$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: BdLl19AypSIiAX3lS5/7LzXP/DLlAaeRzldI3Y7IEqo= Subject key identifier: 10:0E:30:1D:87:9D:71:0B:DE:94:89:30:A8:0B:C5:50:73:09:EC:43 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 01A1DD5DBA0795FD913CA4272F232A26E1B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1B10 Signing time: Sun 15 Nov 2026 04:01:09 +0000 Manifest this update: Sun 15 Nov 2026 04:01:09 +0000 Manifest next update: Mon 16 Nov 2026 04:01:09 +0000 Files and hashes: 1: 1-ZsRWNvdt3D8wn8sI2L1WODnkqM.roa (hash: 6Eum4e6s1YywQEdj8irMXAzstfAffIT89qs3aZzQIj0=) 2: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 3: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 4: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 5: GIKziXI0ze0FwPya3PhgfF3f_tA.roa (hash: Q4/p9Bv6o+xxhdGbCok8TG1MXiBudXjraYt9L2zzurs=) 6: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 7: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 8: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: Ef104yoks5qqzLcRiVqinACYZSRCXVdQWpI2Hj6ODk4=) 9: THkP_WMs844JJ4UTW2iusEvO7og.roa (hash: q+i+yw1ZT8GT9Tqd+7XX30HpCs4PHYhN3cI+hYf+RFc=) 10: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 11: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 12: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 13: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 14: iJ_SqpFr0zNYrYAGjBnLWKJG46c.roa (hash: Q0yDdGVynE81gS5B6qUfbFV9iOUk5sYdL+YW+lxJpdc=) 15: lrLT0MTm0sVXoP_chnt_YcYvk94.roa (hash: bRz5jjXaw5R9jnyeOoeN7YsZBbwWfb9gDd+EwEhENhU=) 16: mYkOBOIW6O0A_6f02CFpHtKOt7g.roa (hash: 0X1xM3PVCNQFuvE7pmgCYP4TDDJw4nRptQ2zO5w8sJA=) 17: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) 18: zLW84Gsa8lyQLXbWcT3Qg3ZGSrQ.roa (hash: UXTZQOitHqTP9IRhCn98pWCBLuimV0o0vCpqkwYBveU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:5d:ba:07:95:fd:91:3c:a4:27:2f:23:2a:26:e1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Nov 15 04:01:09 2026 GMT Not After : Nov 16 04:01:09 2026 GMT Subject: CN=100e301d879d710bde948930a80bc5507309ec43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:44:24:c1:08:40:c1:c3:5d:ff:40:98:ee: 80:b6:93:7b:70:62:77:70:e2:ec:4e:9c:b9:f2:63: 29:f5:3d:4e:e5:66:1b:47:fe:b9:fd:46:b0:5b:7f: f1:8a:8c:64:5e:64:05:54:fb:43:4a:f1:cd:41:2e: e1:cd:93:00:35:85:1c:4e:9a:b1:47:c5:5a:c9:c9: f7:c1:02:bc:ec:af:fc:87:c3:ae:7b:93:1e:97:2a: ef:12:e8:6d:7a:e8:2e:00:80:0e:93:10:73:a2:99: 1d:67:f3:30:27:23:1f:44:e3:a7:93:52:e3:fe:00: 2e:b0:d8:6e:1c:23:1b:45:b4:e8:c2:9f:ad:84:c8: 