$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: NdnEFl7j6f8Fqn1h4HJnOhJRBO4hrvTq724lkqOY8iY= Subject key identifier: 01:6C:F9:62:4D:FC:2E:27:51:13:E0:CA:72:90:DE:86:7D:B5:4C:2D Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 01A1DBDD6FEB3B4C9FECB826BFE5EF43030A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0D2F Signing time: Sat 14 Nov 2026 21:01:24 +0000 Manifest this update: Sat 14 Nov 2026 21:01:24 +0000 Manifest next update: Sun 15 Nov 2026 21:01:24 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: 4Qjav1tgZ+ywq9yqpALLCPQKKZQnKCTzV3JD1j4kM0U=) 2: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 3: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 4: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 5: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 6: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 7: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=) 8: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 9: WVRWTHu2jYG5NGmFC6GaDzPuyf0.roa (hash: ddR/0J3WSYMueqGWA4Jv4FzRBLir7poFgFFMNLJDNtY=) 10: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 11: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 12: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 13: hjslYSBRCy4Jv3YuUmTFlkgY7NI.roa (hash: sGKHjIrsfddZddoeN9cdUpOIrjfw7GmPvmQ33h1NH7U=) 14: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 15: opSIGkOnBkZvoVUAlYliwMWRtHM.roa (hash: UhK9HvzCWGQjnjOj5kqLjjS4yrTQ8KUq4l/hKCCuZEE=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: xCg-EAUTn22UnWGifIkWlZa5htY.roa (hash: reyx/w5lVDgDQxIsJVRfOyDg5aXHdRl+i9+tD3ANP7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:dd:6f:eb:3b:4c:9f:ec:b8:26:bf:e5:ef:43:03:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Nov 14 21:01:24 2026 GMT Not After : Nov 15 21:01:24 2026 GMT Subject: CN=016cf9624dfc2e275113e0ca7290de867db54c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:93:88:69:8f:34:d6:3c:aa:16:89:19:76: 6a:b8:90:33:18:e1:cc:50:38:4b:a4:8c:45:99:00: 33:0d:5d:a8:2f:07:09:63:cc:85:35:12:b1:28:2e: fa:65:9d:69:e6:22:0c:a0:aa:b3:02:7a:63:62:1e: 91:f1:7a:18:34:60:f7:7e:48:9b:a8:d5:aa:de:ea: a9:1b:c3:81:47:05:3b:b1:dc:e9:21:ec:21:8c:18: c1:81:30:f1:8b:f9:40:1b:f5:a8:ef:43:c1:1c:6b: b8:a2:55:d7:89:b0:0f:c6:42:72:55:4b:07:1d:65: e2:cb:29:99:f3:86:1a:4d:9e:0f:c2:b9:15:6d:ab: 65:df:65:e1:38:7b:21:c0:60:2d:2a:53:c5:dd:c8: 19:33:c6:91:52:a7:43:bf:8b:c8:8e:f1:68:b2:ad: 32:47:0c:fb:77:47:d0:84:a7:94:18:e2:d1:04:6a: a9:de:08:9f:0c:23:15:b9:94:85:ed:41:5a:56:d4: c1:af:16:6c:35:9d:c9:fd:a2:40:4d:2b:f9:7e:db: 78:10:cc:93:73:17:90:c4:b5:3d:52:46:cf:5e:5b: 29:09:8e:9a:30:62:c0:41:26:cc:9b:5b:7d:ea:01: 91:4e:7c:cb:77:c2:c6:51:71:dd:5e:22:21:b0:8a: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6C:F9:62:4D:FC:2E:27:51:13:E0:CA:72:90:DE:86:7D:B5:4C:2D X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9b:11:8b:10:cc:83:a5:65:86:8c:0a:39:2c:f9:49:40:cb: 7d:e2:fd:82:09:62:f8:4c:fe:cf:fb:cf:f9:84:47:c6:a7:5e: 32:bf:e6:73:64:79:e6:b3:58:c3:5a:5c:ff:f0:98:22:bb:07: 73:67:82:17:64:6b:e4:ed:59:a0:da:4d:d8:3f:c3:6b:95:b1: c9:f2:bc:44:8a:6a:f9:cf:8a:74:55:29:64:29:21:60:0c:58: dd:0d:61:59:7c:a6:9b:5b:df:44:8a:b6:32:09:be:16:8d:29: c1:8e:55:34:c3:5b:fb:9a:b7:9f:57:b2:98:cc:fe:eb:85:f9: 88:49:c4:48:c0:2e:8c:19:e6:3c:88:4c:ca:eb:00:ee:7f:2b: 57:29:1c:e5:1c:4c:3f:f1:1f:11:9b:7f:ba:06:2a:b2:f8:50: 4f:1d:2a:78:61:51:8b:19:39:16:6e:8d:63:fc:49:0e:8d:d7: b4:c6:1a:c2:11:b7:4c:c2:03:e4:b5:f2:c8:cb:7a:e0:07:05: eb:94:d4:2b:b3:85:d8:9a:99:9f:12:89:d4:61:ea:da:35:ce: e2:03:df:8a:7f:e2:3a:37:c7:90:84:8f:8a:1d:51:6f:6d:43: d0:da:ff:e3:3e:de:39:bc:f6:0a:ab:a9:65:38:c4:e3:92:6f: 5d:d1:87:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHb3W/rO0yf7Lgmv+XvQwMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYxMTE0MjEwMTI0WhcNMjYxMTE1MjEwMTI0WjAzMTEwLwYDVQQD EygwMTZjZjk2MjRkZmMyZTI3NTExM2UwY2E3MjkwZGU4NjdkYjU0YzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e2TiGmPNNY8qhaJGXZquJAzGOHM UDhLpIxFmQAzDV2oLwcJY8yFNRKxKC76ZZ1p5iIMoKqzAnpjYh6R8XoYNGD3fkib qNWq3uqpG8OBRwU7sdzpIewhjBjBgTDxi/lAG/Wo70PBHGu4olXXibAPxkJyVUsH HWXiyymZ84YaTZ4PwrkVbatl32XhOHshwGAtKlPF3cgZM8aRUqdDv4vIjvFosq0y Rwz7d0fQhKeUGOLRBGqp3gifDCMVuZSF7UFaVtTBrxZsNZ3J/aJATSv5ftt4EMyT cxeQxLU9UkbPXlspCY6aMGLAQSbMm1t96gGRTnzLd8LGUXHdXiIhsIqdHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFs+WJN/C4nURPgynKQ3oZ9tUwtMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5sRixDM g6VlhowKOSz5SUDLfeL9ggli+Ez+z/vP+YRHxqdeMr/mc2R55rNYw1pc//CYIrsH c2eCF2Rr5O1ZoNpN2D/Da5WxyfK8RIpq+c+KdFUpZCkhYAxY3Q1hWXymm1vfRIq2 Mgm+Fo0pwY5VNMNb+5q3n1eymMz+64X5iEnESMAujBnmPIhMyusA7n8rVykc5RxM P/EfEZt/ugYqsvhQTx0qeGFRixk5Fm6NY/xJDo3XtMYawhG3TMID5LXyyMt64AcF 65TUK7OF2JqZnxKJ1GHq2jXO4gPfin/iOjfHkISPih1Rb21D0Nr/4z7eObz2Cqup ZTjE45JvXdGHUw== -----END CERTIFICATE-----Generated at Sun Nov 15 02:39:05 2026 by rpki-client