$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: YmQnPpTdiGt2TBNHuIjBnX5gFqwri9ZJZOWrWdioY40= Subject key identifier: D5:AB:EC:C0:2E:A1:25:9E:15:BA:55:E7:1A:06:10:D6:C1:B6:BB:93 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 01A1DD5E82234835F04E5ED683D2C0C206B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 1B13 Signing time: Sun 15 Nov 2026 04:02:00 +0000 Manifest this update: Sun 15 Nov 2026 04:02:00 +0000 Manifest next update: Mon 16 Nov 2026 04:02:00 +0000 Files and hashes: 1: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=) 2: 44tbRBm3zSZMoCst6WkxTKufMIE.roa (hash: 5gCjJr0c5JiHRvqLpZ00s+SrgcQffTqmoJaDyLE8c74=) 3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=) 4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=) 5: 8LiMsP5teezdiR8Ux5IeGxcNTiI.roa (hash: khbWKbmjcKHJ7DJ+ikEmWXgiSZycFmJGOh34yHtbZ5A=) 6: 8hx1gAb9JQ9Jt_adfPfauV83-lw.roa (hash: 5Yu25cs4dK7+vmfRVz+5LCQcuI9l90lTLui83bcVIAU=) 7: KUG1dAS56WFyM7HpXaZJm_9NZcI.roa (hash: bDHk7s2ypHa/VmIhy+huenZ6Yha/61UKd4WW960McEc=) 8: NIP6OMbGVO_LoBDEsbJ6LixxNnc.roa (hash: ZLVjxa/g6JD46/uf8XHrDkESKrByzEppqfl3vJn4wSg=) 9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=) 10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=) 11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=) 12: cPgrNdoKH1-9MCFvIQZW29dJV4I.roa (hash: Agd9dlngcCbnIAH8YM69F8AtPUMcQnsKqjikW40jBFo=) 13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: 9IL9eS/CbNYsyzsKtTFcQDq/jli2esbasKSQZwXyeaY=) 14: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=) 15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=) 16: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=) 17: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=) 18: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 04:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:5e:82:23:48:35:f0:4e:5e:d6:83:d2:c0:c2:06:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Nov 15 04:02:00 2026 GMT Not After : Nov 16 04:02:00 2026 GMT Subject: CN=d5abecc02ea1259e15ba55e71a0610d6c1b6bb93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:b7:68:39:83:9e:e4:c3:6d:33:f3:88:d9: 03:52:9b:f6:ee:3d:d6:d1:04:97:05:3b:5e:78:27: 70:cf:7a:68:41:18:69:b3:3b:34:d0:88:42:cb:9e: 44:15:d4:10:c9:25:36:13:cd:7c:5b:3c:ca:2f:3b: 9f:2e:6a:15:88:09:8b:5e:55:4c:e3:bd:36:fd:8b: 34:87:2e:dd:75:f6:66:c0:48:4d:0c:29:b6:e0:25: 7e:5f:fd:2a:05:a5:f1:96:1d:93:e2:2a:2d:69:84: 49:12:c0:5c:a5:e8:fc:84:00:55:ea:3c:38:ba:e5: e5:fc:97:cb:97:95:c9:dd:88:45:96:90:36:4b:ed: 