$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: 0KsaxnZyA6ia/bfqkQspIM5DxhEliiOeHQi0RdmsbZI= Subject key identifier: CF:9D:D6:16:0A:45:0E:E9:B6:30:A0:6E:16:20:40:B4:DF:B0:F6:5A Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 01A1DD94873F2B3F870650D12501BF1DF3B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 1B19 Signing time: Sun 15 Nov 2026 05:01:00 +0000 Manifest this update: Sun 15 Nov 2026 05:01:00 +0000 Manifest next update: Mon 16 Nov 2026 05:01:00 +0000 Files and hashes: 1: 1-cQy_siX062tFLZkeCmyCEUYxQs.roa (hash: M1tvA2BwBUz9tHkqC8JXVgPLd87OHSLvHcZQsEKJENI=) 2: 1DvNK1UEfocldcVoSCDz4-rQCu0.roa (hash: W9AE3etelZntnhp0Syb26y14LnYuyubNeRnjY+KTeic=) 3: 2IRQ2tg7AckZC-qaAHhGpj_YvX0.roa (hash: E5vcK/Kzq3X0ZU3ua0SSHujRQ2xDF2dauEaV4Vglvqc=) 4: 2ufcO6Solkeoxok1gEGcUzsMb5Q.asa (hash: YPRSCljS8W4a21wjawN3tjkT21ahLvmlXryi5Zk5yms=) 5: 8Q_WyzdZiQckSphgAZIR0v5tHg0.roa (hash: 4fsTe8wbJQmrMv3rGh5NswgG+t+NcVBW7ToId469YgA=) 6: Dt3MJu0uPuH3qq0XGW7lqKsKInY.roa (hash: R0j8gqdXiZr3Lr8QUwpYhsHJ5zeSfVefNgsAEnI0AMw=) 7: MEF3inUBFdwUSzzBPPrNynpqKew.asa (hash: qyxeY4oHRpmv1kLBWmfROmIvHNMqEegs2w5oRBvEBq4=) 8: MmIYb8wrP1LfxhIufZ51w4snAKI.roa (hash: e/pt+I42So6GjGCNLA7r6mnp1Eja3WS/XZO4IhLmB8E=) 9: PzoJn7JmNA7HLgDJj3qABg4rdIg.roa (hash: Pu8elV3ASkAhzzlLq5cnqoeSEZGr98s46wDdEgSzMVE=) 10: Rs1lwHsOhORTbpOYC0DdvHoRuG4.roa (hash: 2ldj5+OjHEBz42EYRxs+dDbaX+fxjP+Yz7ZHeTr6lGA=) 11: SeUVAtbk1hrN2JyKOxE8q4V1UTY.roa (hash: lPG+lMbFgVTXYsR4V2gK2L1a28JoQEgQzgLbi/Qank4=) 12: VBhBA4HiRVMlJSOniY0KYh9CTd0.roa (hash: HSJ8X00wLW6S9kJDTwwCoC+4KhX2XIDhiS0S4EkH16Y=) 13: eLLgkJY0LUjDQzm5GuuyzsHUdO8.roa (hash: 5HseyNnROV3cBPGdpH59V7rf9Io+o9Vye7FV9A2XVfo=) 14: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: mTwfup9QwNTjuT4vocJmfFbeGmwhkgTw5oNkGuQ5/wc=) 15: ohXc6oE7ElG-Ajtu7o45-cHtKak.roa (hash: g5o8dbjGn0yFQ7IxAtC49wzuYTWKouvuonHavYlfl2k=) 16: qJ3niIVK-kPpD_FGpR52CMp181s.roa (hash: Y2wZT3A9wJBPyVW0IAHlhorwA/qR0rpoglN3HNURHyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:94:87:3f:2b:3f:87:06:50:d1:25:01:bf:1d:f3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Nov 15 05:01:00 2026 GMT Not After : Nov 16 05:01:00 2026 GMT Subject: CN=cf9dd6160a450ee9b630a06e162040b4dfb0f65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e7:4b:ca:da:47:4a:dd:38:ca:af:1e:9e:5b: 82:c5:e8:0f:96:09:cd:5f:18:a3:07:4c:83:3d:48: 95:f0:0b:82:07:dd:fb:cd:4b:44:9d:20:f5:a3:91: 36:f7:ab:77:79:1e:12:21:f3:fd:19:d2:1f:19:76: 41:a5:83:48:6a:66:e5:e5:a5:4b:26:0d:89:af:a2: 29:c1:8b:e6:76:d0:48:fd:d5:40:25:88:e6:a1:1e: e3:55:59:39:fb:c2:6f:01:3a:48:4f:50:21:83:28: 