$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: 6pzCSfuPu+1i20KbegPh1q4TGvjKyR6hq6l5SCfBzFA= Subject key identifier: AC:4B:34:00:B5:27:62:59:DE:F3:C9:66:6C:8E:B3:77:07:65:24:84 Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 01A1DBA69F812B401E3AC33906095031CB55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0F14 Signing time: Sat 14 Nov 2026 20:01:32 +0000 Manifest this update: Sat 14 Nov 2026 20:01:32 +0000 Manifest next update: Sun 15 Nov 2026 20:01:32 +0000 Files and hashes: 1: 1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa (hash: vXugVxE98o8Z5wA/8D/Y9pi3M5AMGKyN8v2Sry/3Otg=) 2: 2j-9yNtktHt5v3A9Kl3uT69XxUQ.roa (hash: kN6K0JrXyJLwNWerB4QQmyVz1nrq+uVY4rleX2HuK30=) 3: 3thexKCs9mTJ-g3YYgHPDfOYcIc.roa (hash: Tadv/Gad986b9FjzLOZ4GUKa4pADLYS5J1VXhc5Jv3A=) 4: 5OcaW_u-IVVVs4vVhK7WkBglTgU.roa (hash: OGfPTP+KfzJ3exJYRBgK9TdIK/XRuaNfOoDR836pTHM=) 5: CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa (hash: omyqw+bz7nV39lBVXP33JrADRI4H4vosedUdoUfqv5Y=) 6: FGG30A2pnW6XO6sk7fIp5Q62RQ4.roa (hash: MnfblWe8TcvbkYaOYfzcMX3zd24oW/U7Q2haJL4xHpQ=) 7: JZgkQ63m_rQAQHPMu3Wqw2AmF6Q.roa (hash: pT23+61910NAnZjfrDfVF9tX9vKV4Wv+y7ZnWGbOXdA=) 8: KcpEeJ8nphqsMHAWxtLdQf-SPD8.roa (hash: 6dGG4UMu3+4l5GE0LXyb/M9jtsTpoowfhHp1qayn3yo=) 9: NiGyen5sRKPPy9T8u3ygDrmXuQo.roa (hash: 8KqO2nLQjwwDARGlN3phFNsy1np9TqX6quA7+00LgFU=) 10: PnMPikrtO33Vh6NkdCxq2k4w26M.roa (hash: YMF2rN1VGNaxWyBvf9HrWuFu9uMYn/avu3bG9vwb7sc=) 11: RY-mbVhA4I89kNcmBsI8h8uXhiw.roa (hash: qgJoxMHmlU8CHkmRyFqNaxEYeU5S0JCmLUfKTUPCXsE=) 12: VMv0dRf33W1wrs_OpoB6KztNOWI.roa (hash: aWZFboenFph6+NpGEetbi88BDQtRIqEXfVrgP4t3tHI=) 13: VXPnJamYnp-2hfTErEBbK3WjJ8w.roa (hash: qfiGUULcvtQTBu8EUEep+iCfwW6E13oKl3US/kmkUJY=) 14: Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa (hash: LeeoUYduefs5gVVp9SgvEfhcjETEvrL0skum1dKRrfw=) 15: _7KTUyvraj0jLcJwWnYx49GI_Ws.roa (hash: uTbeQlp1sTHWF8RgjB3gPB+04hQuOuoqkYdDsifDeDQ=) 16: aXDclZHDVbTyfTZN939aF-svW60.roa (hash: /lQRpMwNPjkJnTsNV0aDEnWjG52zU26fI7Sp7mQlgUw=) 17: eta-cr0KHPJdXK1igAnSrrgYgKo.roa (hash: 46b7pv6tWdNF77DVmTz4RmmApLLdlfpeLeUB6iPbMJ8=) 18: jgrnqFUINh9yQSbIH4pj0x-gEk0.roa (hash: OpDUk5IpNIdyhSv3cFKH41Wn9xn35YaFqaFD71SLY3I=) 19: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: 5AXP/LO+Id4PjoxbRHScJX0oZXCmju5Gwgg2AzUZbdM=) 20: pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa (hash: bifJOe/IS/0GcT2Z9iDNC5IwmSgJXexqKx52FOV+q98=) 21: tMgRfPFkf85axNNxn8QEdnO-WoY.roa (hash: HZTvV0+hdxoPX0EpNO2j0lRcXYZHcQUwXhCQeH87SF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 20:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:a6:9f:81:2b:40:1e:3a:c3:39:06:09:50:31:cb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Nov 14 20:01:32 2026 GMT Not After : Nov 15 20:01:32 2026 GMT Subject: CN=ac4b3400b5276259def3c9666c8eb37707652484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:55:9a:76:b1:77:02:ca:92:72:65:41:c3: