$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: Dx4lwRqC3WuIn232M3zUKUU6er5HDqZLLWDiIiN/RTo= Subject key identifier: 66:A9:80:E5:D4:83:38:1D:95:A2:95:12:56:1E:F8:34:85:9D:35:13 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 01A1DEA7C9C9222D1FF0147F55E957A890A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 0770 Signing time: Sun 15 Nov 2026 10:01:40 +0000 Manifest this update: Sun 15 Nov 2026 10:01:40 +0000 Manifest next update: Mon 16 Nov 2026 10:01:40 +0000 Files and hashes: 1: 1-zfvela3gTtSU0Zxk_qmMqiWGy0.roa (hash: OQAOpz82CSjUEMjy/IwaBDn+AK3uYtqBMtS2qxamScE=) 2: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: zEArCh64phIOKmeQFnTjcz11fV0/tRefWSQodnfb2UY=) 3: 5n4uvrNtnkO4eGR8ZtmlT5JQXXE.roa (hash: 4cYHd40RL707GScqgxSvABvoDBiTFeHb4+nk74FKrXY=) 4: 6_nEtbPOwnDXFy-8i5b9sl1ByGc.roa (hash: AMDpLbysh7NtuUVsc212fbCqdT4L3j/7tc3OE68YULA=) 5: CdzVuM6ZXGSgS-oy7RFzeXJ9WlU.roa (hash: jZmHzmIti2/sfHOys0zGFB6/31QnBt12jOPIEVDQ3cM=) 6: CrW9ZFEu_ubyCIwDNHfbMmEm8_4.roa (hash: CoIfQY/dERGkEZqUC7VJDG45PPQ2aitZM1yEhEK7rw4=) 7: Fy9btS_Xl1WHjSD-O0bOCd0v6Mw.roa (hash: kRh8wQy+oUjV6uFCUFsK1u5mlPGaDKHy0Hj96EJwTnQ=) 8: H-cWC9ou8amcyDtm_Er5Ir2CAaY.roa (hash: qbj77jSjmLfyPcN2gS2PMgfbDV/QJ5wjcIJib5rjtjs=) 9: HfyiA3qMMgthCiAtVkrq3IorlAk.roa (hash: LervCJ25fqeRyBKWsLpvvCwqR29nSFeUcDwqoID7bEQ=) 10: IVP2X2Ml3jBVvGUwCpKVtNW1Y8E.roa (hash: BNy+KRg3HWL2yqFxbwhr+ZvtfuO5Rbmpf/Od+Lx66xw=) 11: LIcMvwPugJQU_LYHSt5M1lSY9u8.roa (hash: 2bsVvmekIjn9p5pVi0F6wzFS3Aol7c3PmpGHqiiBOSI=) 12: PWXLGFUvMY1UI-395763nGu6uVc.roa (hash: 8X0Ypb+xJ/Mk1C3wBYo3kkCsGdpXdNvNMNjZbMPIQGs=) 13: PpX6Lsph6rTaL76Tj2A4yQr961M.roa (hash: HFF+cIFVcNuSSJ91Ot+1zWOlMJiB1K2AUufg3nSBkcY=) 14: Q6S6DEWeTdaNo4RLFHSga5G24TE.roa (hash: /vqg99pETnOiWOT15E0Qy+efouY/dSqrRAnrIsKDpi8=) 15: QlL0Y25_hyW9Mg3_d6IyQ67j-yU.roa (hash: kqgkoq+qNYXeszkJJClKYoG0p0XyZIflUkxXiyvRKL4=) 16: SswvJjX5xiAHsDcAwhfJqsa2qks.roa (hash: t5yoTlXXpwy00bGCjGToJ93kuqRl5AuFbdBx3Xb369o=) 17: U1aab2MxbI-i9hTo8lZRAZ5efAU.roa (hash: APjZ82UUn6DyAQqo5G03W1Ri2QoSsmgGJvi9teJXAnw=) 18: VCw4N4Zs1DGjtZzf3wBgxZrel_k.roa (hash: 5kAoOyOQgv/RLB12MJcY8aU26UzS1uKwmDAxZLgrp74=) 19: VFKYGbtDQ1bUQgl92_YK3nad1OA.roa (hash: mu9a3/zSN0CIbPlp77dGZueSRdi6VVjgbCTp0rD4UCE=) 20: VQFfUHJmqtguiLFi_HjQJFAVesA.roa (hash: EDL9YB1yCUjm8A5ZWpWGxyV2v4JCtaqq3eo8x6vRPco=) 21: