$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: rks/Z4qAC3QLw3KhvMt90RVJrqFBiOcvPddn5mr95Fk= Subject key identifier: 33:FC:8E:1E:B8:76:3D:79:91:AB:4D:EA:CC:42:26:AC:9A:6E:90:B2 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 01A1DA9446D68D033081AA3BA23BCC474093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0C03 Signing time: Sat 14 Nov 2026 15:01:52 +0000 Manifest this update: Sat 14 Nov 2026 15:01:52 +0000 Manifest next update: Sun 15 Nov 2026 15:01:52 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 4: JKntl0lE4Llv5JSHqq0ebMhz1gw.roa (hash: z+ETdiwBgtgBMRmUJl0EwbepoBHBWs+SUhOGYSF0hsU=) 5: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 6: Rj7C9HFWuzFDb2nAa-azSTKfGOQ.roa (hash: vFchV3jK24P/EgvD1iXL5CmPkvqderYcShvnrsGp47Y=) 7: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (hash: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=) 8: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: 91McZCVX2nUnJl/Ed8OarviRuUrIJNbhbRuKmFAbrvU=) 9: uKCl0G6iXVlVe0afCzE82-C_3qI.roa (hash: RH3/03F7bmaXEqOent1C4xFrAuH6sCV3VBoe7T66+HA=) 10: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 11: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:94:46:d6:8d:03:30:81:aa:3b:a2:3b:cc:47:40:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Nov 14 15:01:52 2026 GMT Not After : Nov 15 15:01:52 2026 GMT Subject: CN=33fc8e1eb8763d7991ab4deacc4226ac9a6e90b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:05:57:9b:ee:ba:68:b8:f6:f8:e8:86:7b: 9e:97:bc:b5:c2:cd:40:17:ea:4e:97:fb:cb:5f:a6: fb:a4:5f:6f:d2:5e:f4:c9:c5:a1:ca:90:19:f9:e8: 3e:a5:93:86:a6:ed:21:31:67:07:ca:8d:2c:36:ae: af:13:ca:87:ed:ef:07:a2:df:8c:55:ba:07:31:fb: 28:4b:ad:84:cd:23:41:8b:17:66:61:83:61:fe:d6: 06:65:d4:83:c6:03:77:fa:56:f2:fd:ff:3d:14:5b: ab:05:89:7c:59:d0:da:23:e9:b1:f7:d6:c4:26:80: 11:58:e9:24:7b:20:8c:08:7a:37:ed:5f:81:81:c7: be:b7:f5:b8:ac:ad:79:48:fd:3b:b1:1c:8f:10:fb: de:f5:2f:c3:d3:85:30:40:1b:c2:62:82:47:4d:69: 7a:ad:d2:43:9a:66:9b:c2:5a:13:0b:4e:df:ad:74: 8a:1d:4b:7c:1d:8b:c4:3c:21:e6:1c:de:6a:25:86: 3c:28:0f:76:14:36:23:58:93:80:f9:7f:23:40:07: 95:05:5f:86:e7:13:17:c6:e6:66:84:4d:a4:56:bc: d9:0e:df:3b:cf:83:a4:a3:37:68:b1:e7:da:bd:d0: 0d:c1:48:e4:96:ea:07:60:f2:69:fe:f2:46:bb:de: f8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FC:8E:1E:B8:76:3D:79:91:AB:4D:EA:CC:42:26:AC:9A:6E:90:B2 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5d:27:d1:0e:77:ae:a6:62:b9:f5:99:31:df:e5:2e:8a:b9: 1e:fb:c7:2f:fe:bd:8e:19:a4:a8:19:96:ad:7c:80:3d:b5:d5: 25:7d:78:64:11:26:d3:06:37:0b:71:d7:3c:9a:4a:98:00:67: 55:08:38:fd:d4:34:c3:59:70:d8:fc:f9:70:30:55:f2:07:37: 69:6d:75:8e:37:64:12:82:c7:5a:ad:94:62:57:50:04:d9:52: a8:bb:2c:20:47:b3:d3:92:ef:0d:05:8d:8f:21:a9:f1:3f:fb: 65:1b:2b:86:34:62:88:c0:12:51:ed:0a:47:f5:fc:7f:4e:e5: 47:6e:d1:88:be:af:c5:d0:d0:2d:08:af:ba:e0:4d:c1:0c:53: 12:5e:e5:5b:1e:db:e2:03:bc:67:2f:c9:9d:41:64:b5:98:4d: f4:76:d3:68:cc:ce:a2:00:91:7a:94:95:c5:80:70:38:07:bf: af:3c:2d:ac:e5:d2:95:03:ac:9a:45:39:d6:06:cc:e3:62:e0: 47:cf:c2:39:b0:02:f8:af:2a:7a:be:cd:ec:ef:a7:40:a1:d4: a4:3a:82:e4:85:26:7a:3b:21:2e:c2:c4:12:c6:69:24:d7:e9: 44:d0:0f:f1:55:bc:8f:9f:59:de:93:af:28:d5:91:42:3b:96: b9:9e:2b:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHalEbWjQMwgao7ojvMR0CTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYxMTE0MTUwMTUyWhcNMjYxMTE1MTUwMTUyWjAzMTEwLwYDVQQD EygzM2ZjOGUxZWI4NzYzZDc5OTFhYjRkZWFjYzQyMjZhYzlhNmU5MGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuQFV5vuumi49vjohnuel7y1ws1A F+pOl/vLX6b7pF9v0l70ycWhypAZ+eg+pZOGpu0hMWcHyo0sNq6vE8qH7e8Hot+M VboHMfsoS62EzSNBixdmYYNh/tYGZdSDxgN3+lby/f89FFurBYl8WdDaI+mx99bE JoARWOkkeyCMCHo37V+Bgce+t/W4rK15SP07sRyPEPve9S/D04UwQBvCYoJHTWl6 rdJDmmabwloTC07frXSKHUt8HYvEPCHmHN5qJYY8KA92FDYjWJOA+X8jQAeVBV+G 5xMXxuZmhE2kVrzZDt87z4OkozdosefavdANwUjkluoHYPJp/vJGu9742wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP8jh64dj15katN6sxCJqyabpCyMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANl0n0Q53 rqZiufWZMd/lLoq5HvvHL/69jhmkqBmWrXyAPbXVJX14ZBEm0wY3C3HXPJpKmABn VQg4/dQ0w1lw2Pz5cDBV8gc3aW11jjdkEoLHWq2UYldQBNlSqLssIEez05LvDQWN jyGp8T/7ZRsrhjRiiMASUe0KR/X8f07lR27RiL6vxdDQLQivuuBNwQxTEl7lWx7b 4gO8Zy/JnUFktZhN9HbTaMzOogCRepSVxYBwOAe/rzwtrOXSlQOsmkU51gbM42Lg R8/CObAC+K8qer7N7O+nQKHUpDqC5IUmejshLsLEEsZpJNfpRNAP8VW8j59Z3pOv KNWRQjuWuZ4rVg== -----END CERTIFICATE-----Generated at Sat Nov 14 22:45:39 2026 by rpki-client