$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: RlspCYvi1Sl4xZdeWHh8hfEBs4dahC/0bbF0cHwQZzY= Subject key identifier: 8D:6E:FB:65:9D:28:8A:1A:43:B3:55:6E:20:8B:59:6B:DE:61:F4:30 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 01A1DDCB9E991F7B771B93A8AB96F0D05AF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 16FC Signing time: Sun 15 Nov 2026 06:01:11 +0000 Manifest this update: Sun 15 Nov 2026 06:01:11 +0000 Manifest next update: Mon 16 Nov 2026 06:01:11 +0000 Files and hashes: 1: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 2: DsbHtEcqU3PS3p9q1gisL2Hcjp0.roa (hash: OlwiCj4gxUNj19rZKoZ1B3evvTyWNLzwiB1WvnSMcAI=) 3: G_q5f4vw9sXuTqx5koUR1CtdghA.roa (hash: /DXlK/XppxG3EnWKLZh5jMXkLtlLrmR+JVAULY2Fmuw=) 4: Kh4_VoB6YEgaSwRCsMKIhi6qzp4.roa (hash: e0GnvRoQCozfmziXi7HSJRfK79f9SZF+NnjU+2fBto0=) 5: VbMi_wHP2Osb2Lj2_Em7nJaGNqg.roa (hash: DXcUvI/zDgzBNbnxDQ9BXaRP7H2Z8Bv9bfXDaGGxiyQ=) 6: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 7: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 8: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: qDFE7hDVzeOLwGWcPKWFpnPLOZnXKcroHKcj/m6cQRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:cb:9e:99:1f:7b:77:1b:93:a8:ab:96:f0:d0:5a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Nov 15 06:01:11 2026 GMT Not After : Nov 16 06:01:11 2026 GMT Subject: CN=8d6efb659d288a1a43b3556e208b596bde61f430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c8:12:f6:40:93:2c:2c:f7:fe:b6:42:87:21: 26:37:d2:89:4e:cb:65:10:ff:ef:1c:6d:1d:39:7f: bd:8e:2c:d8:c8:16:96:6d:8b:dc:26:4f:d6:8c:a7: 91:7a:35:1f:1c:39:0d:3c:e4:76:ed:d1:f2:64:d9: 10:cd:9f:0e:39:4b:ba:af:6f:d2:01:34:d5:0f:bc: 8f:fe:70:bd:b0:1b:00:f0:3d:2a:68:c9:54:e3:38: 06:50:57:ef:14:42:8b:32:21:3d:fe:f7:96:81:68: 06:86:72:a1:f7:f0:9c:de:21:3c:00:9a:75:a0:f1: 0e:ee:e6:d1:ec:c3:89:f9:2f:9c:90:a9:0b:4e:72: b6:b7:7e:64:9e:b7:80:a4:d9:8c:a4:1c:bc:ec:c7: 8a:c9:3c:65:30:15:e2:ae:fc:57:6e:af:18:dd:cc: 80:c4:d1:13:ac:af:a4:40:3b:ee:6b:10:1c:c5:a5: 2b:eb:f0:0e:c4:fd:67:00:1e:0b:34:2e:ac:a2:54: d4:ef:21:a3:32:8b:06:f4:42:b1:1d:74:75:58:48: a7:a2:94:4a:c6:e1:b0:d1:f3:cf:92:0e:91:77:fd: 4c:4f:a0:e7:91:37:b2:76:99:b6:5b:a8:f9:9f:03: e5:b4:74:01:8e:f1:37:e4:86:84:77:22:16:b4:fe: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6E:FB:65:9D:28:8A:1A:43:B3:55:6E:20:8B:59:6B:DE:61:F4:30 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3c:a8:6e:13:37:d3:85:76:02:a0:99:6e:3d:cb:11:3b:9e: 73:87:cd:14:09:1b:a0:ca:07:4a:b5:4c:9b:35:00:63:67:55: 52:03:e6:46:fe:d6:3e:77:25:5f:76:08:29:44:82:e1:f9:96: bd:ad:8f:65:b2:71:68:9e:91:e8:c1:cf:9a:3e:92:ca:8e:09: a9:0a:87:55:a2:21:09:eb:b3:4a:af:33:5c:4a:4a:2d:c5:24: 4d:b2:fa:76:95:b1:4b:fd:d5:4a:48:54:89:ac:ab:07:dd:c0: 5b:9e:14:a9:ee:2c:da:e5:a6:94:07:e1:79:45:ba:4c:d7:d6: 22:8c:f5:7e:fd:f3:c9:73:b6:08:a9:2a:8a:9f:59:33:16:55: f3:13:bc:a0:7e:85:f2:ea:4a:f5:e9:c4:f0:19:ca:31:f0:50: a0:6d:5a:a4:2e:29:02:5c:29:1b:dc:57:9e:0d:47:c3:9f:96: 12:00:9f:6d:d2:b3:f2:05:6d:db:c1:be:c2:f6:af:3d:c9:8b: e4:8d:49:d1:9d:25:aa:a4:a0:c3:9f:4b:15:32:67:da:26:48: 2f:33:ac:6d:9d:b5:96:c7:c0:55:7d:e9:ea:23:dd:4b:a4:bb: 8d:11:3f:e0:77:d8:df:1f:98:2c:3a:13:bb:b6:a4:c2:57:1f: 45:cf:18:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdy56ZH3t3G5Ooq5bw0Fr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYxMTE1MDYwMTExWhcNMjYxMTE2MDYwMTExWjAzMTEwLwYDVQQD Eyg4ZDZlZmI2NTlkMjg4YTFhNDNiMzU1NmUyMDhiNTk2YmRlNjFmNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MgS9kCTLCz3/rZChyEmN9KJTstl EP/vHG0dOX+9jizYyBaWbYvcJk/WjKeRejUfHDkNPOR27dHyZNkQzZ8OOUu6r2/S ATTVD7yP/nC9sBsA8D0qaMlU4zgGUFfvFEKLMiE9/veWgWgGhnKh9/Cc3iE8AJp1 oPEO7ubR7MOJ+S+ckKkLTnK2t35knreApNmMpBy87MeKyTxlMBXirvxXbq8Y3cyA xNETrK+kQDvuaxAcxaUr6/AOxP1nAB4LNC6solTU7yGjMosG9EKxHXR1WEinopRK xuGw0fPPkg6Rd/1MT6DnkTeydpm2W6j5nwPltHQBjvE35IaEdyIWtP45DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1u+2WdKIoaQ7NVbiCLWWveYfQwMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTyobhM3 04V2AqCZbj3LETuec4fNFAkboMoHSrVMmzUAY2dVUgPmRv7WPnclX3YIKUSC4fmW va2PZbJxaJ6R6MHPmj6Syo4JqQqHVaIhCeuzSq8zXEpKLcUkTbL6dpWxS/3VSkhU iayrB93AW54Uqe4s2uWmlAfheUW6TNfWIoz1fv3zyXO2CKkqip9ZMxZV8xO8oH6F 8upK9enE8BnKMfBQoG1apC4pAlwpG9xXng1Hw5+WEgCfbdKz8gVt28G+wvavPcmL 5I1J0Z0lqqSgw59LFTJn2iZILzOsbZ21lsfAVX3p6iPdS6S7jRE/4HfY3x+YLDoT u7akwlcfRc8YSA== -----END CERTIFICATE-----Generated at Sun Nov 15 15:07:33 2026 by rpki-client