$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: 4TDBBEwQqadTaCDljCU/q4nL+eE5rCwjH6YbcjFh6gM= Subject key identifier: 66:2C:B4:D7:25:DD:33:DF:78:BC:4E:97:47:55:9B:0E:7C:47:98:44 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 01A1A6383997C2DB84024570E681138CF43C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 127E Signing time: Wed 04 Nov 2026 11:01:04 +0000 Manifest this update: Wed 04 Nov 2026 11:01:04 +0000 Manifest next update: Thu 05 Nov 2026 11:01:04 +0000 Files and hashes: 1: 4gQR9v1XwiLdTiSTiRMKrI8lrqc.roa (hash: MRbBk3qGxjhuCccskdZqQQxK0ZzrsYaT8isRc260EmM=) 2: 5KWHRpNfymzUQ2B3Ea2cQyyJGcY.roa (hash: LfQjs5A5ZwTBP33RPHEo3Y4xjeF10rJHbd8wCZMoub0=) 3: B4KYwS05QgHpINLFLm8jx9WAMUE.roa (hash: Y/ZtdGLIxiXNc+93eNU6l9a/8sOjOG7FjbIkKfPBPaw=) 4: CHlF7hxgiJMCvSrfgZpDmvUe7vo.roa (hash: 3cUTX1iPlbQoeoEy9GPcHhj4EZ6G/JFPu4+djGhZwgU=) 5: DTEIYKQEg-3cc4nyovdTEVZXI84.roa (hash: hLN894n7D6L17mAkhT/VjLR/oKc26Wp5ltD2GzuEB80=) 6: DnQ7ttyDp-n0qH7kJOUMT7Ovd20.roa (hash: pJz32/L309cCRg1kd6bXr/IK1eG3h4nDSk2kO5saa98=) 7: JV4tsenikcUJ5aMnjNBdbcekaPE.roa (hash: PNp+LkFobf83gsUva0tfRNy52whV7WCfMpt/jax/3kY=) 8: J__1HHACshyPBDOUFdqrFfiSJ_s.asa (hash: P4+NQewmqawZRA1cbeRpbU6AVi0HkrkZVkGActNtwQ4=) 9: O5MpWWAIngvdNCIvP59Ugg-k22w.roa (hash: IIiXMVL+EFWSPDF6ZVIvXgN6h4ljFTOq3BqqTal5ll8=) 10: TFWQMBrTQ_CUA4Cak7djWi9jRiA.roa (hash: iHPrQntxBQ8Yfodv7+5kSSwaLAG1oIn9WUEjo4EhvoI=) 11: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=) 12: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=) 13: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=) 14: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=) 15: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: wmyO9/VH8pUHlCZcFjVDtbqXuqRQtASaOAZFxJq4YrY=) 16: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=) 17: icJ83CBbDvFQpi1w8Hj4BK7Axwk.roa (hash: CKkLwTTQ3XocqCldCg44Vv/FxtinExcVSUkafGMYqnU=) 18: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=) 19: xakVfcHMl_3waxWLag9wjIyIEyY.roa (hash: 8zAufra/LX45mNIP6WBoxyrn6rEShlzjSf5RR8HSpQA=) 20: zqTDWnmSlSWX01iiSNinTnu0Zp4.roa (hash: ZNxewe66vaT/4odCrv5OwpxaOR47BEPKOgzkNOaHMeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a6:38:39:97:c2:db:84:02:45:70:e6:81:13:8c:f4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Nov 4 11:01:04 2026 GMT Not After : Nov 5 11:01:04 2026 GMT Subject: CN=662cb4d725dd33df78bc4e9747559b0e7c479844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:35:07:2e:d9:c5:8d:f3:c1:e2:e8:57:a0: 6f:21:3d:e7:2a:59:19:5e:4e:cf:b1:d0:f1:bf:fe: 01:57:dd:78:40:3a:0b:d4:a8:3b:f6:b1:20:a7:40: 33:47:11:46:6d:f4:73:da:85:32:a4:df:84:c5:8f: f8:a0:ae:a8:7e:d7:48:1a:a2:2e:e6:85:a0:ce:7e: 