ff:30:71:7c:75:4b:dd:e9:68:7f:93:95:97:87:72: 5e:33:e2:46:cb:cd:f9:6d:21:60:48:1b:2f:37:aa: 15:ea:b2:c0:e0:67:4b:59:af:ba:7c:64:fa:9b:f6: 9a:0b:a8:29:d0:90:3d:7e:c3:d4:48:c1:7d:c9:b4: d7:21:dc:c9:f3:8f:e3:2e:c2:a3:7d:49:d6:17:4e: ed:1a:9a:6d:36:d7:bd:1e:2f:f9:52:70:f4:75:7e: 8a:62:7a:d2:be:cb:74:eb:3a:8b:ff:4d:9b:49:d6: ab:e7:54:98:13:45:40:cf:21:d4:5d:84:c2:84:a9: 28:bd:66:01:f3:1b:fe:41:24:49:08:88:c5:a1:a2: 5c:ca:cf:15:88:73:9a:41:ba:0b:a5:3a:ae:6a:c4: 44:a1:df:be:c1:78:54:36:8f:51:12:d7:ab:91:c7: 3e:e8:c0:8d:ea:62:ff:4c:f3:42:90:78:58:f0:23: 21:28:f1:9b:73:ef:8a:72:35:e1:2e:ce:fd:a3:75: 73:30:1c:0c:42:d1:52:0a:27:8d:f5:12:83:c2:8c: 70:ee:be:92:11:d3:86:ae:1d:0a:9b:bc:5b:c6:64: 1c:f9:b0:d2:e1:7e:fb:57:a4:9c:7b:44:6e:23:24: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4B:34:00:B5:27:62:59:DE:F3:C9:66:6C:8E:B3:77:07:65:24:84 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bf:93:1e:81:bc:9b:24:b5:24:cb:8c:a0:b7:04:30:61:3d: 63:2c:6a:87:72:98:cd:90:cd:9b:d6:b0:2a:41:5a:e0:95:78: 02:d0:b0:15:26:b1:13:56:f6:aa:c6:49:06:09:1b:09:c3:42: 3c:9d:b7:27:9d:23:26:3f:a5:c1:fa:cb:ad:49:8e:9d:59:52: 54:88:fc:41:72:6a:29:9a:34:30:c5:d0:77:5c:94:38:83:d0: f4:73:bb:24:71:67:a3:57:76:75:a3:25:33:79:3b:4f:1e:51: 91:80:8d:33:24:be:fa:7f:23:cd:17:bb:ee:ca:2b:36:e3:27: 04:66:91:00:1e:0d:33:50:c6:bd:a9:bd:07:ef:06:bd:ca:74: 30:3d:62:d7:5c:15:7d:99:15:a9:c0:b4:b9:f8:97:04:3e:c3: 21:50:4b:c7:c3:9e:ef:60:dd:4b:ee:b7:de:54:b4:b9:9a:7a: 32:27:a7:d1:93:b6:eb:17:89:82:bd:2b:a9:45:77:16:d5:c0: 1f:17:c4:bb:f5:2e:f9:cc:92:d3:94:72:c4:f3:60:3b:c8:cd: e4:2e:dc:12:6b:c2:b0:52:6d:f0:71:ed:5b:b8:aa:8c:ea:29: 3a:0e:42:8f:e7:25:c3:5d:be:6c:8f:c7:6c:e4:30:62:98:27: ac:e7:ea:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbpp+BK0AeOsM5BglQMctVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYxMTE0MjAwMTMyWhcNMjYxMTE1MjAwMTMyWjAzMTEwLwYDVQQD EyhhYzRiMzQwMGI1Mjc2MjU5ZGVmM2M5NjY2YzhlYjM3NzA3NjUyNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxhVmnaxdwLKknJlQcP/MHF8dUvd 6Wh/k5WXh3JeM+JGy835bSFgSBsvN6oV6rLA4GdLWa+6fGT6m/aaC6gp0JA9fsPU SMF9ybTXIdzJ84/jLsKjfUnWF07tGpptNte9Hi/5UnD0dX6KYnrSvst06zqL/02b Sdar51SYE0VAzyHUXYTChKkovWYB8xv+QSRJCIjFoaJcys8ViHOaQboLpTquasRE od++wXhUNo9REterkcc+6MCN6mL/TPNCkHhY8CMhKPGbc++KcjXhLs79o3VzMBwM QtFSCieN9RKDwoxw7r6SEdOGrh0Km7xbxmQc+bDS4X77V6Sce0RuIyTu4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxLNAC1J2JZ3vPJZmyOs3cHZSSEMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7+THoG8 myS1JMuMoLcEMGE9Yyxqh3KYzZDNm9awKkFa4JV4AtCwFSaxE1b2qsZJBgkbCcNC PJ23J50jJj+lwfrLrUmOnVlSVIj8QXJqKZo0MMXQd1yUOIPQ9HO7JHFno1d2daMl M3k7Tx5RkYCNMyS++n8jzRe77sorNuMnBGaRAB4NM1DGvam9B+8Gvcp0MD1i11wV fZkVqcC0ufiXBD7DIVBLx8Oe72DdS+633lS0uZp6Mien0ZO26xeJgr0rqUV3FtXA HxfEu/Uu+cyS05RyxPNgO8jN5C7cEmvCsFJt8HHtW7iqjOopOg5Cj+clw12+bI/H bOQwYpgnrOfqNA== -----END CERTIFICATE-----Generated at Sun Nov 15 06:39:19 2026 by rpki-client