$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: GKf3K0y4p5RkvyY74mAgg4SpU7IF1tqXoPJlgvyEGSo= Subject key identifier: 13:99:55:62:C2:B7:51:2E:DE:7A:0B:49:9B:4C:D5:0C:C4:2D:A5:65 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 01A1BB761C7B15457B8C6646832426B586EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 1A04 Signing time: Sun 08 Nov 2026 14:00:42 +0000 Manifest this update: Sun 08 Nov 2026 14:00:42 +0000 Manifest next update: Mon 09 Nov 2026 14:00:42 +0000 Files and hashes: 1: 32SKa40WKweNz--8fYvohpIQNdM.roa (hash: CvIxVpDQSBHDmG9fei/qmX2fiAr7YysgDexobJcNjQc=) 2: 55lTuhAI20BHIf-zeSdkeAFaMAg.roa (hash: 6WOjfM5Zbb9/cs9Lu29lst5KqtNeJQ6bLtoEOKJiPTQ=) 3: 7NA2LegCljPM-6ilz2F5cnaoBJw.roa (hash: qjOTsmyHG6MOUTIadkX/zmkZDlAkqPzHJKetzF1R3ds=) 4: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=) 5: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=) 6: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=) 7: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=) 8: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=) 9: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=) 10: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=) 11: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=) 12: OOZCU9RDZbWm90IHhggbkADAyok.roa (hash: yzkJaDkuzS/Q97fyxLhVwM/SdV10qs3BxmQUOzU77kU=) 13: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=) 14: X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa (hash: lAKtM50aILYHfyj/dnL/G2PsJlkpfMmR8vppwS3z8KU=) 15: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=) 16: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: +bK5XZfZzijNIk6N7NnlDmNRA6FjBRn9+Bxzz9K6EWg=) 17: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=) 18: jVvCjidFfK-8IL92OyEeuSlStW0.roa (hash: 95JD6YEa33c2IW5jEGSMsvaX4Vq46tjO1+Oed4maTyw=) 19: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=) 20: twRPR7YMxdedDnIoOoDSSMLLV5I.roa (hash: iG5iFiWGGZ1ctfdvgUYVkBJLEXDfn4PbykZkkKVwlz8=) 21: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=) 22: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Nov 2026 08:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:bb:76:1c:7b:15:45:7b:8c:66:46:83:24:26:b5:86:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Nov 8 14:00:42 2026 GMT Not After : Nov 9 14:00:42 2026 GMT Subject: CN=13995562c2b7512ede7a0b499b4cd50cc42da565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:69:2e:cc:63:35:a3:08:5f:66:37:41:f8: 37:3b:c9:8a:f7:e9:76:f3:ed:8a:eb:8e:06:e0:68: f3:f8:da:55:df:21:a1:36:ff:1e:05:71:f1:ca:1c: c6:e2:1d:03:81:bf:05:3c:93:a4:19:62:22:ba:0e: 84:7c:fb:e0:40:39:d2:75:42:fd:ac:22:22:e0:17: 80:22:97:31:83:3f:72:10:fd:e0:88:db:0c:5a:83: 