQQD EyhkN2Q1NGUyMTYxYWZhNDkxMGM5OTJjZmI4YmExMjVkZGIxMzEwYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlhP6+Z2tapJXSouCHCZmm0Oaxcs b6uTwu2eFKbgO880bknTr1XqT77GfEBO5m2zw6NsykE3e6eOV6G/ScCfVCQnVLdB tqxUyVkTsQy5y1Pi0RftJoD2JsfDdgmbVfO3Onxg8lcNYLuV10osYa4rSpECbnwv DAgnrgHuBHDx5+1CCWmBhFa4lPk5uGPhr459FLtMQT7Xt7/CE3j/oEbwMMqERMcW 9y+Vpluk98Mfy8H03ZliW0gnklkQcvKUL7wlev3eh+hyvzJTB04BEs+0sNhEGBjO +468BhrsqNocSFrDCZRyQ0hO2G3OHfizgbVo+0wYzGeLpdQ1/erW5f9owwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfVTiFhr6SRDJks+4uhJd2xMQrZMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzTGq1kf 5PtLM3K0tisuiJ/do+H1/Dec5bwRCwiog8+vuB8XnpO5ve8E6IZfdcusGJM1gXLT oxy244mVf8ru+jVi/WFPyIqLrY7fqhSle9XggT94jxpPJY08DehePRIzYIKDejee 6tV9DVOvHjmrnAMpceZ1aIe9t8atdzN4PEOKJSDa+gH9L7B1FJZcoxmNERLgL/NK x6PcJkinogR762jPtxW3I/wTW9fV0/sXJUY55JckhEx31UKjNzCa5bbHSEBY5mtf jCYmNAxgdPN7LISqTSHn2sxJFZGFF6FdQ5yRpsw26uTULPT6sJ/jiy++6s4lNHs+ iDDaIZX1am/20A== -----END CERTIFICATE-----Generated at Sun Nov 15 13:16:52 2026 by rpki-client