VktbYjlefqpu29SjO1yJxvF-b0Q.roa (hash: H3AVJ4ctdSWTlP3EEmexkpARxHd5AlfrMOcP2H0qzAo=) 22: bOGK-i6sQG7WCHvE4FXVJT58zlU.roa (hash: tayfvyx217Xws5KJCeCymFPS0aqS71FkBV3qyWTO9JA=) 23: cI-L7pef_AdHI_QGBFTE5PiVJ0U.roa (hash: jgu+5sRPCpckA/cZ1yBuc9ZXcWSw0y0C+/Lk+J+5CkI=) 24: g-Dw0lZsOsb9XuKWb3g0E47UyIs.roa (hash: nsgNEhjHAiGOzBMeJvhHNadyfL9YZc5PQ6L4B/Mp7pU=) 25: j1LzSEEL6EHYhF80H5y7itZGOXo.roa (hash: Pz7sBfOMPMYKcvM5pLopTS3fzHBMOZvBt4M816xNM3s=) 26: lIG1b91dGC5ndWbmzjIp_fubDNE.roa (hash: Bvl3uk2S1zwHFCA6eMLSAsz9eN2bKrsslaZc1w8UTMY=) 27: n2qaysiqOxYybG2o_t96d-JWP-0.roa (hash: eHISssRI0wVI8jcyz3iPD9ed/F8IfOhPuqU8QqlNado=) 28: nOjA58wyDiQ_zRw7avoPEh5_s40.roa (hash: V7B/P97cRl0fsQwMRzVez4oDaZWFnkjVorYQBWfrtpg=) 29: oa1g3ktNX4K7mp_Br7eoXIxGsbA.roa (hash: vcXUPTsZXYoXJi0CFAVUhhZah02o7Zn+vOkwA8OCtpM=) 30: pCxUrX3JS6C-vwjylp3PoHtHz9o.roa (hash: HU3ykSkKtwWdnQCYdZshRCL8vy57v9FukL0OXuPtRS0=) 31: rf9KTHpYwkkNInVQ5EifsWm0nxA.roa (hash: djP7Njwn08dcs5j6JOQWdwZwxz1jVEkhEi92YG/q5uQ=) 32: s7NOa3tdTv46yOJCv92uI2UB4zs.roa (hash: 5hs9AfN14zEIY9p9/O6GJm1GkUBmXkj+TK1asikXhNI=) 33: sWs3EHxESIvJa0Uh3G8COcvMiyA.roa (hash: jR2j9qJQTpd8bBFK20/jOkeYMvAG4fwS19YofWlScGI=) 34: ywDxspqeKC9CCzqlmEIF2r3TdNY.roa (hash: qtsvupq/a57IWARodB+bULoyWuNk27r/rcqzgyaQOS4=) 35: z20v7NWXTSlyldOmDp1NQUYj6l4.roa (hash: G/tYDUVliHysO/VJFXRfx5UhmqtCQvAytpWjsJo8LB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 10:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:a7:c9:c9:22:2d:1f:f0:14:7f:55:e9:57:a8:90:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Nov 15 10:01:40 2026 GMT Not After : Nov 16 10:01:40 2026 GMT Subject: CN=66a980e5d483381d95a29512561ef834859d3513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0c:21:b2:ab:7d:1f:2e:56:9e:66:fe:45:22: d9:3b:ba:b5:af:51:5e:3a:32:be:bc:f0:c7:9b:1d: aa:59:46:6c:7e:ed:04:2e:73:54:f1:d6:08:62:57: b8:1c:66:5a:97:f5:48:08:f7:cd:dc:91:b5:88:0f: 22:53:91:4c:30:e5:dc:c0:51:86:9c:fe:f9:94:55: fd:b5:fa:14:2f:55:3e:06:09:36:87:64:b8:e7:79: 49:cb:c3:f4:87:af:26:55:d8:24:0c:fd:bd:19:50: e2:96:20:2d:cb:0b:d5:65:eb:ea:32:19:97:57:20: 2d:06:cb:51:6a:a3:33:f0:83:56:78:a2:ec:c3:1e: 26:fa:d6:00:0f:23:97:74:a8:e2:ad:59:19:9c:cc: dd:bc:fd:b6:6e:b2:13:37:08:97:e8:3a:0f:fa:32: fd:e3:99:c7:8e:57:f1:e1:66:d7:ef:e8:ad:42:67: 77:71:06:80:82:9e:0c:b5:13:bd:ea:78:47:ec:ae: 