$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft File: 8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft (raw, json) Hash identifier: I4JSO1J5WrY8yVfH/MPM4o/ko8TgmVp8PNmRqGjT034= Subject key identifier: 2E:30:B2:1C:DC:3F:D7:D4:C4:2F:F6:28:AA:2E:BE:D0:5F:03:C5:D2 Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74 Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974 Certificate serial: 01A1DE395E203226D629776D06842AACD52A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft Manifest number: 017E Signing time: Sun 15 Nov 2026 08:01:03 +0000 Manifest this update: Sun 15 Nov 2026 08:01:03 +0000 Manifest next update: Mon 16 Nov 2026 08:01:03 +0000 Files and hashes: 1: 1-amM62GeyiqIA7h6L1VIqXMpg_k.roa (hash: e3ELaeWiUzpv6kgXisd23pTHNP7qazPkpsbKCjsJosQ=) 2: 2sSeFgoeXeBnPC_ZpPZnrMNe_Yw.roa (hash: jh3bfylqCqw9M7hfFZ/h577WyCqH+ANDZeqpwYgqSgo=) 3: 3f-YZ_gZlvXel0INTsX8PYHYwkM.roa (hash: tYd4+MLEesSD8GAgr16MDLhnq93BfcFvnbdolUayoJA=) 4: 8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl (hash: Grsk5g3NuGxA6LpesA8WiJmnWnflEQFErZT9ND462CM=) 5: ESleWbcySUnTxTcWeNigzmbbsuY.roa (hash: QTUEU0Zs7X8PSlH1r4bAKO3r4cdd8SMgkPqxuyZUVSM=) 6: KIZz9DPTnXnVw9NdjWPUo-TLo-o.roa (hash: PnaduGApsvPabzpzYKthmRcBCdXMG0jb8OHAbeuAnHM=) 7: MrWmH_MbABsdkBqCFs3M8fCwO6k.roa (hash: PV4gzaqHFzi+Hhp8rNjt2QZxGgJeNB9fPcuuG+pb/N0=) 8: MtpEto0-9RDZdJKLup0JfMMPGIE.roa (hash: SGYo5LM15qsG5Z/kxlP88G54S0Ys+UdLIr7hVGjbpUE=) 9: QxqQ0O-lLF0cuhciiIIODv6-1G0.roa (hash: TTIDWgT8AKOuiKhOLtLEuyuHYiHhcPvSrgQ04sMxYBU=) 10: TVtwfP-Z1F-kKr2JNl45GK5JmJY.roa (hash: l+XKail/bljLt7Gzx8u40+b0PguXBqFBGm+e42K5m+M=) 11: oouIMRn5xmavfg3BN45yaJQjQgA.roa (hash: xx3DuD/kVyuMAI2tXLfzol9FrLR5V1fuLfH+vvapSKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:39:5e:20:32:26:d6:29:77:6d:06:84:2a:ac:d5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974 Validity Not Before: Nov 15 08:01:03 2026 GMT Not After : Nov 16 08:01:03 2026 GMT Subject: CN=2e30b21cdc3fd7d4c42ff628aa2ebed05f03c5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:0e:2c:7b:e8:4c:26:f0:9d:0c:f7:af:f7: 11:8a:c6:92:4e:78:5d:aa:6d:5c:35:94:3b:75:49: d9:1a:43:bb:88:eb:9c:3c:96:4f:97:cf:aa:4e:50: 84:19:3d:eb:24:a9:49:02:98:f9:c7:75:0d:a6:d9: 7c:00:7e:21:df:ed:dd:d5:94:d6:60:a1:a6:13:d2: a9:0b:dc:25:ab:89:ef:da:fb:07:58:55:5d:e7:d9: f5:d7:b6:0d:0f:bd:bd:4a:2d:05:98:c1:cd:e1:7c: 5c:99:70:5a:2c:c5:09:f6:f1:e1:8d:54:de:c7:43: 84:c7:60:ca:15:3a:95:85:ce:97:46:0e:60:18:01: 81:e9:eb:36:a9:2c:6b:8b:cf:ae:0c:8b:79:ee:74: 71:c9:df:e4:b1:ac:b0:3a:ea:9c:3f:ea:4f:4d:d2: 5a:51:28:f8:3d:97:21:e7:6d:65:bb:fc:59:9e:ec: ad:d3:6e:ce:bc:95:26:0f:54:8f:f1:71:5e:7c:d1: