$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: P/FkxHpaWbaVvn0K5T2EtSYXFpPvf9OJgrO3GniMNZc= Subject key identifier: 00:E4:21:FA:E6:07:51:DC:6B:9E:90:B3:7C:E3:0A:DD:7E:D4:04:B3 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 01A1AC034BA225EFDDE07761357FC9BB1129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 19FC Signing time: Thu 05 Nov 2026 14:00:59 +0000 Manifest this update: Thu 05 Nov 2026 14:00:59 +0000 Manifest next update: Fri 06 Nov 2026 14:00:59 +0000 Files and hashes: 1: 32SKa40WKweNz--8fYvohpIQNdM.roa (hash: CvIxVpDQSBHDmG9fei/qmX2fiAr7YysgDexobJcNjQc=) 2: 55lTuhAI20BHIf-zeSdkeAFaMAg.roa (hash: 6WOjfM5Zbb9/cs9Lu29lst5KqtNeJQ6bLtoEOKJiPTQ=) 3: 7NA2LegCljPM-6ilz2F5cnaoBJw.roa (hash: qjOTsmyHG6MOUTIadkX/zmkZDlAkqPzHJKetzF1R3ds=) 4: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=) 5: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=) 6: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=) 7: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=) 8: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=) 9: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=) 10: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=) 11: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=) 12: OOZCU9RDZbWm90IHhggbkADAyok.roa (hash: yzkJaDkuzS/Q97fyxLhVwM/SdV10qs3BxmQUOzU77kU=) 13: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=) 14: X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa (hash: lAKtM50aILYHfyj/dnL/G2PsJlkpfMmR8vppwS3z8KU=) 15: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=) 16: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: 37g6NxFkYrZ3BoEJ1TJSZebRSl+ideJUxRAEOuWGP/M=) 17: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=) 18: jVvCjidFfK-8IL92OyEeuSlStW0.roa (hash: 95JD6YEa33c2IW5jEGSMsvaX4Vq46tjO1+Oed4maTyw=) 19: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=) 20: twRPR7YMxdedDnIoOoDSSMLLV5I.roa (hash: iG5iFiWGGZ1ctfdvgUYVkBJLEXDfn4PbykZkkKVwlz8=) 21: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=) 22: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:ac:03:4b:a2:25:ef:dd:e0:77:61:35:7f:c9:bb:11:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Nov 5 14:00:59 2026 GMT Not After : Nov 6 14:00:59 2026 GMT Subject: CN=00e421fae60751dc6b9e90b37ce30add7ed404b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:11:22:df:cf:5e:fe:be:f2:b5:a2:71:0f: ac:3d:7f:a1:9b:dc:44:12:25:87:f9:77:88:74:93: b9:18:46:43:56:a3:ba:f4:90:68:18:3a:9d:60:6c: a0:9f:81:05:27:a2:24:93:52:8f:d4:8e:05:45:61: 22:b9:41:40:ef:2d:2b:d2:f8:2e:cc:7f:01:40:c0: 4c:70:f4:9d:9a:96:c7:ed:c1:83:5a:64:34:54:22: 