$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json) Hash identifier: gnexWF29Fh5NOOsqeVqpuN7sn15YCdgpdYwSrYL76n8= Subject key identifier: 74:A4:02:2E:F7:75:5E:96:01:77:33:33:28:A7:48:43:CB:33:E2:AE Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 01A1AABA4EA263C463908BD7FFC88F21B129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft Manifest number: 1B2A Signing time: Thu 05 Nov 2026 08:01:38 +0000 Manifest this update: Thu 05 Nov 2026 08:01:38 +0000 Manifest next update: Fri 06 Nov 2026 08:01:38 +0000 Files and hashes: 1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=) 2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=) 3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: 57wuYZgSj3menBgFY1QWAslOsof5QXhpb0oEWWKEOE8=) 4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=) 5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=) 6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=) 7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=) 8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=) 9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=) 10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=) 11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=) 12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=) 13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=) 14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=) 15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=) 16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=) 17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=) 18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:aa:ba:4e:a2:63:c4:63:90:8b:d7:ff:c8:8f:21:b1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Nov 5 08:01:38 2026 GMT Not After : Nov 6 08:01:38 2026 GMT Subject: CN=74a4022ef7755e960177333328a74843cb33e2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:21:3d:b1:14:85:4c:f8:c2:d9:b9:f9:a6: eb:64:e4:39:d0:ac:09:f7:0f:44:9b:dc:b4:52:0b: f9:37:35:9b:d5:19:a5:37:e8:6a:ee:ca:a4:87:18: bd:6a:ff:43:b5:ea:5b:15:59:3f:3e:8c:7f:ea:27: eb:12:57:48:2a:e7:9c:96:d7:3c:73:e8:d2:1f:d6: 43:2e:a1:d1:4e:62:4b:2d:2b:d3:6e:bc:66:3d:6d: ac:ad:56:f4:f7:31:47:b8:c0:de:3c:a0:cc:52:38: fa:a8:2b:77:51:c8:c5:46:83:0d:fb:97:a8:0d:ae: 31:06:7d:ab:7c:e9:1c:8c:ad:1b:43:a7:24:d5:11: e3:0d:c8:2b:e4:f1:36:ea:f8:d3:77:25:c8:89:9e: 4d:f6:10:de:3e:83:b5:06:07:32:59:99:81:d3:59: cc:67:81:4a:bd:50:9c:12:dc:80:96:d6:5d:5e:50: 6f:75:69:52:60:e0:df:0c:0c:e5:cd:29:41:7e:ba: 60:40:89:45:90:48:61:f7:90:93:b8:b4:bb:84:4d: 37:b5:56:e4:38:9b:51:86:31:62:0c:67:0d:d1:29: 45:5f:11:6e:0d:d4:6c:a6:2e:15:54:4b:74:f7:bd: d8:a2:cc:59:6e:d0:a7:c5:9f:5d:0d:c0:8b:22:16: 20:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A4:02:2E:F7:75:5E:96:01:77:33:33:28:A7:48:43:CB:33:E2:AE X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:66:eb:2b:21:cc:73:64:50:fd:55:23:58:36:ff:ab:70:16: c2:d4:5d:40:aa:8d:76:39:a2:fc:33:db:bb:9e:70:c2:8f:b6: e4:33:4b:29:d6:1d:70:92:3f:8e:bb:7e:f2:25:e1:16:b9:ee: fa:95:35:13:c9:ad:8b:a0:f1:33:98:67:7d:3b:66:42:25:63: 52:5f:92:77:36:03:e5:6e:60:c5:a2:84:d0:55:0f:68:8f:92: bc:76:2c:3e:96:d4:9e:91:17:da:ec:5e:89:de:47:8a:26:86: 88:14:72:a5:d7:a1:0b:81:0c:5f:ec:60:a4:16:a5:a0:57:94: c7:f9:20:a7:da:13:22:3b:b2:c9:10:23:65:93:82:02:d5:78: 21:68:8e:87:e5:b9:f5:11:87:d8:c1:fc:13:c3:4d:06:f8:4e: 88:0b:15:b7:58:ca:fa:54:59:3e:fe:6a:a5:5b:a9:d0:87:fd: 5e:a0:04:06:bb:65:0f:20:89:17:28:e1:5f:f7:b5:b4:b7:b8: 61:8d:9e:de:74:3a:b3:49:b8:d8:74:77:21:99:b1:00:c7:b9: 0b:ed:34:25:61:97:22:7e:c8:5f:8a:37:53:e9:1f:a0:05:f3: 3f:3b:3a:8f:1b:2c:b9:7f:41:fd:3f:fb:79:98:84:33:1a:d0: c2:b1:11:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGquk6iY8RjkIvX/8iPIbEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYxMTA1MDgwMTM4WhcNMjYxMTA2MDgwMTM4WjAzMTEwLwYDVQQD Eyg3NGE0MDIyZWY3NzU1ZTk2MDE3NzMzMzMyOGE3NDg0M2NiMzNlMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3QhPbEUhUz4wtm5+abrZOQ50KwJ 9w9Em9y0Ugv5NzWb1RmlN+hq7sqkhxi9av9DtepbFVk/Pox/6ifrEldIKuecltc8 c+jSH9ZDLqHRTmJLLSvTbrxmPW2srVb09zFHuMDePKDMUjj6qCt3UcjFRoMN+5eo Da4xBn2rfOkcjK0bQ6ck1RHjDcgr5PE26vjTdyXIiZ5N9hDePoO1BgcyWZmB01nM Z4FKvVCcEtyAltZdXlBvdWlSYODfDAzlzSlBfrpgQIlFkEhh95CTuLS7hE03tVbk OJtRhjFiDGcN0SlFXxFuDdRspi4VVEt0973YosxZbtCnxZ9dDcCLIhYgdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSkAi73dV6WAXczMyinSEPLM+KuMB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWbrKyHM c2RQ/VUjWDb/q3AWwtRdQKqNdjmi/DPbu55wwo+25DNLKdYdcJI/jrt+8iXhFrnu +pU1E8mti6DxM5hnfTtmQiVjUl+SdzYD5W5gxaKE0FUPaI+SvHYsPpbUnpEX2uxe id5HiiaGiBRypdehC4EMX+xgpBaloFeUx/kgp9oTIjuyyRAjZZOCAtV4IWiOh+W5 9RGH2MH8E8NNBvhOiAsVt1jK+lRZPv5qpVup0If9XqAEBrtlDyCJFyjhX/e1tLe4 YY2e3nQ6s0m42HR3IZmxAMe5C+00JWGXIn7IX4o3U+kfoAXzPzs6jxssuX9B/T/7 eZiEMxrQwrERVQ== -----END CERTIFICATE-----Generated at Thu Nov 5 17:37:27 2026 by rpki-client