$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json) Hash identifier: aS5GPaB/EIwNNhbsb/e+RFV2V/i0FW1JQRmvEENfhKQ= Subject key identifier: 25:14:8F:44:A4:ED:C6:51:9D:64:68:30:29:BC:DA:C9:DD:35:53:5D Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 01A1A6A69218D2F9A357535A0DF6A23A8B4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft Manifest number: 14DF Signing time: Wed 04 Nov 2026 13:01:36 +0000 Manifest this update: Wed 04 Nov 2026 13:01:36 +0000 Manifest next update: Thu 05 Nov 2026 13:01:36 +0000 Files and hashes: 1: 3kcbw-dgnF65c9CDIHb6oRz5mbE.roa (hash: QQtdRKDztrBVpT4Kn//rOIxZPrmQ8oKjnI8387RYNPY=) 2: 96rJsHAOGztIiBmuIQwVgfCnCEg.roa (hash: HXlUgu5VkFQPapP9Km2yXuNEvNC7tZuuwjHTBZv9OfU=) 3: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=) 4: JBKG2fPxha4I8eVa__ciDh4peDo.roa (hash: 0ESzwcVpkMcL4vVEqYna3uF1a7dneXlkBnlxJhgD8vY=) 5: OYv_dkuy_Y2dlLzuuRzwRfbuYvE.roa (hash: CC0Q+2nNKezsmgtyWfzEhTdriEmSy+Gje/Gosq8c8Uw=) 6: ROEHK_G3SXoguSIySITojCyt7gk.roa (hash: fmVPdgS70cBiSz2OhfXWCfYCFMDOn+khWDbE3US4h/Q=) 7: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=) 8: Uclczo4m3YFGZzaBjS7wUFsNjj4.roa (hash: RzME+AM4xoxLjN4Iilm7nRafVtW/4U1QaD/Olg4yRQM=) 9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: f8kNIo4Lx4j0etmY4q3+xrHMN7/g57jvEBxekw3DNzs=) 10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=) 11: gDSCRA6SYAo_ND0FekjkrAIEJOg.roa (hash: jFjh9a+6n6/CgL9A0TiXBnWMnMdLq13PoBLDCUcmf+Q=) 12: ghqGXV9jPiUhtjyXqrqV0bWR1FA.roa (hash: JhqWV5YE42ZkEuBGzNHEweX5ScPkIholme9X8e62de0=) 13: h8XDp3DDphz-qzuGmGW4Nyqxx5w.roa (hash: befsJFXVxRWhhVswwqWlhSMWy+Fjjq0lJLvYTlqPXpg=) 14: hVE0-LBCE_tncgEsqz7BMTazayw.roa (hash: wVNCRt/H0Wqed1L+d4bjTNofNjKPKn3Yt16DdTXaykc=) 15: jeJjQTbi3buFTK0Rd0N3acScMvk.roa (hash: konzzCvZCQAeqI0lUlmLQesMfmRzbICQy/UJADyxvc0=) 16: jtUzZB59QbTOM17jd9By2IaF-ZY.roa (hash: T2ghb7+ADXX8s8FHjWRFHJGKKRC9TODHrHf0sh2ohnE=) 17: mBhjPfGVJG9ZGT8iRdHP0MIOueY.roa (hash: xIs0dwRIC5rfrVJwL9ieANY/4F7I159Hw9/dNHaXeVw=) 18: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=) 19: pvdxW0h9aFPze864ivZVpgPRpb0.roa (hash: 85/eS4oRTkOHemGg/ZPqiubdMegp/0IRFyauSlAmyRE=) 20: r8wF2OXMB_9Dwl4OqLwAGoqB14E.roa (hash: hrHAOe2h0QoqTlJJp+6hxC5CoPl4npWeklLV6pbne5o=) 21: v7sb-ddXVntsBTLD_1XCaXcDAcQ.roa (hash: biM1aFHbCZlBUo4OzDJSYEHppH1aAPsD2cIhIW+wz1U=) 22: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a6:a6:92:18:d2:f9:a3:57:53:5a:0d:f6:a2:3a:8b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Nov 4 13:01:36 2026 GMT Not After : Nov 5 13:01:36 2026 GMT Subject: CN=25148f44a4edc6519d64683029bcdac9dd35535d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:f1:55:b7:81:e6:51:2b:b2:c5:cd:79:2d: a1:52:e5:f4:2b:f2:24:3e:78:2d:11:fe:58:db:26: 93:eb:f1:48:10:5c:bf:a7:85:97:73:c5:23:70:2f: ef:9b:d7:04:69:d2:25:55:69:95:b2:16:6b:11:ca: 12:91:68:2d:82:7e:6c:81:a9:e6:d6:48:ae:ae:18: af:68:a8:61:cb:a3:03:0b:43:15:b0:0a:f1:79:dc: 45:09:ae:5b:61:cf:9b:f8:ec:93:0f:67:ca:98:10: 24:bf:77:8b:4b:d0:79:7b:ab:fc:ba:88:88:cc:36: f7:2c:51:59:f6:3f:7c:1f:bb:cf:62:3c:33:14:48: 6e:50:1e:c5:f1:bc:2f:18:9a:cf:88:06:25:8a:82: cb:44:66:bc:5f:4c:28:c7:95:66:dd:ea:e0:90:b1: ab:77:20:6d:83:cb:22:17:18:4a:ba:40:73:fd:bb: e6:0d:67:a6:c1:53:09:8f:92:9f:0a:4e:3d:c4:22: 56:06:df:96:56:6a:31:77:75:c7:26:1f:37:b3:df: 1a:b1:1e:30:c5:95:7a:51:84:e0:38:2d:13:50:18: 51:fd:b5:40:6d:a3:7a:3d:11:f1:ea:b9:4f:18:bb: db:d2:ac:fb:31:f0:7f:2d:55:61:d5:d1:9b:67:c5: de:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:14:8F:44:A4:ED:C6:51:9D:64:68:30:29:BC:DA:C9:DD:35:53:5D X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a8:9f:22:e9:01:9e:83:7c:66:68:23:42:a8:d6:a4:58:6e: c0:7f:bc:23:02:4f:fc:f6:6f:99:63:b1:23:9b:90:c9:1f:1c: b1:8f:f3:54:f5:e4:4c:88:fc:38:a1:b8:c8:9a:27:2e:da:18: f6:88:48:e7:46:14:7e:04:f3:5d:2f:8b:e2:c4:27:00:58:91: 1e:2d:6e:6d:f8:17:cf:fb:39:bd:9d:61:26:3b:1e:b2:9c:ae: c3:29:be:b2:02:d4:3c:b1:11:e9:92:1a:54:cd:65:de:ba:d4: cb:b3:c6:5a:ec:af:4c:17:93:c2:4a:2e:8b:9f:04:fc:cf:1b: 17:ac:1b:19:b7:fa:2b:4e:45:ff:2a:8c:c1:bd:50:50:86:3f: bb:fc:74:ec:d1:f3:2d:74:b8:00:cf:a5:a8:25:ac:0d:a1:ea: cc:b4:6c:8f:72:ab:eb:e5:7b:b2:78:44:38:ea:23:54:48:46: 73:2b:3e:7d:92:fb:d1:93:4c:a1:ac:3b:f1:18:e8:1a:13:c9: d1:ab:c7:be:69:6a:79:ab:89:cc:a8:5d:4b:01:f9:58:34:ef: 23:a3:15:db:b6:a4:bd:b4:f8:b8:8c:3b:f7:b8:26:89:f2:b5: 2a:9d:ea:8f:ac:2c:4e:3d:29:c5:73:95:7f:9a:54:31:20:63: e2:71:d9:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGmppIY0vmjV1NaDfaiOotNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYxMTA0MTMwMTM2WhcNMjYxMTA1MTMwMTM2WjAzMTEwLwYDVQQD EygyNTE0OGY0NGE0ZWRjNjUxOWQ2NDY4MzAyOWJjZGFjOWRkMzU1MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBbxVbeB5lErssXNeS2hUuX0K/Ik PngtEf5Y2yaT6/FIEFy/p4WXc8UjcC/vm9cEadIlVWmVshZrEcoSkWgtgn5sganm 1kiurhivaKhhy6MDC0MVsArxedxFCa5bYc+b+OyTD2fKmBAkv3eLS9B5e6v8uoiI zDb3LFFZ9j98H7vPYjwzFEhuUB7F8bwvGJrPiAYlioLLRGa8X0wox5Vm3ergkLGr dyBtg8siFxhKukBz/bvmDWemwVMJj5KfCk49xCJWBt+WVmoxd3XHJh83s98asR4w xZV6UYTgOC0TUBhR/bVAbaN6PRHx6rlPGLvb0qz7MfB/LVVh1dGbZ8XeJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUUj0Sk7cZRnWRoMCm82sndNVNdMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKifIukB noN8ZmgjQqjWpFhuwH+8IwJP/PZvmWOxI5uQyR8csY/zVPXkTIj8OKG4yJonLtoY 9ohI50YUfgTzXS+L4sQnAFiRHi1ubfgXz/s5vZ1hJjsespyuwym+sgLUPLER6ZIa VM1l3rrUy7PGWuyvTBeTwkoui58E/M8bF6wbGbf6K05F/yqMwb1QUIY/u/x07NHz LXS4AM+lqCWsDaHqzLRsj3Kr6+V7snhEOOojVEhGcys+fZL70ZNMoaw78RjoGhPJ 0avHvmlqeauJzKhdSwH5WDTvI6MV27akvbT4uIw797gmifK1Kp3qj6wsTj0pxXOV f5pUMSBj4nHZZA== -----END CERTIFICATE-----Generated at Wed Nov 4 22:59:55 2026 by rpki-client