$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: jQkfrVVVArqDr/ZhgJQf4N/xONagmF9ibgk2uJxfnHk= Subject key identifier: 4F:1E:00:9F:D8:23:10:97:57:16:68:52:EB:67:36:B1:87:73:51:2A Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 01A1DACA795025209FD55D5A6F82874B810B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 14D2 Signing time: Sat 14 Nov 2026 16:01:04 +0000 Manifest this update: Sat 14 Nov 2026 16:01:04 +0000 Manifest next update: Sun 15 Nov 2026 16:01:04 +0000 Files and hashes: 1: 1-cdbb2CtXH3pca1uXcexsL_9E0M.roa (hash: VoBQss4p/YROl4eXzZ45TuvYtGBy4pEMXxSTEdfgmB8=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: KBTMIdy6P-8_xf4HlC159PPwM10.roa (hash: xr4oFqTQvOk4DsivmofcUc9ATIO/2Q84cwKt1yVzHAc=) 6: O-nGdo17nUruMvl0t4o4MEak68M.roa (hash: wdeOIfTyIeTy1If3zH3L438Wr/4P1aFKexgrmhjzq0Y=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: cdDi43fz4gVrdlIvqhlYOYAYg3Q.roa (hash: oLyDOKmIfzJFQaCyipplLvYYEBcp57PtBJIBM94O5Xs=) 11: dxZrm_kRJNnz8YeorAaaxgmTmrU.roa (hash: Le5MlQmjVvWn8m1gclKNCqW1PZyJn3stX+9I88dbC/c=) 12: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: 8BJF13U6HAnzyp7dGTUbgUqUGbyK3QN6DI4QoKzxs78=) 13: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 14: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 15: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 16: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:ca:79:50:25:20:9f:d5:5d:5a:6f:82:87:4b:81:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Nov 14 16:01:04 2026 GMT Not After : Nov 15 16:01:04 2026 GMT Subject: CN=4f1e009fd823109757166852eb6736b18773512a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:07:8f:50:f9:9c:da:01:a3:00:01:7f:61:4b: 63:f7:13:6e:3a:ad:15:8b:5c:93:ce:42:8b:c5:38: a6:3a:5e:8e:f0:9e:a1:52:58:8a:52:e1:e2:68:2c: d4:14:c7:8a:18:e7:65:b2:52:e0:f0:ea:d9:67:00: 73:0a:51:f0:56:a7:f9:78:0c:56:9a:8b:e9:90:df: fb:23:88:84:2b:d0:96:8c:97:ae:d8:17:df:39:63: 66:12:49:88:1a:1d:f7:38:da:e2:6c:9d:b1:7c:07: 18:50:ae:01:48:46:d8:8b:13:5f:da:65:2a:37:0b: 65:43:6b:9c:16:43:4f:c2:61:32:73:51:0e:e7:d2: 07:c0:95:20:6e:b7:68:36:8a:67:11:8f:92:3f:b1: 24:2f:a0:c0:be:9d:ab:11:ec:0c:d9:2f:69:9f:7c: fb:f0:51:9a:38:f3:a0:a7:a2:86:a5:9b:71:96:4b: 18:62:84:a9:46:3b:35:3a:4b:ba:8b:25:9c:ff:c2: a8:62:d6:23:a1:d9:34:44:96:53:54:d5:8d:06:c4: c7:7f:86:31:cd:90:6a:cb:52:b4:3d:73:61:54:40: bc:6b:fd:02:ec:ca:d5:94:c2:ba:05:07:8f:23:bf: 09:05:4a:1b:12:7d:e4:7c:43:6f:ae:a5:b2:20:a0: 19:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1E:00:9F:D8:23:10:97:57:16:68:52:EB:67:36:B1:87:73:51:2A X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:97:d1:b2:37:a0:59:8a:89:54:36:01:96:ee:ff:31:ba:16: 2e:93:9c:65:48:c5:71:2c:96:3d:01:b0:62:e2:fd:11:9b:84: bf:c1:1b:c1:00:d1:92:a1:90:7b:e0:14:97:e4:7c:30:9e:34: ae:fa:45:8f:99:b2:11:c9:17:0e:f1:68:92:43:dd:ec:ef:9d: 47:14:74:97:4a:f1:4c:fa:fe:3e:c3:5d:9b:6c:ea:4d:a9:72: 7c:a0:25:44:0d:d7:0d:96:28:ae:92:42:77:91:5f:b5:1f:b3: 1c:4f:39:8b:b1:dc:dc:cd:9d:01:05:32:f3:18:54:ab:fb:09: 3d:18:26:e6:ff:c0:48:d0:30:b3:f2:22:c8:7a:7b:4b:83:7f: 5d:f6:e2:36:03:b3:2f:76:82:23:18:08:c5:24:4e:1f:38:0c: b4:38:ab:f6:da:53:6f:3a:b1:9d:ac:a8:4f:7a:88:03:c6:8c: 61:08:ce:60:4e:aa:49:35:df:e4:c3:0d:02:11:f0:96:85:85: af:af:62:32:f8:81:3a:53:ec:ee:35:00:ed:fd:33:a4:59:0e: 6e:c0:01:04:1e:71:ac:e1:81:ae:31:bc:bd:dd:f2:1f:40:7e: c6:63:a7:9e:45:f7:4c:f1:8f:60:85:a6:d5:0b:be:91:78:45: e7:30:8d:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHaynlQJSCf1V1ab4KHS4ELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYxMTE0MTYwMTA0WhcNMjYxMTE1MTYwMTA0WjAzMTEwLwYDVQQD Eyg0ZjFlMDA5ZmQ4MjMxMDk3NTcxNjY4NTJlYjY3MzZiMTg3NzM1MTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QePUPmc2gGjAAF/YUtj9xNuOq0V i1yTzkKLxTimOl6O8J6hUliKUuHiaCzUFMeKGOdlslLg8OrZZwBzClHwVqf5eAxW movpkN/7I4iEK9CWjJeu2BffOWNmEkmIGh33ONribJ2xfAcYUK4BSEbYixNf2mUq NwtlQ2ucFkNPwmEyc1EO59IHwJUgbrdoNopnEY+SP7EkL6DAvp2rEewM2S9pn3z7 8FGaOPOgp6KGpZtxlksYYoSpRjs1Oku6iyWc/8KoYtYjodk0RJZTVNWNBsTHf4Yx zZBqy1K0PXNhVEC8a/0C7MrVlMK6BQePI78JBUobEn3kfENvrqWyIKAZtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8eAJ/YIxCXVxZoUutnNrGHc1EqMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpfRsjeg WYqJVDYBlu7/MboWLpOcZUjFcSyWPQGwYuL9EZuEv8EbwQDRkqGQe+AUl+R8MJ40 rvpFj5myEckXDvFokkPd7O+dRxR0l0rxTPr+PsNdm2zqTalyfKAlRA3XDZYorpJC d5FftR+zHE85i7Hc3M2dAQUy8xhUq/sJPRgm5v/ASNAws/IiyHp7S4N/XfbiNgOz L3aCIxgIxSROHzgMtDir9tpTbzqxnayoT3qIA8aMYQjOYE6qSTXf5MMNAhHwloWF r69iMviBOlPs7jUA7f0zpFkObsABBB5xrOGBrjG8vd3yH0B+xmOnnkX3TPGPYIWm 1Qu+kXhF5zCNkg== -----END CERTIFICATE-----Generated at Sun Nov 15 00:09:16 2026 by rpki-client