$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: q8G0ISeOrPatVYDnShfPj1MaezfMYyaKchG4Gxjr9+w= Subject key identifier: FE:4A:BA:41:94:47:49:61:84:9E:AD:A7:7A:4D:24:20:76:BD:B8:73 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 01A1DE3964B163C1161E2052326272F8E6A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0A53 Signing time: Sun 15 Nov 2026 08:01:05 +0000 Manifest this update: Sun 15 Nov 2026 08:01:05 +0000 Manifest next update: Mon 16 Nov 2026 08:01:05 +0000 Files and hashes: 1: 3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa (hash: Olnc6TsFMf/lto0XZ/IXXC3VCnMMv6kWoXMR1B4Qilk=) 2: 6MROEyhCnQoDzzzLgMuqSp8WWW4.roa (hash: U2ETKysUzgCpOSOJ/qWrrLMDT5gA1Ft4qr0viHcAPBA=) 3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 4: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 5: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=) 6: IkJkaYlpuoQ1WcQmLqEIuT8sH1U.roa (hash: CE0DNuD4D/yJeIEVszLgwcKw03DllVEK/8YMYt+DCPU=) 7: JDO-N7w0Fa52JLt8GtUoT0ncalo.roa (hash: tzG8NZ2N7BL/I/RQ8HSnEMaZNAihPmVOsUxkrVflzJg=) 8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 9: SLSMQo99u24Epa9sZ-35n9YwQ1g.roa (hash: XooSTwMO75gSa1IEA9BRq8RFfpIDKjq4YYrz5/hOOfU=) 10: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 11: WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa (hash: 1qEbFKCQOOiO55/Z1NIx4D98L9A9xFqq+s2fxS0t2Dk=) 12: Y71JSOza9l99m2LkV-uZBA1qT4k.roa (hash: uUv6/DaQOMG287F0xQdwh94hSrXdbb62+qEzPa5p0o4=) 13: ZyKwbccyVfxFWStWGmNBds2K9AE.roa (hash: C74fBVKBp8P7zkaen+ft55vIs/92CO4DbwapwB4BQdE=) 14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 15: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 16: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: 4BaRod2MLfOpBRhBot8tTugluRfSQGH4qxwZpC9nxtM=) 17: hElXO4jKei6eIioTYSRMuOo2tUQ.roa (hash: 9Afji0izgzI/c8xd125iBWAIgGantscuH5lpVBS/wmo=) 18: kpma4xqgzEEytLfdE-9LrfzAf44.roa (hash: vgqc9IvueEpWlOduqOn71G/7ZnxuYFS4IHbsYXqcCYM=) 19: mE5DN157XZf7igs7Qp5o_mpfYoY.roa (hash: OK0s5oWuJ3ewBiMYcBCwgUB2nCoplpS+aaStS616Tlc=) 20: o6aWDaWLtgSw0yJqWoQY-eXoND4.roa (hash: 7Qa4eT/ei1RS6VIpX+STSPoJ4j3+B1WFU+LfkEGMwlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:39:64:b1:63:c1:16:1e:20:52:32:62:72:f8:e6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Nov 15 08:01:05 2026 GMT Not After : Nov 16 08:01:05 2026 GMT Subject: CN=fe4aba4194474961849eada77a4d242076bdb873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:61:d3:cd:d8:71:6a:0e:92:06:71:a4:c2: a9:39:4e:90:20:67:c4:5f:ca:e1:6c:77:f8:f1:64: 9c:6a:b5:72:f2:ec:ab:88:04:28:53:51:91:fd:74: ad:4b:fd:8b:5e:f3:f7:80:45:6e:9c:a3:a9:8d:c8: b5:a5:83:83:16:22:8d:6e:0f:b1:f1:86:dc:20:d9: 