$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft File: u2qi6QuXDRvK7tElJWMlCBFT-dA.mft (raw, json) Hash identifier: zmqyaCINzRMZfcwP7yUZXbXYpCv4ibLXFfe0hYNbb2s= Subject key identifier: 63:1C:B6:3A:55:43:92:78:68:80:27:04:C9:44:2C:6C:19:BF:7F:6C Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0 Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0 Certificate serial: 01A1DE03487FF194822C4DEDAEACFF8DB8EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft Manifest number: 0174 Signing time: Sun 15 Nov 2026 07:01:59 +0000 Manifest this update: Sun 15 Nov 2026 07:01:59 +0000 Manifest next update: Mon 16 Nov 2026 07:01:59 +0000 Files and hashes: 1: 1-x0LA5b_Qa7duH02aAFMCbeAziE.roa (hash: D5E/NlS1WcmJBkiWUYiira8KCkqBtxvWMFgI/iWwLtQ=) 2: 57AVFEKk7vZln1xu08ncf1wfVP8.roa (hash: DpOPXY5JzxueLGeQrTDBAs7bP1zTXtO/7VEht/dL00M=) 3: 5AtrV7yOPOGzp3dD9scm4jFp88g.roa (hash: Iyw+z4hUQvrtjBYppz1+vkyM47qxvTh/rZ/AFbdmSyE=) 4: 75cRJGWWWeEGDBP5zSNTjgoUGow.roa (hash: q+98+01kCf3O5JbXFHN6n+KofQN/z5Q/5IhPWdMNYis=) 5: 929vYbDJj4se9paqibWN3-3R8HA.roa (hash: W9ddFPxvbc6tqGzHqj597SIXQeJ26nx3+gxFSTYVhW8=) 6: G8t30FnyqJ9nd31D40VQeRTEtBA.roa (hash: TUmnHq75alVMMqFrQcwFLzsSHCqRjTU+zq33n/KhuME=) 7: GyWzmF_PpZ9N7VpvNUnUwxN8sIg.roa (hash: aO6JHojQKb2l7UaVOSnTv4mzQmmXqQjYDswxCMnwBH4=) 8: R6r6-4m3eXKt8b9AzresZI1lWHc.roa (hash: 8di1Oi8xGenPm6U4E5v0M/GzUjBIZHCPAo+Pu/wQRBU=) 9: kCEhbc-CjGlkrVP2PS1PYrIGODw.roa (hash: 9TV84/4RfuYCLfpfpR6Gh6BK5KQrek5oB2df/+w8lAo=) 10: u2qi6QuXDRvK7tElJWMlCBFT-dA.crl (hash: Au3U79mFfLb407s+4lURhzqLzmY8KkG3+E1LwfCn58o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:03:48:7f:f1:94:82:2c:4d:ed:ae:ac:ff:8d:b8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0 Validity Not Before: Nov 15 07:01:59 2026 GMT Not After : Nov 16 07:01:59 2026 GMT Subject: CN=631cb63a5543927868802704c9442c6c19bf7f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:aa:88:ec:c2:af:a5:3b:c0:f2:d3:bd:2b:6d: 9e:50:ce:34:08:65:68:34:a3:e7:1d:20:03:bc:09: 78:cd:ae:51:fc:8e:c0:82:e1:49:46:18:2b:4a:00: 5b:7d:b1:45:af:8c:a7:25:03:73:84:e0:c0:b6:e6: 96:70:e9:4a:5c:ab:c2:7d:ae:33:3d:7d:56:09:b5: 2e:35:7b:15:57:4d:34:2a:43:77:0e:5a:95:ec:f9: 8f:94:16:07:38:e4:c2:3f:24:6c:10:a7:f9:52:73: 26:45:4c:ae:aa:31:22:16:0b:34:f8:7e:e1:c2:c2: 34:13:e5:1e:1f:db:9d:76:9a:04:36:22:1a:67:7d: b5:66:c3:a9:d2:0a:a8:88:b5:39:7a:5f:54:a8:d7: fa:11:aa:97:43:56:5b:24:a0:8b:16:fd:4b:98:bb: 11:b0:d8:a0:43:07:c3:8f:be:fe:d4:1a:06:70:79: 8f:de:e4:80:36:6e:98:a8:ee:7a:bd:b4:e4:4e:9e: 