$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: YZgQdgsJSyB2jrWUP+9js7PSED3wn5gpOOuewnI2mx4= Subject key identifier: FC:E7:74:9D:71:7A:FE:0E:91:FE:D1:E7:38:4B:BC:58:ED:35:A0:5A Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 01A1DBA64F6B0738C02A984F6BD2C74D49E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0FF9 Signing time: Sat 14 Nov 2026 20:01:11 +0000 Manifest this update: Sat 14 Nov 2026 20:01:11 +0000 Manifest next update: Sun 15 Nov 2026 20:01:11 +0000 Files and hashes: 1: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=) 2: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: w8NRraxGFxMOnna87ZZaqzvM7ldcM7+JOH4NtiM/ZQU=) 3: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=) 4: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=) 5: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=) 6: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=) 7: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=) 8: _Mqv_JYiF8FH_vcrUd6z5iBTnaA.roa (hash: wgYSTyAlZdDyfFsa4EFJ55y+CMO3Ta5R634E3wfbtNM=) 9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=) 10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=) 11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=) 12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=) 13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=) 14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=) 15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=) 16: uNRa4zAzcrZDnOveV1CME0I3J4w.roa (hash: OR0NOoULuJszdvy9CmwD+cwSKbUxjzkFUFY9AzTSQAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:a6:4f:6b:07:38:c0:2a:98:4f:6b:d2:c7:4d:49:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Nov 14 20:01:11 2026 GMT Not After : Nov 15 20:01:11 2026 GMT Subject: CN=fce7749d717afe0e91fed1e7384bbc58ed35a05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:be:ab:9c:78:9c:59:8a:8b:f5:07:d2:83: 83:d5:ef:6e:9d:35:7d:47:b5:d5:c0:ae:bd:0f:8a: 47:77:17:fb:ef:56:93:04:57:00:0e:b1:67:53:b4: 12:46:d1:f7:de:15:97:09:f8:fe:4c:d2:c5:f3:f7: 49:cb:0a:30:15:91:57:de:87:ec:94:e8:ad:34:97: 9d:a1:7e:b7:4c:93:b3:2c:c8:67:b0:48:8b:8e:59: d9:b0:40:c1:da:55:5e:98:09:7c:70:86:9e:ab:ee: 87:12:12:6c:c5:74:ab:db:40:14:da:ef:b3:d4:d3: b5:af:68:0d:2e:be:66:6b:36:4e:3e:c9:12:12:84: 22:cc:fc:3d:37:ca:88:57:4a:73:21:b4:a4:43:7b: c3:25:ca:ce:00:8f:06:4d:8d:af:ab:67:2e:e3:d7: 22:e1:23:b9:e3:1f:e5:34:ff:f4:fa:08:64:74:c1: b4:91:5b:90:58:12:c6:e5:2d:ef:25:06:35:8d:30: 85:ed:d9:d0:f8:d9:0e:03:a8:db:0c:04:9f:65:39: a2:e1:25:ba:40:62:ee:d3:d6:81:6c:1d:76:f8:10: 10:1e:74:10:6e:c5:cc:45:a8:ad:66:e7:32:b1:bb: 97:ab:f4:7f:df:ef:f7:a0:f9:45:e8:79:ce:ee:25: 7c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E7:74:9D:71:7A:FE:0E:91:FE:D1:E7:38:4B:BC:58:ED:35:A0:5A X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ba:07:cd:b7:ad:cd:66:54:9e:3f:ab:4f:2f:1a:a8:75:c7: ff:ca:32:10:a3:0b:0a:37:39:3e:12:3d:91:85:22:03:4d:b3: 87:23:82:7e:e0:89:17:4d:58:58:36:4b:ea:34:66:75:0f:ab: 22:d6:92:73:cf:8c:de:70:35:7b:2a:c5:37:ad:16:1e:18:b9: 21:8d:6d:e8:d0:f7:d1:f3:9c:9b:a0:e6:47:2e:64:0d:ed:30: 28:18:75:75:6b:da:57:bb:27:85:e1:cb:0e:77:29:4a:e6:54: 1f:20:5c:7e:ba:c4:a6:d0:a6:29:85:a2:b1:13:c8:71:dd:c5: 0e:11:ff:dd:69:fd:df:4c:59:ba:53:6f:79:9d:f4:ba:f6:c4: e7:ac:eb:b1:c2:bc:4b:d5:54:2c:40:d8:f1:30:0c:7e:73:dc: e3:cf:bb:24:75:7b:95:ed:05:84:44:c1:b4:19:f8:e5:45:56: 2e:36:9a:ce:ad:08:d7:fb:e7:bc:81:36:14:00:4f:c3:dd:6a: a6:76:57:03:f2:ea:e1:78:6a:2f:53:34:bd:37:a5:2b:f8:80: b3:d3:0a:8c:62:91:0b:98:5f:05:68:75:bb:b0:8d:87:18:9b: ac:c5:e1:03:c4:68:46:b3:a3:9c:38:37:6c:85:3b:77:f3:19: e6:85:66:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbpk9rBzjAKphPa9LHTUnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYxMTE0MjAwMTExWhcNMjYxMTE1MjAwMTExWjAzMTEwLwYDVQQD EyhmY2U3NzQ5ZDcxN2FmZTBlOTFmZWQxZTczODRiYmM1OGVkMzVhMDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhe+q5x4nFmKi/UH0oOD1e9unTV9 R7XVwK69D4pHdxf771aTBFcADrFnU7QSRtH33hWXCfj+TNLF8/dJywowFZFX3ofs lOitNJedoX63TJOzLMhnsEiLjlnZsEDB2lVemAl8cIaeq+6HEhJsxXSr20AU2u+z 1NO1r2gNLr5mazZOPskSEoQizPw9N8qIV0pzIbSkQ3vDJcrOAI8GTY2vq2cu49ci 4SO54x/lNP/0+ghkdMG0kVuQWBLG5S3vJQY1jTCF7dnQ+NkOA6jbDASfZTmi4SW6 QGLu09aBbB12+BAQHnQQbsXMRaitZucysbuXq/R/3+/3oPlF6HnO7iV8BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzndJ1xev4Okf7R5zhLvFjtNaBaMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7oHzbet zWZUnj+rTy8aqHXH/8oyEKMLCjc5PhI9kYUiA02zhyOCfuCJF01YWDZL6jRmdQ+r ItaSc8+M3nA1eyrFN60WHhi5IY1t6ND30fOcm6DmRy5kDe0wKBh1dWvaV7snheHL DncpSuZUHyBcfrrEptCmKYWisRPIcd3FDhH/3Wn930xZulNveZ30uvbE56zrscK8 S9VULEDY8TAMfnPc48+7JHV7le0FhETBtBn45UVWLjaazq0I1/vnvIE2FABPw91q pnZXA/Lq4XhqL1M0vTelK/iAs9MKjGKRC5hfBWh1u7CNhxibrMXhA8RoRrOjnDg3 bIU7d/MZ5oVmrQ== -----END CERTIFICATE-----Generated at Sun Nov 15 00:38:55 2026 by rpki-client