$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json) Hash identifier: OtBqpJ6PKETPcRwl3pSTeW0wM44bCvL5b14NsLyJ+lY= Subject key identifier: 48:AB:05:D9:AC:0C:BD:45:E0:AC:A0:C8:A9:82:91:F3:41:6A:2F:F3 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 01A1DD5E617C24889089209372D1E58B323E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft Manifest number: 18EF Signing time: Sun 15 Nov 2026 04:01:52 +0000 Manifest this update: Sun 15 Nov 2026 04:01:52 +0000 Manifest next update: Mon 16 Nov 2026 04:01:52 +0000 Files and hashes: 1: 5jMSvIzVxMG_mcgrcdLoDAopQ-Y.roa (hash: ffWcgZh6V7QIsYDMg4fCcBRK0UUSmYN6h8f7A+MavFY=) 2: 8ReEJPFMNr7qTteX6qv8unFvcBU.roa (hash: cnOyPdf7KV5827HwqHxHTqoHFSaE73rzQ8nd7uy59YE=) 3: B_GEk0m49jzeik2gUGk6eYl3XKo.roa (hash: UUs9N4HiRAcBgT2uZAZPV/YeTuvmU5eoAEs4wGLkz8k=) 4: JUsZAIzpUGjx6jJRW74wD5KYdxw.roa (hash: ubfqsLxf7jUqaeE1zzMD7BbyJ0T6FgVrCwi7fEcPsdA=) 5: NSXspG9pQJvmWYLKS70532E0Tr8.roa (hash: MrTONSRvxrXJDrrYRMbIis/UbxqsqX2KcYYn/ZlA2eI=) 6: QovdBxZFYO8Le-cS-a1JwRjgfQk.roa (hash: XGPaVXCFvuqE5pmLKAAz2EcSfvcufVPb2RTZtwJD+x4=) 7: Rq-RI83O4_PdfBn7CYHNmkE60lw.roa (hash: no+jkojqXc1FBJy9kef3LkiFHcbkJaxjyVO/IuXvgDE=) 8: RzhXZNN80rbDceIr7GWMP1BL2T4.roa (hash: XrAtOSS0kHYUbkxivUkP6A6DFY2BAUY1cH3y1xyfGzs=) 9: SL3Y_PpDcj5A_EO8-yB5j4l_450.roa (hash: V+XY6bDcmReJThpGKTQ7N8hjqMotaqMvVGr/3qy9MWo=) 10: XhWNq_03YO6idZVx8wSudiAf8Ak.roa (hash: jjd9Ntow5yuYQ1z+cFhSsqPXNrtdpbaOjcPj/8pmaOM=) 11: _Okbnr80Rq7ww8R4v3_ggcisub4.roa (hash: /xX2WGNlLNgbJPvCfzjtPTr4JvfPghmXqeSRioLiEAY=) 12: acrLlh2bffixlJwIk38uqcoaM3U.roa (hash: 8VJekl0fJNzL7/mrVZ7IvSwSX3xru+t1pg5R0/MlHXs=) 13: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: FwzkcnzIc2cOyV+jeIF86RW5Vy1NXG9vtcFfvotTQ/Y=) 14: eqewRUafSELpqCI0dk-oCsWW6yA.roa (hash: W+lYL/aOnq53SxPsQYr2cZA/hrJeFvmTPL1ztV8WAms=) 15: lQPIpGbPu1lCyhFgld7VYBmijlo.roa (hash: d79vPcgMJl0/3NQ1Ij6xxPoLI+ewEu6Aqs/bcX6yhiA=) 16: lzu4y4Q9shg3DRtmoqkB30BoyZg.roa (hash: 9Emdq207YisuGB08EG5mDj1cnqOhy/o2dL8p/ARvqCg=) 17: mj2AEXc07CGbDP72ke63D3tI8q0.roa (hash: B78FbgpmBx7AK4HDfrbIleN6rL3/h3TLtArTrp9LyzU=) 