$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json) Hash identifier: lYLYQz5LMdAWMX4LOaQyRsWMDfwCzTtTHiJHeHrtPuQ= Subject key identifier: 33:98:85:5D:01:00:EB:00:9B:79:1B:A2:07:A8:17:1B:32:38:D5:B9 Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Certificate serial: 01A1DE70FB56BB33BB76B82C0A5CAA165AC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft Manifest number: 1B09 Signing time: Sun 15 Nov 2026 09:01:48 +0000 Manifest this update: Sun 15 Nov 2026 09:01:48 +0000 Manifest next update: Mon 16 Nov 2026 09:01:48 +0000 Files and hashes: 1: 8PG-fi4UKZTsI-qGra5FYLxhK7U.roa (hash: rVcMkzlcbjAZCYKt1vWuh1f3Uw3Bkd84bPp/2fCkd84=) 2: A93LUZzCr5_sazdEgDFTgKile6M.asa (hash: zgXo+gjZzlhWgPLBhvJQaTFz+Muh5NX2fhlsEdJ64QI=) 3: BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa (hash: UQ8CMhjpjjRCrwKSEiPQZMVJiMOKt9f34DLWWqnIsNo=) 4: GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa (hash: 3EWNe3rvlVZaJrxvof33Dkt8YZC4xAKJeeMy9djaF9g=) 5: INU4IhQdA3I64nfOMs3M07ApBVg.roa (hash: fPvKXjy0z+MbzXxFB2wActV92uNgLTmulsDE8gFm+mw=) 6: WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa (hash: f7yhgzYGC0HsMyQiPjUzXb1Tizgt5BdNWAmq8zA+cRk=) 7: YImS7kjgDf5YTcBIRlmdj0CvE4A.asa (hash: O6Bi3pj3WDXePg+kjBrdA4E0znBwPa2ZyhQu5RJRQ6c=) 8: bt4XElFmmymOYPm9YwLV1WhS8dg.roa (hash: elowfO4U8unek9TrOUffWVUXwXcPjKzkg7IwSpkvbEk=) 9: gyLKXkXRz48b_JyrcotRubrVz8Y.roa (hash: ygEJxWsADXdbRBqANcORtqCY24UFLYSPOImjlQWVkW8=) 10: koMvYt8aNKSc3t25Ezi11xtC4so.asa (hash: eAjXIHrVrpNbrIugRIkc8cGQl0R/hrkFaZn8iPvT3ZE=) 11: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: tEeoP1JNLMB5YNOXnHey4l2ztp0P973Ni0c/4NLeV5A=) 12: pVmVj_eoX5arXwOMP1Rpu_8xmws.roa (hash: mDgYxH3BYVa951ExbQ3NML3WlRu0oKWIghRQSPiHpSA=) 13: t69G6046oJPcpKsUHSI_uSZkrCI.asa (hash: +W6pzrsRCteaA0enmsli0oPPqSWwp20k7YSFOaqRm14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:70:fb:56:bb:33:bb:76:b8:2c:0a:5c:aa:16:5a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Validity Not Before: Nov 15 09:01:48 2026 GMT Not After : Nov 16 09:01:48 2026 GMT Subject: CN=3398855d0100eb009b791ba207a8171b3238d5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b0:3b:7f:cb:2e:c7:de:f9:78:44:4e:6d:b8: c7:77:f9:a1:d5:db:ad:81:8a:f8:fa:5d:5a:25:de: 12:79:3b:ce:9a:75:d2:76:19:e9:62:8e:44:2a:1c: c1:ec:0c:fa:33:0a:1e:40:a4:e8:de:e3:0b:e5:a3: 98:98:f2:c6:41:9a:a7:78:ac:7b:a1:54:37:d8:4c: 77:33:73:33:75:86:46:cc:b1:d2:18:1e:85:1c:ad: b9:64:08:d5:8d:41:43:02:ce:3f:42:1e:19:02:db: 2a:6e:22:38:8a:5f:a1:ea:bd:3e:63:d1:2e:67:ec: 53:da:b0:3d:df:b3:e9:06:67:0a:e7:98:38:79:e7: 2a:3b:e4:be:55:32:0d:77:4a:87:ad:30:ca:fd:77: 