$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: YOG5YrVGCuGZ4EysZI8gGsu2TgJNYN7xRrLCaUhETXk= Subject key identifier: B9:C7:FF:1F:78:CD:0F:E1:5D:AE:BE:48:AA:BE:BC:C8:DC:50:74:4A Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 01A1DEA746A61D3356A945D627E29A5944CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 1AFF Signing time: Sun 15 Nov 2026 10:01:06 +0000 Manifest this update: Sun 15 Nov 2026 10:01:06 +0000 Manifest next update: Mon 16 Nov 2026 10:01:06 +0000 Files and hashes: 1: 1-ccn--iq_ToEq-Oamkl9Luwspkc.roa (hash: +u0oyCBAW71aNY4BwmQ52QOilFQebxXv8bzootxTVNU=) 2: 5MS9Zy98YuF3Bcrl6mc6yIWJ4-M.roa (hash: b+PbHQ1e20uIzoz27PMH3G/dgeCEzPhT1xUbwe84ub8=) 3: 863a8A9lI1u9XrhUEHNCbgA_EM4.roa (hash: s8aH9qc4ALlhdIevLKorthvT27qew3YZnY2zui2yIks=) 4: 95n53MPAl62Bp8gdAx6GUcBNH6s.roa (hash: SFJj356Hap+M3guGi+p9KYnj5vkCtgLdD7PsVKZ7QL0=) 5: Adh10SfAMsK7XIENnMUTzkYMUd0.roa (hash: s24oidV66DuvBTW7O6p2t70lzMwu9lbI3jK2mIwlhKs=) 6: JiUg0kU1PSuNHKsUA2KSNScv8s8.roa (hash: 3ZAQiyyrgoPYw51cxNpeaspKkodxmry7TXFI3ERIuNE=) 7: QviPBhLr-CXgt9EbTIrGj_yt3o0.roa (hash: A2iZoqo4X/JrmbpOlsLJJidbfz0mL9O7JboFIKE1auY=) 8: n2rh1sLNAvS8TApOyLLtUmfkJtk.roa (hash: YnymBYUK6ZS+GcYBXKPIPAN5Vh2ciMW3IvH4r+uuS68=) 9: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: bHnzF9v/uCRRHqC0mY0OxOzTOSUDsQJXn0qXXG92NuQ=) 10: qC9TRPDEBU4tH34KGCdE-GtaQVo.roa (hash: x+3EdF/VTAf945Szb8jBK7kDYlIbSVdzVeYTbe6GNVk=) 11: vyNX_G3sd7VABBUb1_l_0mQ1seo.roa (hash: MzK7zdnu+4qWNgnGDp5G7j7MAy7ijjxyFcd9B9ucLvU=) 12: wKCBiDDf1e8BicVavixrgdQZibE.roa (hash: MHYVnslYQOZS9IPfWLJkmMuhLwMjuzTKosW1ejMPRAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:a7:46:a6:1d:33:56:a9:45:d6:27:e2:9a:59:44:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Nov 15 10:01:06 2026 GMT Not After : Nov 16 10:01:06 2026 GMT Subject: CN=b9c7ff1f78cd0fe15daebe48aabebcc8dc50744a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:97:e9:49:39:55:4b:d0:84:39:70:28:5f: 0f:df:da:9f:25:3e:ec:c7:d9:cb:0f:15:43:25:73: f3:9d:cd:14:42:fb:71:ae:b9:3b:ca:de:3f:b5:ce: 2f:49:de:44:07:fc:77:26:a4:61:95:35:1d:f4:25: 26:e9:50:ec:7d:83:f4:9c:98:4e:1e:23:a9:69:a2: 8e:14:a8:75:15:ae:35:54:61:62:6b:21:a7:6b:09: c0:ee:57:84:cd:bf:95:86:f2:e8:af:aa:12:4d:f8: ca:e1:88:96:ee:b7:76:88:59:78:18:09:f7:d2:8e: 9d:a0:62:4c:19:9a:0c:53:9e:49:c8:15:5c:58:47: 3b:ec:77:d6:67:c1:30:ab:28:a0:43:cf:7c:51:c5: 9e:3a:1e:d7:34:ba:92:00:aa:49:f4:32:1e:01:49: 