$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json) Hash identifier: HBfHAN6IFnktE52iiyHBPQGqDMzuMGwmeZ7Wd5lcmPw= Subject key identifier: 24:F8:C4:8B:9B:4F:C5:F1:E2:7B:D5:F9:BE:06:0A:85:8C:6F:08:71 Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 01A1DCB8C93C4581095E7C9CECC569E7D577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft Manifest number: 1B2E Signing time: Sun 15 Nov 2026 01:00:59 +0000 Manifest this update: Sun 15 Nov 2026 01:00:59 +0000 Manifest next update: Mon 16 Nov 2026 01:00:59 +0000 Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=) 2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=) 3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: sbkEhzPGJ3axTh9s7H5yNZ7NjqIQECBP1fZog25HUNA=) 4: IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (hash: 1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=) 5: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=) 6: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (hash: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=) 7: X01sfTguEZRlbViMsVbdLRhWtwM.asa (hash: ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=) 8: ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (hash: hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=) 9: bA3yjJwl1AoWb5ZSApplbi62cEo.roa (hash: EVY143W/KLkepJyc97USm8u+uCYkV4P9AAFIgzkG+0o=) 10: bFkaQMapJshDo2hgXls_q4kXpds.asa (hash: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=) 11: dAyDeUp51SPbYS8fxmJNG0482Ng.asa (hash: 6/i5RS8ShUMSXbYzZlVqHGyL8kobjym9yxw0gdprH7E=) 12: jenAviEaQmIbPMWtx5o0NZSX9oU.roa (hash: ceLGOQlTo6t7tHbWcNV1MEtUJJ8tvpbbdLO95JOmpEM=) 13: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=) 14: plAxktASIb4YACIP-hXXxq1vBPQ.asa (hash: YS1t0iZi+tG5TRUgxqQhrFYuMkSCCdM92QwP+HVjJ7w=) 15: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:b8:c9:3c:45:81:09:5e:7c:9c:ec:c5:69:e7:d5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Nov 15 01:00:59 2026 GMT Not After : Nov 16 01:00:59 2026 GMT Subject: CN=24f8c48b9b4fc5f1e27bd5f9be060a858c6f0871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:04:ab:21:a8:a0:1f:43:8c:fc:1c:df:36: 2c:a6:42:cc:6a:c4:c5:88:25:47:13:c1:dc:fb:99: ff:a5:de:e8:9e:af:42:ea:3c:5a:54:7f:90:e6:0b: 01:c1:22:8b:3a:50:d3:47:85:b6:a0:dd:13:68:f9: 60:06:12:fe:fa:ec:cf:0e:4f:0c:3b:ea:95:b4:3b: 25:0d:4c:b0:45:23:07:0c:1f:c0:78:2e:8e:34:f1: 61:35:57:59:4a:3a:4f:08:b2:20:af:da:dd:a4:cd: 63:8d:7a:20:37:de:e4:95:cb:a0:2d:5a:25:4d:b0: 63:8d:51:d9:c5:15:63:0b:bb:6e:96:21:6b:9d:25: