$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft File: 668NIPmOOiBVDJltdCkmiPDSJ50.mft (raw, json) Hash identifier: RXiZlCwq3LZAmiutx40ArNHJ7yLLrKKkXb1//1Fjj9s= Subject key identifier: 59:AF:30:A9:65:3B:20:B1:59:39:D9:0C:59:B2:99:53:75:33:76:BB Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d Certificate serial: 01A1A8273F28352E8C6BFA8BF6027C45575B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft Manifest number: 02C4 Signing time: Wed 04 Nov 2026 20:01:46 +0000 Manifest this update: Wed 04 Nov 2026 20:01:46 +0000 Manifest next update: Thu 05 Nov 2026 20:01:46 +0000 Files and hashes: 1: 2opF5RUsv3XDc1My0IeDj7X6rkY.roa (hash: rLnnTlMpS3ub6k4swr9VWzMlA8CfLQoDtyjmLZJnpi4=) 2: 668NIPmOOiBVDJltdCkmiPDSJ50.crl (hash: o2svNFBOyMsR7PE8ZYcE18Nda0STpBB5Pd720kv0qjk=) 3: EgUddJnQyW-DZo-6cboASv4IDkM.roa (hash: E6KKUo7CLQIRbYpxq6kq88AYxp+VGIoTBpmzfke9TAA=) 4: KmrQG8ABSDDoPWxM0MmmDyWHCmA.roa (hash: g70sdgkDbYrQc1kwIhz+eBYDzl0gJbikJ8mXpxog+G0=) 5: M26BQVuNMK835dm83OV-Sr2CkQs.roa (hash: 9jTxXoCPeLHjBT+DdTQIMj47gOx4+kmiPGKh+dU2Lpc=) 6: TVEdarLnlUkZhd4uc5HWaM7C1F4.roa (hash: XXiBDhnQsTykczo/2NACBKND800VuRzS+V0RgxdJm/s=) 7: UWd_kiLA4Zqjhukv1HISU4dgFOg.roa (hash: VipRtF6sqqWwFIXuY/edHZjadYbU4Uhjewz9oicfLsU=) 8: ZPKSvekrJYA0upvIat_-JC6BKfQ.roa (hash: PPL2NdzyPwz7LPgdAhUxcAJSYob0YB4sCtiY0icE9zo=) 9: caoVaQQ6_hhxU_4EPaC4DGWonYs.roa (hash: Jkj0fsvwP9t6ClFgp5zppkKjHIXOVf7JZWgJIt+cjtk=) 10: lJ_FSBE-949sPCiSpEyZySdrTKM.roa (hash: dH33Sa3Yry3TNjfjBFsbKuiOk8jDZEsK2UQtsETnpIo=) 11: lwR4CDLvnTUuVyA34wT6tah5mv0.roa (hash: JomOdXVvYDHYetjFnHtJimdxkzg8t7h8C+QxsLpI72o=) 12: t6tRp6DTcX56Y6l157CyhzCQ0Wc.roa (hash: 1QmIt+P8fDS/7erOUbVAT9+QFRO6RvjVGfHodysB3RI=) 13: vcuseHHUp2SFcc7WFCquL547C34.roa (hash: W+undj5Tz3EQlz8nELOD/EX3UtN6Yso7VOiTqtTp3ys=) 14: zRMtSyG0erquHg8eDcLfOh4BpSs.roa (hash: fv01yx8YQE61hN1VLmCbWMtgYoNsmN10wZe2YdF/txM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 17:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a8:27:3f:28:35:2e:8c:6b:fa:8b:f6:02:7c:45:57:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d Validity Not Before: Nov 4 20:01:46 2026 GMT Not After : Nov 5 20:01:46 2026 GMT Subject: CN=59af30a9653b20b15939d90c59b29953753376bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:0a:2b:5e:13:97:1f:dd:91:80:6f:bc:59: 21:51:fa:24:2b:2e:7c:94:86:5b:27:18:c2:e2:a8: e3:a1:c3:7c:a3:ef:9b:c5:d5:8c:69:5f:74:9e:4e: 6e:3f:26:49:dc:8a:55:bc:71:67:db:57:6c:85:85: 3f:b1:2c:e8:b8:4c:7e:8f:eb:cc:2c:2c:78:d2:cc: 79:63:bd:e3:2e:5d:d0:c5:e0:65:99:f3:16:30:17: 9c:3c:69:41:03:bf:31:f9:7c:ef:10:b1:05:28:8b: 43:c1:cd:0f:61:37:93:44:d5:81:a3:0d:34:69:1b: db:08:d9:9f:46:ce:f9:ac:f0:64:d8:95:7f:c9:b7: 13:34:4e:4b:98:6a:16:e6:38:4c:74:93:be:91:03: d1:7d:de:26:1d:da:80:fa:36:b9:a3:38:20:20:e6: 6c:13:78:75:8b:f5:63:27:f6:d7:d4:fe:cf:7b:5f: 6b:61:0a:a3:7f:28:76:2c:6e:49:f2:5d:3e:c8:19: 9d:4c:bb:42:15:34:2d:ce:5e:00:e1:0f:c7:dd:03: fc:be:c8:6b:5b:f6:da:23:13:8c:a1:ab:4b:7a:12: 86:2e:64:f2:db:24:35:5f:aa:9a:e0:42:48:3f:c6: e4:ae:f4:e2:7d:9c:d7:91:bf:c4:64:72:e1:b9:89: 2f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AF:30:A9:65:3B:20:B1:59:39:D9:0C:59:B2:99:53:75:33:76:BB X509v3 Authority Key Identifier: keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b6:3b:52:6a:76:32:d7:87:e0:df:32:3d:68:00:9d:32:84: cb:56:e4:fc:bd:76:51:b1:8d:b7:fd:f8:05:e1:88:a3:42:b8: b5:ea:3d:e7:1c:3b:05:c9:2f:60:82:e7:8b:c6:49:79:fb:52: 0c:1c:a8:4d:80:3c:ae:65:64:e0:93:82:d5:01:e7:81:bf:9f: d7:91:09:c0:d6:fd:53:b3:64:a8:42:5e:19:f2:a3:83:e7:b2: 62:5f:8f:ec:ba:e9:e1:bb:1f:24:f8:65:41:0f:09:03:e6:5f: 90:9f:46:fe:25:06:50:9b:22:bf:dd:ea:06:e9:8f:5a:40:e1: 50:97:11:d6:bd:43:c4:76:72:61:99:c8:01:05:27:f6:c2:cf: 71:9d:43:ec:3b:8e:ac:99:d5:0d:aa:40:f6:4f:68:87:d5:67: dd:be:c5:f2:80:51:90:e8:d2:72:48:6d:94:e2:64:06:4f:97: ed:91:37:e1:73:be:18:cf:fc:c9:37:2e:9b:71:b1:e9:d1:37: 75:b7:6e:51:71:a3:0e:67:98:b8:d3:84:1a:1e:46:71:94:41: 3c:36:aa:13:8a:7a:21:22:3c:93:24:9c:9d:7e:5d:f1:6c:84: 67:40:cf:f3:5b:72:e7:ad:38:27:bc:08:2c:f8:92:2d:da:af: 85:17:db:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGoJz8oNS6Ma/qL9gJ8RVdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYWYwZDIwZjk4ZTNhMjA1NTBjOTk2ZDc0MjkyNjg4ZjBk MjI3OWQwHhcNMjYxMTA0MjAwMTQ2WhcNMjYxMTA1MjAwMTQ2WjAzMTEwLwYDVQQD Eyg1OWFmMzBhOTY1M2IyMGIxNTkzOWQ5MGM1OWIyOTk1Mzc1MzM3NmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLwKK14Tlx/dkYBvvFkhUfokKy58 lIZbJxjC4qjjocN8o++bxdWMaV90nk5uPyZJ3IpVvHFn21dshYU/sSzouEx+j+vM LCx40sx5Y73jLl3QxeBlmfMWMBecPGlBA78x+XzvELEFKItDwc0PYTeTRNWBow00 aRvbCNmfRs75rPBk2JV/ybcTNE5LmGoW5jhMdJO+kQPRfd4mHdqA+ja5ozggIOZs E3h1i/VjJ/bX1P7Pe19rYQqjfyh2LG5J8l0+yBmdTLtCFTQtzl4A4Q/H3QP8vshr W/baIxOMoatLehKGLmTy2yQ1X6qa4EJIP8bkrvTifZzXkb/EZHLhuYkvXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmvMKllOyCxWTnZDFmymVN1M3a7MB8GA1UdIwQY MBaAFOuvDSD5jjogVQyZbXQpJojw0iedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMt MzIwOTM2Mjg4ZTk1LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMtMzIwOTM2Mjg4ZTk1 LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7Y7Ump2 MteH4N8yPWgAnTKEy1bk/L12UbGNt/34BeGIo0K4teo95xw7BckvYILni8ZJeftS DByoTYA8rmVk4JOC1QHngb+f15EJwNb9U7NkqEJeGfKjg+eyYl+P7Lrp4bsfJPhl QQ8JA+ZfkJ9G/iUGUJsiv93qBumPWkDhUJcR1r1DxHZyYZnIAQUn9sLPcZ1D7DuO rJnVDapA9k9oh9Vn3b7F8oBRkOjSckhtlOJkBk+X7ZE34XO+GM/8yTcum3Gx6dE3 dbduUXGjDmeYuNOEGh5GcZRBPDaqE4p6ISI8kyScnX5d8WyEZ0DP81ty5604J7wI LPiSLdqvhRfbqQ== -----END CERTIFICATE-----Generated at Thu Nov 5 03:45:15 2026 by rpki-client