$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: vO6U8nZWXt8VsPMxNl66q34eJCufRIAkf85Gyrm6Nzk= Subject key identifier: A4:3F:03:38:63:25:43:9A:4D:38:91:FB:EA:E9:89:E3:3D:70:04:BA Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 01A1DF15A125F3EA2C1131A0A6CA0102B336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 14C2 Signing time: Sun 15 Nov 2026 12:01:39 +0000 Manifest this update: Sun 15 Nov 2026 12:01:39 +0000 Manifest next update: Mon 16 Nov 2026 12:01:39 +0000 Files and hashes: 1: 30posY3TsM2Fh--sfGLYSxzt9Oc.roa (hash: i0NTnZ+KyqqJwh0JnlpuYIHLq99sFP6hfH0tju3c/hs=) 2: 9I6L8TRP3qtz3CYYh3ww5T352z8.roa (hash: 1gf4QeHFa9dKbCRpBcjsV/snv/t5NnmR9Bj8FONPgak=) 3: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: HZemK7H0uTNaCq+O7doX3oKosOhE0YJOPXAgbLpQoJ4=) 4: ADT8NHavskB_f-QX_biQB6s3hjM.roa (hash: g7mT0bM8U1tBgaCrO9JeZJLHUsM1LBUnAA963U3MJWE=) 5: Cp5yS6CVdtI_QBkILVp1ijYMyLE.roa (hash: YPwRTq6Ianr0pyiyDMEVnQhaRfOWjLxD4nQBsuUMiJ8=) 6: FGLnKBzVI-597TwFzftKEh7eFtw.roa (hash: gvkPDH7rR/0SyEyQmCV6OKwz58riOem+Rs/N5gQmmaE=) 7: J6A_hF4O7cxI8QJluboyBCe16v0.roa (hash: edsf8OO27RWYtOi702k6Qhe7cJI0t15sATzZb5sCsJ8=) 8: JpxTxfw2ssZJ-D-usc6fT8_tYpo.roa (hash: ME9ldE0g3oGjS+XPcEcObEtF7Drize8iSKju//IwLr8=) 9: MdXllBZP0mMZ0dXI6p75TCwhxPo.roa (hash: 4XNUO6DsPpBG+M6Ws/hUL/dm11Zqlvo8pLHd9xOnlHo=) 10: PayA9942Pu3PEwdgbc9zI085M7A.roa (hash: pkpsKDUMLuKxSQ8sea1A1XeztsAXtWdezuYMLOySqF4=) 11: T2qI-tmExKYn1eWfx_VoMdETSAI.roa (hash: Q8kLghkiObeLI8QCsOnyZ3zgLAeqeujYnFMSzamIy+c=) 12: XFxCvMCsHyRP2z8mBpyxB0uIB8U.roa (hash: /tuQu6/xB06ReHmzfQveAmef0J6ssqWSdP7twFz2nRo=) 13: XfRQ7x16c093P2sZcGF7VButLJo.roa (hash: 6WQLaVQEZMaci3iXhCcf6sxELhb4Zh3H6wea88iRvTY=) 14: aMmAT04Fng3KRcATi2yyAEaYSwQ.roa (hash: lAvJ/GiNFtquJnb2YbKyar0uxyjC9nvwVgo4miLsClo=) 15: i7jxo6_GB1o_OmBl3PrmVS4XnPA.roa (hash: 8NhSbKhEfu8jyqD1wovs3TRW3fNcgXTNne21hQm9qN4=) 16: lBbPrenKlA3Sq-uIUKDdAiDokxs.roa (hash: 8cnNfRffd7F/oZoq0DdI1sFhx5I9K/eiWM52AqJzzeI=) 17: sVAk55K1bjvD6NWoqyy6bpvKPNM.roa (hash: PMewucLZTeF6kJJLzoads50StAWlilqhYdIQchwQaB0=) 18: sysq58LMYKdBhx-ibBYNHAxQl8g.roa (hash: HwICsnv3lm+NXgLT5+1pkn50yR1pj2hwdaS9hW8jkA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:15:a1:25:f3:ea:2c:11:31:a0:a6:ca:01:02:b3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Nov 15 12:01:39 2026 GMT Not After : Nov 16 12:01:39 2026 GMT Subject: CN=a43f03386325439a4d3891fbeae989e33d7004ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:b0:61:a5:df:c9:74:af:bb:17:1c:bc:b4: 78:4d:c9:bd:7c:78:26:c2:8f:0d:70:06:33:dd:94: 74:f8:eb:cc:da:27:4f:98:65:58:20:f6:fe:14:25: 07:70:12:e5:f2:48:2f:20:44:55:a4:59:ba:dd:16: 7c:aa:24:72:48:b0:b6:99:af:a4:32:18:ef:46:08: 