08:91:6f:bd:6f:b3:13:27:ce:6a:3d:90:77:25:01: 61:65:a6:91:3d:03:e1:ab:4a:61:a1:3f:4a:a4:ff: 4e:31:2b:d9:78:c9:e1:a9:2a:2f:13:57:8c:66:7f: 06:5a:3b:b7:4a:b7:1f:9d:07:91:86:d9:b4:09:fb: 40:78:7c:6c:7f:7e:bd:8f:1c:ee:f4:d8:0e:b5:6c: ae:f0:d1:51:00:b0:d3:36:05:13:92:ad:2b:54:0c: a2:d9:ef:91:e7:d8:a6:52:92:d1:6c:d5:a4:f6:47: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:98:85:5D:01:00:EB:00:9B:79:1B:A2:07:A8:17:1B:32:38:D5:B9 X509v3 Authority Key Identifier: keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:20:11:5b:94:01:ba:05:bc:21:31:f7:a9:88:77:9e:9f:e3: 04:e0:65:ac:ce:0d:65:f0:9f:d9:73:30:bc:1e:39:44:c1:3c: 11:a2:8e:9e:39:ad:18:c5:b2:2e:3b:87:eb:ba:30:a2:14:46: 5b:52:c7:9d:e4:20:8c:b2:68:ec:24:cf:92:9a:d7:52:48:33: f0:c7:e6:ca:42:47:c1:99:c3:19:d4:c4:fa:8c:d4:59:19:e9: ef:67:77:91:cf:d4:ab:fa:43:ad:83:32:d7:9f:eb:e7:f7:9f: 26:92:4f:ca:51:f9:a2:27:a1:69:db:8b:e1:e5:df:0e:32:9b: 8f:3d:21:f6:f9:24:20:8e:ce:da:28:61:bb:f5:6e:39:0b:45: 4a:07:98:5b:9c:ec:ab:b9:3f:20:2e:c2:a6:f8:e9:5b:e8:45: 77:97:f0:7c:49:c7:e1:94:9b:0a:a4:e3:25:fb:8a:90:ed:80: 40:b9:b0:21:a4:8b:92:3a:d3:78:c0:e9:9d:02:be:ac:a4:77: 3e:d1:af:d6:6b:27:43:75:be:e9:a6:08:04:a2:ff:d1:53:bd: e3:44:32:70:81:8e:50:be:28:db:4b:a8:dc:11:81:22:f2:df: 6d:f5:c5:6e:80:35:15:30:60:a4:4f:36:1e:97:59:88:68:27: 32:d1:b1:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHecPtWuzO7drgsClyqFlrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk NThjNDYwHhcNMjYxMTE1MDkwMTQ4WhcNMjYxMTE2MDkwMTQ4WjAzMTEwLwYDVQQD EygzMzk4ODU1ZDAxMDBlYjAwOWI3OTFiYTIwN2E4MTcxYjMyMzhkNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bA7f8sux975eERObbjHd/mh1dut gYr4+l1aJd4SeTvOmnXSdhnpYo5EKhzB7Az6MwoeQKTo3uML5aOYmPLGQZqneKx7 oVQ32Ex3M3MzdYZGzLHSGB6FHK25ZAjVjUFDAs4/Qh4ZAtsqbiI4il+h6r0+Y9Eu Z+xT2rA937PpBmcK55g4eecqO+S+VTINd0qHrTDK/XcIkW+9b7MTJ85qPZB3JQFh ZaaRPQPhq0phoT9KpP9OMSvZeMnhqSovE1eMZn8GWju3SrcfnQeRhtm0CftAeHxs f369jxzu9NgOtWyu8NFRALDTNgUTkq0rVAyi2e+R59imUpLRbNWk9keBgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOYhV0BAOsAm3kbogeoFxsyONW5MB8GA1UdIwQY MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt N2QxNmI5MGRiZTcyLzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSARW5QB ugW8ITH3qYh3np/jBOBlrM4NZfCf2XMwvB45RME8EaKOnjmtGMWyLjuH67owohRG W1LHneQgjLJo7CTPkprXUkgz8MfmykJHwZnDGdTE+ozUWRnp72d3kc/Uq/pDrYMy 15/r5/efJpJPylH5oiehaduL4eXfDjKbjz0h9vkkII7O2ihhu/VuOQtFSgeYW5zs q7k/IC7CpvjpW+hFd5fwfEnH4ZSbCqTjJfuKkO2AQLmwIaSLkjrTeMDpnQK+rKR3 PtGv1msnQ3W+6aYIBKL/0VO940QycIGOUL4o20uo3BGBIvLfbfXFboA1FTBgpE82 HpdZiGgnMtGxDw== -----END CERTIFICATE-----Generated at Sun Nov 15 16:26:26 2026 by rpki-client