$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: hjInRkCNLhGBoLMmueT/BWrLtaqsToDK7qsvHi/wNlk= Subject key identifier: 8A:69:19:5A:86:59:D0:05:D7:0B:08:23:FA:7A:C4:34:B2:95:20:6F Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 01A1DD5DBB26247BFDAD71A997C88DCA100C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1AFD Signing time: Sun 15 Nov 2026 04:01:09 +0000 Manifest this update: Sun 15 Nov 2026 04:01:09 +0000 Manifest next update: Mon 16 Nov 2026 04:01:09 +0000 Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: tdHlffxR0J2j0RjemTWR0XZ/uBNpuX4SDDLL6BKFYJ8=) 3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:5d:bb:26:24:7b:fd:ad:71:a9:97:c8:8d:ca:10:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Nov 15 04:01:09 2026 GMT Not After : Nov 16 04:01:09 2026 GMT Subject: CN=8a69195a8659d005d70b0823fa7ac434b295206f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:f6:24:52:bb:d1:ab:2f:ef:6a:a2:5a:c7: 02:b4:a5:56:80:9d:5c:1d:b2:1b:2e:06:02:d6:d2: c5:f9:9c:0e:ba:54:3b:da:80:c0:14:a2:0c:f1:d2: 19:f3:52:60:a3:99:24:2e:96:ba:cd:39:c8:93:59: 3c:a6:85:2d:f7:2d:4a:e9:08:b7:32:5d:a9:e6:70: 9d:15:26:46:55:c7:cf:76:ef:c8:88:d5:cb:0f:0f: 62:b2:2f:f6:62:f7:70:7a:9a:a5:40:b5:38:f7:3d: ab:38:cf:58:d5:14:a9:80:3d:7a:f0:db:6e:1d:d6: 06:b8:2b:fc:90:65:aa:48:bb:a1:9d:e8:33:12:49: f1:4a:5d:1a:84:b0:63:c3:7a:22:63:cd:4b:f0:bb: 42:6b:34:d6:a8:45:3b:d8:55:a4:21:bd:44:29:c3: 3c:23:7d:86:78:3a:d1:f0:83:56:9e:b3:6d:8a:6f: ce:72:f7:2f:57:ea:55:70:b2:08:51:cc:d4:6b:7b: a3:f7:ce:da:83:90:02:0c:e8:34:4d:ae:5d:32:41: e8:cc:7d:7b:46:17:18:07:6d:5d:23:d8:4d:ac:13: 3b:35:50:bd:67:c6:27:bf:d9:ef:59:0a:0d:50:47: bc:6c:f7:60:c4:09:8b:9f:b6:57:26:68:ee:94:ea: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:69:19:5A:86:59:D0:05:D7:0B:08:23:FA:7A:C4:34:B2:95:20:6F X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:88:e9:d2:3a:6a:93:a7:34:b8:48:d5:19:a3:ac:46:9e:94: c9:26:2a:0e:f6:f6:67:25:b6:15:09:92:08:eb:f4:17:c0:78: 9b:2c:95:73:3e:75:6b:22:65:33:e9:7d:1c:a6:85:91:4f:1b: be:a7:46:6f:4f:1c:4c:3b:19:08:41:9e:48:04:ed:98:36:f2: 54:8e:cb:d5:45:fe:62:40:48:0d:72:48:73:30:a1:92:59:f8: 57:98:8c:ca:48:a9:cd:46:f0:19:20:35:7c:e1:7a:4a:d7:92: 2c:9b:d0:d5:a3:0a:7e:9e:78:cb:02:1e:2c:be:11:7a:86:21: c4:2c:3f:00:b3:89:8f:ac:28:4c:95:c2:31:33:3a:68:6b:d3: 12:de:b9:a6:25:a8:b6:45:70:2a:15:56:59:f0:3f:e6:1e:38: f5:5f:ba:df:ce:74:62:13:8b:dc:24:32:78:29:40:ce:55:9c: 58:62:44:43:91:07:3d:fc:d1:b7:4e:3d:90:33:51:9f:32:f2: da:fd:ae:a7:ca:34:8e:35:12:44:a2:c7:95:93:7f:42:e9:89: 09:c5:ba:1d:0c:ea:57:eb:57:5b:1c:f6:6f:6d:90:97:87:b7: b2:44:6c:0a:70:aa:dd:50:8a:45:df:69:ab:7b:b2:37:f4:9a: c8:fc:4b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdXbsmJHv9rXGpl8iNyhAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYxMTE1MDQwMTA5WhcNMjYxMTE2MDQwMTA5WjAzMTEwLwYDVQQD Eyg4YTY5MTk1YTg2NTlkMDA1ZDcwYjA4MjNmYTdhYzQzNGIyOTUyMDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRj2JFK70asv72qiWscCtKVWgJ1c HbIbLgYC1tLF+ZwOulQ72oDAFKIM8dIZ81Jgo5kkLpa6zTnIk1k8poUt9y1K6Qi3 Ml2p5nCdFSZGVcfPdu/IiNXLDw9isi/2YvdwepqlQLU49z2rOM9Y1RSpgD168Ntu HdYGuCv8kGWqSLuhnegzEknxSl0ahLBjw3oiY81L8LtCazTWqEU72FWkIb1EKcM8 I32GeDrR8INWnrNtim/OcvcvV+pVcLIIUczUa3uj987ag5ACDOg0Ta5dMkHozH17 RhcYB21dI9hNrBM7NVC9Z8Ynv9nvWQoNUEe8bPdgxAmLn7ZXJmjulOritQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIppGVqGWdAF1wsII/p6xDSylSBvMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4jp0jpq k6c0uEjVGaOsRp6UySYqDvb2ZyW2FQmSCOv0F8B4myyVcz51ayJlM+l9HKaFkU8b vqdGb08cTDsZCEGeSATtmDbyVI7L1UX+YkBIDXJIczChkln4V5iMykipzUbwGSA1 fOF6SteSLJvQ1aMKfp54ywIeLL4ReoYhxCw/ALOJj6woTJXCMTM6aGvTEt65piWo tkVwKhVWWfA/5h449V+63850YhOL3CQyeClAzlWcWGJEQ5EHPfzRt049kDNRnzLy 2v2up8o0jjUSRKLHlZN/QumJCcW6HQzqV+tXWxz2b22Ql4e3skRsCnCq3VCKRd9p q3uyN/SayPxL5Q== -----END CERTIFICATE-----Generated at Sun Nov 15 14:17:40 2026 by rpki-client