$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: gkJqw281ozQb9nTx8ml1zO0QcxnMLTUpXBHy6FSprlQ= Subject key identifier: A3:6B:01:C5:D3:16:DC:C4:81:1D:61:AA:69:4D:70:6B:EC:44:48:B4 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 01A1DA25ED38CA43FF40E054AA488607BA10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 16E4 Signing time: Sat 14 Nov 2026 13:01:20 +0000 Manifest this update: Sat 14 Nov 2026 13:01:20 +0000 Manifest next update: Sun 15 Nov 2026 13:01:20 +0000 Files and hashes: 1: DaIOsBAUTocNWtQ487tz4YWipHI.roa (hash: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=) 2: JCq6WNuR5hL2h0zeFfwTOCZq2oc.roa (hash: Dvsh/Zg0VzFWJXu5m5Xjv4uJg+a9rFvqtc587AyoLJU=) 3: NDCBEnyPRmZL44OniQi4J9zI5vw.roa (hash: o85Z+7GzvGY1hFupU69gSksl4mzfAm2h7DALWDb/BaI=) 4: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 5: XKGUjZlD7tskIQ5vBU5XUtZBdFU.roa (hash: 4Dp/honokh4JVg16NS/ziIGrcbXgziNFinLk2g3lzv8=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: DKd6e3Su093Ws3L+UaCVOQxV+i0CkY3gLfmudWpWlOY=) 7: atw7N8cmGaWOYVduk-OBLDCcVKE.roa (hash: MwnNiFLGFDC8Dt40xdm47IwpGSiPw8kVjA87/loNFaE=) 8: b6fw7LngbWgLeeoijzPWABHVRDc.roa (hash: lbS7bOLrlmgr1WylYhcmfTeI7wwwartyiIW7o9c72xw=) 9: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 10: s5nn2GABBezU0-RLUectlbpgH14.roa (hash: ixFySIZXc2j7sK9UIzK47/lLyf2plVrkNzx+R+3HNQo=) 11: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) 12: y3qGgpNOI4yXpT9SG3WpBc4fZOg.roa (hash: CfxGFdVq7MD/iH8XWo6GbyWG4cWJbIp/96Ib0n9UfGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:25:ed:38:ca:43:ff:40:e0:54:aa:48:86:07:ba:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Nov 14 13:01:20 2026 GMT Not After : Nov 15 13:01:20 2026 GMT Subject: CN=a36b01c5d316dcc4811d61aa694d706bec4448b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:28:52:ab:6e:90:e9:85:21:12:f2:6a:bb: 5c:76:63:e2:0f:91:25:a0:dd:cf:1e:f7:28:d7:a8: eb:f1:ea:07:4f:43:ca:20:27:34:ec:0d:75:95:48: 72:04:2b:1c:66:11:ef:f3:a3:7b:38:bc:25:b0:f3: 97:69:f5:8b:a3:0d:6e:f6:85:29:e3:00:82:37:92: 4a:10:a3:73:4e:1a:e5:ce:31:7d:be:b1:a0:3e:c3: aa:f8:46:60:4a:2b:a3:4a:41:c5:7f:74:6e:53:d4: ae:a3:18:9a:ca:99:a3:70:0c:7e:a3:a4:d6:db:8b: de:00:3d:6d:e0:db:5b:df:79:63:de:cf:cf:c7:c2: 08:f5:bc:78:e6:a7:c0:8f:f8:d1:04:b7:1a:6a:0c: 1c:4f:96:29:4e:51:33:cb:1b:d2:f9:bd:49:6d:08: b7:a7:8b:a9:0b:51:9f:1d:1c:99:cd:76:e3:73:e9: de:4d:c4:62:14:33:f0:95:7e:ae:8f:19:46:da:bf: 62:6c:57:1e:32:ed:41:69:2f:03:72:4c:5e:95:35: 9b:68:d3:8d:9e:87:b2:53:20:b9:36:70:fb:0d:7e: 08:96:3a:1d:09:76:f9:c9:24:2e:e2:a5:8f:2d:be: 1d:9b:e2:16:69:3e:ce:14:bf:08:d0:af:1f:f1:bc: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6B:01:C5:D3:16:DC:C4:81:1D:61:AA:69:4D:70:6B:EC:44:48:B4 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c6:d0:4e:fa:ca:bc:eb:1c:90:3d:17:37:ae:b2:2c:9f:2f: 5a:be:74:60:3a:12:84:60:37:9a:9a:be:05:57:96:a1:ac:7b: c6:67:88:98:84:d8:4f:30:97:52:1c:fc:0c:58:e7:3b:8a:64: d6:e9:2c:86:62:3a:7b:99:ec:74:b0:7d:13:7d:8c:29:8e:8d: e4:a2:16:eb:0a:32:6b:9b:2a:cf:36:cf:5b:2b:24:e9:7a:a3: b2:f5:33:bc:4b:e2:56:0c:b2:d2:cf:e0:9d:d7:e9:fd:f4:22: 14:fd:aa:98:16:ce:4c:a4:fb:93:f8:69:4a:07:a7:69:cf:33: ae:82:96:c8:43:48:fb:07:cb:5d:15:33:01:be:57:04:b7:2a: a7:11:67:51:84:26:07:27:ae:c5:c0:82:a4:52:69:f7:d5:d1: 48:b3:08:3b:7f:71:d7:24:2d:ac:7b:d3:d2:5e:99:e8:52:13: 15:55:16:b5:8b:1d:cc:0d:ff:47:00:bd:8a:a7:54:8a:31:00: 94:87:6d:50:b5:8b:ea:c8:2b:cc:09:34:9b:71:6e:99:d2:54: da:27:a8:0f:38:ba:a2:13:dc:76:2a:4f:1f:ba:d6:1d:7c:47: 72:08:13:58:2b:29:64:6b:7b:16:fb:46:c5:20:e7:32:1c:b2: 3a:c0:bb:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHaJe04ykP/QOBUqkiGB7oQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYxMTE0MTMwMTIwWhcNMjYxMTE1MTMwMTIwWjAzMTEwLwYDVQQD EyhhMzZiMDFjNWQzMTZkY2M0ODExZDYxYWE2OTRkNzA2YmVjNDQ0OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvwoUqtukOmFIRLyartcdmPiD5El oN3PHvco16jr8eoHT0PKICc07A11lUhyBCscZhHv86N7OLwlsPOXafWLow1u9oUp 4wCCN5JKEKNzThrlzjF9vrGgPsOq+EZgSiujSkHFf3RuU9SuoxiaypmjcAx+o6TW 24veAD1t4Ntb33lj3s/Px8II9bx45qfAj/jRBLcaagwcT5YpTlEzyxvS+b1JbQi3 p4upC1GfHRyZzXbjc+neTcRiFDPwlX6ujxlG2r9ibFceMu1BaS8DckxelTWbaNON noeyUyC5NnD7DX4IljodCXb5ySQu4qWPLb4dm+IWaT7OFL8I0K8f8bwS2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNrAcXTFtzEgR1hqmlNcGvsREi0MB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8bQTvrK vOsckD0XN66yLJ8vWr50YDoShGA3mpq+BVeWoax7xmeImITYTzCXUhz8DFjnO4pk 1ukshmI6e5nsdLB9E32MKY6N5KIW6woya5sqzzbPWysk6XqjsvUzvEviVgyy0s/g ndfp/fQiFP2qmBbOTKT7k/hpSgenac8zroKWyENI+wfLXRUzAb5XBLcqpxFnUYQm ByeuxcCCpFJp99XRSLMIO39x1yQtrHvT0l6Z6FITFVUWtYsdzA3/RwC9iqdUijEA lIdtULWL6sgrzAk0m3FumdJU2ieoDzi6ohPcdipPH7rWHXxHcggTWCspZGt7FvtG xSDnMhyyOsC7DQ== -----END CERTIFICATE-----Generated at Sat Nov 14 20:46:46 2026 by rpki-client