$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft File: M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json) Hash identifier: MItT0XN7xYN+IMy33EHQ1QySYlfzDcr2ipM2KcaoC18= Subject key identifier: 8A:0E:4E:05:60:25:0A:4C:0A:DD:46:94:E4:B9:55:5F:8F:BC:6C:87 Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Certificate serial: 01A1DF156C3E29D5627F34AB26C0E9356928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft Manifest number: 0826 Signing time: Sun 15 Nov 2026 12:01:25 +0000 Manifest this update: Sun 15 Nov 2026 12:01:25 +0000 Manifest next update: Mon 16 Nov 2026 12:01:25 +0000 Files and hashes: 1: 7nAXiiWwMrKC__gT-hUF2XA-Iso.roa (hash: vcK2N0Exej7cew/p43KdNyk4JPLcOKiM3s2+QDUjk38=) 2: EanwknH-Ak4vBBh9YJ_fxi2fRQA.roa (hash: tg/+gqvSgGm28cNvWzD2/XkgejjExo7u4D/5lyQvIcY=) 3: F6lbxX3aQsTs2CgIaSrcru61Nkg.roa (hash: xDbeN/l1tsv2dlE9muWhGH3qIwH6FbQpQRsMOywBxk0=) 4: HDL7QEjQcIV9He-UwhPi0SouhL8.roa (hash: ZztdDOgzEN9dNTEZkWBgPftrnAXZ9jSKZQu/htJHnCM=) 5: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: R6VskVk9N5Pc+Un47kFfMocK82dWTrQy0423hCwDZ00=) 6: WqDS95-He-yk3t24qKJI-_SLkPk.roa (hash: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs=) 7: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (hash: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0=) 8: faLPN_S_WjaTJHL5obkgUoA9YU0.roa (hash: 9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=) 9: tkxYbwLzW57rtbTL3HAb4gik620.roa (hash: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU=) 10: v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa (hash: gPHxfBPLjS7r3KK8sjMCL/yxvco773JImBamks13aRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:15:6c:3e:29:d5:62:7f:34:ab:26:c0:e9:35:69:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Validity Not Before: Nov 15 12:01:25 2026 GMT Not After : Nov 16 12:01:25 2026 GMT Subject: CN=8a0e4e0560250a4c0add4694e4b9555f8fbc6c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:25:10:8f:06:98:92:a5:72:a6:61:c9:91: b0:db:30:ea:bb:02:03:4f:e6:52:d9:1d:1a:7e:1c: 40:21:fe:4e:67:2f:5f:77:9d:2e:1b:a3:1d:35:c3: 72:90:46:83:15:00:fa:3c:2f:84:ef:4f:87:98:8a: 4a:7d:6b:2f:67:ec:aa:bf:3f:42:1d:69:e6:d0:d9: 1a:7a:75:d4:99:6b:63:dc:af:f5:77:f1:c9:3f:c3: a4:f5:d3:1a:d7:84:f3:2d:dd:23:05:63:3d:9d:32: 4b:8e:e4:17:b1:1d:ce:c9:3a:42:5a:db:d8:c8:57: 51:31:33:73:c2:46:02:bf:73:e2:e4:2e:54:72:ac: b3:58:e8:a3:2a:e9:53:10:04:08:c9:4e:f0:af:60: ef:c7:30:e8:8c:2c:76:e1:32:cb:24:3c:7e:df:de: 95:8d:63:ca:7a:88:92:d8:80:90:7e:1d:57:e2:55: 