$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: KH6q6nasc0mEIXEedoT9ntpwhGBKdau6r16rioU2/aU= Subject key identifier: 30:73:63:61:F4:C3:DE:6F:54:64:2A:F9:D9:AA:AA:2D:9C:E2:A0:58 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 01A1DFF1A49CC7F35217A042650CB4CAFE73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 17D8 Signing time: Sun 15 Nov 2026 16:01:57 +0000 Manifest this update: Sun 15 Nov 2026 16:01:57 +0000 Manifest next update: Mon 16 Nov 2026 16:01:57 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 4: IGouOJWc4uNihvHUwwYazk1uuQ0.roa (hash: KDlwGWPkhW1oiqwXMZhqW39BIU8yMFi7P7rybRyCLnc=) 5: KOWxSmH0_bapiUsF2I5NvMk2mAE.roa (hash: qlla291EA5iael/7BwH1F/97Ya9GRn26shYvkPQjZ4Q=) 6: OYUqnwa8yQK0vig2w6Um7A1Wcg4.roa (hash: vSXWDq1SS7TbMrb96ytcbFUS3oNQ6vxE3t+U54lGeWc=) 7: _qefhBTX4GrLHAKY0SuGouHYv88.roa (hash: ZZ2WFS7hoXoz7ExsxVHk1ghS6uAk+/8jwy793fgoALQ=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: cYegkqTDRQkQYBG0QAGLC43ERoE.roa (hash: Jj0rGclcjFrkbXAtvfPBQZbVxQ41VQry0fjFc8pn/lw=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: xY7l60Z/WqiRcHQVre/YD5tltrixUUdLsu+bDgcxDKc=) 12: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 13: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:f1:a4:9c:c7:f3:52:17:a0:42:65:0c:b4:ca:fe:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Nov 15 16:01:57 2026 GMT Not After : Nov 16 16:01:57 2026 GMT Subject: CN=30736361f4c3de6f54642af9d9aaaa2d9ce2a058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f6:5d:5e:92:60:95:46:6e:4d:69:fc:e0:cd: a9:c2:30:8e:c2:ba:6c:27:5c:7d:a7:ab:da:a4:75: c9:6c:80:52:32:64:63:23:b4:d0:d3:f6:36:31:2a: 73:ac:e8:0e:4e:30:b9:a0:b3:11:c7:e7:09:81:f0: 32:e9:b7:b8:60:3f:d4:7b:ec:e9:f6:00:28:5b:cf: 75:7f:b5:b8:2a:29:02:cb:6e:8f:dd:e9:af:ec:e7: 45:dc:94:c7:f5:34:89:ec:af:5d:ea:07:b3:f1:fa: 8d:5a:77:c4:b7:5d:c5:1e:c1:80:91:47:50:b6:f9: 2d:29:22:a0:ba:21:31:3d:bf:73:da:d7:99:f5:d9: 95:68:27:fe:2d:e4:af:2b:40:43:92:b8:e8:3f:ee: a8:7e:dc:fe:d3:68:6a:35:44:fc:20:f7:e9:94:36: 48:34:eb:3c:9e:73:35:ea:8c:b8:5e:2a:be:49:b7: 38:6b:3b:ab:cb:c8:aa:53:b9:88:42:1c:34:8e:cf: aa:8f:82:c5:cb:aa:8b:72:a5:54:65:9f:0f:8b:28: 27:25:e1:20:74:e7:5e:a6:ca:40:15:c5:42:a2:eb: 8d:c1:8f:9e:60:91:c2:0d:ff:47:d0:01:7c:e1:e4: 6c:c4:3a:26:89:d8:03:95:6e:c5:9f:c7:5a:0c:fa: e8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:73:63:61:F4:C3:DE:6F:54:64:2A:F9:D9:AA:AA:2D:9C:E2:A0:58 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b3:1c:b6:8a:85:02:76:f3:50:83:62:7f:35:5a:e1:96:90: 4a:81:a2:0d:60:78:b4:52:23:d4:3f:c8:31:f5:b4:09:53:be: 26:0a:bf:ad:0c:70:60:cf:2e:ae:cc:61:de:2f:11:3d:4d:70: f6:15:c2:22:d6:0d:fb:b2:48:17:5a:a0:0d:6a:27:b7:42:7c: 87:d3:18:e3:2a:8f:cc:a3:94:56:86:99:4f:e1:4f:e7:ed:3e: 9d:d3:b5:ec:e6:8e:50:e1:f5:b4:c0:6e:4d:ff:ef:74:cc:a5: fd:f4:39:f5:10:f6:de:e4:48:73:3f:42:0c:95:3b:23:66:3b: dd:94:48:7e:d7:c3:28:b9:c5:15:1d:ec:5a:f9:83:f7:7a:d9: 15:4f:e5:b3:30:28:d5:5f:13:38:46:c7:75:d3:72:69:99:51: 9f:08:53:38:cb:03:77:37:34:a5:dc:43:ce:bf:ab:fe:b7:a2: 48:df:1f:58:ee:aa:d0:c2:ed:58:a3:e6:dd:28:74:9e:6e:90: 7b:99:4e:fe:e8:ec:f3:66:e1:b9:12:2e:fa:fb:fd:4e:59:2f: 8a:b9:4b:17:01:26:1d:e6:65:f4:70:29:cb:83:82:b2:b9:e6: b5:52:9a:b8:6f:21:2c:1b:ab:c3:35:80:fa:ca:cf:67:4b:d0: 1c:ae:82:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHf8aScx/NSF6BCZQy0yv5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYxMTE1MTYwMTU3WhcNMjYxMTE2MTYwMTU3WjAzMTEwLwYDVQQD EygzMDczNjM2MWY0YzNkZTZmNTQ2NDJhZjlkOWFhYWEyZDljZTJhMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvZdXpJglUZuTWn84M2pwjCOwrps J1x9p6vapHXJbIBSMmRjI7TQ0/Y2MSpzrOgOTjC5oLMRx+cJgfAy6be4YD/Ue+zp 9gAoW891f7W4KikCy26P3emv7OdF3JTH9TSJ7K9d6gez8fqNWnfEt13FHsGAkUdQ tvktKSKguiExPb9z2teZ9dmVaCf+LeSvK0BDkrjoP+6oftz+02hqNUT8IPfplDZI NOs8nnM16oy4Xiq+Sbc4azury8iqU7mIQhw0js+qj4LFy6qLcqVUZZ8PiygnJeEg dOdepspAFcVCouuNwY+eYJHCDf9H0AF84eRsxDomidgDlW7Fn8daDPro6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBzY2H0w95vVGQq+dmqqi2c4qBYMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLMctoqF AnbzUINifzVa4ZaQSoGiDWB4tFIj1D/IMfW0CVO+Jgq/rQxwYM8ursxh3i8RPU1w 9hXCItYN+7JIF1qgDWont0J8h9MY4yqPzKOUVoaZT+FP5+0+ndO17OaOUOH1tMBu Tf/vdMyl/fQ59RD23uRIcz9CDJU7I2Y73ZRIftfDKLnFFR3sWvmD93rZFU/lszAo 1V8TOEbHddNyaZlRnwhTOMsDdzc0pdxDzr+r/reiSN8fWO6q0MLtWKPm3Sh0nm6Q e5lO/ujs82bhuRIu+vv9TlkvirlLFwEmHeZl9HApy4OCsrnmtVKauG8hLBurwzWA +srPZ0vQHK6CWA== -----END CERTIFICATE-----Generated at Sun Nov 15 18:39:20 2026 by rpki-client