18: ngpONoHSTwoohoW5OGQa7adKegU.roa (hash: uejL2MnuBHCE3yZt1cUlPz5kgBigbbVinyw+wTmzynA=) 19: pvKn5P6W0geqPhRpqQoqoG2NcG4.roa (hash: jZ0UDbD+lL9KJLctKmX3BzyaqOoOU/LXfYVgwDGMH/8=) 20: qEEOxwTAmF9qKeTUtlXmnvOhJ-M.roa (hash: 6CjL1ebv0jplJ192ZJ/4E2ORBgjF6vYbg/+unm9kJhY=) 21: qOuuE7ncVWyhAoaRCylJZLvt_Qs.roa (hash: 9Ei/7J8FyQdTzS+N+w6NNcYG9fQPW4NA4XNB1+d11Aw=) 22: tK4p7XOY-9eMCfT41rNfDvMz8ZQ.roa (hash: +PzSpSLby2pKNdEalpx88bV8TrjpZ7AoJpGeiQ6ta/I=) 23: uXZ8dSsTsYmlbRWOfALydunHyNo.roa (hash: wurQLStm4I5TAyiJJe3yNdJRBsmFKQa1zBmRVmGZqvc=) 24: wo7HMWTKzL4KQH_XmOyP9W3quYk.roa (hash: 6SRDl+MUI69wFuXIlfVF5E1JYaN4fy+QYftcn1Ok0k0=) 25: z4hVox_1YMjCdj0pv1ovoZhsMIM.roa (hash: 3WvqYw5JMN4YjvZ1NiX0P+kYI8s3F0qbFTABgvWybUo=) 26: ziNNEPcX75RYKVD3IwJICa4i4_Q.roa (hash: Xd2row/xPL3TH1B2UECST1ZFFWl1/efQolUWYFvPp7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 04:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:5e:61:7c:24:88:90:89:20:93:72:d1:e5:8b:32:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Nov 15 04:01:52 2026 GMT Not After : Nov 16 04:01:52 2026 GMT Subject: CN=48ab05d9ac0cbd45e0aca0c8a98291f3416a2ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:ae:c9:9c:5b:3f:0f:c6:d7:d2:f7:04:8b: 6e:9f:e0:b6:8a:9b:0d:ce:6c:a9:12:df:41:e3:0c: f6:b4:c8:f9:9a:ce:41:1e:7b:a8:e0:19:52:1f:0d: 20:0c:0b:84:14:be:6f:69:d9:6f:e7:16:29:ab:a3: 67:f5:54:37:7f:40:5f:4b:65:99:89:3a:9b:26:6e: 7c:6b:97:b0:48:3c:c0:0f:31:66:c4:fb:3a:ce:11: f2:e2:f1:12:27:8e:e0:89:c4:d5:10:dc:60:05:fb: 2a:fa:4f:52:51:74:cd:83:74:e3:5b:65:3e:58:1d: ee:02:db:d1:56:be:55:7d:ec:dc:71:c3:bf:7b:d9: 3b:22:04:78:3f:37:4d:4e:93:10:42:6e:e6:05:05: ac:81:dd:86:a9:d3:a6:63:77:9a:24:58:09:3c:42: 95:56:74:43:e7:49:d7:ba:ac:f6:03:65:fe:b4:84: 34:4c:a5:69:43:10:50:0b:af:82:35:85:7d:97:4f: 42:0a:75:90:06:ec:39:cf:64:80:c5:b4:b7:cb:89: 8f:96:f8:4d:a1:a5:6f:de:37:bc:20:a9:d3:91:13: 25:12:4a:cb:69:df:16:80:42:81:42:5c:fb:d8:f9: 09:63:8a:e6:67:9c:4a:b6:1d:c0:90:4d:39:ba:13: 5d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AB:05:D9:AC:0C:BD:45:E0:AC:A0:C8:A9:82:91:F3:41:6A:2F:F3 