38:f0:e1:df:fe:8c:9c:a5:4a:c8:96:b0:35:f8:f6: 27:ee:f2:9d:4e:76:62:cd:37:9c:f9:53:af:7d:9c: 99:e4:da:ad:2a:27:80:a7:2e:1e:cc:eb:4d:9d:e7: f7:7d:c4:ce:c3:a5:78:b2:26:30:8d:0b:17:0a:0f: 63:3f:70:5f:01:a2:4f:39:32:8f:05:9e:b6:7e:68: 8b:67:bc:ff:f7:ea:e7:ac:f9:d3:47:b1:d0:45:bb: 74:12:bb:81:0b:85:f6:f0:5a:9e:33:6e:d5:bc:ad: 4c:8e:e8:76:53:51:10:5c:bf:da:a2:1d:0c:d0:01: ad:9a:57:a3:e8:b9:68:7a:91:77:d1:be:8e:7f:f7: 03:38:1c:b6:74:f9:43:37:62:32:5b:6f:0b:2e:0c: 93:2d:50:0e:5f:ba:a4:b3:07:dc:49:b0:a9:01:f1: 56:10:14:26:f3:e7:e4:71:ab:85:5a:67:29:af:13: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4A:BA:41:94:47:49:61:84:9E:AD:A7:7A:4D:24:20:76:BD:B8:73 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:3b:a3:99:69:01:f4:6e:e4:de:e5:04:9f:0f:72:3d:c4:18: 9c:64:b5:a0:0f:7a:81:f8:2b:a0:8a:b6:f0:e8:33:55:7b:9c: 0c:c9:d9:b0:3f:91:fa:82:3b:6a:1f:d5:db:3f:05:f7:ee:62: c8:64:f3:3a:0f:dc:c3:23:06:69:4a:60:77:0d:a5:c1:80:7f: 44:75:63:e8:3d:6a:cb:30:a9:10:f9:d1:d8:5c:40:f7:12:d4: 59:84:9b:c1:57:10:aa:e4:1e:9d:58:8e:ce:99:ec:8f:56:88: 69:df:be:69:42:6e:78:49:e0:a1:c1:ca:51:91:c6:60:5b:39: dd:18:d0:7f:6f:3c:0e:ac:a3:21:ee:cc:53:35:18:35:5b:87: 55:74:d6:b3:ab:19:c8:f5:41:1d:e7:18:07:42:3a:fa:a5:97: 3c:0b:11:7d:cd:40:2d:e8:66:da:1b:9c:d6:2f:a0:60:ba:d1: 39:e4:10:46:bf:76:de:ce:ff:80:66:50:61:c2:7a:5a:e2:7c: e1:90:6d:c1:99:32:e7:a0:fd:3c:d7:31:3a:4a:cd:20:35:14: b0:bf:e7:52:40:f6:f2:a8:5b:8b:05:7d:d8:6c:d1:c8:c7:b8: e8:66:e5:96:2a:1b:25:f7:b6:f5:34:e0:e9:74:f5:e9:7d:1e: eb:fa:4c:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeOWSxY8EWHiBSMmJy+OamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYxMTE1MDgwMTA1WhcNMjYxMTE2MDgwMTA1WjAzMTEwLwYDVQQD EyhmZTRhYmE0MTk0NDc0OTYxODQ5ZWFkYTc3YTRkMjQyMDc2YmRiODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPNh083YcWoOkgZxpMKpOU6QIGfE X8rhbHf48WScarVy8uyriAQoU1GR/XStS/2LXvP3gEVunKOpjci1pYODFiKNbg+x 8YbcINk48OHf/oycpUrIlrA1+PYn7vKdTnZizTec+VOvfZyZ5NqtKieApy4ezOtN nef3fcTOw6V4siYwjQsXCg9jP3BfAaJPOTKPBZ62fmiLZ7z/9+rnrPnTR7HQRbt0 EruBC4X28FqeM27VvK1Mjuh2U1EQXL/aoh0M0AGtmlej6LloepF30b6Of/cDOBy2 dPlDN2IyW28LLgyTLVAOX7qkswfcSbCpAfFWEBQm8+fkcauFWmcprxPmjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5KukGUR0lhhJ6tp3pNJCB2vbhzMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTujmWkB 9G7k3uUEnw9yPcQYnGS1oA96gfgroIq28OgzVXucDMnZsD+R+oI7ah/V2z8F9+5i yGTzOg/cwyMGaUpgdw2lwYB/RHVj6D1qyzCpEPnR2FxA9xLUWYSbwVcQquQenViO zpnsj1aIad++aUJueEngocHKUZHGYFs53RjQf288DqyjIe7MUzUYNVuHVXTWs6sZ yPVBHecYB0I6+qWXPAsRfc1ALehm2huc1i+gYLrROeQQRr923s7/gGZQYcJ6WuJ8 4ZBtwZky56D9PNcxOkrNIDUUsL/nUkD28qhbiwV92GzRyMe46GblliobJfe29TTg 6XT16X0e6/pMnw== -----END CERTIFICATE-----Generated at Sun Nov 15 15:29:53 2026 by rpki-client