$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: QgUXI5wo4K58nyAfVJSnr9Ggqu1PWKcAqUI1ow6UM/s= Subject key identifier: 38:61:69:A0:9D:A0:0C:9A:26:F2:59:8C:13:E3:33:2C:22:90:66:13 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 01A1DDCB980B23B821B1DC7EBCEB7EC93BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1B08 Signing time: Sun 15 Nov 2026 06:01:09 +0000 Manifest this update: Sun 15 Nov 2026 06:01:09 +0000 Manifest next update: Mon 16 Nov 2026 06:01:09 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: HBl0Rm6dfrf1iY_U4mwPAhkoRow.asa (hash: et/qeDGZyKGUPEo1y4cBbfd4+Rbg7wAH2t0FCOQmWMU=) 6: LfkCmSO1I7GGpJ0of5l-0c5AGBc.asa (hash: UgfWuPDLjqxThrUgxhNFddbI4VXPReh33QeUjBvYjVs=) 7: LuOgAc37LU8V7dGgdj8hy6ymH64.asa (hash: pkN431oI3RFQuibIh8RwZRrzTHAA18y2t6J/hjni00c=) 8: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 9: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 10: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: LQ/OGxuqQr1smW+SvwnZQLZ9lSUO3hYSsi0kCOvFwIM=) 11: cIcqaLXZmekavhCmoIAJhBRw3JE.roa (hash: 8QflktthB1MZE1m+SbfCOvT58wwBH/AnF87SL9k5yss=) 12: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 13: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 14: oaZumtYBqB2DBSwMpqnmqOIkGm0.roa (hash: 9YqR7q1fJK+xrhMWwkV3smWMIV3JZ5y1OxTGOkJ6aPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:cb:98:0b:23:b8:21:b1:dc:7e:bc:eb:7e:c9:3b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Nov 15 06:01:09 2026 GMT Not After : Nov 16 06:01:09 2026 GMT Subject: CN=386169a09da00c9a26f2598c13e3332c22906613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:81:ee:3c:67:ed:f4:b2:42:94:11:42:e4: 87:f1:10:6e:0d:2d:3f:40:c4:31:c3:b3:8f:09:42: 95:cc:07:62:c8:23:fd:56:da:9b:46:99:9c:c5:6e: 2f:41:48:87:04:b5:8b:89:0e:2d:0d:57:36:53:d7: fa:65:42:ca:70:48:25:38:77:ba:ba:fc:fa:c4:91: 97:d2:03:51:fe:68:3d:51:fc:1a:87:06:e1:85:4e: d7:d6:3d:36:4e:00:ac:33:cd:72:51:07:51:46:ca: f6:cc:24:99:86:25:2b:3c:ae:8f:ed:7f:24:71:50: 57:b8:a3:65:91:f7:2a:19:b1:74:db:17:ee:c8:8a: 0f:28:41:b6:88:9f:7e:a5:ea:3b:b7:74:06:c5:11: f9:ad:ed:9d:c3:7b:cc:4f:a9:4f:c4:b6:04:9f:4d: b8:b8:