9a:20:bb:46:cd:06:1a:f2:2b:8f:1b:f6:68:ae:e7: 9b:77:3b:2c:47:ac:3e:60:ab:ce:6a:bb:4a:95:40: 3a:0c:3d:1d:5b:33:c2:6c:8b:86:a7:77:f1:43:bc: 39:29:63:43:3c:8e:d1:69:18:8e:ba:d9:99:9a:34: a2:d2:1b:0b:9f:73:5b:76:63:bb:22:2c:0f:f4:3a: a7:6a:2d:5b:da:10:2c:65:90:3f:40:48:09:d6:7e: 49:72:4c:ee:1e:f5:73:d2:c8:eb:64:b6:fe:e2:51: 43:75:7c:ef:86:1e:a2:a2:eb:61:02:5e:ce:7d:bd: 40:a4:d3:c4:ce:77:01:7a:21:d3:35:01:26:05:58: 29:37:3c:8b:05:dd:30:1c:3a:f6:a9:10:88:bf:60: 2c:29:e5:e5:40:bb:4b:59:05:43:74:61:3f:00:2d: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:99:55:62:C2:B7:51:2E:DE:7A:0B:49:9B:4C:D5:0C:C4:2D:A5:65 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:49:6c:1c:43:7b:a6:40:12:33:82:20:08:7d:55:ee:de:f5: ab:88:39:af:c6:46:98:2b:68:d9:f0:19:7c:65:41:7f:00:0b: f7:e1:f9:49:c4:1e:20:32:c3:78:47:94:36:bb:63:1d:7e:33: 7b:e8:71:fb:d1:1d:5c:d3:42:88:8d:dc:f1:f6:33:8f:e9:db: 7d:cd:72:e7:ae:e9:cf:31:3e:a1:32:25:c1:b7:43:e5:b7:9c: 43:fd:0d:84:e5:89:77:c5:21:ad:66:20:e0:c3:88:52:a4:1a: bd:02:f2:56:17:c5:e7:3f:58:2a:61:cc:91:15:b4:0a:70:bf: 83:df:39:7d:96:e7:c3:cb:9e:fc:b5:5a:b3:e8:d3:23:05:e2: 31:f5:84:74:b0:04:9b:63:8b:13:f3:b6:c6:c7:e2:07:2b:88: a9:79:48:59:65:f0:24:ea:e1:0a:34:6a:aa:2f:d0:d3:34:fa: 7e:b6:19:2b:e6:46:5b:41:bf:ab:30:20:a5:63:e9:07:4a:bb: 7e:12:c0:6f:25:72:12:2c:5a:3b:cd:ab:56:7b:4a:fe:1e:55: e1:f5:73:07:21:62:df:5b:62:38:af:1d:19:9e:55:8c:8e:98: e2:ed:df:b9:56:d5:4c:40:34:b8:39:0b:7e:2b:c2:22:65:c8: 20:d6:e8:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaG7dhx7FUV7jGZGgyQmtYbuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYxMTA4MTQwMDQyWhcNMjYxMTA5MTQwMDQyWjAzMTEwLwYDVQQD EygxMzk5NTU2MmMyYjc1MTJlZGU3YTBiNDk5YjRjZDUwY2M0MmRhNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T9pLsxjNaMIX2Y3Qfg3O8mK9+l2 8+2K644G4Gjz+NpV3yGhNv8eBXHxyhzG4h0Dgb8FPJOkGWIiug6EfPvgQDnSdUL9 rCIi4BeAIpcxgz9yEP3giNsMWoOaILtGzQYa8iuPG/ZoruebdzssR6w+YKvOartK lUA6DD0dWzPCbIuGp3fxQ7w5KWNDPI7RaRiOutmZmjSi0hsLn3NbdmO7IiwP9Dqn ai1b2hAsZZA/QEgJ1n5JckzuHvVz0sjrZLb+4lFDdXzvhh6iouthAl7Ofb1ApNPE zncBeiHTNQEmBVgpNzyLBd0wHDr2qRCIv2AsKeXlQLtLWQVDdGE/AC2ntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOZVWLCt1Eu3noLSZtM1QzELaVlMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUlsHEN7 pkASM4IgCH1V7t71q4g5r8ZGmCto2fAZfGVBfwAL9+H5ScQeIDLDeEeUNrtjHX4z e+hx+9EdXNNCiI3c8fYzj+nbfc1y567pzzE+oTIlwbdD5becQ/0NhOWJd8UhrWYg 4MOIUqQavQLyVhfF5z9YKmHMkRW0CnC/g985fZbnw8ue/LVas+jTIwXiMfWEdLAE m2OLE/O2xsfiByuIqXlIWWXwJOrhCjRqqi/Q0zT6frYZK+ZGW0G/qzAgpWPpB0q7 fhLAbyVyEixaO82rVntK/h5V4fVzByFi31tiOK8dGZ5VjI6Y4u3fuVbVTEA0uDkL fivCImXIINboCg== -----END CERTIFICATE-----Generated at Sun Nov 8 23:32:13 2026 by rpki-client