83:7f:6f:19:eb:7d:91:da:a5:66:2d:2c:89:ad:86: 39:1d:80:f9:b5:1f:ac:b8:75:13:80:55:89:e9:66: 06:50:3f:be:22:a8:82:ca:3a:50:22:33:0f:ea:4b: 6a:f6:9b:e5:13:d2:a6:87:2e:fb:ab:5d:19:ec:8e: ea:72:a6:ab:7a:ad:30:c1:f1:a6:ed:05:22:74:2f: f5:d3:f2:e6:4a:1a:67:f8:ff:f6:37:bc:3c:38:59: 1d:c0:65:b1:1c:7f:8f:d5:e2:cc:31:56:98:73:ed: dc:08:0d:76:61:90:be:f2:33:6f:f3:d3:4a:b7:d0: 0c:46:1e:48:1f:19:ae:a4:31:30:5e:59:4e:f7:7d: 32:e2:38:f7:15:c4:ef:12:97:44:87:5f:72:c9:02: 50:ff:e9:b8:41:ad:67:47:be:c3:69:92:0f:c9:a5: 24:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:21:FA:E6:07:51:DC:6B:9E:90:B3:7C:E3:0A:DD:7E:D4:04:B3 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4b:6d:9a:0b:8b:5b:ce:71:e7:18:b7:32:2d:a7:88:ed:8d: 54:20:fd:2f:9a:21:da:54:ca:0d:f7:9a:11:8a:c9:ef:35:1e: 8c:59:88:ae:d3:e4:a4:b1:45:7d:81:65:d3:2b:ae:14:d9:8c: 9e:23:b0:73:63:ff:47:bf:f2:1e:7c:75:25:33:c0:75:3c:33: a6:69:4a:b3:84:55:4b:3a:b8:aa:02:1c:07:93:95:b7:c9:b0: 89:eb:76:f8:7e:43:7c:ac:d5:81:4d:ae:3d:e8:2c:7a:06:2a: 82:64:90:70:e9:ca:eb:72:c0:aa:84:3f:49:9d:f5:45:72:2a: 7a:7b:b6:c8:27:c2:61:59:70:5b:07:1d:fc:13:9e:32:9b:43: 7c:6c:41:19:8b:fd:d3:b6:a1:5d:85:f2:4b:dd:74:6b:7c:17: 07:40:3c:84:e2:f9:d9:84:8f:e8:66:61:bc:82:d5:02:e0:d6: 7a:56:8c:f1:7c:c1:bb:c5:21:f7:70:fd:3a:69:6e:c4:5b:aa: f4:4d:88:e6:2d:57:01:1c:72:98:e6:64:a6:83:ec:33:6e:5b: d1:9f:4c:37:2a:5f:6b:d2:e9:b6:10:56:89:19:04:f8:5a:4a: d2:d7:b6:6f:da:3a:63:43:b7:58:36:7f:d2:42:a5:46:56:23: aa:6e:61:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGsA0uiJe/d4HdhNX/JuxEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYxMTA1MTQwMDU5WhcNMjYxMTA2MTQwMDU5WjAzMTEwLwYDVQQD EygwMGU0MjFmYWU2MDc1MWRjNmI5ZTkwYjM3Y2UzMGFkZDdlZDQwNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqwRIt/PXv6+8rWicQ+sPX+hm9xE EiWH+XeIdJO5GEZDVqO69JBoGDqdYGygn4EFJ6Ikk1KP1I4FRWEiuUFA7y0r0vgu zH8BQMBMcPSdmpbH7cGDWmQ0VCKDf28Z632R2qVmLSyJrYY5HYD5tR+suHUTgFWJ 6WYGUD++IqiCyjpQIjMP6ktq9pvlE9Kmhy77q10Z7I7qcqareq0wwfGm7QUidC/1 0/LmShpn+P/2N7w8OFkdwGWxHH+P1eLMMVaYc+3cCA12YZC+8jNv89NKt9AMRh5I HxmupDEwXllO930y4jj3FcTvEpdEh19yyQJQ/+m4Qa1nR77DaZIPyaUkoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADkIfrmB1Hca56Qs3zjCt1+1ASzMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkttmguL W85x5xi3Mi2niO2NVCD9L5oh2lTKDfeaEYrJ7zUejFmIrtPkpLFFfYFl0yuuFNmM niOwc2P/R7/yHnx1JTPAdTwzpmlKs4RVSzq4qgIcB5OVt8mwiet2+H5DfKzVgU2u PegsegYqgmSQcOnK63LAqoQ/SZ31RXIqenu2yCfCYVlwWwcd/BOeMptDfGxBGYv9 07ahXYXyS910a3wXB0A8hOL52YSP6GZhvILVAuDWelaM8XzBu8Uh93D9OmluxFuq 9E2I5i1XARxymOZkpoPsM25b0Z9MNypfa9LpthBWiRkE+FpK0te2b9o6Y0O3WDZ/ 0kKlRlYjqm5hRw== -----END CERTIFICATE-----Generated at Thu Nov 5 19:00:17 2026 by rpki-client