$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: X6hF2kH21rbiss82pxhXIgvPXBX1G70rVtJvhKN27b8= Subject key identifier: 0F:28:39:8F:D4:A4:46:0C:0C:66:CB:60:8E:F2:9D:27:5A:ED:EC:8F Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 01A1A1ED6D8CAC4C8270AEFECEEB637B53F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 14A6 Signing time: Tue 03 Nov 2026 15:00:54 +0000 Manifest this update: Tue 03 Nov 2026 15:00:54 +0000 Manifest next update: Wed 04 Nov 2026 15:00:54 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: icG1cvptlBRwWgrY9ByMsYgPTshEmLvjxuV+Dku6SXE=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Nov 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a1:ed:6d:8c:ac:4c:82:70:ae:fe:ce:eb:63:7b:53:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Nov 3 15:00:54 2026 GMT Not After : Nov 4 15:00:54 2026 GMT Subject: CN=0f28398fd4a4460c0c66cb608ef29d275aedec8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:97:44:a8:7c:93:81:15:d5:42:8d:7d:c9: 3d:1e:bf:d8:74:d5:24:3d:f2:f7:a3:c7:ea:d6:7c: e3:2e:d5:a4:2b:ac:8d:09:c8:c4:0f:66:3d:ca:99: ea:6e:56:16:c9:82:52:9b:30:84:d2:68:b0:c7:e6: bd:a6:b7:5e:3e:b3:6f:45:0d:57:21:3d:d9:15:58: 03:6e:b6:d8:ed:af:92:ca:f1:2a:be:0b:52:75:03: 4e:45:e3:d5:67:77:dd:8f:3b:33:20:9a:0c:43:b5: 02:8d:56:4e:89:9b:bf:e6:21:4e:e2:29:83:3e:fe: d5:d5:ec:32:a7:7a:ab:ec:a9:2b:20:33:85:f5:02: e4:e8:33:84:46:76:41:39:79:d1:87:c8:68:e1:7b: 7b:ab:a2:89:25:df:47:8a:13:9a:9b:99:47:68:04: 7e:55:ed:b8:42:f2:6e:34:90:84:39:5f:0f:92:95: fa:79:a7:f5:d3:68:41:90:a7:da:88:1d:8a:40:16: d7:e0:0d:80:95:0d:af:c8:6f:53:93:2b:8a:e9:d9: ec:97:f0:d1:70:10:3a:94:e3:96:34:38:44:79:b6: 0f:7f:2b:58:20:3c:a2:25:8b:9d:36:1d:de:6c:04: 50:48:f1:ce:b7:56:3f:3f:55:f9:33:e0:2a:2d:e8: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:28:39:8F:D4:A4:46:0C:0C:66:CB:60:8E:F2:9D:27:5A:ED:EC:8F X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:52:d0:90:0e:c8:84:d5:b3:fe:51:6c:cb:57:5f:95:2c:1e: 4c:20:48:38:70:ec:0f:9e:14:ac:d1:88:9f:e5:05:53:5c:db: ef:25:3d:75:1a:ae:a1:db:8e:c5:09:40:38:60:95:b3:5b:5e: 9c:a9:cd:31:88:6c:03:4a:9a:4c:01:07:46:87:c6:f7:f9:e7: 56:a4:fc:e8:7f:9f:2c:2c:a5:9c:df:87:32:72:46:f9:57:00: f9:ba:b5:29:f8:48:0b:a7:ce:56:ff:ed:85:51:ca:47:7f:37: f5:5a:f2:67:a1:1d:bf:28:f2:07:9c:6e:82:07:ce:19:fb:ca: 95:d1:41:df:4a:99:92:5e:96:15:98:8b:11:73:92:dc:75:7f: ff:00:3c:50:f4:12:0a:d3:8b:ba:93:40:d6:1d:23:dc:47:9b: 7a:0e:b6:1e:3c:0c:f3:d8:3d:56:39:ac:be:e5:c6:25:ca:b4: 2d:07:f7:3c:55:a0:34:32:34:75:6a:d9:5c:7a:0d:a8:fe:94: f6:11:95:14:70:e0:6e:ad:d7:9c:c5:ab:94:9c:2a:39:97:3c: 22:a1:a3:23:f7:a9:81:df:88:fe:ab:fc:9a:3e:8d:dc:42:09: fe:33:b5:c7:c4:75:58:90:1b:ce:98:21:5e:22:fd:6f:05:59: 6e:64:cd:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGh7W2MrEyCcK7+zutje1P4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYxMTAzMTUwMDU0WhcNMjYxMTA0MTUwMDU0WjAzMTEwLwYDVQQD EygwZjI4Mzk4ZmQ0YTQ0NjBjMGM2NmNiNjA4ZWYyOWQyNzVhZWRlYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCiXRKh8k4EV1UKNfck9Hr/YdNUk PfL3o8fq1nzjLtWkK6yNCcjED2Y9ypnqblYWyYJSmzCE0miwx+a9prdePrNvRQ1X IT3ZFVgDbrbY7a+SyvEqvgtSdQNORePVZ3fdjzszIJoMQ7UCjVZOiZu/5iFO4imD Pv7V1ewyp3qr7KkrIDOF9QLk6DOERnZBOXnRh8ho4Xt7q6KJJd9HihOam5lHaAR+ Ve24QvJuNJCEOV8PkpX6eaf102hBkKfaiB2KQBbX4A2AlQ2vyG9TkyuK6dnsl/DR cBA6lOOWNDhEebYPfytYIDyiJYudNh3ebARQSPHOt1Y/P1X5M+AqLeiVhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8oOY/UpEYMDGbLYI7ynSda7eyPMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVLQkA7I hNWz/lFsy1dflSweTCBIOHDsD54UrNGIn+UFU1zb7yU9dRquoduOxQlAOGCVs1te nKnNMYhsA0qaTAEHRofG9/nnVqT86H+fLCylnN+HMnJG+VcA+bq1KfhIC6fOVv/t hVHKR3839VryZ6EdvyjyB5xuggfOGfvKldFB30qZkl6WFZiLEXOS3HV//wA8UPQS CtOLupNA1h0j3Eebeg62HjwM89g9VjmsvuXGJcq0LQf3PFWgNDI0dWrZXHoNqP6U 9hGVFHDgbq3XnMWrlJwqOZc8IqGjI/epgd+I/qv8mj6N3EIJ/jO1x8R1WJAbzpgh XiL9bwVZbmTNQA== -----END CERTIFICATE-----Generated at Tue Nov 3 22:57:24 2026 by rpki-client