$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft File: I2nPaT78ECyTf6ynugnMyuxXSUg.mft (raw, json) Hash identifier: HOXuvFh2OWCwzE4fJh6engSAku4Bg6lk0W82r/QvKlw= Subject key identifier: 7B:8B:8A:53:AC:34:42:45:B9:04:57:D9:A3:A1:98:7F:35:A7:3C:38 Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48 Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948 Certificate serial: 01A1C497AD3EDC174536E2B1DA8AF45BA217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft Manifest number: 63 Signing time: Tue 10 Nov 2026 08:33:56 +0000 Manifest this update: Tue 10 Nov 2026 08:33:56 +0000 Manifest next update: Wed 11 Nov 2026 08:33:56 +0000 Files and hashes: 1: 1AzEpxlToHia7ywPgnnpmJzFraA.roa (hash: qYOvqOXpzVPmF6Jbc9HoDoRx2gEtj+0UY6m/irYtqjA=) 2: 71A9h0Xmpi9H52LTcEIaviKs9qA.roa (hash: hiTxLBdx3OiHGzipGK6KlUAdrKMkkhwZHuyfGdY9hFk=) 3: AnVQ5rvJ8Nv9B31xSEE5izjZF_k.roa (hash: K+8ZqReJUOtpCYUcc9njjUqF92rWYJDNcRpRRYLUMTQ=) 4: F6WbVBM2ed6CzHVsiaM6JSfLBmY.roa (hash: yy7erE1kQeH7YBSSxYURdeY4nnnAmeTCU2lvcl2vTrc=) 5: I2nPaT78ECyTf6ynugnMyuxXSUg.crl (hash: +qra+JxZqxhkLnGKMKEHgitVSe63yf7USk8psfJyAaM=) 6: Ky30bgCFAJiWkVqMq906lb5RTj4.roa (hash: n8TlDhgLBlnlOh2uvWKa+LVsP820Oh1C+WMR73t3uaY=) 7: PxnTuznRRPnTtD95MBnkEkGIaX4.roa (hash: X1si/MvNuRKn6WYCzUjbbp5bWEtLkuTOj59peP9essI=) 8: SxOEsOKlkwPwAhVhNZh162Id9xg.roa (hash: uimk6BQMFkeKcaZNFOZ6TrJ3Zj/3+kB/cftG69V6CiE=) 9: W8mPTIEzdqCr6CuimSI2xIlN6nc.roa (hash: niQYqrbB2YO+wZq7ONL7Jzh0l1/LdWEIbWmmurGVAL4=) 10: _yaKaBJToAURUuy5J_2ZX4emX3Q.roa (hash: vHbpbkcmG93GMQUubXccTbTZeqYaiq3hArr0LKitXxY=) 11: mboKspA8G9FkmFfcx8mA67v6opo.roa (hash: jBxkwjHZ4qEnzPoLX8zSdegfCvzp0ZrVo8U68KcaOoQ=) 12: t2eWHO6r_kmQaoKvKqbpMacuacE.roa (hash: FvpEwjPcGwIB6Jh0TDr3BNv2jGu+NiTIDWMXLmMwpi0=) 13: vMczrGi6ORE-yZOgy2L6w0bjkXo.roa (hash: UyMf8i98c5uUzf93NivYGmFTli1Mo2kNliLFP7sjKr0=) 14: vzeKzOkY-DTtAOj_7QBNyv6Yx8g.roa (hash: fudVMhp+cSBY7q1Syleky8IDgMK8QLdzt4Ad5bcZsDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 08:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:c4:97:ad:3e:dc:17:45:36:e2:b1:da:8a:f4:5b:a2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948 Validity Not Before: Nov 10 08:33:56 2026 GMT Not After : Nov 11 08:33:56 2026 GMT Subject: CN=7b8b8a53ac344245b90457d9a3a1987f35a73c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:50:b1:fb:02:61:87:a1:34:ec:e0:56:b7: df:f4:82:3c:af:93:07:a4:3f:6d:7f:6a:6c:24:0f: 78:d8:e5:60:81:f9:f7:ea:2d:2f:ba:d3:4b:8f:b4: 7a:ad:54:1b:a3:15:3d:0a:5f:99:99:92:29:ad:ae: 5f:2a:a5:75:4c:2e:f7:63:e2:41:00:6b:33:21:4f: db:4f:08:3f:f5:9c:73:4f:d3:58:13:ed:e2:e6:ba: c8:70:fb:d8:91:5f:83:a6:75:41:3c:30:48:27:c5: 67:a9:59:3c:5f:59:bc:32:c7:dd:96:a4:5e:33:fd: 88:85:05:d6:06:3d:1b:3a:e7:6c:4d:76:7a:53:06: ea:f7:59:42:0a:53:56:63:9e:f4:86:b4:5d:88:99: 