62:c4:98:f3:91:bc:0a:a7:2d:b3:b3:e2:47:c1:08: a7:69:72:f1:45:cb:a6:f1:29:67:ae:da:0d:01:11: 46:15:b3:6f:e7:8a:50:94:63:40:a3:b9:4f:6d:35: 7f:de:80:81:c6:a9:67:8f:00:fc:83:3b:d9:ea:e2: 91:a9:8f:de:b2:f7:b5:91:f3:a0:f2:a5:62:86:7b: 40:4c:88:a8:f9:20:bb:23:29:e0:40:1a:e5:df:1f: c1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C7:FF:1F:78:CD:0F:E1:5D:AE:BE:48:AA:BE:BC:C8:DC:50:74:4A X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d0:e3:c0:76:03:66:8b:10:80:90:28:07:3a:4d:bb:94:4a: 23:97:1b:29:fb:e3:41:e1:1c:5f:a2:24:26:2c:53:e7:f9:f9: b5:51:1b:a0:51:68:d1:c0:c8:1d:63:c5:db:16:bd:fc:e0:40: 3d:0e:55:1c:2b:a9:39:3c:5d:64:7e:e6:29:76:c0:94:f6:2b: f8:68:e5:65:da:e2:a2:be:fb:e4:33:3e:84:0a:b5:4b:65:2c: 3d:6a:97:b8:b7:59:2d:5e:9a:c7:ff:54:38:10:f2:fb:28:64: 36:5d:e4:2d:0c:c6:88:3c:a3:ca:7c:5f:a6:a6:30:08:af:38: 16:3d:f5:06:bd:16:84:9b:e2:e1:47:5b:a3:7d:f4:35:d8:1a: cd:88:25:1e:f8:da:be:8d:12:f1:31:39:67:68:c4:f1:20:68: d6:20:19:51:9e:e5:49:aa:06:d5:e9:86:df:1b:73:13:70:44: 04:36:9c:58:27:fc:91:b5:15:41:76:ff:78:7d:ec:2f:39:26: 40:07:3d:7c:e0:02:cc:37:88:75:09:f5:1f:88:6a:4d:ea:e9: 3a:4d:f2:90:d0:11:e2:80:3c:04:05:6b:ba:b0:bc:e0:ca:f6: 2d:74:81:32:79:27:58:16:0a:1a:52:58:7c:f1:4a:63:0f:49: f8:68:f7:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHep0amHTNWqUXWJ+KaWUTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYxMTE1MTAwMTA2WhcNMjYxMTE2MTAwMTA2WjAzMTEwLwYDVQQD EyhiOWM3ZmYxZjc4Y2QwZmUxNWRhZWJlNDhhYWJlYmNjOGRjNTA3NDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ2X6Uk5VUvQhDlwKF8P39qfJT7s x9nLDxVDJXPznc0UQvtxrrk7yt4/tc4vSd5EB/x3JqRhlTUd9CUm6VDsfYP0nJhO HiOpaaKOFKh1Fa41VGFiayGnawnA7leEzb+VhvLor6oSTfjK4YiW7rd2iFl4GAn3 0o6doGJMGZoMU55JyBVcWEc77HfWZ8EwqyigQ898UcWeOh7XNLqSAKpJ9DIeAUli xJjzkbwKpy2zs+JHwQinaXLxRcum8SlnrtoNARFGFbNv54pQlGNAo7lPbTV/3oCB xqlnjwD8gzvZ6uKRqY/esve1kfOg8qVihntATIio+SC7IyngQBrl3x/B5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnH/x94zQ/hXa6+SKq+vMjcUHRKMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStDjwHYD ZosQgJAoBzpNu5RKI5cbKfvjQeEcX6IkJixT5/n5tVEboFFo0cDIHWPF2xa9/OBA PQ5VHCupOTxdZH7mKXbAlPYr+GjlZdrior775DM+hAq1S2UsPWqXuLdZLV6ax/9U OBDy+yhkNl3kLQzGiDyjynxfpqYwCK84Fj31Br0WhJvi4Udbo330NdgazYglHvja vo0S8TE5Z2jE8SBo1iAZUZ7lSaoG1emG3xtzE3BEBDacWCf8kbUVQXb/eH3sLzkm QAc9fOACzDeIdQn1H4hqTerpOk3ykNAR4oA8BAVrurC84Mr2LXSBMnknWBYKGlJY fPFKYw9J+Gj31A== -----END CERTIFICATE-----Generated at Sun Nov 15 17:29:21 2026 by rpki-client