$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: CxWb2++MUfGJZcpN/vSuvzLEZzWp25qj3lmHS5j/t5Q= Subject key identifier: 73:95:A3:AE:38:E2:F9:36:3C:B2:CF:37:98:F7:17:D9:54:25:EB:B2 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 01A1A9706475BFDC1BBF14D219A38A32B5BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1BE7 Signing time: Thu 05 Nov 2026 02:01:17 +0000 Manifest this update: Thu 05 Nov 2026 02:01:17 +0000 Manifest next update: Fri 06 Nov 2026 02:01:17 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: XHd5XIEPxYet3Fy07HB2LY/I1GTdapCXwUU5KQZCMB0=) 3: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 4: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 5: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 6: 8s9uSzf6TvkzP7AMAwk-J-bBoaI.roa (hash: HhHYyz7/gaXYnl+eOQvtBscobpbKRyobYY7K5LG1gFs=) 7: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 8: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 9: TXlLEnNppB9-42MicxVSv0AD89s.roa (hash: 4BRzHt6i5rhUx8Gn0duaKc4epEbaN21vfKkM+2RiOzA=) 10: Wema0fZ8Ddt7AXAOBiG5C9cJ8R8.roa (hash: BS+m6QKoa5uzAdSrCNdkgOO4WKhkOy9Vf0VF6LGRzbg=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 15: nddrSrqkmIh5r3mUP_YPTfRYbw0.roa (hash: klQvae5yvx8v/ktwmNkFOD7L8raFwBKZKmWhNitbanc=) 16: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 17: wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (hash: 7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 02:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a9:70:64:75:bf:dc:1b:bf:14:d2:19:a3:8a:32:b5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Nov 5 02:01:17 2026 GMT Not After : Nov 6 02:01:17 2026 GMT Subject: CN=7395a3ae38e2f9363cb2cf3798f717d95425ebb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:39:60:f5:0c:33:72:1d:f9:11:1d:6f:25: 74:b2:72:0a:ed:b8:11:62:35:3e:87:55:0a:69:7d: ba:9a:47:6b:07:2a:26:87:e0:71:f5:c0:ab:be:66: 18:e3:bf:11:cb:49:e1:78:16:aa:fc:54:d8:52:d0: 41:68:48:28:29:48:d1:6f:80:9f:32:28:6f:70:c0: a2:d0:89:6f:02:be:e0:17:a9:c9:38:5c:8d:55:d9: a8:b8:7f:d1:e2:39:d2:31:21:20:91:4c:e8:c8:f9: b2:ae:74:10:84:d6:90:ea:32:d4:e4:9d:75:82:86: 06:0c:af:6d:22:26:59:c1:05:6a:32:64:d7:93:aa: 0d:3d:91:18:15:40:cc:4a:7d:97:cf:3a:bf:e0:5f: 03:9b:11:f4:cd:71:f7:f5:d2:41:ec:c9:c4:47:33: 55:84:58:cb:db:e3:d9:cf:e9:0e:9f:6a:69:a5:43: 11:e7:3b:60:40:0e:09:6c:84:74:d1:f3:51:a8:43: fc:c7:79:2b:5d:ec:ff:dd:fd:bd:dd:11:72:49:30: 38:3c:70:83:3d:7c:94:9a:41:f9:88:f0:a2:5f:92: dc:50:b2:87:53:84:65:fe:b9:d5:a7:26:51:50:b5: 12:99:cb:70:f8:82:44:2e:38:27:b7:11:58:73:7f: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:95:A3:AE:38:E2:F9:36:3C:B2:CF:37:98:F7:17:D9:54:25:EB:B2 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:42:91:99:29:c5:3c:78:51:a8:f1:e8:f7:ac:1f:f1:6b:70: 4f:f8:f2:24:37:21:ff:51:d6:12:48:05:8e:87:db:b4:80:57: 21:39:f1:80:d9:b4:3d:91:32:36:80:d0:f6:e4:3e:54:9c:d1: a8:72:ea:f1:50:c5:80:c9:95:18:87:8f:9c:54:cf:ef:d8:d1: 05:a1:88:f2:71:75:f0:8e:2c:4b:b0:0c:bc:76:7a:12:95:20: 9e:ed:54:ec:28:43:58:bd:55:a2:71:f8:3f:6a:9c:e8:ee:a6: b1:ec:13:d9:fc:5b:22:c2:53:66:e2:8d:f9:dc:df:fd:7c:47: 29:2a:d7:05:d0:87:ab:36:b1:cc:9b:82:22:c8:11:02:19:c6: a8:aa:1c:9d:42:fc:94:ac:d9:87:d5:91:18:39:e4:dd:ab:2b: d5:aa:be:78:ff:76:5f:cd:14:2c:f5:14:ec:3c:bb:50:da:6d: d8:30:d5:f1:43:28:7c:e0:91:71:19:7e:e9:f3:4b:3a:3d:e4: 48:bc:ee:b4:e0:ba:6d:87:4b:03:a0:21:23:25:bd:b8:69:b3: 33:c6:25:e1:7f:b1:86:6e:86:6c:bd:be:81:80:5c:af:84:35: 42:5c:bf:62:0b:98:b5:3a:f3:bc:34:18:00:45:27:21:be:94: 65:8c:f7:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGpcGR1v9wbvxTSGaOKMrW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYxMTA1MDIwMTE3WhcNMjYxMTA2MDIwMTE3WjAzMTEwLwYDVQQD Eyg3Mzk1YTNhZTM4ZTJmOTM2M2NiMmNmMzc5OGY3MTdkOTU0MjVlYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzas5YPUMM3Id+REdbyV0snIK7bgR YjU+h1UKaX26mkdrByomh+Bx9cCrvmYY478Ry0nheBaq/FTYUtBBaEgoKUjRb4Cf MihvcMCi0IlvAr7gF6nJOFyNVdmouH/R4jnSMSEgkUzoyPmyrnQQhNaQ6jLU5J11 goYGDK9tIiZZwQVqMmTXk6oNPZEYFUDMSn2Xzzq/4F8DmxH0zXH39dJB7MnERzNV hFjL2+PZz+kOn2pppUMR5ztgQA4JbIR00fNRqEP8x3krXez/3f293RFySTA4PHCD PXyUmkH5iPCiX5LcULKHU4Rl/rnVpyZRULUSmctw+IJELjgntxFYc3+oMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOVo6444vk2PLLPN5j3F9lUJeuyMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUKRmSnF PHhRqPHo96wf8WtwT/jyJDch/1HWEkgFjofbtIBXITnxgNm0PZEyNoDQ9uQ+VJzR qHLq8VDFgMmVGIePnFTP79jRBaGI8nF18I4sS7AMvHZ6EpUgnu1U7ChDWL1VonH4 P2qc6O6msewT2fxbIsJTZuKN+dzf/XxHKSrXBdCHqzaxzJuCIsgRAhnGqKocnUL8 lKzZh9WRGDnk3asr1aq+eP92X80ULPUU7Dy7UNpt2DDV8UMofOCRcRl+6fNLOj3k SLzutOC6bYdLA6AhIyW9uGmzM8Yl4X+xhm6GbL2+gYBcr4Q1Qly/YguYtTrzvDQY AEUnIb6UZYz3ww== -----END CERTIFICATE-----Generated at Thu Nov 5 09:06:09 2026 by rpki-client