91:a4:e8:a4:f1:c0:9c:38:64:2e:97:9f:4a:a6:af: f2:f7:01:f7:a4:c0:40:85:2a:ee:d6:d1:c5:2a:e2: 01:e8:aa:ab:43:0c:5d:7b:cd:a4:6d:54:dc:f8:94: 45:d4:a9:65:2c:75:a2:ed:5d:38:3e:79:80:ef:fb: 8d:2c:50:ce:93:c1:15:ec:0a:88:b3:e0:23:c5:a4: 4f:0f:ff:54:4b:97:5a:1e:9f:fc:35:fc:b9:73:27: 5e:47:11:a4:9a:16:eb:6d:08:b3:ee:e6:dd:f8:49: ba:e6:73:c8:82:2d:8c:79:fb:3b:eb:24:06:81:51: 4f:b6:1b:c4:8b:bd:d3:93:42:6a:dc:78:8a:f5:c3: 7c:fb:b3:9d:b7:aa:d9:7e:d3:be:77:81:6d:d4:08: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9D:D6:16:0A:45:0E:E9:B6:30:A0:6E:16:20:40:B4:DF:B0:F6:5A X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:28:2f:3c:2f:e0:ad:b1:bc:ff:47:03:eb:bf:6b:0e:fd:b5: 17:ea:1d:76:66:2b:a6:33:32:62:2d:a4:18:f1:bc:3c:28:ba: 61:11:49:ad:e9:25:f5:f2:88:18:d5:92:11:42:0d:0d:7e:e5: e5:d4:99:78:35:2b:cf:39:eb:f7:2c:f4:aa:aa:5a:52:6c:7a: f9:9a:51:42:79:fd:a4:3e:fc:03:d3:cf:ca:39:b7:d2:9a:a7: 03:d3:e6:28:42:ee:41:a4:fd:9a:51:ad:b8:82:e4:b0:e8:cb: 00:77:93:83:bc:32:39:de:aa:77:5e:81:3f:19:39:0d:53:1a: 82:9f:84:5b:b7:fd:5d:bc:69:59:e1:b9:61:95:05:9b:58:8c: ee:2d:5b:08:30:1f:05:b5:cf:2f:74:b6:16:cf:33:78:89:c1: 93:87:8b:0c:c0:f3:63:b8:94:36:20:03:01:bc:7d:67:fc:2e: a7:86:d3:74:02:3a:b4:4d:0e:53:2d:f4:2f:4c:88:6c:2c:5c: 4a:c6:92:49:61:11:8e:f6:e3:99:e2:73:92:07:87:2c:cf:97: 8f:95:4e:90:88:19:25:29:70:5d:10:19:a6:13:b5:d1:34:06: 73:15:73:32:f3:a8:d6:04:3e:fd:26:1a:de:9c:1c:a6:cc:96: da:4e:b0:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdlIc/Kz+HBlDRJQG/HfO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYxMTE1MDUwMTAwWhcNMjYxMTE2MDUwMTAwWjAzMTEwLwYDVQQD EyhjZjlkZDYxNjBhNDUwZWU5YjYzMGEwNmUxNjIwNDBiNGRmYjBmNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+dLytpHSt04yq8enluCxegPlgnN XxijB0yDPUiV8AuCB937zUtEnSD1o5E296t3eR4SIfP9GdIfGXZBpYNIambl5aVL Jg2Jr6IpwYvmdtBI/dVAJYjmoR7jVVk5+8JvATpIT1AhgyiRpOik8cCcOGQul59K pq/y9wH3pMBAhSru1tHFKuIB6KqrQwxde82kbVTc+JRF1KllLHWi7V04PnmA7/uN LFDOk8EV7AqIs+AjxaRPD/9US5daHp/8Nfy5cydeRxGkmhbrbQiz7ubd+Em65nPI gi2Mefs76yQGgVFPthvEi73Tk0Jq3HiK9cN8+7Odt6rZftO+d4Ft1AjuUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+d1hYKRQ7ptjCgbhYgQLTfsPZaMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQigvPC/g rbG8/0cD679rDv21F+oddmYrpjMyYi2kGPG8PCi6YRFJrekl9fKIGNWSEUINDX7l 5dSZeDUrzznr9yz0qqpaUmx6+ZpRQnn9pD78A9PPyjm30pqnA9PmKELuQaT9mlGt uILksOjLAHeTg7wyOd6qd16BPxk5DVMagp+EW7f9XbxpWeG5YZUFm1iM7i1bCDAf BbXPL3S2Fs8zeInBk4eLDMDzY7iUNiADAbx9Z/wup4bTdAI6tE0OUy30L0yIbCxc SsaSSWERjvbjmeJzkgeHLM+Xj5VOkIgZJSlwXRAZphO10TQGcxVzMvOo1gQ+/SYa 3pwcpsyW2k6wrA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:06:17 2026 by rpki-client