$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: e6NivJOZJZ4b6FbmgwEpkWcRwJgVt97c9WJHyEp7VXE= Subject key identifier: 60:73:2A:07:55:B2:2D:1B:94:87:3E:A8:63:CE:9A:15:CD:31:97:CF Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 01A1DE399096D693D51158DEDFAB078728CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 1B49 Signing time: Sun 15 Nov 2026 08:01:16 +0000 Manifest this update: Sun 15 Nov 2026 08:01:16 +0000 Manifest next update: Mon 16 Nov 2026 08:01:16 +0000 Files and hashes: 1: 4zlhd3T7GFdkIKEF6KZHQyfPTnk.asa (hash: YzX6YX7nktOuQpPhMEkzBKdyHrmMq1DNMWV2vCKOOkw=) 2: ATIAuCPBI_LAWOPjAXCLbJ9aD7s.roa (hash: eiC3ZcXOxP0CMKdBIuJP/qWSy/G3o5tkMJ/fIVGASg4=) 3: NFl71PMJau8OoVT-JEiyhHLSIZE.roa (hash: 3lKUsUjSDTNYTFbKVTbGnC0rr8zeipPM6TGCp1smax4=) 4: PFVc5BAK70p3Vmf86UTReTfUHsA.roa (hash: tXQaExvpiAm59XavOkqrv4KBgL817eSwAqiUyiq6cLE=) 5: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=) 6: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: oz+VxkxdKFncs0c+I15Sd2Om4UnDoN5A4dLUX+P/L2I=) 7: eFod6uzdySfryPwai9ezZf8hH3Y.roa (hash: 8/pg0XDQR6OqYJInJaNPwGEDH+vJ9p8yqH6MTL5N8w4=) 8: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=) 9: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=) 10: pRAcCWn_fFgijpZckIK6_P-WTBU.roa (hash: b/mtFfZF9kv7GMGhBSqi+Hu4xeMa58fvE72SvExgJmk=) 11: vxSqdv48X8WdmWmETmDsRXRMplY.roa (hash: nBJA73qmFTOHwZPmfsBkJJmaAYUprigjdf6qVQX64x8=) 12: y7l3Ev4wsnTE--LCpQoMAertVjE.roa (hash: tQMxuUKdcVxk9XL6HrE8EIsI5/wvgXmtm22QGxrIGBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:39:90:96:d6:93:d5:11:58:de:df:ab:07:87:28:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Nov 15 08:01:16 2026 GMT Not After : Nov 16 08:01:16 2026 GMT Subject: CN=60732a0755b22d1b94873ea863ce9a15cd3197cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:89:d6:a6:f0:33:1a:12:13:ac:13:37:16: be:f0:68:d9:a4:1d:df:6a:33:34:81:0d:ff:bf:fa: e0:59:50:59:3d:a8:eb:ec:6a:fa:3b:99:08:20:30: 9b:22:6a:c8:b1:65:80:1e:1a:4a:c6:c2:a4:6c:d7: 12:26:f0:c8:b1:c7:36:26:2d:79:ef:38:48:a2:10: 0b:e4:ee:c7:6e:c1:49:ce:a8:1b:d1:40:d6:eb:b2: 4f:ea:fd:95:da:bc:a8:54:de:e6:06:e7:99:d3:a4: 4d:8e:87:f7:54:50:37:d8:38:a4:04:80:c9:b1:8f: 5e:6f:83:41:8c:1f:51:14:bf:c3:95:79:dd:fc:e9: 5a:f4:f6:d2:62:f3:9b:e9:1a:4d:88:25:fa:0d:61: a5:f2:fe:b0:b6:c7:61:bc:3e:26:fd:04:97:40:81: 64:06:cd:be:ac:88:f5:9c:b7:00:03:f5:ee:0e:a5: c5:f9:36:57:0a:9d:cd:6c:1d:cc:9f:c2:44:f5:e3: e7:f0:f5:90:16:8b:79:bc:d8:cb:94:a4:e0:bc:38: c8:d9:99:9f:f8:ea:68:c5:6d:43:15:c0:a9:e6:3e: 26:63:a9:2c:ed:f1:e1:07:fe:e7:4e:9e:de:11:73: 69:6a:d9:d1:39:31:42:f9:44:fc:fa:49:5b:75:0a: 01:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:73:2A:07:55:B2:2D:1B:94:87:3E:A8:63:CE:9A:15:CD:31:97:CF X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ac:b3:01:5c:b8:c7:6e:d2:f4:9f:48:f4:63:c8:46:b7:0b: f2:54:35:90:bf:63:68:38:16:73:1e:29:da:9f:b4:a8:3c:e1: d2:76:a4:95:c7:fa:25:18:30:64:24:21:6c:e5:b8:ef:00:6c: 4a:df:2d:6b:e9:96:30:e5:33:4a:b1:1a:7a:0b:74:00:24:f1: 68:1f:2d:f0:bf:31:ec:95:87:15:51:97:08:e0:25:5f:c6:cf: 22:27:0d:84:df:6a:88:a2:a8:1c:3b:6a:ff:e4:44:3b:04:29: 26:78:bf:1b:a6:38:34:f5:59:cf:33:03:4e:12:f5:fd:82:55: b0:2d:52:d0:6c:c6:87:54:71:d1:57:10:4d:d1:53:e9:f1:b6: 46:e8:0c:c0:be:ce:46:18:ec:11:78:b5:5b:8c:81:8f:1b:5d: 25:ca:57:7f:e9:a1:28:c3:9a:57:d2:ef:01:5d:9c:ec:b1:10: f3:25:d0:28:e3:42:5c:57:87:ff:a1:c4:e2:db:37:22:34:b7: 87:89:9a:f3:4d:bd:fe:5c:77:20:c1:da:db:2e:30:03:4b:72: c5:32:2a:1e:eb:0e:4e:01:e8:6f:f6:1a:2b:58:bd:38:ce:c9: f6:7e:eb:88:18:b3:aa:2d:95:ce:13:24:63:1b:2b:c1:b4:1e: 2e:d7:1d:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeOZCW1pPVEVje36sHhyjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYxMTE1MDgwMTE2WhcNMjYxMTE2MDgwMTE2WjAzMTEwLwYDVQQD Eyg2MDczMmEwNzU1YjIyZDFiOTQ4NzNlYTg2M2NlOWExNWNkMzE5N2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzmJ1qbwMxoSE6wTNxa+8GjZpB3f ajM0gQ3/v/rgWVBZPajr7Gr6O5kIIDCbImrIsWWAHhpKxsKkbNcSJvDIscc2Ji15 7zhIohAL5O7HbsFJzqgb0UDW67JP6v2V2ryoVN7mBueZ06RNjof3VFA32DikBIDJ sY9eb4NBjB9RFL/DlXnd/Ola9PbSYvOb6RpNiCX6DWGl8v6wtsdhvD4m/QSXQIFk Bs2+rIj1nLcAA/XuDqXF+TZXCp3NbB3Mn8JE9ePn8PWQFot5vNjLlKTgvDjI2Zmf +OpoxW1DFcCp5j4mY6ks7fHhB/7nTp7eEXNpatnROTFC+UT8+klbdQoB+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBzKgdVsi0blIc+qGPOmhXNMZfPMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqyzAVy4 x27S9J9I9GPIRrcL8lQ1kL9jaDgWcx4p2p+0qDzh0naklcf6JRgwZCQhbOW47wBs St8ta+mWMOUzSrEaegt0ACTxaB8t8L8x7JWHFVGXCOAlX8bPIicNhN9qiKKoHDtq /+REOwQpJni/G6Y4NPVZzzMDThL1/YJVsC1S0GzGh1Rx0VcQTdFT6fG2RugMwL7O RhjsEXi1W4yBjxtdJcpXf+mhKMOaV9LvAV2c7LEQ8yXQKONCXFeH/6HE4ts3IjS3 h4ma8029/lx3IMHa2y4wA0tyxTIqHusOTgHob/YaK1i9OM7J9n7riBizqi2VzhMk YxsrwbQeLtcdpA== -----END CERTIFICATE-----Generated at Sun Nov 15 14:59:28 2026 by rpki-client