$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: lfCVkj5/4aoA74wAONgptVMIZWWg06PraJ/PBjbkiKQ= Subject key identifier: BB:A2:01:B7:FF:BB:0F:63:6F:3C:D0:58:78:C3:9C:00:07:5D:6C:44 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 01A1DB38504B6A8A7CD3D82C044697E765A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 09A7 Signing time: Sat 14 Nov 2026 18:01:03 +0000 Manifest this update: Sat 14 Nov 2026 18:01:03 +0000 Manifest next update: Sun 15 Nov 2026 18:01:03 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: cORxqt8ZBtH2VnBGWT56k1gZpkNFrNYljLKSmh9ahb8=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:38:50:4b:6a:8a:7c:d3:d8:2c:04:46:97:e7:65:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Nov 14 18:01:03 2026 GMT Not After : Nov 15 18:01:03 2026 GMT Subject: CN=bba201b7ffbb0f636f3cd05878c39c00075d6c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:35:b1:fb:27:73:19:7a:5f:48:1d:87:7f: 63:37:88:20:86:08:e8:61:94:77:b3:db:90:9c:99: 3b:f3:77:55:a9:a9:1c:9b:82:69:fa:b8:98:e0:df: 31:50:bb:a2:36:82:ef:11:54:e4:4f:31:f7:7b:5d: a3:9f:3d:ec:f7:48:c4:63:c4:0d:32:ad:ea:3a:26: 2a:ed:4e:2f:ff:a8:a4:a2:ff:4d:cb:4e:7c:20:50: a0:14:ee:d9:ff:82:64:d6:03:b7:9f:0d:a2:cb:03: e4:cc:af:a3:da:5a:1f:7d:e7:52:63:7a:d2:2f:59: 82:8c:c0:b8:f9:2c:02:eb:9b:ae:6f:aa:11:74:84: d8:f5:86:b1:18:d6:57:6e:70:5f:f3:9e:ff:53:84: bf:87:42:59:75:ac:2e:72:c7:77:d9:28:c8:90:8a: 5f:1f:bb:ad:a6:45:78:95:68:34:a0:de:29:c6:fe: a8:21:31:83:7a:81:e7:02:a5:f8:a2:78:d9:96:1c: de:8d:20:3f:ac:14:c1:62:51:bd:57:ed:e9:c4:dd: 59:14:95:22:0e:8b:f2:7d:5d:ba:4b:17:66:ac:ab: 6e:4a:86:85:3a:28:e4:d6:3d:49:bc:e2:0f:2d:72: d2:e2:c3:b4:52:f0:72:5a:5a:2c:86:e2:e4:b5:13: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A2:01:B7:FF:BB:0F:63:6F:3C:D0:58:78:C3:9C:00:07:5D:6C:44 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8e:9d:c3:ad:d4:37:fc:b1:9b:3c:81:58:49:09:14:d3:d1: 13:01:30:3d:2a:f1:40:d2:6d:e1:43:98:8d:3b:63:94:65:7e: 5b:43:9d:aa:2b:e5:4a:fc:40:11:89:03:d6:96:ed:57:d1:92: c6:0a:eb:6e:46:d7:64:8c:e4:5e:e7:5d:2c:7f:e0:62:f8:e7: b4:4b:c7:d4:b8:0d:f6:67:51:02:dc:db:d4:15:0e:ce:f5:e4: d5:06:b5:0b:f1:a3:b2:43:52:f7:e2:a8:df:d7:38:c2:31:62: 73:70:c8:da:d0:aa:27:a2:c4:d7:e1:ff:f5:41:a3:1a:99:95: 78:83:80:82:58:8c:9d:7b:b6:b8:5a:b2:c3:9b:ae:4b:95:d1: 08:04:c1:79:47:e9:d0:9b:bc:25:72:b8:0c:00:b2:9c:76:2d: 55:0b:dc:c4:26:03:3e:08:4f:cb:11:42:61:cf:81:82:1b:6b: 82:a8:14:8d:ba:35:49:e2:40:35:b1:a2:0c:bb:71:45:4b:6c: 28:ff:1b:c9:39:fe:9b:5c:8f:e8:ca:0d:c0:90:93:37:21:54: 6f:b5:b0:0b:aa:fa:1e:e3:f4:05:ea:de:59:7e:f4:36:3e:45: 3c:f1:42:cb:be:c0:fa:65:4d:ec:e4:e5:63:cb:1b:f4:ad:63: 27:4e:b0:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbOFBLaop809gsBEaX52WkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYxMTE0MTgwMTAzWhcNMjYxMTE1MTgwMTAzWjAzMTEwLwYDVQQD EyhiYmEyMDFiN2ZmYmIwZjYzNmYzY2QwNTg3OGMzOWMwMDA3NWQ2YzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva41sfsncxl6X0gdh39jN4gghgjo YZR3s9uQnJk783dVqakcm4Jp+riY4N8xULuiNoLvEVTkTzH3e12jnz3s90jEY8QN Mq3qOiYq7U4v/6ikov9Ny058IFCgFO7Z/4Jk1gO3nw2iywPkzK+j2loffedSY3rS L1mCjMC4+SwC65uub6oRdITY9YaxGNZXbnBf857/U4S/h0JZdawucsd32SjIkIpf H7utpkV4lWg0oN4pxv6oITGDeoHnAqX4onjZlhzejSA/rBTBYlG9V+3pxN1ZFJUi DovyfV26SxdmrKtuSoaFOijk1j1JvOIPLXLS4sO0UvByWloshuLktRNf1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuiAbf/uw9jbzzQWHjDnAAHXWxEMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb46dw63U N/yxmzyBWEkJFNPREwEwPSrxQNJt4UOYjTtjlGV+W0OdqivlSvxAEYkD1pbtV9GS xgrrbkbXZIzkXuddLH/gYvjntEvH1LgN9mdRAtzb1BUOzvXk1Qa1C/GjskNS9+Ko 39c4wjFic3DI2tCqJ6LE1+H/9UGjGpmVeIOAgliMnXu2uFqyw5uuS5XRCATBeUfp 0Ju8JXK4DACynHYtVQvcxCYDPghPyxFCYc+BghtrgqgUjbo1SeJANbGiDLtxRUts KP8byTn+m1yP6MoNwJCTNyFUb7WwC6r6HuP0BereWX70Nj5FPPFCy77A+mVN7OTl Y8sb9K1jJ06wOw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:18:40 2026 by rpki-client