34:1b:18:19:32:5f:6b:b0:5a:b4:6c:1c:80:1c:ab: 97:8f:17:48:8d:bd:db:5a:35:95:76:30:50:f2:72: 32:01:3d:72:f0:85:de:27:91:10:c4:bb:47:f8:55: 6e:cf:bd:2e:c4:30:f6:c5:77:23:82:2f:e6:bc:0a: d6:6e:a3:33:1e:2f:5f:3a:83:8c:93:36:ac:5a:45: f2:08:83:8a:eb:8d:6e:a5:1f:6b:1f:85:07:c3:92: fd:16:c3:48:aa:32:7c:1c:7b:b3:b9:52:76:39:de: 6d:32:a6:46:d8:73:c7:ac:05:bf:01:df:73:2a:19: 43:95:ee:41:f1:92:c6:d5:d1:01:7b:e2:67:86:9f: 0b:ce:7d:e3:8f:b2:e1:99:8b:5c:2d:d3:c6:c3:07: b5:3a:b5:6d:bb:78:b4:49:ca:be:9e:8e:b2:3b:65: bb:a1:51:f2:80:94:b9:56:2e:c7:10:74:10:ef:16: ac:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3F:03:38:63:25:43:9A:4D:38:91:FB:EA:E9:89:E3:3D:70:04:BA X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c0:1f:60:39:7d:95:e8:f8:40:e0:67:21:b6:3f:0f:d0:3d: 3f:e4:3c:b8:6c:a1:c9:85:4d:62:80:d6:dd:b4:2b:f1:ef:c7: ed:c7:cf:c0:9a:13:b1:21:64:b5:3f:92:08:48:00:47:1a:65: ca:9a:12:0e:e1:a4:f6:6c:c9:a5:09:8e:96:b8:55:37:fa:8f: 2c:d9:a1:42:b0:a3:fc:f7:28:32:0e:1d:a9:5e:bb:5a:f7:a5: 7b:6e:54:f7:41:a6:4e:75:ef:52:07:93:ca:87:02:dd:1e:b4: ee:9c:be:e9:4a:75:94:c2:66:40:28:ab:0c:3f:1a:93:8c:0b: b4:32:d3:06:5c:cc:6a:31:fd:b6:40:ac:c1:46:fb:b1:ff:e4: fb:02:a9:c3:e7:c5:b9:dc:92:5c:93:79:82:2c:31:86:0e:ca: e1:d8:ff:e6:ec:87:ed:2a:f1:59:1d:09:d2:0d:d9:b4:32:10: 9c:1c:0e:3f:41:de:8a:3c:7c:ce:15:de:ea:cb:e5:c8:5f:cf: 26:7f:5e:ba:e9:8b:62:d9:90:6a:e5:4c:f0:e9:c3:8f:46:8b: e4:66:ba:cc:ae:61:62:cf:6e:69:c9:53:28:af:91:c1:be:6c: 48:5a:00:c3:6f:e6:02:62:39:d6:b5:4a:7e:6e:6f:56:48:d2: ed:d4:00:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfFaEl8+osETGgpsoBArM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYxMTE1MTIwMTM5WhcNMjYxMTE2MTIwMTM5WjAzMTEwLwYDVQQD EyhhNDNmMDMzODYzMjU0MzlhNGQzODkxZmJlYWU5ODllMzNkNzAwNGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1ewYaXfyXSvuxccvLR4Tcm9fHgm wo8NcAYz3ZR0+OvM2idPmGVYIPb+FCUHcBLl8kgvIERVpFm63RZ8qiRySLC2ma+k MhjvRgg0GxgZMl9rsFq0bByAHKuXjxdIjb3bWjWVdjBQ8nIyAT1y8IXeJ5EQxLtH +FVuz70uxDD2xXcjgi/mvArWbqMzHi9fOoOMkzasWkXyCIOK641upR9rH4UHw5L9 FsNIqjJ8HHuzuVJ2Od5tMqZG2HPHrAW/Ad9zKhlDle5B8ZLG1dEBe+Jnhp8Lzn3j j7LhmYtcLdPGwwe1OrVtu3i0Scq+no6yO2W7oVHygJS5Vi7HEHQQ7xasCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQ/AzhjJUOaTTiR++rpieM9cAS6MB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMAfYDl9 lej4QOBnIbY/D9A9P+Q8uGyhyYVNYoDW3bQr8e/H7cfPwJoTsSFktT+SCEgARxpl ypoSDuGk9mzJpQmOlrhVN/qPLNmhQrCj/PcoMg4dqV67Wvele25U90GmTnXvUgeT yocC3R607py+6Up1lMJmQCirDD8ak4wLtDLTBlzMajH9tkCswUb7sf/k+wKpw+fF udySXJN5giwxhg7K4dj/5uyH7SrxWR0J0g3ZtDIQnBwOP0Heijx8zhXe6svlyF/P Jn9euumLYtmQauVM8OnDj0aL5Ga6zK5hYs9uaclTKK+Rwb5sSFoAw2/mAmI51rVK fm5vVkjS7dQA7g== -----END CERTIFICATE-----Generated at Sun Nov 15 17:53:48 2026 by rpki-client