$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: SMPGXnT0L+tCM9py2s+gSUfpAaDz5/Quy4B1UOjYq6Y= Subject key identifier: 44:FC:DD:54:B4:E8:73:DD:95:02:8F:16:D8:9D:44:C4:52:B7:8C:A0 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 01A1DEA759DD65D14D707B5310384E87AFE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0691 Signing time: Sun 15 Nov 2026 10:01:11 +0000 Manifest this update: Sun 15 Nov 2026 10:01:11 +0000 Manifest next update: Mon 16 Nov 2026 10:01:11 +0000 Files and hashes: 1: 47NmL-owZnCv7b48I3BZdXLeC6I.roa (hash: 2r4+rvzpQHT2sTCtsSf0XCU5hyxF6MsSPvh70V2zWnE=) 2: BpN_MX8E1XuM8uywmc2VLHT99Ww.roa (hash: kT4mShQPH9Q6L73eC0XuNc9aapyH70bUcctdhXSPy6k=) 3: Ch0KMcWYl1lNQdRFqOdfr3bVEWU.roa (hash: 5peCY6ZJkFMRR8ZsKV+hum6ICh9UuZ4TTZEuhbgVOew=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: dR8RLDeY+bOAuFIj3ZZDE0sXeRZJuWnDoUK29MQAUwQ=) 6: LgUUeqh3ims71RnrUA_xarGOS54.roa (hash: XM8ylwmVXASMTtkjCxORM+AIHZRMGcONYjUO8loTY5w=) 7: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 8: NkjBzUEcHjLjugdyiaeKahyIUMg.roa (hash: H3Io9lPIkgtXy8ufucpyh/8GdeE5m+gvQgWifyB0OQI=) 9: Qgs4lcmCzDX-kdy4tyN672rVdfk.roa (hash: 1EDrEvonFeQi4aw3MDFJzY2tH5hklkJHZC7pSUxX7/8=) 10: RYDhKRkRG2be5eJYguaw4egJQ_A.roa (hash: XNciJVW8uB0sh/Jk2Ar9A/fadZbhVweezLz+rf25fHE=) 11: dAakLpRgYzwH6NmdTnGSoVFHlX4.roa (hash: U31+XRpqflKCiE3c9LBDBzBVhjK27D2JE5VGYzOI044=) 12: dG-Q6f1ees70qGWY8up7tmZFm4o.roa (hash: +I28ccsElSRN0OznuwYuP5RrrHtPCI9sEswyp97q8PA=) 13: sQ-tfoWCGQrc0Qt6ALrz-TpQPl8.roa (hash: fT2M+r8rleAmXEoh9rtqdUptHk5oEfX2H8gdvRcRSB0=) 14: vrDhZX2ZNfjnx26fxl3vAAI9s6E.roa (hash: 84pKlbPZ9+QV78kYwmFxovpheGyIQe5S0FnW9646W5M=) 15: ynt3r0cs6-OXch9EjhqZLXEbO08.roa (hash: VvIMwaJW4FbFMcc+rnhoKYv6PyrqvkVUh5iRv8S6OdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:a7:59:dd:65:d1:4d:70:7b:53:10:38:4e:87:af:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Nov 15 10:01:11 2026 GMT Not After : Nov 16 10:01:11 2026 GMT Subject: CN=44fcdd54b4e873dd95028f16d89d44c452b78ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:94:02:4f:70:53:28:15:c4:f7:8d:9b:a1:08: 83:3a:7a:20:de:03:01:66:8d:a2:01:03:83:09:e6: de:ff:6c:e8:d5:6b:c0:83:0c:68:6a:b1:c2:5e:ca: a4:11:a5:58:06:10:82:06:17:97:9c:3b:84:6b:45: d6:77:4a:a5:59:58:cc:25:99:fe:3e:e0:89:59:7f: 27:bd:1d:9d:c0:e2:a7:02:78:c2:ce:f9:51:ce:8e: 0f:fa:cd:45:c1:59:f5:f4:c5:08:e8:9c:13:6a:b0: 6f:31:61:60:8f:05:44:92:6c:a3:3e:8b:96:7c:a5: 11:9b:89:45:a4:64:63:4d:6a:49:83:36:52:89:e9: e9:fb:10:9e:df:9c:78:96:6c:5e:cf:eb:b8:e7:74: 