92:79:bf:ee:e4:d5:56:f4:a3:5f:cc:6b:76:d6:78: e3:96:08:32:5d:70:7f:9e:5d:48:b6:ae:7b:9f:40: 3f:51:18:e0:e3:b3:a0:70:dc:3e:05:5d:1c:dd:d3: 80:95:3d:24:b5:ed:2c:aa:59:d7:b4:39:92:b4:5b: 51:d6:7b:74:5c:26:d7:c1:37:8c:1e:37:e7:25:3a: 0b:0a:bf:a6:4c:03:7b:c1:bb:20:a5:17:b9:30:c6: a8:74:83:da:31:81:58:07:12:51:d1:9e:21:1f:1c: 5f:3b:cd:77:a1:3e:7e:2b:58:6a:38:68:ae:a0:7d: cf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0E:30:1D:87:9D:71:0B:DE:94:89:30:A8:0B:C5:50:73:09:EC:43 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0b:23:b4:64:62:06:b2:d2:78:7e:6f:99:5d:ad:fc:7b:39: a8:c3:0b:70:3e:ad:ce:bc:68:46:2d:7a:9d:e5:7e:e1:9b:bd: fc:6e:69:f1:4c:3c:8b:23:9d:51:e0:87:73:07:b8:c5:55:04: bc:6e:2b:05:05:20:c3:9d:fc:7e:26:02:c3:cb:59:1b:a8:09: d9:26:74:67:c5:f7:57:17:db:79:64:4f:7d:8c:33:b7:17:51: e7:a9:4b:56:99:37:f6:36:21:84:f2:01:e2:23:b3:27:fa:2a: 95:1f:36:4b:99:2f:e2:8a:c7:57:2c:52:4a:38:95:e5:9f:32: 08:2e:79:ac:92:d0:cb:8c:99:72:b4:09:ee:23:40:3f:3c:5a: 36:87:f0:b0:ef:05:92:3c:6e:73:eb:2d:69:47:bb:d1:a0:53: 41:07:8a:64:96:9d:1a:fa:5f:86:c3:f2:e0:9f:b5:43:32:41: 7a:4a:a3:e6:e7:43:a9:3e:2b:08:00:d4:a8:69:ea:d4:80:e4: 1d:56:9a:5c:13:38:ae:51:d7:3a:95:ef:44:e5:7c:c1:fd:cf: fc:a9:14:12:b4:30:25:30:94:f2:a0:9e:ee:0f:87:bc:02:8e: a9:8d:ff:a8:b6:04:7d:c3:73:e8:28:29:3b:c8:8e:1f:4a:20: 88:1b:bc:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdXboHlf2RPKQnLyMqJuG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYxMTE1MDQwMTA5WhcNMjYxMTE2MDQwMTA5WjAzMTEwLwYDVQQD EygxMDBlMzAxZDg3OWQ3MTBiZGU5NDg5MzBhODBiYzU1MDczMDllYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsFEJMEIQMHDXf9AmO6AtpN7cGJ3 cOLsTpy58mMp9T1O5WYbR/65/UawW3/xioxkXmQFVPtDSvHNQS7hzZMANYUcTpqx R8Vaycn3wQK87K/8h8Oue5MelyrvEuhteuguAIAOkxBzopkdZ/MwJyMfROOnk1Lj /gAusNhuHCMbRbTowp+thMiSeb/u5NVW9KNfzGt21njjlggyXXB/nl1Itq57n0A/ URjg47OgcNw+BV0c3dOAlT0kte0sqlnXtDmStFtR1nt0XCbXwTeMHjfnJToLCr+m TAN7wbsgpRe5MMaodIPaMYFYBxJR0Z4hHxxfO813oT5+K1hqOGiuoH3PGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAOMB2HnXEL3pSJMKgLxVBzCexDMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQsjtGRi BrLSeH5vmV2t/Hs5qMMLcD6tzrxoRi16neV+4Zu9/G5p8Uw8iyOdUeCHcwe4xVUE vG4rBQUgw538fiYCw8tZG6gJ2SZ0Z8X3VxfbeWRPfYwztxdR56lLVpk39jYhhPIB 4iOzJ/oqlR82S5kv4orHVyxSSjiV5Z8yCC55rJLQy4yZcrQJ7iNAPzxaNofwsO8F kjxuc+staUe70aBTQQeKZJadGvpfhsPy4J+1QzJBekqj5udDqT4rCADUqGnq1IDk HVaaXBM4rlHXOpXvROV8wf3P/KkUErQwJTCU8qCe7g+HvAKOqY3/qLYEfcNz6Cgp O8iOH0ogiBu8jg== -----END CERTIFICATE-----Generated at Sun Nov 15 13:37:59 2026 by rpki-client