$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: CSDhwh+c+l3H7AM/WsSxX7dlGbKfd/DUWHw5+5ch+YQ= Subject key identifier: 24:6B:8A:B1:AF:3C:53:2E:A0:C1:70:FC:B4:86:75:71:EE:50:63:3C Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 01A1DFBA554FB8A073BC98278909F834DF0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 18A4 Signing time: Sun 15 Nov 2026 15:01:32 +0000 Manifest this update: Sun 15 Nov 2026 15:01:32 +0000 Manifest next update: Mon 16 Nov 2026 15:01:32 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 3AjTzCwcAHqDzpj5JCDbz-EVZeM.roa (hash: 1ng0z2xlVsIrhjI/xq8uP8HCudf7NZZ8XBg+YLJwkNk=) 3: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 4: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 5: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 6: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 7: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 8: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 9: M-KPLxG9kRua3jww0tVvkGPTnsU.roa (hash: ieuTmf07XkxLPO0zu/suKGOPUrNWciqHfBXvEgPva2w=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 12: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 13: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: f796ou8CXva8tK6vR3wPw4yU2QxXMbknh0oX2xuZSts=) 14: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 15: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 16: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 17: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:ba:55:4f:b8:a0:73:bc:98:27:89:09:f8:34:df:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Nov 15 15:01:32 2026 GMT Not After : Nov 16 15:01:32 2026 GMT Subject: CN=246b8ab1af3c532ea0c170fcb4867571ee50633c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:68:b2:25:43:53:11:de:1e:8e:0c:1f:12: 1b:ff:99:d4:fd:eb:a1:97:07:18:b3:fd:21:4c:50: 23:45:3e:2e:54:90:81:2f:db:67:b4:9b:bd:f8:9c: c3:c2:3e:0f:a8:88:df:29:d1:b0:fa:44:57:85:cd: 36:93:2a:ee:b5:3d:9d:f4:32:d0:ce:93:03:a0:bb: c5:d8:7f:31:24:6b:0c:f0:41:e5:43:f5:ea:48:9d: 0c:54:9a:34:07:5e:58:b5:f0:d7:9c:36:32:01:c7: a2:2a:bc:e5:8f:78:5f:88:29:76:1d:fb:6f:93:2d: 3f:28:47:10:22:24:bc:df:46:8d:4a:15:52:18:2a: 6e:2c:62:77:80:28:61:d5:26:a7:f8:bb:05:77:9f: 8c:c9:76:37:99:2f:cf:78:ce:12:e2:81:d0:85:33: 7b:98:fa:f4:2a:96:c2:70:8d:be:b7:0c:c6:ff:6b: 03:2d:2f:e2:78:18:c7:0b:a2:fd:c9:63:71:d0:5b: 23:1b:27:1a:60:16:87:d8:59:01:7f:94:f9:f6:a9: 89:15:45:de:9f:bb:b6:b9:74:1d:36:df:a3:10:9b: ea:ee:38:fb:ac:c5:27:54:58:f1:09:ad:e4:7e:60: f6:ad:8d:98:eb:fa:7c:ac:65:5c:24:e0:4e:42:c7: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6B:8A:B1:AF:3C:53:2E:A0:C1:70:FC:B4:86:75:71:EE:50:63:3C X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bd:1e:2d:2a:c1:a6:8a:ac:a6:2e:b3:c3:0a:43:9f:4a:bc: 77:98:f4:20:bc:b0:bc:bb:71:55:4b:b0:01:f1:90:41:ed:67: b5:b6:8e:ab:09:e3:30:27:9d:6a:d3:3a:ea:f2:2d:08:2a:27: cd:c5:df:f5:94:e8:1d:ff:af:7b:79:e2:6e:f4:fc:a3:94:6a: 0f:b6:0e:7f:0f:e9:c1:d7:d9:9e:30:7e:2f:8e:ab:c7:05:4d: c4:14:0b:10:ca:0a:d4:d6:e5:f2:1a:6f:36:9b:25:02:a3:d9: 17:d1:49:d0:6d:fe:db:13:dc:e8:76:1d:81:de:ba:8e:1f:86: 68:c3:16:1a:bb:30:9f:cd:5d:9d:e2:87:b0:9e:67:d2:a4:02: b4:93:f6:72:ae:f6:71:11:26:ed:88:36:5c:d8:40:a5:27:3b: 96:72:fe:85:32:68:b8:3e:54:13:9a:89:3f:c4:fa:00:04:88: 74:8d:4c:3c:70:64:92:69:6d:60:c4:69:77:99:96:63:b7:c3: d1:cb:8d:57:b5:6a:5b:7f:9d:50:8d:76:ad:1e:b4:99:a3:af: 6e:54:54:61:49:2c:2a:d7:c4:06:42:72:f1:3b:53:90:d6:a5: 18:de:d4:6f:7a:04:c8:25:be:ea:ac:b5:d6:80:5d:48:d6:d3: 14:bd:f1:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfulVPuKBzvJgniQn4NN8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYxMTE1MTUwMTMyWhcNMjYxMTE2MTUwMTMyWjAzMTEwLwYDVQQD EygyNDZiOGFiMWFmM2M1MzJlYTBjMTcwZmNiNDg2NzU3MWVlNTA2MzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZNosiVDUxHeHo4MHxIb/5nU/euh lwcYs/0hTFAjRT4uVJCBL9tntJu9+JzDwj4PqIjfKdGw+kRXhc02kyrutT2d9DLQ zpMDoLvF2H8xJGsM8EHlQ/XqSJ0MVJo0B15YtfDXnDYyAceiKrzlj3hfiCl2Hftv ky0/KEcQIiS830aNShVSGCpuLGJ3gChh1San+LsFd5+MyXY3mS/PeM4S4oHQhTN7 mPr0KpbCcI2+twzG/2sDLS/ieBjHC6L9yWNx0FsjGycaYBaH2FkBf5T59qmJFUXe n7u2uXQdNt+jEJvq7jj7rMUnVFjxCa3kfmD2rY2Y6/p8rGVcJOBOQscUmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRrirGvPFMuoMFw/LSGdXHuUGM8MB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADL0eLSrB poqspi6zwwpDn0q8d5j0ILywvLtxVUuwAfGQQe1ntbaOqwnjMCedatM66vItCCon zcXf9ZToHf+ve3nibvT8o5RqD7YOfw/pwdfZnjB+L46rxwVNxBQLEMoK1Nbl8hpv NpslAqPZF9FJ0G3+2xPc6HYdgd66jh+GaMMWGrswn81dneKHsJ5n0qQCtJP2cq72 cREm7Yg2XNhApSc7lnL+hTJouD5UE5qJP8T6AASIdI1MPHBkkmltYMRpd5mWY7fD 0cuNV7VqW3+dUI12rR60maOvblRUYUksKtfEBkJy8TtTkNalGN7Ub3oEyCW+6qy1 1oBdSNbTFL3xjA== -----END CERTIFICATE-----Generated at Sun Nov 15 21:55:49 2026 by rpki-client