$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: l6kIYQNTn2qnn5BIaAiVAEbYTJ2dmILjyvjGV7aEWgU= Subject key identifier: B6:4F:BF:95:8E:FF:9F:A4:53:FC:8C:27:16:21:01:98:74:58:CB:F7 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 01A1DB014E45D1E0404888357A0043E7C9FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1B1A Signing time: Sat 14 Nov 2026 17:00:58 +0000 Manifest this update: Sat 14 Nov 2026 17:00:58 +0000 Manifest next update: Sun 15 Nov 2026 17:00:58 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: 3BOp-YxEDCV8bR7KeQJ8iZNQrP0.roa (hash: GQeGMsayLy25d3Mzz8Sr1dTr20A68juU11xi9SJ1kwQ=) 3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 4: FpZLKm-2HuyBs9RMbUcbmbopMuU.roa (hash: 3TSsOddEtljGL8cZUDm9jJjfR573z1TKNPv7WQMwWsE=) 5: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: 1IKimmsCjsYZdGSFGwYfQ73xhv5Yf824av+tOAvuau4=) 9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 10: dKLrGCnnWV06iolZrHx2nh4vWJg.roa (hash: IGn7SudG+KQQ8pkrK3hPDPOgmXUuAfTQAKdCH2IyL6I=) 11: mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa (hash: YARnW3hK0MAvwIlgDRpM5wiqLHphA51kgJTHfm2NanQ=) 12: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 13: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 14: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:01:4e:45:d1:e0:40:48:88:35:7a:00:43:e7:c9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Nov 14 17:00:58 2026 GMT Not After : Nov 15 17:00:58 2026 GMT Subject: CN=b64fbf958eff9fa453fc8c27162101987458cbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:2f:93:d8:90:20:f9:2c:fd:03:b9:b6:dc: c7:fb:95:ea:7b:6c:2e:51:60:bb:fd:9c:3d:b3:72: cd:41:e3:f5:5c:8a:39:e4:dc:22:16:b8:8d:de:c3: a7:77:38:d7:a6:b5:05:f5:a9:6c:be:1a:df:e4:ee: 5d:57:64:d8:ef:cd:18:9b:f1:85:da:71:0d:d6:32: 9e:f1:eb:e9:c1:3a:d9:e1:f5:90:1c:ba:31:66:c3: 08:6d:20:bc:65:0a:e5:f7:8c:e3:be:b3:bd:a7:af: c0:91:77:fe:5f:54:b2:df:b1:57:53:42:90:e6:a4: d1:87:22:a8:8b:71:d2:a0:f2:1e:08:bc:7a:cf:8d: 4c:c2:57:fa:fc:d3:b9:16:a6:c0:3c:cd:82:00:74: e4:93:d9:05:8e:a8:9d:2f:34:5b:16:fa:ba:ab:b5: 88:da:83:1f:ae:e2:6b:67:12:37:4d:5f:04:3e:ef: e0:c9:11:54:fa:28:57:5b:91:a4:8d:f4:5e:56:a1: 3d:ca:76:42:43:fc:fe:a6:de:5e:f8:91:83:a8:1d: 48:40:17:21:db:f5:63:d5:50:73:07:65:53:76:9a: 51:e9:28:7b:af:fd:5f:36:fb:4a:0e:2b:8d:54:19: 5b:27:19:4e:2c:b6:eb:77:a9:f6:54:fb:28:e8:9e: c4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4F:BF:95:8E:FF:9F:A4:53:FC:8C:27:16:21:01:98:74:58:CB:F7 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e3:d2:97:32:8b:19:02:68:7b:68:a8:a4:fa:af:fd:63:c2: b3:12:b6:73:12:f4:dc:22:97:03:e9:37:68:8f:36:06:00:4b: 6b:a7:0e:32:67:7c:7f:60:b4:81:32:8b:c2:a5:9e:29:88:42: 4a:74:d7:f7:40:fc:fd:c9:fc:92:e7:b0:cb:13:da:37:77:1e: ba:b8:19:ae:39:62:4b:53:40:71:d2:1c:c0:e5:00:65:b3:73: 97:28:26:1e:65:84:aa:84:03:1b:77:5c:72:4f:c6:b8:83:f8: 46:a0:7d:c8:16:9f:85:04:19:7d:45:31:35:8a:00:91:a1:d5: a4:ef:a1:f9:1e:6e:36:f3:67:44:59:73:fc:3d:10:e1:82:7d: ce:d1:7d:05:29:be:07:e2:5a:98:a9:4c:59:d8:22:b4:0f:84: 87:12:42:fd:b6:e6:de:4e:d3:0d:b4:e6:80:73:28:e1:75:d6: bb:31:fd:f3:6d:a7:82:3f:45:58:66:c4:24:26:53:1d:ef:c7: 5d:c2:e1:c7:a4:44:5c:55:31:22:b0:c5:46:70:94:64:23:a8: d1:3f:8a:1a:32:2e:d6:9b:b0:36:96:c2:ec:2e:5e:63:80:d5: 72:05:f4:2e:8c:5c:a6:2b:17:75:dc:f4:c6:a7:a9:40:a8:3b: d3:00:cc:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbAU5F0eBASIg1egBD58n8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYxMTE0MTcwMDU4WhcNMjYxMTE1MTcwMDU4WjAzMTEwLwYDVQQD EyhiNjRmYmY5NThlZmY5ZmE0NTNmYzhjMjcxNjIxMDE5ODc0NThjYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kgvk9iQIPks/QO5ttzH+5Xqe2wu UWC7/Zw9s3LNQeP1XIo55NwiFriN3sOndzjXprUF9alsvhrf5O5dV2TY780Ym/GF 2nEN1jKe8evpwTrZ4fWQHLoxZsMIbSC8ZQrl94zjvrO9p6/AkXf+X1Sy37FXU0KQ 5qTRhyKoi3HSoPIeCLx6z41Mwlf6/NO5FqbAPM2CAHTkk9kFjqidLzRbFvq6q7WI 2oMfruJrZxI3TV8EPu/gyRFU+ihXW5GkjfReVqE9ynZCQ/z+pt5e+JGDqB1IQBch 2/Vj1VBzB2VTdppR6Sh7r/1fNvtKDiuNVBlbJxlOLLbrd6n2VPso6J7EtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZPv5WO/5+kU/yMJxYhAZh0WMv3MB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduPSlzKL GQJoe2iopPqv/WPCsxK2cxL03CKXA+k3aI82BgBLa6cOMmd8f2C0gTKLwqWeKYhC SnTX90D8/cn8kuewyxPaN3ceurgZrjliS1NAcdIcwOUAZbNzlygmHmWEqoQDG3dc ck/GuIP4RqB9yBafhQQZfUUxNYoAkaHVpO+h+R5uNvNnRFlz/D0Q4YJ9ztF9BSm+ B+JamKlMWdgitA+EhxJC/bbm3k7TDbTmgHMo4XXWuzH9822ngj9FWGbEJCZTHe/H XcLhx6REXFUxIrDFRnCUZCOo0T+KGjIu1puwNpbC7C5eY4DVcgX0LoxcpisXddz0 xqepQKg70wDMxw== -----END CERTIFICATE-----Generated at Sat Nov 14 22:41:04 2026 by rpki-client