4b:78:f2:76:62:48:b2:4b:af:6a:9a:4b:56:db:2f: e1:26:23:ff:6f:c8:8f:05:0b:c6:4a:5d:e4:42:d0: 28:c5:10:14:31:5e:7e:2e:06:2e:4b:cd:72:71:10: 4c:5c:fb:c2:6f:1c:10:1e:1c:8c:0f:3e:d8:b2:79: 8e:d5:9a:02:e9:b2:39:b9:40:57:b0:26:c2:f0:3e: c8:f5:a6:8d:f2:a5:49:90:d8:11:eb:88:5e:b5:52: 77:a6:d6:e2:8a:3a:64:6e:b9:d5:b5:52:f7:24:aa: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8B:8A:53:AC:34:42:45:B9:04:57:D9:A3:A1:98:7F:35:A7:3C:38 X509v3 Authority Key Identifier: keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:50:44:10:16:50:d6:3e:bc:44:ee:c4:52:ae:a5:3d:9a:28: 8f:2c:dd:a5:a1:23:fb:49:6c:3a:50:22:a6:1a:35:48:56:83: fe:e0:f5:0d:b6:2d:b0:ac:fc:cd:64:26:2a:7b:90:95:50:44: 8e:75:c7:70:cc:b9:b3:46:39:45:8c:12:2b:b2:44:3b:7c:83: 85:bb:12:b2:56:e9:88:38:b1:d1:ab:8f:b0:9a:87:b3:29:65: 62:3e:f3:a5:98:39:7c:97:14:a6:29:af:c9:32:4c:26:21:d8: 03:65:b8:f8:64:5e:e1:59:13:38:37:07:dd:f7:0b:50:50:d2: 3a:b6:c2:84:56:2b:16:d3:88:09:7b:a0:64:9f:e8:be:3b:56: 7d:82:06:6a:3c:75:9e:6c:d2:32:37:ec:44:90:cd:63:58:d1: 6f:b6:b1:b2:70:aa:27:12:fa:54:f4:cc:5a:43:05:fd:23:be: bb:42:9e:f4:7a:e1:60:df:6f:17:a7:49:07:48:cd:ce:c1:b2: 41:e8:f9:93:98:6c:78:3a:19:ff:60:eb:9a:8a:35:4b:c9:20: af:1a:80:80:fa:28:af:77:f0:79:bd:f3:2f:58:f6:38:1e:7e: e4:ab:36:fd:b8:9e:29:02:92:fc:fb:ce:1e:3b:8c:fc:62:67: 8d:38:fe:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHEl60+3BdFNuKx2or0W6IXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjljZjY5M2VmYzEwMmM5MzdmYWNhN2JhMDljY2NhZWM1 NzQ5NDgwHhcNMjYxMTEwMDgzMzU2WhcNMjYxMTExMDgzMzU2WjAzMTEwLwYDVQQD Eyg3YjhiOGE1M2FjMzQ0MjQ1YjkwNDU3ZDlhM2ExOTg3ZjM1YTczYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaxQsfsCYYehNOzgVrff9II8r5MH pD9tf2psJA942OVggfn36i0vutNLj7R6rVQboxU9Cl+ZmZIpra5fKqV1TC73Y+JB AGszIU/bTwg/9ZxzT9NYE+3i5rrIcPvYkV+DpnVBPDBIJ8VnqVk8X1m8MsfdlqRe M/2IhQXWBj0bOudsTXZ6Uwbq91lCClNWY570hrRdiJlLePJ2YkiyS69qmktW2y/h JiP/b8iPBQvGSl3kQtAoxRAUMV5+LgYuS81ycRBMXPvCbxwQHhyMDz7YsnmO1ZoC 6bI5uUBXsCbC8D7I9aaN8qVJkNgR64hetVJ3ptbiijpkbrnVtVL3JKriswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuLilOsNEJFuQRX2aOhmH81pzw4MB8GA1UdIwQY MBaAFCNpz2k+/BAsk3+sp7oJzMrsV0lIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEt MWRmZDVkOTc3YWRiLzEvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEtMWRmZDVkOTc3YWRi LzEvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1BEEBZQ 1j68RO7EUq6lPZoojyzdpaEj+0lsOlAipho1SFaD/uD1DbYtsKz8zWQmKnuQlVBE jnXHcMy5s0Y5RYwSK7JEO3yDhbsSslbpiDix0auPsJqHsyllYj7zpZg5fJcUpimv yTJMJiHYA2W4+GRe4VkTODcH3fcLUFDSOrbChFYrFtOICXugZJ/ovjtWfYIGajx1 nmzSMjfsRJDNY1jRb7axsnCqJxL6VPTMWkMF/SO+u0Ke9HrhYN9vF6dJB0jNzsGy Qej5k5hseDoZ/2Drmoo1S8kgrxqAgPoor3fweb3zL1j2OB5+5Ks2/bieKQKS/PvO HjuM/GJnjTj++A== -----END CERTIFICATE-----Generated at Tue Nov 10 19:29:29 2026 by rpki-client