3c:0a:16:e9:87:f9:bd:10:33:3f:71:2d:88:3d:42: 22:fc:39:8d:f5:1c:e8:96:f2:f0:b3:69:50:9a:e7: 97:03:fd:b2:7b:a9:2e:da:a8:38:7e:8b:38:a2:98: 5f:cd:aa:e8:a7:9a:5a:05:85:85:c0:b2:e7:c0:3d: eb:07:b1:15:77:f7:80:b5:37:7d:e5:26:9b:d4:fb: c1:a0:a5:bd:7a:c5:c6:9e:0b:1f:0d:5b:8c:ed:65: 37:94:7a:d3:1b:27:ec:bd:94:72:47:04:87:b7:2e: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FC:DD:54:B4:E8:73:DD:95:02:8F:16:D8:9D:44:C4:52:B7:8C:A0 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c0:fd:99:7e:94:a6:0d:63:95:b2:ae:9f:03:43:ef:c5:aa: 5f:31:49:57:44:8a:10:69:8e:b2:49:bb:d6:bb:ad:77:41:90: aa:ee:35:72:64:dc:29:9a:8e:74:8f:10:fb:1f:83:b9:16:c9: d8:1d:85:e6:d1:96:16:1d:10:34:0e:ef:3b:3a:a8:81:f4:56: eb:1c:e1:5a:10:fa:2b:d4:c0:b2:1b:ef:17:27:9c:39:c5:23: 3e:16:4f:0d:f0:3f:d3:ac:f5:c4:a5:6c:7e:4b:f9:6c:24:c3: 93:07:56:16:79:f3:8e:c5:cd:03:e7:a7:0f:8c:b5:e7:bc:5b: da:f9:0c:e1:0d:7d:b8:45:ac:5b:61:bd:43:50:1d:ce:7b:3a: 67:60:2e:da:12:f3:47:fc:4b:4e:d8:bc:9b:ae:e5:66:4b:60: c2:f3:b9:a3:1b:7e:66:2f:80:b7:00:e3:e1:48:07:29:83:53: 55:f8:97:ca:3d:e5:bc:ec:09:5c:4f:60:bd:8e:cf:6c:8b:f4: 03:20:36:4a:11:e9:e7:eb:1e:24:51:26:8e:0e:c8:fe:b9:69: 63:28:2b:83:df:b2:67:6c:43:38:05:d0:ee:e7:e7:da:20:45: bc:49:e7:c7:d6:31:47:73:dc:53:f1:b6:da:99:70:f9:06:8b: 86:2d:ea:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHep1ndZdFNcHtTEDhOh6/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYxMTE1MTAwMTExWhcNMjYxMTE2MTAwMTExWjAzMTEwLwYDVQQD Eyg0NGZjZGQ1NGI0ZTg3M2RkOTUwMjhmMTZkODlkNDRjNDUyYjc4Y2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZQCT3BTKBXE942boQiDOnog3gMB Zo2iAQODCebe/2zo1WvAgwxoarHCXsqkEaVYBhCCBheXnDuEa0XWd0qlWVjMJZn+ PuCJWX8nvR2dwOKnAnjCzvlRzo4P+s1FwVn19MUI6JwTarBvMWFgjwVEkmyjPouW fKURm4lFpGRjTWpJgzZSienp+xCe35x4lmxez+u453Q8Chbph/m9EDM/cS2IPUIi /DmN9RzolvLws2lQmueXA/2ye6ku2qg4fos4ophfzarop5paBYWFwLLnwD3rB7EV d/eAtTd95Sab1PvBoKW9esXGngsfDVuM7WU3lHrTGyfsvZRyRwSHty7B4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFET83VS06HPdlQKPFtidRMRSt4ygMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsD9mX6U pg1jlbKunwND78WqXzFJV0SKEGmOskm71rutd0GQqu41cmTcKZqOdI8Q+x+DuRbJ 2B2F5tGWFh0QNA7vOzqogfRW6xzhWhD6K9TAshvvFyecOcUjPhZPDfA/06z1xKVs fkv5bCTDkwdWFnnzjsXNA+enD4y157xb2vkM4Q19uEWsW2G9Q1Adzns6Z2Au2hLz R/xLTti8m67lZktgwvO5oxt+Zi+AtwDj4UgHKYNTVfiXyj3lvOwJXE9gvY7PbIv0 AyA2ShHp5+seJFEmjg7I/rlpYygrg9+yZ2xDOAXQ7ufn2iBFvEnnx9YxR3PcU/G2 2plw+QaLhi3qCw== -----END CERTIFICATE-----Generated at Sun Nov 15 20:20:03 2026 by rpki-client