65:28:aa:e0:3a:a5:9b:da:87:72:36:a5:08:45:c4: 29:f0:a9:24:e4:71:ef:0c:b7:b7:04:c3:0d:c8:25: 91:de:c7:01:1b:dc:9f:65:37:0a:24:3a:5f:d8:f8: 23:e6:90:cb:a1:f5:6a:80:3b:4e:d9:30:d0:65:dc: a6:3e:ba:ae:29:90:6a:7f:ba:36:3e:48:08:e0:bd: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0E:4E:05:60:25:0A:4C:0A:DD:46:94:E4:B9:55:5F:8F:BC:6C:87 X509v3 Authority Key Identifier: keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a1:65:21:d1:06:79:42:e5:d9:30:9b:94:de:b2:c1:ff:a3: 66:4f:d0:5f:d6:23:5c:14:ad:19:8f:81:45:1b:2a:d4:7e:c5: ac:65:b6:03:92:42:45:7c:98:45:c5:1a:9b:f2:f7:6b:ce:47: a9:be:10:6a:e3:5c:8d:3a:95:e5:d9:27:c5:e2:7b:20:c2:86: 94:00:8c:32:2f:f6:23:00:37:25:d6:fb:dd:ec:08:28:17:60: 54:39:11:8a:29:22:d3:90:d9:1a:dd:29:43:01:ba:60:5e:60: 27:67:3c:98:08:e5:69:63:75:eb:cb:95:7f:73:67:e3:f4:34: 0a:d7:9a:4e:49:e7:f5:5e:c5:5d:17:4a:34:9d:49:84:71:db: d7:c0:60:ba:36:9e:18:4d:17:61:a0:c1:d0:f5:42:0e:43:dd: 78:40:82:ac:ab:44:51:98:dd:99:91:8f:ed:d0:5e:53:91:3f: ab:30:08:df:6e:1f:39:bd:7b:d0:9f:dd:26:93:2a:ff:b5:6e: c9:7b:4b:d9:56:9b:69:82:7e:71:ec:61:61:f6:b3:1a:13:11: bc:00:32:f1:77:87:6c:3f:c9:c7:a4:67:10:12:ce:e8:f2:9d: de:24:b4:06:c0:9f:ea:2e:33:d6:23:54:53:e8:1f:9d:01:6e: 3c:82:81:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfFWw+KdVifzSrJsDpNWkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk N2RhMDMwHhcNMjYxMTE1MTIwMTI1WhcNMjYxMTE2MTIwMTI1WjAzMTEwLwYDVQQD Eyg4YTBlNGUwNTYwMjUwYTRjMGFkZDQ2OTRlNGI5NTU1ZjhmYmM2Yzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJclEI8GmJKlcqZhyZGw2zDquwID T+ZS2R0afhxAIf5OZy9fd50uG6MdNcNykEaDFQD6PC+E70+HmIpKfWsvZ+yqvz9C HWnm0NkaenXUmWtj3K/1d/HJP8Ok9dMa14TzLd0jBWM9nTJLjuQXsR3OyTpCWtvY yFdRMTNzwkYCv3Pi5C5UcqyzWOijKulTEAQIyU7wr2DvxzDojCx24TLLJDx+396V jWPKeoiS2ICQfh1X4lVlKKrgOqWb2odyNqUIRcQp8Kkk5HHvDLe3BMMNyCWR3scB G9yfZTcKJDpf2Pgj5pDLofVqgDtO2TDQZdymPrquKZBqf7o2PkgI4L1oTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoOTgVgJQpMCt1GlOS5VV+PvGyHMB8GA1UdIwQY MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt ZWZkMjBmNmMyZWMzLzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqFlIdEG eULl2TCblN6ywf+jZk/QX9YjXBStGY+BRRsq1H7FrGW2A5JCRXyYRcUam/L3a85H qb4QauNcjTqV5dknxeJ7IMKGlACMMi/2IwA3Jdb73ewIKBdgVDkRiiki05DZGt0p QwG6YF5gJ2c8mAjlaWN168uVf3Nn4/Q0CteaTknn9V7FXRdKNJ1JhHHb18Bgujae GE0XYaDB0PVCDkPdeECCrKtEUZjdmZGP7dBeU5E/qzAI324fOb170J/dJpMq/7Vu yXtL2VabaYJ+cexhYfazGhMRvAAy8XeHbD/Jx6RnEBLO6PKd3iS0BsCf6i4z1iNU U+gfnQFuPIKB2g== -----END CERTIFICATE-----Generated at Sun Nov 15 17:52:34 2026 by rpki-client