7c:3c:49:5f:65:b7:b2:3b:0a:70:cc:2a:44:e5:f2: 2e:6c:ab:42:43:95:47:04:af:b2:89:42:b2:fd:06: 12:71:f5:a4:46:c7:cc:90:5e:df:39:1d:ee:cf:aa: c2:17:07:4f:b9:4d:2c:b3:e8:1f:46:a0:58:db:7f: 40:92:0f:71:37:f6:e8:e4:e5:ee:d5:31:d6:55:45: 70:3b:73:49:23:28:c8:13:aa:00:60:8f:25:00:98: 01:ff:30:66:29:42:a6:7b:63:7a:de:3c:7d:6f:40: e5:bf:a3:ef:b7:ad:de:23:46:c8:03:68:2c:5a:a5: 1d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AB:EC:C0:2E:A1:25:9E:15:BA:55:E7:1A:06:10:D6:C1:B6:BB:93 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6e:38:01:15:41:47:b1:3c:f4:be:85:70:88:4f:e4:6e:92: e0:75:06:fc:98:98:c2:b2:ab:fd:d1:b3:48:ec:54:58:ba:05: 27:bc:7b:a6:d3:d8:1b:49:dc:07:8e:33:6b:06:c5:3b:d6:53: d4:da:d7:2d:01:b0:fe:ab:3f:41:ea:1e:b3:b6:91:58:f1:00: 22:af:e7:4a:12:d4:02:d7:f9:a2:a8:65:f5:b4:e3:49:7b:6a: 04:a2:41:f0:40:3a:b0:cf:5d:cd:56:91:7b:e9:49:09:91:55: 96:9e:99:c8:e9:d7:73:92:4d:a3:db:3b:78:6c:53:f4:19:a6: 8b:9c:c5:f7:e8:6f:a0:20:61:cd:d3:c5:58:7a:08:aa:66:0d: 9b:1e:70:69:54:d6:d4:77:38:4e:75:a4:be:d8:83:b6:5f:0b: ff:db:b3:5e:3e:da:58:6a:c9:2c:65:00:84:bc:30:53:7f:41: 0f:3d:dc:31:d9:11:ac:ae:fb:63:b0:5e:ff:c4:83:a2:17:1d: f6:11:ed:ae:25:f1:e2:9d:46:2c:d1:f7:64:62:e2:fc:73:72: c8:25:7e:5c:52:a1:b5:57:82:cc:b6:07:cb:e6:17:9d:7b:05: 42:ce:49:99:16:f4:6a:0a:bc:8e:f2:e3:4c:41:80:7d:f3:ab: 57:f7:00:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdXoIjSDXwTl7Wg9LAwga3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYxMTE1MDQwMjAwWhcNMjYxMTE2MDQwMjAwWjAzMTEwLwYDVQQD EyhkNWFiZWNjMDJlYTEyNTllMTViYTU1ZTcxYTA2MTBkNmMxYjZiYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W23aDmDnuTDbTPziNkDUpv27j3W 0QSXBTteeCdwz3poQRhpszs00IhCy55EFdQQySU2E818WzzKLzufLmoViAmLXlVM 4702/Ys0hy7ddfZmwEhNDCm24CV+X/0qBaXxlh2T4iotaYRJEsBcpej8hABV6jw4 uuXl/JfLl5XJ3YhFlpA2S+18PElfZbeyOwpwzCpE5fIubKtCQ5VHBK+yiUKy/QYS cfWkRsfMkF7fOR3uz6rCFwdPuU0ss+gfRqBY239Akg9xN/bo5OXu1THWVUVwO3NJ IyjIE6oAYI8lAJgB/zBmKUKme2N63jx9b0Dlv6Pvt63eI0bIA2gsWqUdIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWr7MAuoSWeFbpV5xoGENbBtruTMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgG44ARVB R7E89L6FcIhP5G6S4HUG/JiYwrKr/dGzSOxUWLoFJ7x7ptPYG0ncB44zawbFO9ZT 1NrXLQGw/qs/Qeoes7aRWPEAIq/nShLUAtf5oqhl9bTjSXtqBKJB8EA6sM9dzVaR e+lJCZFVlp6ZyOnXc5JNo9s7eGxT9Bmmi5zF9+hvoCBhzdPFWHoIqmYNmx5waVTW 1Hc4TnWkvtiDtl8L/9uzXj7aWGrJLGUAhLwwU39BDz3cMdkRrK77Y7Be/8SDohcd 9hHtriXx4p1GLNH3ZGLi/HNyyCV+XFKhtVeCzLYHy+YXnXsFQs5JmRb0agq8jvLj TEGAffOrV/cA1w== -----END CERTIFICATE-----Generated at Sun Nov 15 11:34:16 2026 by rpki-client