$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: NIiDi2ZGh9idhlOXtRyz2abbCjq85gTz0RzfNfVyr2Q= Subject key identifier: FB:38:72:07:DB:5D:77:35:C0:18:68:A3:31:CD:9F:74:DF:61:FE:7B Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 01A1D9EF4659F665AEEF3E12A15A655BB0D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1B22 Signing time: Sat 14 Nov 2026 12:01:39 +0000 Manifest this update: Sat 14 Nov 2026 12:01:39 +0000 Manifest next update: Sun 15 Nov 2026 12:01:39 +0000 Files and hashes: 1: 0ld9oICrjkM9PiOBYi7PkCMaP7g.roa (hash: 7pPoPeKMxfAld72vWaWuaU3WiGoLWbNKS8HJfbCj2GY=) 2: DT8TXPB7Zoh4Y9JFFdsSZ2RIgLg.roa (hash: cdCtaCnFbbokb4IxB6SbsLXr+yswcQckTbmvZnS/sJA=) 3: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (hash: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I=) 4: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: YKWlurlnXWNMJe7g5b/t222hc0vwuqBmM6Lu37FU4Ps=) 5: O2mRnCNeDokP5q-PUWLd28D1SG8.roa (hash: XL7s2EUC28zeBKoJlmCFsu+5IjkYrbxfH3a9YMWon60=) 6: XPPuMgWRNY1QAnjWn2LftTc8cH4.roa (hash: LqWi3Xbli/jxxlx74n8O7L6EJtxaJ1UA0GYHmPMDyEU=) 7: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (hash: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM=) 8: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (hash: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo=) 9: hCjWTJUhp9C-lxxCdRV4Jwzm4mk.roa (hash: ECwHPN5lxdIugX2ttk1L3l/uci2ps9CeCy1VAcBMeQs=) 10: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (hash: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ=) 11: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (hash: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc=) 12: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (hash: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:d9:ef:46:59:f6:65:ae:ef:3e:12:a1:5a:65:5b:b0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Nov 14 12:01:39 2026 GMT Not After : Nov 15 12:01:39 2026 GMT Subject: CN=fb387207db5d7735c01868a331cd9f74df61fe7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:fa:ef:3d:a0:e1:8b:f3:51:44:45:c7:e9: fb:af:5a:bf:d8:29:e3:dc:41:7a:55:93:97:06:92: d1:d7:6c:b5:10:37:25:5a:b2:22:e9:a1:95:c9:13: c8:76:a8:5e:4d:92:70:f4:b6:22:43:ef:eb:30:42: e0:12:5f:a9:35:14:a8:8b:24:8c:f8:2c:c4:52:d7: 0e:47:1b:9a:8f:a5:20:07:25:30:9d:4d:27:11:c7: 47:fd:1b:21:a9:24:95:a4:4b:2b:84:bd:c2:32:b5: 43:c1:e1:99:6a:81:ac:e2:b7:9d:49:5d:f8:96:91: a0:8a:22:ba:fa:47:5c:8e:45:e7:fb:34:e2:ba:b2: 18:60:cf:66:ec:71:75:f7:53:53:04:f2:46:e4:02: c7:55:95:85:7d:fa:e5:91:bf:92:c9:0a:3a:63:8b: c1:a2:8e:eb:ee:39:eb:2d:b4:ae:ac:d5:1f:05:be: d3:f5:2d:fd:8d:b9:4c:58:2d:ac:dc:08:3e:99:8e: 38:b6:44:e0:b3:62:71:64:53:d3:5e:e2:a6:7e:a9: 28:b4:24:2c:13:65:4e:fa:62:89:72:48:8e:c5:d4: 1b:4a:d5:9a:50:2a:cc:fd:18:c0:32:8a:d9:b4:e3: a7:42:08:fd:41:fa:2f:ab:cf:8b:75:52:a7:af:16: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:38:72:07:DB:5D:77:35:C0:18:68:A3:31:CD:9F:74:DF:61:FE:7B X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e4:a4:5c:b5:a5:ad:33:f7:65:c7:c0:79:cb:7b:da:91:84: 2e:4b:9c:37:d7:57:82:2e:57:e5:90:40:c6:fc:91:e6:12:76: cc:71:1e:74:00:c0:db:61:b1:e7:da:74:da:55:d4:33:d2:d8: 26:09:ae:97:33:c5:e3:88:bb:70:b5:2a:fd:c2:2f:03:27:69: a2:d9:d6:78:03:1c:85:1c:c6:ce:ef:19:f6:8a:61:66:9b:68: 0b:71:82:05:cb:c7:2c:b1:15:e6:ea:38:b8:ff:33:30:51:32: 55:d2:fb:9b:39:42:9c:a1:6b:7c:77:b3:f0:63:27:4f:ae:36: d6:3f:77:e9:bf:c5:e4:9e:8f:64:ea:2a:b6:c5:d5:c2:87:38: 3e:b9:49:e8:61:9f:70:2a:19:48:56:b4:ea:b6:39:2b:45:8b: 88:6a:8e:ae:ea:78:c7:43:2c:3a:3b:e3:24:53:de:20:59:06: 8a:6b:ef:fb:57:e4:cc:9a:59:d7:aa:2e:aa:34:57:ea:ad:8f: 95:0e:4e:a1:0e:69:b1:9c:9c:2d:5a:f9:fa:6e:49:06:eb:6e: 5d:4e:af:f7:f1:ce:b4:4e:96:f9:ad:95:49:ba:76:69:9b:27: 44:09:02:92:b3:39:32:3d:48:3c:f8:00:7d:3f:8f:f6:57:9d: 73:a0:20:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHZ70ZZ9mWu7z4SoVplW7DTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYxMTE0MTIwMTM5WhcNMjYxMTE1MTIwMTM5WjAzMTEwLwYDVQQD EyhmYjM4NzIwN2RiNWQ3NzM1YzAxODY4YTMzMWNkOWY3NGRmNjFmZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMr67z2g4YvzUURFx+n7r1q/2Cnj 3EF6VZOXBpLR12y1EDclWrIi6aGVyRPIdqheTZJw9LYiQ+/rMELgEl+pNRSoiySM +CzEUtcORxuaj6UgByUwnU0nEcdH/RshqSSVpEsrhL3CMrVDweGZaoGs4redSV34 lpGgiiK6+kdcjkXn+zTiurIYYM9m7HF191NTBPJG5ALHVZWFffrlkb+SyQo6Y4vB oo7r7jnrLbSurNUfBb7T9S39jblMWC2s3Ag+mY44tkTgs2JxZFPTXuKmfqkotCQs E2VO+mKJckiOxdQbStWaUCrM/RjAMorZtOOnQgj9Qfovq8+LdVKnrxa7CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPs4cgfbXXc1wBhoozHNn3TfYf57MB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOSkXLWl rTP3ZcfAect72pGELkucN9dXgi5X5ZBAxvyR5hJ2zHEedADA22Gx59p02lXUM9LY JgmulzPF44i7cLUq/cIvAydpotnWeAMchRzGzu8Z9ophZptoC3GCBcvHLLEV5uo4 uP8zMFEyVdL7mzlCnKFrfHez8GMnT6421j936b/F5J6PZOoqtsXVwoc4PrlJ6GGf cCoZSFa06rY5K0WLiGqOrup4x0MsOjvjJFPeIFkGimvv+1fkzJpZ16ouqjRX6q2P lQ5OoQ5psZycLVr5+m5JButuXU6v9/HOtE6W+a2VSbp2aZsnRAkCkrM5Mj1IPPgA fT+P9ledc6AgaA== -----END CERTIFICATE-----Generated at Sat Nov 14 20:58:59 2026 by rpki-client