8d:0e:7a:b3:67:3e:e4:bd:43:a4:ea:e1:af:09:19: 06:d9:17:c5:ed:a4:fa:4f:e6:ae:af:93:84:0b:a4: 45:32:e4:18:5f:f4:3c:f5:8d:ab:8b:a3:0f:b0:d3: 14:4a:83:d0:6a:c5:7a:ef:0e:fd:ee:72:27:da:bd: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1C:B6:3A:55:43:92:78:68:80:27:04:C9:44:2C:6C:19:BF:7F:6C X509v3 Authority Key Identifier: keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:c1:b4:c3:b9:9d:7e:a5:ff:84:a6:0a:de:ce:3d:9a:af:14: 8e:d1:ca:43:f5:11:4c:6e:45:b1:7c:dd:ce:d3:36:1e:7a:61: 6c:e0:37:15:cf:74:eb:60:89:81:7a:59:3b:65:e0:55:e8:c4: 30:a5:ac:fa:4b:0f:1f:9b:d4:66:fd:e9:5c:83:22:a4:4a:45: d2:53:6e:43:b6:ae:80:c7:b8:55:a2:c0:a3:f7:17:a1:52:4e: 84:08:04:20:da:bb:94:f7:12:88:db:d4:0f:f9:82:8b:2e:40: e7:ba:7c:8a:a0:c2:84:f7:b3:01:fe:eb:1b:5a:ab:6c:73:67: 88:7b:26:88:07:83:66:91:3b:48:c8:13:96:2f:e6:79:7e:55: e1:78:f7:cd:1a:75:14:d2:74:b7:b6:f2:d0:58:6e:c6:08:6c: f9:e1:5c:85:50:3c:47:ae:da:f6:42:22:35:a5:32:5c:d4:29: 06:92:b9:dc:27:a8:fb:ce:e7:9f:0a:1f:bc:ee:e9:10:f4:50: 33:07:f5:98:04:63:3a:23:27:71:a0:63:3f:39:dd:a7:b8:71: 80:92:55:48:f8:7c:cd:0d:d0:5e:11:91:bb:b2:63:81:c4:bc: 16:5f:b4:85:4c:c0:e3:d4:2f:b2:d1:5a:20:7a:35:1b:ef:a8: da:0a:cf:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeA0h/8ZSCLE3trqz/jbjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNmFhMmU5MGI5NzBkMWJjYWVlZDEyNTI1NjMyNTA4MTE1 M2Y5ZDAwHhcNMjYxMTE1MDcwMTU5WhcNMjYxMTE2MDcwMTU5WjAzMTEwLwYDVQQD Eyg2MzFjYjYzYTU1NDM5Mjc4Njg4MDI3MDRjOTQ0MmM2YzE5YmY3ZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaqI7MKvpTvA8tO9K22eUM40CGVo NKPnHSADvAl4za5R/I7AguFJRhgrSgBbfbFFr4ynJQNzhODAtuaWcOlKXKvCfa4z PX1WCbUuNXsVV000KkN3DlqV7PmPlBYHOOTCPyRsEKf5UnMmRUyuqjEiFgs0+H7h wsI0E+UeH9uddpoENiIaZ321ZsOp0gqoiLU5el9UqNf6EaqXQ1ZbJKCLFv1LmLsR sNigQwfDj77+1BoGcHmP3uSANm6YqO56vbTkTp6NDnqzZz7kvUOk6uGvCRkG2RfF 7aT6T+aur5OEC6RFMuQYX/Q89Y2ri6MPsNMUSoPQasV67w797nIn2r1ZvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMctjpVQ5J4aIAnBMlELGwZv39sMB8GA1UdIwQY MBaAFLtqoukLlw0byu7RJSVjJQgRU/nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAycG0w7md fqX/hKYK3s49mq8UjtHKQ/URTG5FsXzdztM2HnphbOA3Fc9062CJgXpZO2XgVejE MKWs+ksPH5vUZv3pXIMipEpF0lNuQ7augMe4VaLAo/cXoVJOhAgEINq7lPcSiNvU D/mCiy5A57p8iqDChPezAf7rG1qrbHNniHsmiAeDZpE7SMgTli/meX5V4Xj3zRp1 FNJ0t7by0Fhuxghs+eFchVA8R67a9kIiNaUyXNQpBpK53Ceo+87nnwofvO7pEPRQ Mwf1mARjOiMncaBjPzndp7hxgJJVSPh8zQ3QXhGRu7JjgcS8Fl+0hUzA49QvstFa IHo1G++o2grPAA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:40:15 2026 by rpki-client