$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft File: dWEnxs1ONdmPCkujYs4nMWSXGUI.mft (raw, json) Hash identifier: Dm3/jBEIIg2GH9gD0DeDQG/zLgyhFvgTFn3q6GLDO3w= Subject key identifier: 58:B5:D7:78:BC:42:C3:8F:C3:9C:3A:F0:8A:EF:44:0A:19:86:B9:D0 Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42 Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942 Certificate serial: 01A1DC1482BF98DD3BC0AB1304F7ADA21130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft Manifest number: 0170 Signing time: Sat 14 Nov 2026 22:01:33 +0000 Manifest this update: Sat 14 Nov 2026 22:01:33 +0000 Manifest next update: Sun 15 Nov 2026 22:01:33 +0000 Files and hashes: 1: 8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa (hash: hikhXEetfPVBAmxhlFb36D4+i8o25j1BVGOBTUWKg+M=) 2: C3YXK2axKQQL03NOSjgoGxmbHCY.roa (hash: 44/VCgOyO6dDefynF1MFpTO2jMMF5QpDbEm5R3D+USs=) 3: EIkyoQiaHQwFX0yl3QCnz70zobQ.roa (hash: TreOi4k2EXby9E21239vBZMbdO6JXQp6FeGHzvuMLWY=) 4: Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa (hash: Mn8znbmN/J+MxRnhv+qVpqesl4iX9HnxtbZyYlBp8hE=) 5: JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa (hash: C+pLi3vdcWv6cPyXKJcNebdYvfzTWmkMhrsFshVCZ5g=) 6: JuX1_oQdQQlBpU0uPBnvcWB93j8.roa (hash: FZzogSqVxmvRLnflYQZMrGV7lYMhQxxacof5gMp7tHc=) 7: JvxlDZVo3kDjpCcTuH9rQo7wYxc.roa (hash: 60TmXCWov36c+x54dXI2m7Kjji7w3A2ev0Z1f/72VRg=) 8: KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa (hash: 14lNz1dQBEYnlCIOUgTsdTghcHSUoRp4iObiy4bcNE8=) 9: QAq5GlfcCx2uicmV2oYykBZI8X0.roa (hash: RYaoRoccHB52OTwDIZC5zlhORRPz3CEswpwYiOVL8sQ=) 10: VzIOsWVyN2BeULByH7QYq4dYbRU.roa (hash: 5im045bps89h9fEb8qZ1ReojgLd/qWfVKk9XBFUXXFk=) 11: YnaVL83EnDyPXsVJYrytnkQg5ug.roa (hash: Fnqs3WN0fegg9CdKzgXczrQTO3HUhiFCAXykCpf5Clk=) 12: ae6vfOe_UB5sL59_YmgnYrMvUjY.roa (hash: UYeEVkIJSbDL/qMMyz7MhtUKRqcR+Ervewhouno445k=) 13: dWEnxs1ONdmPCkujYs4nMWSXGUI.crl (hash: utsFJIcvMxeRXGUUluQPNf7sY45f+EWO/vhsIeubs5w=) 14: f3cr88yivxk7Bgm731ewrTZYRmE.roa (hash: KBvRmTnbWWNTOespy+pTserzrz+QFhMRF5nah9piKuY=) 15: gzC5cDg-uB1dPX3dGsiEhW7fD00.roa (hash: vQbqEGTq2U/QqR6/EYIM8eMnRGnw756aRoerxRFX+wM=) 16: hRHkkew4RJW-M5MNhUrCKO9r6iI.roa (hash: xmNN9Qa+v5JHw+YLV1UBftvBMTaZmLQDrk6AQl6upks=) 17: hxrlkQurmLyBhkWbdwa67ZbnUzU.roa (hash: uuNXT/oBMFxKXMlVY9upAUC8wrIrJ/ZYSjthqsU91us=) 18: itsbDKOcLvYTL1wL-BLv0v4776c.roa (hash: ZEawOvc7lWqHf5H65rd92h3sAyZZNHxySs4Mwva3K5c=) 19: ktAcfwaispPfbZlu2PcWbivGiDc.roa (hash: ZS64/IqKl++bCkfIjOUrM7ABwkRqytdLrqhBUhYIiLo=) 20: lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa (hash: qVffLmVLe5PeGI04xzCYu2VBq+NWEXwG8HflD234N+Q=) 21: nwLLLJnWeUevVC1axaBKhwaHn44.roa (hash: 4NEbrk+ehdLN38/5gtivM/dLignUGaWU9EqjJiYFAxw=) 22: nxPePhL8tH3NJQt_EAwpwmwqNH8.roa (hash: 7XrZ+U4ErAZSq+9GdJTbU1fkc22bILilCayfqLewDgc=) 23: oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa (hash: bWjEdLBfsFa6qTx3+Dfw2/yFPlyDQhUFTnCquJm018M=) 24: qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa (hash: wdRWH9AxQCpUQD8h4pLTtws6prvHWse3QWuviHE/f3Q=) 25: sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa (hash: MG+l0cjg9doHuJsEha9w6usP174LVgs0j+PQfMk+iKk=) 26: si7LSWMuuhPUeaWDlYag_JlVhKs.roa (hash: nyL0gUFvTFAGinP9bvtQz8LACtq13OiZAYvgoeGB/C8=) 27: wgx1sqQMaS-I2L2y6gRiBobGYlg.roa (hash: 