fb:be:c9:ae:77:94:60:1c:fc:b4:6d:8a:69:15:5d: 5e:a3:e2:48:89:55:58:13:85:5b:19:d3:35:50:fb: 0b:9e:00:f7:e0:ee:6d:95:e0:88:c4:e1:b3:82:cf: 26:30:10:73:16:96:d9:e1:bf:de:7f:a2:77:b9:b1: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:30:B2:1C:DC:3F:D7:D4:C4:2F:F6:28:AA:2E:BE:D0:5F:03:C5:D2 X509v3 Authority Key Identifier: keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:36:bc:dc:fd:16:0a:37:5b:a9:55:c8:46:3b:35:69:61:64: d6:9d:91:65:d7:9a:f2:96:4e:88:53:97:5d:2c:02:5b:df:20: ff:79:52:fb:c6:2c:12:91:25:17:41:87:16:01:3b:e2:e7:b5: 84:a3:05:56:a1:67:0b:e8:dc:69:42:63:b0:ef:be:fd:1a:a6: d3:d0:53:05:d8:90:32:e3:33:42:09:f8:5d:4f:7a:06:34:b2: c8:60:1f:8b:60:73:2e:51:df:f3:b1:65:29:e1:1f:79:07:46: 3b:51:5d:de:11:93:f0:0c:28:96:0b:0a:c8:f1:bf:97:94:54: f8:50:9c:9b:64:ba:7d:6c:96:be:e1:57:1d:dd:33:91:7b:78: 32:e9:21:54:c6:e2:56:eb:47:73:97:65:2f:bb:00:2a:70:55: e3:78:57:d3:36:fe:cb:59:d5:be:28:d1:cf:6c:41:02:af:99: 0e:b3:2d:5c:a7:e7:6c:58:14:6c:f4:71:b0:c5:f4:5f:a0:56: 22:60:3d:f3:fa:3e:39:b8:82:4d:36:80:c8:ec:4f:e6:84:7b: 24:de:cf:48:fd:52:ee:fa:6f:47:4f:da:a2:7a:6b:96:6c:5c: 3e:0f:31:be:c6:32:a1:b6:9c:fd:d0:83:d6:42:b7:23:10:b7: af:3b:e0:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeOV4gMibWKXdtBoQqrNUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGEzMTU4ZWIxYmM2YTBhOTAyN2NmNTllNjAzNjg3ZDZk M2U5NzQwHhcNMjYxMTE1MDgwMTAzWhcNMjYxMTE2MDgwMTAzWjAzMTEwLwYDVQQD EygyZTMwYjIxY2RjM2ZkN2Q0YzQyZmY2MjhhYTJlYmVkMDVmMDNjNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4QOLHvoTCbwnQz3r/cRisaSTnhd qm1cNZQ7dUnZGkO7iOucPJZPl8+qTlCEGT3rJKlJApj5x3UNptl8AH4h3+3d1ZTW YKGmE9KpC9wlq4nv2vsHWFVd59n117YND729Si0FmMHN4XxcmXBaLMUJ9vHhjVTe x0OEx2DKFTqVhc6XRg5gGAGB6es2qSxri8+uDIt57nRxyd/ksaywOuqcP+pPTdJa USj4PZch521lu/xZnuyt027OvJUmD1SP8XFefNH7vsmud5RgHPy0bYppFV1eo+JI iVVYE4VbGdM1UPsLngD34O5tleCIxOGzgs8mMBBzFpbZ4b/ef6J3ubEB0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4wshzcP9fUxC/2KKouvtBfA8XSMB8GA1UdIwQY MBaAFPHaMVjrG8agqQJ89Z5gNofW0+l0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMt YTllOThiNzNiNTU2LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMtYTllOThiNzNiNTU2 LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHza83P0W CjdbqVXIRjs1aWFk1p2RZdea8pZOiFOXXSwCW98g/3lS+8YsEpElF0GHFgE74ue1 hKMFVqFnC+jcaUJjsO++/Rqm09BTBdiQMuMzQgn4XU96BjSyyGAfi2BzLlHf87Fl KeEfeQdGO1Fd3hGT8AwolgsKyPG/l5RU+FCcm2S6fWyWvuFXHd0zkXt4MukhVMbi VutHc5dlL7sAKnBV43hX0zb+y1nVvijRz2xBAq+ZDrMtXKfnbFgUbPRxsMX0X6BW ImA98/o+ObiCTTaAyOxP5oR7JN7PSP1S7vpvR0/aonprlmxcPg8xvsYyobac/dCD 1kK3IxC3rzvgyw== -----END CERTIFICATE-----Generated at Sun Nov 15 14:57:13 2026 by rpki-client