$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: ohVzn9adyqAofp4KSUKcPJ1CBGm21uTUzWQ2fdnM5B4= Subject key identifier: 61:B2:83:2F:EC:F6:32:F0:83:4B:AF:9E:54:56:61:9B:CB:EB:8E:D8 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 01A1AA155682FA9D4FD2D657DF99A853D895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 1280 Signing time: Thu 05 Nov 2026 05:01:27 +0000 Manifest this update: Thu 05 Nov 2026 05:01:27 +0000 Manifest next update: Fri 06 Nov 2026 05:01:27 +0000 Files and hashes: 1: 4gQR9v1XwiLdTiSTiRMKrI8lrqc.roa (hash: MRbBk3qGxjhuCccskdZqQQxK0ZzrsYaT8isRc260EmM=) 2: 5KWHRpNfymzUQ2B3Ea2cQyyJGcY.roa (hash: LfQjs5A5ZwTBP33RPHEo3Y4xjeF10rJHbd8wCZMoub0=) 3: B4KYwS05QgHpINLFLm8jx9WAMUE.roa (hash: Y/ZtdGLIxiXNc+93eNU6l9a/8sOjOG7FjbIkKfPBPaw=) 4: CHlF7hxgiJMCvSrfgZpDmvUe7vo.roa (hash: 3cUTX1iPlbQoeoEy9GPcHhj4EZ6G/JFPu4+djGhZwgU=) 5: DTEIYKQEg-3cc4nyovdTEVZXI84.roa (hash: hLN894n7D6L17mAkhT/VjLR/oKc26Wp5ltD2GzuEB80=) 6: DnQ7ttyDp-n0qH7kJOUMT7Ovd20.roa (hash: pJz32/L309cCRg1kd6bXr/IK1eG3h4nDSk2kO5saa98=) 7: JV4tsenikcUJ5aMnjNBdbcekaPE.roa (hash: PNp+LkFobf83gsUva0tfRNy52whV7WCfMpt/jax/3kY=) 8: J__1HHACshyPBDOUFdqrFfiSJ_s.asa (hash: P4+NQewmqawZRA1cbeRpbU6AVi0HkrkZVkGActNtwQ4=) 9: O5MpWWAIngvdNCIvP59Ugg-k22w.roa (hash: IIiXMVL+EFWSPDF6ZVIvXgN6h4ljFTOq3BqqTal5ll8=) 10: TFWQMBrTQ_CUA4Cak7djWi9jRiA.roa (hash: iHPrQntxBQ8Yfodv7+5kSSwaLAG1oIn9WUEjo4EhvoI=) 11: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=) 12: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=) 13: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=) 14: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=) 15: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: kN2hPltL3H5+V8HKSzsMwsyCnUJcRt9wSBng8uqgMqk=) 16: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=) 17: icJ83CBbDvFQpi1w8Hj4BK7Axwk.roa (hash: CKkLwTTQ3XocqCldCg44Vv/FxtinExcVSUkafGMYqnU=) 18: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=) 19: xakVfcHMl_3waxWLag9wjIyIEyY.roa (hash: 8zAufra/LX45mNIP6WBoxyrn6rEShlzjSf5RR8HSpQA=) 20: zqTDWnmSlSWX01iiSNinTnu0Zp4.roa (hash: ZNxewe66vaT/4odCrv5OwpxaOR47BEPKOgzkNOaHMeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:aa:15:56:82:fa:9d:4f:d2:d6:57:df:99:a8:53:d8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Nov 5 05:01:27 2026 GMT Not After : Nov 6 05:01:27 2026 GMT Subject: CN=61b2832fecf632f0834baf9e5456619bcbeb8ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:21:84:b0:5e:99:f4:63:74:e5:1d:97:b1: 87:0d:c9:34:3a:16:1a:19:50:38:f7:84:d6:38:0f: 19:16:fe:a3:1f:a1:ef:d9:bf:e9:e2:af:c6:54:57: 98:59:a3:3f:ea:54:83:b7:83:f0:bf:e7:c1:00:d7: 88:b7:66:56:0d:56:7f:96:fb:aa:c3:d9:c7:9d:54: