$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: B9v3vYelObsDNbu7mNOeC8560haIxL+REgkKrYxruPQ= Subject key identifier: 5E:33:0A:FD:33:9E:04:1E:B0:A3:D9:6B:22:62:1A:C9:61:47:2E:BA Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 01A1DEDEBA40489025BD753603D63C69C023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 14C6 Signing time: Sun 15 Nov 2026 11:01:40 +0000 Manifest this update: Sun 15 Nov 2026 11:01:40 +0000 Manifest next update: Mon 16 Nov 2026 11:01:40 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: U3nqJrhovOE17i0Jz5bZpnHvEEO83x+NH5luM4jLeUI=) 4: LOSSfoVe0WtQ-UXwav1YUATxS78.roa (hash: H+DrzI8SXckcpRRwjIN+v9EdmDroqGyQIw+MGUoYk4w=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 7: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 8: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 9: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 10: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 11: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 12: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:de:ba:40:48:90:25:bd:75:36:03:d6:3c:69:c0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Nov 15 11:01:40 2026 GMT Not After : Nov 16 11:01:40 2026 GMT Subject: CN=5e330afd339e041eb0a3d96b22621ac961472eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:89:7e:c5:85:71:81:f1:0d:7d:9e:ca:d4: 6f:fc:f2:2b:2c:bc:22:61:e4:21:9c:b7:37:bf:9b: 45:a6:fb:be:19:1f:52:bc:80:66:b8:b3:0e:8d:be: c1:c9:f2:12:af:2f:24:8e:87:ec:56:bf:3c:2b:d4: bf:0d:4a:39:27:e3:b3:aa:f0:de:5a:d5:99:20:10: bb:79:fe:14:3c:99:95:ad:05:00:aa:77:b1:39:00: ae:21:20:05:a4:32:8c:62:84:e6:0b:84:53:aa:c1: e4:de:2a:3f:28:88:59:fa:03:70:c2:8b:69:58:25: e4:04:28:50:88:9f:4c:ec:28:dd:ca:d9:f9:5a:a2: da:4b:bc:40:7c:a2:b4:fc:66:53:f4:70:07:25:0e: db:65:8c:97:4d:72:37:e3:92:a8:34:09:7d:c5:c6: 2e:d1:37:10:15:c9:6c:88:77:a2:58:db:22:bc:11: 37:23:7e:c7:42:2f:e5:bc:2f:41:19:f2:9b:ca:a3: df:26:22:4a:0b:56:c3:b5:04:77:8f:1d:5a:a9:b5: 8d:90:4e:dd:03:85:41:d5:29:be:ba:6f:80:03:63: 0e:cc:1c:94:25:a5:e5:a7:6e:fc:1f:6a:52:86:32: 0f:dd:22:92:4a:41:6e:d7:63:c4:d8:16:b1:e4:5c: 50:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:33:0A:FD:33:9E:04:1E:B0:A3:D9:6B:22:62:1A:C9:61:47:2E:BA X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:34:92:3a:60:dd:66:79:25:44:e5:f7:03:39:0e:83:d5:42: 43:a1:3d:cc:74:90:a8:8e:9a:6c:16:30:9e:58:45:07:08:cd: 99:b9:95:11:cf:c7:c9:81:77:28:49:3a:a7:86:7f:c9:6b:36: e4:5c:54:c6:87:40:a9:47:f7:ab:21:89:79:cc:26:53:48:a9: c7:05:35:71:55:48:29:0f:86:64:f9:70:c3:94:6e:14:8e:30: 25:77:95:e1:02:ab:7c:30:04:09:2b:c2:b3:11:0b:a0:be:20: 82:d3:23:e8:8d:4e:d9:f9:0e:13:78:92:dc:33:8e:23:b8:3a: c6:1d:74:6c:4d:a7:88:82:3c:90:91:2e:f6:a5:62:ac:dd:33: a8:f3:92:04:94:dd:6d:8f:d9:d4:d9:0a:6f:9b:69:c3:04:4e: ac:c7:fd:3c:ba:86:07:50:b0:a4:cc:cd:25:88:7e:40:0f:66: 40:66:03:97:c6:12:c2:2c:20:a9:c6:ba:60:9c:56:0b:70:4a: 76:8d:b0:91:78:9b:fc:2d:e8:e4:fd:88:82:3b:35:7d:96:f9: 45:d2:ad:65:b4:74:bc:34:2e:63:f5:41:7b:dd:8c:f7:62:4d: 9d:91:b7:2a:3a:45:2a:4f:28:8e:c5:28:7f:54:14:f0:fc:4d: 1d:42:3f:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHe3rpASJAlvXU2A9Y8acAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYxMTE1MTEwMTQwWhcNMjYxMTE2MTEwMTQwWjAzMTEwLwYDVQQD Eyg1ZTMzMGFmZDMzOWUwNDFlYjBhM2Q5NmIyMjYyMWFjOTYxNDcyZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXKJfsWFcYHxDX2eytRv/PIrLLwi YeQhnLc3v5tFpvu+GR9SvIBmuLMOjb7ByfISry8kjofsVr88K9S/DUo5J+OzqvDe WtWZIBC7ef4UPJmVrQUAqnexOQCuISAFpDKMYoTmC4RTqsHk3io/KIhZ+gNwwotp WCXkBChQiJ9M7Cjdytn5WqLaS7xAfKK0/GZT9HAHJQ7bZYyXTXI345KoNAl9xcYu 0TcQFclsiHeiWNsivBE3I37HQi/lvC9BGfKbyqPfJiJKC1bDtQR3jx1aqbWNkE7d A4VB1Sm+um+AA2MOzByUJaXlp278H2pShjIP3SKSSkFu12PE2Bax5FxQ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4zCv0zngQesKPZayJiGslhRy66MB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTSSOmDd ZnklROX3AzkOg9VCQ6E9zHSQqI6abBYwnlhFBwjNmbmVEc/HyYF3KEk6p4Z/yWs2 5FxUxodAqUf3qyGJecwmU0ipxwU1cVVIKQ+GZPlww5RuFI4wJXeV4QKrfDAECSvC sxELoL4ggtMj6I1O2fkOE3iS3DOOI7g6xh10bE2niII8kJEu9qVirN0zqPOSBJTd bY/Z1NkKb5tpwwROrMf9PLqGB1CwpMzNJYh+QA9mQGYDl8YSwiwgqca6YJxWC3BK do2wkXib/C3o5P2Igjs1fZb5RdKtZbR0vDQuY/VBe92M92JNnZG3KjpFKk8ojsUo f1QU8PxNHUI/CQ== -----END CERTIFICATE-----Generated at Sun Nov 15 13:38:58 2026 by rpki-client