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:09:b8:4d:a2:be:d6:20:ff:97:54:19:81:78:c0:09:85:ec: 42:b1:5c:a1:a7:1e:5b:34:b3:5e:12:c8:db:97:c2:60:ca:41: 5f:3d:f2:22:ac:8e:da:01:04:3c:1a:f9:4d:32:9c:e8:cc:a0: 64:c3:32:83:97:f0:90:0c:46:ec:93:18:b6:8d:49:eb:7d:17: d7:8d:86:59:d4:9b:59:50:b1:c9:9e:c4:12:da:8f:1c:76:33: 45:59:33:b7:7a:e9:1c:b6:26:f5:ca:c8:65:e1:dd:ff:0f:66: a9:5b:df:e6:84:f0:2c:64:47:c4:1c:21:5a:72:e0:5c:2b:aa: a4:ea:13:16:73:8d:98:fa:bd:41:f6:d3:77:67:49:c7:47:70: 9b:c2:55:2d:ab:cf:18:b8:b7:87:73:21:ed:22:d3:00:20:de: d0:7a:87:93:cc:f0:fd:9f:61:e1:b4:66:f0:16:da:60:b8:79: c4:0c:34:23:d2:07:4f:34:2e:4c:0e:55:27:9f:45:8a:69:55: 73:db:c8:e8:a4:df:94:0a:a3:b7:a4:63:90:f5:59:2b:17:c3: 76:35:71:f8:d4:f8:69:71:27:ac:84:9e:36:36:a5:15:da:8d: 6e:f7:52:ad:c7:57:dc:4b:3f:b8:89:5e:c5:90:16:58:51:86: 56:90:14:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdXmF8JIiQiSCTctHlizI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYxMTE1MDQwMTUyWhcNMjYxMTE2MDQwMTUyWjAzMTEwLwYDVQQD Eyg0OGFiMDVkOWFjMGNiZDQ1ZTBhY2EwYzhhOTgyOTFmMzQxNmEyZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L6uyZxbPw/G19L3BItun+C2ipsN zmypEt9B4wz2tMj5ms5BHnuo4BlSHw0gDAuEFL5vadlv5xYpq6Nn9VQ3f0BfS2WZ iTqbJm58a5ewSDzADzFmxPs6zhHy4vESJ47gicTVENxgBfsq+k9SUXTNg3TjW2U+ WB3uAtvRVr5VfezcccO/e9k7IgR4PzdNTpMQQm7mBQWsgd2GqdOmY3eaJFgJPEKV VnRD50nXuqz2A2X+tIQ0TKVpQxBQC6+CNYV9l09CCnWQBuw5z2SAxbS3y4mPlvhN oaVv3je8IKnTkRMlEkrLad8WgEKBQlz72PkJY4rmZ5xKth3AkE05uhNdJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEirBdmsDL1F4KygyKmCkfNBai/zMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAm4TaK+ 1iD/l1QZgXjACYXsQrFcoaceWzSzXhLI25fCYMpBXz3yIqyO2gEEPBr5TTKc6Myg ZMMyg5fwkAxG7JMYto1J630X142GWdSbWVCxyZ7EEtqPHHYzRVkzt3rpHLYm9crI ZeHd/w9mqVvf5oTwLGRHxBwhWnLgXCuqpOoTFnONmPq9QfbTd2dJx0dwm8JVLavP GLi3h3Mh7SLTACDe0HqHk8zw/Z9h4bRm8BbaYLh5xAw0I9IHTzQuTA5VJ59FimlV c9vI6KTflAqjt6RjkPVZKxfDdjVx+NT4aXEnrISeNjalFdqNbvdSrcdX3Es/uIle xZAWWFGGVpAU8g== -----END CERTIFICATE-----Generated at Sun Nov 15 09:56:23 2026 by rpki-client