d8:ba:25:7c:e9:fc:41:1a:16:f1:ea:16:9d:56:87: 33:24:58:d9:aa:2f:60:b3:80:de:3d:9c:2d:d8:1f: 13:b6:c8:08:e3:e7:67:0f:13:04:4f:c6:34:06:02: af:55:7d:13:ac:89:7b:29:bc:21:5d:cb:34:be:2d: 74:cc:65:05:4f:ea:f1:35:f6:71:4a:0f:e4:65:b6: b9:31:32:ff:a4:28:10:1d:6d:1c:fe:46:5e:47:3b: 60:b2:bb:76:ef:06:3f:77:6d:a3:51:15:00:c7:8d: f4:44:ad:f8:2d:2f:34:62:13:90:59:d7:4b:bc:97: ef:be:08:60:d6:53:d2:3f:17:8b:ad:63:a0:5c:81: 68:ee:f6:a1:3c:25:2a:5c:20:32:8c:ca:05:e8:41: ed:4c:e4:26:09:aa:52:cc:4f:93:45:e4:cf:26:08: b5:59:5e:13:78:34:02:cb:42:f4:e1:80:af:9d:f3: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B2:83:2F:EC:F6:32:F0:83:4B:AF:9E:54:56:61:9B:CB:EB:8E:D8 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:f4:b6:1a:68:a6:f0:32:29:a4:83:b4:4b:9d:9a:26:46:45: 08:48:96:ae:35:d2:81:86:93:2d:46:b9:96:8e:2b:a8:ad:c7: f3:00:9b:e8:aa:00:43:67:bc:70:19:90:ec:b3:7f:5d:e8:c6: 67:2c:6c:7b:22:ee:78:31:07:b5:71:54:b9:07:81:3a:32:ad: 1f:61:68:84:d5:3d:57:0d:fa:f0:2a:3e:86:0b:fb:40:a2:0e: 96:7d:a7:2e:a6:b4:34:1e:2d:63:82:a1:8a:f1:5c:0d:e9:8b: 61:8c:12:b5:70:b9:fb:a4:0b:de:2a:20:33:a1:08:2a:c8:f6: b7:2d:1c:ef:0f:2d:d7:49:88:83:7b:64:dc:1c:8f:cf:23:00: 29:ed:5d:70:99:17:9b:46:87:ed:74:c7:9a:73:fa:2b:45:6c: 2f:b4:8c:d2:70:92:b2:b4:43:4f:fc:e8:7e:b8:2b:0b:cc:a5: 14:57:72:85:e2:61:d9:61:d8:bd:7a:8c:3b:27:aa:60:6a:b4: e6:ed:2b:4d:7b:e7:4b:ac:41:f8:74:d8:ad:de:2c:27:a8:9c: 08:78:73:94:fd:d6:e8:55:b5:86:59:c7:b8:fc:11:4b:80:c0: da:41:a1:c1:fd:ee:37:d0:8a:29:d5:59:9f:27:62:3e:ed:9e: c8:11:9d:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGqFVaC+p1P0tZX35moU9iVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYxMTA1MDUwMTI3WhcNMjYxMTA2MDUwMTI3WjAzMTEwLwYDVQQD Eyg2MWIyODMyZmVjZjYzMmYwODM0YmFmOWU1NDU2NjE5YmNiZWI4ZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKYhhLBemfRjdOUdl7GHDck0OhYa GVA494TWOA8ZFv6jH6Hv2b/p4q/GVFeYWaM/6lSDt4Pwv+fBANeIt2ZWDVZ/lvuq w9nHnVTYuiV86fxBGhbx6hadVoczJFjZqi9gs4DePZwt2B8TtsgI4+dnDxMET8Y0 BgKvVX0TrIl7KbwhXcs0vi10zGUFT+rxNfZxSg/kZba5MTL/pCgQHW0c/kZeRztg srt27wY/d22jURUAx430RK34LS80YhOQWddLvJfvvghg1lPSPxeLrWOgXIFo7vah PCUqXCAyjMoF6EHtTOQmCapSzE+TReTPJgi1WV4TeDQCy0L04YCvnfOaYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGygy/s9jLwg0uvnlRWYZvL647YMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfS2Gmim 8DIppIO0S52aJkZFCEiWrjXSgYaTLUa5lo4rqK3H8wCb6KoAQ2e8cBmQ7LN/XejG ZyxseyLueDEHtXFUuQeBOjKtH2FohNU9Vw368Co+hgv7QKIOln2nLqa0NB4tY4Kh ivFcDemLYYwStXC5+6QL3iogM6EIKsj2ty0c7w8t10mIg3tk3ByPzyMAKe1dcJkX m0aH7XTHmnP6K0VsL7SM0nCSsrRDT/zofrgrC8ylFFdyheJh2WHYvXqMOyeqYGq0 5u0rTXvnS6xB+HTYrd4sJ6icCHhzlP3W6FW1hlnHuPwRS4DA2kGhwf3uN9CKKdVZ nydiPu2eyBGdnw== -----END CERTIFICATE-----Generated at Thu Nov 5 10:18:00 2026 by rpki-client