c7:ef:64:38:6d:be:32:4c:3c:9b:74:61:ca:72:fa: 86:fd:42:fe:ae:11:78:d8:7c:4e:8e:f7:de:74:8f: 56:a1:ae:63:52:7c:01:08:18:0d:a4:d5:c1:86:11: e2:78:a7:c8:2f:e1:7d:e6:bf:c4:30:db:9c:2b:66: 3b:05:40:f6:68:27:1a:b1:9a:52:7b:17:36:de:c2: e4:6c:f0:d6:a2:aa:ea:1b:62:d5:b3:d7:d5:0b:a2: 5f:52:25:6f:96:f3:66:55:be:d6:0a:fc:52:a4:41: 23:24:3a:cf:56:aa:9e:a9:1e:f1:77:a8:64:6e:91: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F8:C4:8B:9B:4F:C5:F1:E2:7B:D5:F9:BE:06:0A:85:8C:6F:08:71 X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3c:7f:16:e8:e1:07:41:21:d2:d7:aa:a2:1d:4a:fe:43:0c: 86:49:ba:21:35:c6:92:98:93:d3:b2:18:57:2e:00:81:b9:5c: 1d:48:3e:06:77:8c:9d:51:fb:69:90:a7:32:da:8f:e8:1d:ae: 81:d5:c0:1c:67:c5:bb:33:39:3d:9a:ce:6f:72:1a:ab:d3:e7: 46:a2:83:44:39:b2:0c:f8:ec:12:57:87:f5:a6:ad:ac:fc:2d: 8f:20:80:47:89:b8:43:93:eb:aa:e0:7b:35:7b:f2:e7:30:d3: ce:69:a2:e9:86:09:50:03:04:e6:57:91:05:da:9d:ad:6b:c8: 0b:73:71:a1:77:b7:f7:af:31:10:7e:07:02:ac:9b:64:0c:aa: 29:3b:d8:7f:72:6f:3b:04:38:6f:7f:aa:ff:35:70:be:01:0c: 23:93:b1:a9:0b:f0:13:f0:5f:30:bb:fc:a8:8f:f8:7c:3a:1b: 8e:21:cd:70:55:46:d4:cf:f6:75:61:95:50:db:64:92:5a:09: 30:98:1b:4e:a5:6d:66:d4:fe:3a:62:8a:c5:0e:f6:f5:2f:28: 34:c6:b8:18:32:ab:08:0e:22:9a:9d:13:ae:d6:30:44:e6:75: d2:a5:6e:b7:71:30:b9:fc:c6:64:67:31:fe:c5:37:e8:27:dd: bd:da:4b:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcuMk8RYEJXnyc7MVp59V3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYxMTE1MDEwMDU5WhcNMjYxMTE2MDEwMDU5WjAzMTEwLwYDVQQD EygyNGY4YzQ4YjliNGZjNWYxZTI3YmQ1ZjliZTA2MGE4NThjNmYwODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyEEqyGooB9DjPwc3zYspkLMasTF iCVHE8Hc+5n/pd7onq9C6jxaVH+Q5gsBwSKLOlDTR4W2oN0TaPlgBhL++uzPDk8M O+qVtDslDUywRSMHDB/AeC6ONPFhNVdZSjpPCLIgr9rdpM1jjXogN97klcugLVol TbBjjVHZxRVjC7tuliFrnSXH72Q4bb4yTDybdGHKcvqG/UL+rhF42HxOjvfedI9W oa5jUnwBCBgNpNXBhhHieKfIL+F95r/EMNucK2Y7BUD2aCcasZpSexc23sLkbPDW oqrqG2LVs9fVC6JfUiVvlvNmVb7WCvxSpEEjJDrPVqqeqR7xd6hkbpFaywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT4xIubT8Xx4nvV+b4GCoWMbwhxMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzx/Fujh B0Eh0teqoh1K/kMMhkm6ITXGkpiT07IYVy4AgblcHUg+BneMnVH7aZCnMtqP6B2u gdXAHGfFuzM5PZrOb3Iaq9PnRqKDRDmyDPjsEleH9aatrPwtjyCAR4m4Q5PrquB7 NXvy5zDTzmmi6YYJUAME5leRBdqdrWvIC3NxoXe3968xEH4HAqybZAyqKTvYf3Jv OwQ4b3+q/zVwvgEMI5OxqQvwE/BfMLv8qI/4fDobjiHNcFVG1M/2dWGVUNtkkloJ MJgbTqVtZtT+OmKKxQ729S8oNMa4GDKrCA4imp0TrtYwROZ10qVut3EwufzGZGcx /sU36CfdvdpLOQ== -----END CERTIFICATE-----Generated at Sun Nov 15 11:11:56 2026 by rpki-client