30:02:c3:bf:6d:f3:e2:f5:f2:9b:04:c3:17:a4:c4: 71:fa:a2:7c:96:a4:1a:ea:55:7c:84:2b:72:86:fd: 34:e0:aa:37:e6:f2:2f:b7:a7:f0:b6:b0:7b:39:20: 8d:19:3a:82:60:e5:1b:5f:68:e2:5e:8c:aa:0c:41: 0b:2e:4c:62:d9:5c:54:2a:90:68:ef:55:1b:e2:3a: a0:b0:4d:77:31:bd:e0:11:21:0f:61:01:f6:ef:f8: 30:81:45:c9:c7:ea:38:45:4c:be:e3:85:9d:6f:24: 11:bc:f4:a7:5f:01:b9:3a:2f:e6:4f:30:a2:3d:86: 64:5e:af:c0:57:75:68:cf:55:83:de:9c:46:5c:ca: 99:53:7e:b6:b7:8d:07:91:5c:61:fa:28:e0:aa:33: c2:cd:83:4e:1e:65:e7:a1:e0:e5:7a:3a:9a:75:c8: d8:36:a8:04:cb:2d:4e:25:08:67:b3:8f:07:65:c6: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2C:B4:D7:25:DD:33:DF:78:BC:4E:97:47:55:9B:0E:7C:47:98:44 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:03:83:ec:9f:0f:67:da:04:52:fd:3a:f6:dc:e4:d9:c4:a8: 76:13:e9:58:9a:67:08:f0:b2:c3:e6:78:d2:61:38:f6:6a:46: f1:0a:d3:75:09:8c:49:8f:9d:57:27:53:fb:a1:39:3a:93:d5: 6f:d6:2c:9d:f7:f9:0a:6b:35:db:15:69:35:93:a7:dc:72:74: a6:7e:0d:e3:52:81:3f:60:bb:9a:9e:70:89:d5:3b:2b:35:03: f4:26:1d:9c:1d:67:2d:ed:6d:ae:ea:d8:6d:ba:43:a0:c0:e9: 9f:d3:44:6e:1b:8b:d1:2f:24:04:a9:68:cb:d6:84:e0:15:a1: eb:3f:fc:b9:86:00:7b:c6:70:61:98:a3:08:30:4c:34:43:f1: 19:c8:f6:8c:93:f8:20:a4:f5:8f:93:1b:4f:b0:f4:7a:9f:f7: fc:b2:9a:5d:e2:83:e5:39:f9:79:48:95:d9:3e:42:bf:fe:f9: 93:90:bb:8a:59:9f:ed:29:12:81:00:b7:fb:ef:06:54:13:9c: df:eb:27:b2:9c:69:b2:2b:ef:bd:75:bd:ef:fe:72:f8:be:c7: d7:2c:43:0a:d6:1f:e6:e5:f8:39:f6:4a:dc:4f:5e:c5:17:f0: 8f:05:9c:f1:b1:74:91:e0:79:63:c0:90:59:19:bc:a7:d3:97: 87:71:cc:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGmODmXwtuEAkVw5oETjPQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYxMTA0MTEwMTA0WhcNMjYxMTA1MTEwMTA0WjAzMTEwLwYDVQQD Eyg2NjJjYjRkNzI1ZGQzM2RmNzhiYzRlOTc0NzU1OWIwZTdjNDc5ODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Y1By7ZxY3zweLoV6BvIT3nKlkZ Xk7PsdDxv/4BV914QDoL1Kg79rEgp0AzRxFGbfRz2oUypN+ExY/4oK6oftdIGqIu 5oWgzn4wAsO/bfPi9fKbBMMXpMRx+qJ8lqQa6lV8hCtyhv004Ko35vIvt6fwtrB7 OSCNGTqCYOUbX2jiXoyqDEELLkxi2VxUKpBo71Ub4jqgsE13Mb3gESEPYQH27/gw gUXJx+o4RUy+44WdbyQRvPSnXwG5Oi/mTzCiPYZkXq/AV3Voz1WD3pxGXMqZU362 t40HkVxh+ijgqjPCzYNOHmXnoeDlejqadcjYNqgEyy1OJQhns48HZcYVEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYstNcl3TPfeLxOl0dVmw58R5hEMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwOD7J8P Z9oEUv069tzk2cSodhPpWJpnCPCyw+Z40mE49mpG8QrTdQmMSY+dVydT+6E5OpPV b9Ysnff5Cms12xVpNZOn3HJ0pn4N41KBP2C7mp5widU7KzUD9CYdnB1nLe1trurY bbpDoMDpn9NEbhuL0S8kBKloy9aE4BWh6z/8uYYAe8ZwYZijCDBMNEPxGcj2jJP4 IKT1j5MbT7D0ep/3/LKaXeKD5Tn5eUiV2T5Cv/75k5C7ilmf7SkSgQC3++8GVBOc 3+snspxpsivvvXW97/5y+L7H1yxDCtYf5uX4OfZK3E9exRfwjwWc8bF0keB5Y8CQ WRm8p9OXh3HMHg== -----END CERTIFICATE-----Generated at Wed Nov 4 17:56:56 2026 by rpki-client