$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: hQbBlv9qHqcElV+Z/SYuerP7ONyaB0ihdWPs0gX2cds= Subject key identifier: F4:4E:B4:33:AE:F9:37:3C:8B:55:FE:85:28:97:B1:1E:EF:32:8F:AD Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 01A1DB015F8BDD6004422437612E145E23AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 159B Signing time: Sat 14 Nov 2026 17:01:02 +0000 Manifest this update: Sat 14 Nov 2026 17:01:02 +0000 Manifest next update: Sun 15 Nov 2026 17:01:02 +0000 Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: FzScknK7WOQ37Izv+2FWaMeAK42ivcv1ijr+PtJeg6I=) 3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=) 4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=) 5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=) 6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=) 7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=) 8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=) 9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=) 10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:01:5f:8b:dd:60:04:42:24:37:61:2e:14:5e:23:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Nov 14 17:01:02 2026 GMT Not After : Nov 15 17:01:02 2026 GMT Subject: CN=f44eb433aef9373c8b55fe852897b11eef328fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:ad:bd:1c:d5:a7:97:c1:20:a0:0f:f2:6b: fc:fe:e0:55:f9:fb:84:6d:b1:cc:a8:fb:13:39:97: 73:eb:9a:6c:d1:f5:af:03:35:a2:c3:0a:e9:28:8c: b4:48:91:f9:7c:73:3b:e5:5b:7b:31:74:a2:31:50: bf:d6:6d:89:7b:3f:2b:da:74:e8:91:b0:6d:24:05: 24:30:0f:ea:55:4f:db:73:67:db:19:25:1c:c7:73: a4:c2:e5:17:b2:cb:4e:57:fb:88:0c:ca:46:8d:2d: 50:33:52:75:32:a1:3b:35:d0:f1:26:3b:39:23:91: ff:64:5f:72:96:46:26:41:4d:ef:a9:a1:f4:21:78: 80:02:06:dc:1a:8a:55:f2:5e:b5:7a:dc:dd:0a:f9: 93:91:36:e2:c4:da:ac:35:e5:a8:59:b5:29:60:3b: 0d:b4:4f:c2:9b:00:9c:94:f1:d1:1f:15:92:fc:3a: b2:ab:a2:01:5f:63:55:11:7f:f9:53:7b:38:be:7e: 46:31:22:8f:99:f0:33:ca:9e:83:7f:01:df:63:db: 89:02:9f:10:55:c8:46:a2:42:67:79:78:2e:3e:a5: 48:4d:9c:84:91:01:67:b7:25:59:30:9b:10:94:fa: 1f:fe:2c:81:55:c9:4f:b7:7d:e6:4a:3f:98:d5:6f: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4E:B4:33:AE:F9:37:3C:8B:55:FE:85:28:97:B1:1E:EF:32:8F:AD X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5e:bb:95:64:f2:54:9f:d0:20:02:a3:63:07:46:79:9a:1f: a3:c3:a7:7f:6e:ab:7a:b3:a6:5b:0a:94:1e:b8:4e:b6:d3:ed: e0:d0:6f:1e:36:48:87:bd:67:b5:37:1d:4d:da:6d:47:cd:9e: e1:38:41:85:88:40:5d:70:4f:96:7b:2b:d9:12:0f:22:9e:cd: a4:d2:79:3f:62:c9:32:69:c5:b6:a5:8b:2a:59:62:f0:bb:be: 7a:07:fa:a8:87:13:0d:95:72:76:8d:a4:6b:97:aa:31:42:0e: be:c2:5d:00:cb:75:e7:ec:5b:b8:ee:e1:7c:de:e9:c4:7b:a9: d1:1b:48:64:81:f0:3b:49:75:00:4d:de:b1:de:ce:ad:29:75: 26:74:2b:fb:e4:f8:81:03:3f:95:bf:cf:7a:33:70:dc:34:a7: 39:56:d4:03:a2:ca:7b:e2:ed:41:25:45:f6:1d:f8:f8:79:99: e7:58:a7:5b:fb:76:4b:80:d6:6e:a1:ba:4e:a2:fb:f1:35:e2: ec:fa:22:15:69:2e:24:39:ef:2b:f2:2d:8c:39:85:4a:ce:9e: 7c:00:fb:7d:37:30:67:89:e5:a8:a9:58:1b:0b:b1:2a:20:97: 2b:e3:79:2d:87:9a:bb:93:1e:9d:4b:76:64:55:3f:cb:f5:7c: 1f:24:cd:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbAV+L3WAEQiQ3YS4UXiOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYxMTE0MTcwMTAyWhcNMjYxMTE1MTcwMTAyWjAzMTEwLwYDVQQD EyhmNDRlYjQzM2FlZjkzNzNjOGI1NWZlODUyODk3YjExZWVmMzI4ZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjqtvRzVp5fBIKAP8mv8/uBV+fuE bbHMqPsTOZdz65ps0fWvAzWiwwrpKIy0SJH5fHM75Vt7MXSiMVC/1m2Jez8r2nTo kbBtJAUkMA/qVU/bc2fbGSUcx3OkwuUXsstOV/uIDMpGjS1QM1J1MqE7NdDxJjs5 I5H/ZF9ylkYmQU3vqaH0IXiAAgbcGopV8l61etzdCvmTkTbixNqsNeWoWbUpYDsN tE/CmwCclPHRHxWS/Dqyq6IBX2NVEX/5U3s4vn5GMSKPmfAzyp6DfwHfY9uJAp8Q VchGokJneXguPqVITZyEkQFntyVZMJsQlPof/iyBVclPt33mSj+Y1W8wBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPROtDOu+Tc8i1X+hSiXsR7vMo+tMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJF67lWTy VJ/QIAKjYwdGeZofo8Onf26rerOmWwqUHrhOttPt4NBvHjZIh71ntTcdTdptR82e 4ThBhYhAXXBPlnsr2RIPIp7NpNJ5P2LJMmnFtqWLKlli8Lu+egf6qIcTDZVydo2k a5eqMUIOvsJdAMt15+xbuO7hfN7pxHup0RtIZIHwO0l1AE3esd7OrSl1JnQr++T4 gQM/lb/PejNw3DSnOVbUA6LKe+LtQSVF9h34+HmZ51inW/t2S4DWbqG6TqL78TXi 7PoiFWkuJDnvK/ItjDmFSs6efAD7fTcwZ4nlqKlYGwuxKiCXK+N5LYeau5MenUt2 ZFU/y/V8HyTNUQ== -----END CERTIFICATE-----Generated at Sat Nov 14 20:48:18 2026 by rpki-client