$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: N4WenXdtHacZlrAGF2ziTKn22TYJX4H1R6GVtEwwYr8= Subject key identifier: D3:B0:09:7A:AD:12:EC:35:F8:75:89:CC:CE:39:B9:30:65:06:19:CC Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 01A1A939DA9BBAABA05FED989184331E94E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 0C14 Signing time: Thu 05 Nov 2026 01:01:43 +0000 Manifest this update: Thu 05 Nov 2026 01:01:43 +0000 Manifest next update: Fri 06 Nov 2026 01:01:43 +0000 Files and hashes: 1: 1-nlxsJRBWD8q6HeUx4ToKSOiAE0.roa (hash: IsmDbtGisDKm21kNjBMYIK7IWOYqqUQdtbbddSGtBpk=) 2: 5GNibjWVh9kv3niMKhBpdix2V2Q.roa (hash: V43kp1BYcyRiXrTVKmCCCR8M4THNOeMB1viDgjmazhM=) 3: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=) 4: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=) 5: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=) 6: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=) 7: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=) 8: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=) 9: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=) 10: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=) 11: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (hash: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=) 12: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=) 13: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: j4SljjrWpWWYbXOvzgAyGcwV5QW79nlAzsdbPzPlmVA=) 14: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=) 15: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=) 16: WgBBESiMNBhg0ejLbo4ygFVFK_g.roa (hash: fOGX3A1MJMqw5iFjseRV1GnR/NKzbA2c83gmI0QyUAc=) 17: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=) 18: c6BAhHRLfxDNcL8hPsxjznxgJZ4.roa (hash: fDgos3O7tcZZOFfLpA6faR+93mXyvAqz66PrVMnvPjc=) 19: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=) 20: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=) 21: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=) 22: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=) 23: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a9:39:da:9b:ba:ab:a0:5f:ed:98:91:84:33:1e:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Nov 5 01:01:43 2026 GMT Not After : Nov 6 01:01:43 2026 GMT Subject: CN=d3b0097aad12ec35f87589ccce39b930650619cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bb:98:f1:9c:2b:d3:a6:6c:38:c6:31:8d:16: 13:9f:81:e2:45:ec:f2:a9:9f:8a:4e:f0:68:12:b0: 79:db:e0:bd:02:85:0e:52:a2:f7:94:f8:37:98:76: 29:d7:90:d1:62:8e:8b:12:d6:aa:1b:f7:5f:fa:0d: 19:8e:25:bc:28:91:20:05:b5:d2:a4:ca:69:42:8c: ff:df:9d:b4:f9:ed:9b:dd:fd:8c:0a:11:6e:c5:fe: a7:e5:ad:97:77:f0:6b:90:ca:06:ee:af:40:ad:9f: aa:16:1f:d1:5e:75:95:5e:15:4f:90:d2:98:a6:41: f7:74:65:34:5e:36:1e:5b:82:db:b5:b3:05:24:1c: 6e:84:2c:51:31:fa:e9:99:72:42:ec:ef:37:13:48: 91:86:06:f4:d6:00:29:57:67:6b:f6:90:20:1d:2f: 6b:31:b7:f2:94:59:e1:6f:ae:73:e2:cc:90:da:0c: 32:5a:5b:e1:ed:39:bc:26:cf:75:cb:84:e3:25:d9: e8:d0:9f:4c:23:72:28:c5:09:7e:5f:ad:af:c1:c6: 33:40:0e:16:fb:cb:2e:b7:ae:28:84:37:f4:18:5a: 1c:c7:f2:71:ad:28:2b:a2:37:4f:19:08:ef:25:a5: 07:75:8a:d1:c5:8e:61:47:31:27:11:64:f3:e6:c1: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B0:09:7A:AD:12:EC:35:F8:75:89:CC:CE:39:B9:30:65:06:19:CC X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:eb:4d:32:33:7f:19:22:90:d9:bb:f3:c9:05:a9:df:3e:da: 31:85:bb:00:ae:bf:27:ca:b0:0b:e3:dd:35:3e:c0:3a:06:14: 22:5b:8c:48:4c:40:19:c7:21:32:27:ea:93:79:b4:b1:35:4f: c8:74:fa:78:9a:b2:32:5e:11:9e:17:aa:6d:af:50:72:19:33: 7f:d2:b0:81:7b:3b:47:47:ea:2f:3b:95:02:d2:d0:39:be:fc: 6b:90:60:42:b8:bc:10:9c:1d:39:f9:a1:f1:40:c4:f0:af:cc: 36:ac:14:75:c9:23:50:cf:d5:c7:9e:5e:61:2a:c4:9b:28:68: d7:f3:9c:bb:73:25:98:16:17:c6:b3:ef:5b:e9:0a:8a:21:f9: c0:46:a2:58:9b:c5:63:e8:ab:4a:d4:71:dc:13:ea:94:a4:c8: 4c:0b:5b:6d:88:10:fa:7a:1a:10:3a:96:33:97:c9:66:d5:2b: 04:dc:03:8c:93:65:56:53:20:9c:5e:1d:3c:3b:7a:30:6e:cc: 67:14:7f:c7:0a:fa:d6:07:2e:1a:8f:53:06:96:cf:ac:d4:bc: 09:60:b8:04:cd:0a:3b:90:86:09:cb:35:7a:df:6f:55:c0:50: ed:37:0c:0f:77:da:2d:cc:c2:4d:25:17:a9:48:55:fd:83:7f: 7a:2e:8a:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGpOdqbuqugX+2YkYQzHpTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYxMTA1MDEwMTQzWhcNMjYxMTA2MDEwMTQzWjAzMTEwLwYDVQQD EyhkM2IwMDk3YWFkMTJlYzM1Zjg3NTg5Y2NjZTM5YjkzMDY1MDYxOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ruY8Zwr06ZsOMYxjRYTn4HiRezy qZ+KTvBoErB52+C9AoUOUqL3lPg3mHYp15DRYo6LEtaqG/df+g0ZjiW8KJEgBbXS pMppQoz/3520+e2b3f2MChFuxf6n5a2Xd/BrkMoG7q9ArZ+qFh/RXnWVXhVPkNKY pkH3dGU0XjYeW4LbtbMFJBxuhCxRMfrpmXJC7O83E0iRhgb01gApV2dr9pAgHS9r MbfylFnhb65z4syQ2gwyWlvh7Tm8Js91y4TjJdno0J9MI3IoxQl+X62vwcYzQA4W +8sut64ohDf0GFocx/JxrSgrojdPGQjvJaUHdYrRxY5hRzEnEWTz5sEU3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOwCXqtEuw1+HWJzM45uTBlBhnMMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANetNMjN/ GSKQ2bvzyQWp3z7aMYW7AK6/J8qwC+PdNT7AOgYUIluMSExAGcchMifqk3m0sTVP yHT6eJqyMl4Rnheqba9Qchkzf9KwgXs7R0fqLzuVAtLQOb78a5BgQri8EJwdOfmh 8UDE8K/MNqwUdckjUM/Vx55eYSrEmyho1/Ocu3MlmBYXxrPvW+kKiiH5wEaiWJvF Y+irStRx3BPqlKTITAtbbYgQ+noaEDqWM5fJZtUrBNwDjJNlVlMgnF4dPDt6MG7M ZxR/xwr61gcuGo9TBpbPrNS8CWC4BM0KO5CGCcs1et9vVcBQ7TcMD3faLczCTSUX qUhV/YN/ei6KCA== -----END CERTIFICATE-----Generated at Thu Nov 5 05:45:49 2026 by rpki-client