$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: 7ldzSCzz1kHKt6CX+H/xnYDoGsUrjAJcac3KkyUr0t4= Subject key identifier: 29:73:F1:F7:B7:E3:54:99:6E:4A:DC:15:93:BD:B6:EA:63:B6:22:1D Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 01A1DC81EC5D2C1AFC076E3C66B48226AE63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 18BA Signing time: Sun 15 Nov 2026 00:01:04 +0000 Manifest this update: Sun 15 Nov 2026 00:01:04 +0000 Manifest next update: Mon 16 Nov 2026 00:01:04 +0000 Files and hashes: 1: 1-Qwhdxw0hOkLXBRAcR2LmJpZ5ak.roa (hash: xIlT5OIadnOF9KgdrgeobvvXh2OpkJLV558vKGxbWc0=) 2: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=) 3: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=) 4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: IcOFPekufXltsgnUDO5DAaWmUBKzb7Ye1zqNbgQovFA=) 5: InZzXVL8KHJoCW3P7j1vC_LCtX0.roa (hash: UZuietxe/VlvBF04H5Qn/Q3JuczTSHQbjD8HNRbl0Y4=) 6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=) 7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=) 8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=) 9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=) 10: i2dJsmy2hT458Smig_BPsb5ebGI.roa (hash: 0voBvHzLpuWesn2jG16CnFZiBWLXb3G/1wpIjnXI0Lc=) 11: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=) 12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=) 13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=) 14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 00:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:81:ec:5d:2c:1a:fc:07:6e:3c:66:b4:82:26:ae:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Nov 15 00:01:04 2026 GMT Not After : Nov 16 00:01:04 2026 GMT Subject: CN=2973f1f7b7e354996e4adc1593bdb6ea63b6221d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:85:9d:e2:74:2a:b9:c5:14:cb:dd:b6:42: 9d:50:c6:b9:9b:fd:86:77:9d:a9:70:14:5b:c6:89: b4:01:ba:07:b1:7b:86:fb:6d:0d:1a:a7:90:dc:f5: 64:ab:00:9e:42:ba:db:e6:d0:de:fa:32:00:69:2d: 75:9b:83:17:fe:56:28:e9:9e:cf:d6:45:f1:7a:e4: 53:6f:41:80:bb:6b:37:37:4d:bc:64:26:2a:78:d0: fb:5f:1c:95:7b:d2:61:2e:80:48:16:00:25:26:d4: de:a3:ff:9f:11:20:21:84:23:f7:ad:e9:6a:7d:2e: 73:06:ee:60:03:a6:9f:1d:c0:96:9e:78:29:ab:98: c2:be:7a:fc:41:6f:bc:12:06:a4:61:d8:8c:95:8e: ad:af:f4:da:f9:68:9e:29:e2:6b:18:94:39:12:47: d7:a2:4e:61:b7:0a:a1:9f:ff:c3:eb:c5:5f:3b:a6: db:cd:54:81:69:fc:be:8d:21:bd:0d:31:23:b2:ac: 9d:63:ce:58:9b:6e:f0:86:54:a6:af:aa:4c:62:15: a8:94:8c:2a:3f:6d:2c:8a:0e:2a:86:5b:03:15:4e: 12:37:f6:be:26:64:1e:12:46:80:ea:4c:91:42:02: 28:bf:bd:65:0b:7a:9e:f4:05:ad:05:e3:b6:e6:47: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:73:F1:F7:B7:E3:54:99:6E:4A:DC:15:93:BD:B6:EA:63:B6:22:1D X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:47:40:43:ae:5d:78:73:b4:96:25:45:21:28:78:ce:6c:06: a3:aa:9a:17:40:84:d7:92:fd:35:96:2c:80:2c:85:b6:a8:b8: 8e:8e:31:66:73:7c:31:e5:c2:cb:92:8e:6d:f3:ee:b8:be:44: dc:6e:f4:d2:1a:4c:35:3f:61:cc:3f:3d:a8:03:f2:91:78:0c: b4:de:e8:fc:08:94:db:dc:8a:f0:2c:c8:36:d1:4e:a5:64:df: 13:ed:6d:ee:e6:90:f4:f6:f9:28:9e:d1:ad:23:e1:9d:68:c5: ea:0e:85:bd:24:5f:b4:ba:a8:57:c6:cf:f7:2b:a9:a7:64:2d: 17:cd:22:90:46:27:47:f6:32:ca:b9:f3:0b:3e:af:d1:9b:f1: a6:e0:1e:e2:af:16:59:8e:95:68:12:69:7e:1b:cd:24:d1:1b: a6:6a:2c:c5:a3:1f:b9:2e:48:9d:2f:6a:f5:cd:c2:bf:aa:c6: 0e:2f:fb:2b:90:48:7b:61:37:3c:d3:81:de:7c:b8:54:57:28: 6b:e1:db:ea:18:39:29:38:3c:8b:0a:63:89:ce:f9:10:c6:b0: e8:53:8c:50:53:24:1d:8e:ce:cf:f2:29:79:ab:6a:bb:ca:fd: b8:96:5a:82:f9:7e:8b:ac:08:3c:a9:be:9d:d5:8e:b6:86:b8: 34:8c:ee:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcgexdLBr8B248ZrSCJq5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYxMTE1MDAwMTA0WhcNMjYxMTE2MDAwMTA0WjAzMTEwLwYDVQQD EygyOTczZjFmN2I3ZTM1NDk5NmU0YWRjMTU5M2JkYjZlYTYzYjYyMjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7eFneJ0KrnFFMvdtkKdUMa5m/2G d52pcBRbxom0AboHsXuG+20NGqeQ3PVkqwCeQrrb5tDe+jIAaS11m4MX/lYo6Z7P 1kXxeuRTb0GAu2s3N028ZCYqeND7XxyVe9JhLoBIFgAlJtTeo/+fESAhhCP3relq fS5zBu5gA6afHcCWnngpq5jCvnr8QW+8EgakYdiMlY6tr/Ta+WieKeJrGJQ5EkfX ok5htwqhn//D68VfO6bbzVSBafy+jSG9DTEjsqydY85Ym27whlSmr6pMYhWolIwq P20sig4qhlsDFU4SN/a+JmQeEkaA6kyRQgIov71lC3qe9AWtBeO25kf8RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClz8fe341SZbkrcFZO9tupjtiIdMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0dAQ65d eHO0liVFISh4zmwGo6qaF0CE15L9NZYsgCyFtqi4jo4xZnN8MeXCy5KObfPuuL5E 3G700hpMNT9hzD89qAPykXgMtN7o/AiU29yK8CzINtFOpWTfE+1t7uaQ9Pb5KJ7R rSPhnWjF6g6FvSRftLqoV8bP9yupp2QtF80ikEYnR/YyyrnzCz6v0ZvxpuAe4q8W WY6VaBJpfhvNJNEbpmosxaMfuS5InS9q9c3Cv6rGDi/7K5BIe2E3PNOB3ny4VFco a+Hb6hg5KTg8iwpjic75EMaw6FOMUFMkHY7Oz/Ipeatqu8r9uJZagvl+i6wIPKm+ ndWOtoa4NIzu0g== -----END CERTIFICATE-----Generated at Sun Nov 15 11:28:31 2026 by rpki-client