7eLb6fN+zf4qJF/TPfiQ9qgt4nim0I4itE886o8X68g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:14:82:bf:98:dd:3b:c0:ab:13:04:f7:ad:a2:11:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942 Validity Not Before: Nov 14 22:01:33 2026 GMT Not After : Nov 15 22:01:33 2026 GMT Subject: CN=58b5d778bc42c38fc39c3af08aef440a1986b9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0c:14:c2:23:2c:ea:08:b3:ab:e0:68:c6:35: 45:9e:dd:71:e6:6e:44:95:52:8c:47:14:e8:58:4e: 30:d3:2d:77:56:5c:34:5e:70:2b:49:a4:73:78:4c: 49:ab:11:42:8c:56:b2:92:ba:de:20:ac:13:85:63: 34:16:b5:96:6f:46:01:25:a7:f1:90:ea:6e:fc:0f: 92:dd:62:39:85:2f:7a:4f:aa:a5:cd:20:5a:23:14: 13:7e:45:46:cf:7e:8b:ff:3c:79:3c:cf:8c:b1:e9: 10:8c:d6:ff:e1:4d:87:8b:a2:c6:ca:60:3d:d4:e3: b4:22:0a:6c:7e:8c:31:c6:1b:ee:7b:d4:d7:2d:55: fc:ab:f4:88:32:10:48:f5:b4:19:ab:f0:bd:a5:4c: f4:bf:ba:b2:74:32:a5:c7:50:66:7a:0d:aa:ee:4a: 69:2a:b7:23:7d:03:e7:72:6e:cc:f8:55:86:e6:a5: 91:28:5e:d7:63:dc:57:3c:b3:36:df:cb:73:bb:19: 3d:27:b5:20:55:c4:cc:c2:3c:3d:94:66:5e:a4:5e: ac:14:fd:04:2f:58:c3:a5:24:84:99:f2:75:2a:2e: e8:62:05:b7:cb:03:b1:68:e1:1e:15:5c:7f:a9:76: 25:c2:df:6b:58:96:7f:92:65:8c:55:53:57:09:f9: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B5:D7:78:BC:42:C3:8F:C3:9C:3A:F0:8A:EF:44:0A:19:86:B9:D0 X509v3 Authority Key Identifier: keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:42:50:87:3d:75:64:34:2d:01:ea:2e:52:0e:4e:f6:ca:b4: 97:e6:e4:f5:9b:7d:46:39:f6:50:15:00:d1:26:a5:ee:9a:34: 28:d2:d5:2b:c9:c8:a5:d4:56:35:87:01:e3:68:34:b4:ad:d5: 28:19:4f:3b:c4:d3:35:3f:cc:5e:32:43:2c:b9:9a:9f:9a:14: 79:dd:6c:b6:07:62:61:f4:94:a0:de:54:7e:5f:ad:4d:33:dc: f9:28:72:34:2a:32:59:e2:12:04:9b:3e:b7:20:cc:f9:f0:59: 69:20:b3:65:50:96:16:44:3d:15:8f:ce:ed:30:50:93:38:0b: 42:68:f3:20:0a:10:93:3a:97:b5:94:df:90:7e:65:04:4b:27: 7b:c6:24:87:d0:7e:2b:3d:d2:3d:e3:44:15:40:09:61:00:00: 00:22:22:71:3f:ce:d6:bb:61:b2:b7:c7:0b:dd:53:b8:e0:d2: c6:b0:36:d0:12:23:d9:19:55:2d:ee:57:60:1e:b4:4d:6b:21: d2:b6:f2:da:d5:74:66:78:1c:75:06:97:92:88:aa:9b:bb:a4: bd:e8:e5:2c:f7:23:42:fa:37:b7:14:e8:92:1f:8c:4c:40:fd: b9:b7:46:00:2d:fa:62:1e:4e:20:84:ca:a2:2b:d1:6f:ec:d4: ea:5a:25:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcFIK/mN07wKsTBPetohEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5 NzE5NDIwHhcNMjYxMTE0MjIwMTMzWhcNMjYxMTE1MjIwMTMzWjAzMTEwLwYDVQQD Eyg1OGI1ZDc3OGJjNDJjMzhmYzM5YzNhZjA4YWVmNDQwYTE5ODZiOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAwUwiMs6gizq+BoxjVFnt1x5m5E lVKMRxToWE4w0y13Vlw0XnArSaRzeExJqxFCjFaykrreIKwThWM0FrWWb0YBJafx kOpu/A+S3WI5hS96T6qlzSBaIxQTfkVGz36L/zx5PM+MsekQjNb/4U2Hi6LGymA9 1OO0Igpsfowxxhvue9TXLVX8q/SIMhBI9bQZq/C9pUz0v7qydDKlx1Bmeg2q7kpp KrcjfQPncm7M+FWG5qWRKF7XY9xXPLM238tzuxk9J7UgVcTMwjw9lGZepF6sFP0E L1jDpSSEmfJ1Ki7oYgW3ywOxaOEeFVx/qXYlwt9rWJZ/kmWMVVNXCfmjAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFi113i8QsOPw5w68IrvRAoZhrnQMB8GA1UdIwQY MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkJQhz11 ZDQtAeouUg5O9sq0l+bk9Zt9Rjn2UBUA0Sal7po0KNLVK8nIpdRWNYcB42g0tK3V KBlPO8TTNT/MXjJDLLman5oUed1stgdiYfSUoN5Ufl+tTTPc+ShyNCoyWeISBJs+ tyDM+fBZaSCzZVCWFkQ9FY/O7TBQkzgLQmjzIAoQkzqXtZTfkH5lBEsne8Ykh9B+ Kz3SPeNEFUAJYQAAACIicT/O1rthsrfHC91TuODSxrA20BIj2RlVLe5XYB60TWsh 0rby2tV0ZngcdQaXkoiqm7ukvejlLPcjQvo3txTokh+MTED9ubdGAC36Yh5OIITK oivRb+zU6lolNg== -----END CERTIFICATE-----Generated at Sun Nov 15 09:11:06 2026 by rpki-client