6a:87:41:2a:64:cc:75:b0:ef:70:e7:7d:53:dd:3e: 0a:80:9b:42:cc:82:4a:a7:18:d7:35:68:1f:02:25: 56:97:ef:7a:ed:c0:94:e0:11:86:1e:3b:1a:05:e3: e5:fd:87:8b:2f:c6:80:af:d6:1d:34:c2:d8:a3:d3: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A9:80:E5:D4:83:38:1D:95:A2:95:12:56:1E:F8:34:85:9D:35:13 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9d:57:a3:c5:fe:fa:1c:3b:8a:a4:e5:26:e4:f4:61:07:b0: c7:0b:d5:14:4a:af:98:a5:a3:0a:d1:8c:7a:4b:a2:df:00:60: 7b:a5:b2:96:f6:c7:51:ac:e3:f4:b7:22:52:0b:61:65:0b:53: 31:16:98:d6:fb:7c:c7:90:2a:ad:ef:c0:7b:f9:53:df:22:4d: 89:0d:47:28:3c:9d:df:5f:a4:7f:c5:2c:2e:1d:ea:0e:4b:35: 89:5e:21:d0:34:a9:7c:b7:cc:1a:d0:0a:0d:d8:0a:bc:37:21: ab:04:76:1f:cd:36:8c:07:5f:12:81:54:46:36:1b:3c:6f:52: eb:5d:88:e3:ca:95:f6:2d:85:7d:65:7f:0c:3a:f6:a4:d3:1a: 16:dc:10:16:3c:6e:32:3d:fb:de:73:ac:15:fe:71:8d:89:2a: a1:0f:7f:38:a9:0d:57:32:55:78:7d:ea:6f:24:2f:1f:5a:e6: 2e:8d:0a:3a:4c:cc:b6:e1:5b:70:99:50:3a:46:43:a4:dd:96: 5b:d5:9c:87:99:b1:28:52:7a:aa:32:a2:cb:45:60:45:6a:8d: a2:68:f8:8f:2c:51:17:67:7a:f1:2b:c1:ef:5f:0e:5c:c4:bb: 82:b8:df:3e:23:b1:07:17:e6:fa:b5:1d:3f:93:e1:2a:70:4b: bf:84:96:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHep8nJIi0f8BR/VelXqJCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYxMTE1MTAwMTQwWhcNMjYxMTE2MTAwMTQwWjAzMTEwLwYDVQQD Eyg2NmE5ODBlNWQ0ODMzODFkOTVhMjk1MTI1NjFlZjgzNDg1OWQzNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwwhsqt9Hy5Wnmb+RSLZO7q1r1Fe OjK+vPDHmx2qWUZsfu0ELnNU8dYIYle4HGZal/VICPfN3JG1iA8iU5FMMOXcwFGG nP75lFX9tfoUL1U+Bgk2h2S453lJy8P0h68mVdgkDP29GVDiliAtywvVZevqMhmX VyAtBstRaqMz8INWeKLswx4m+tYADyOXdKjirVkZnMzdvP22brITNwiX6DoP+jL9 45nHjlfx4WbX7+itQmd3cQaAgp4MtRO96nhH7K5qh0EqZMx1sO9w531T3T4KgJtC zIJKpxjXNWgfAiVWl+967cCU4BGGHjsaBePl/YeLL8aAr9YdNMLYo9O2cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGapgOXUgzgdlaKVElYe+DSFnTUTMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZ1Xo8X+ +hw7iqTlJuT0YQewxwvVFEqvmKWjCtGMekui3wBge6WylvbHUazj9LciUgthZQtT MRaY1vt8x5Aqre/Ae/lT3yJNiQ1HKDyd31+kf8UsLh3qDks1iV4h0DSpfLfMGtAK DdgKvDchqwR2H802jAdfEoFURjYbPG9S612I48qV9i2FfWV/DDr2pNMaFtwQFjxu Mj373nOsFf5xjYkqoQ9/OKkNVzJVeH3qbyQvH1rmLo0KOkzMtuFbcJlQOkZDpN2W W9Wch5mxKFJ6qjKiy0VgRWqNomj4jyxRF2d68SvB718OXMS7grjfPiOxBxfm+rUd P5PhKnBLv4SW2g== -----END CERTIFICATE-----Generated at Sun Nov 15 21:22:11 2026 by rpki-client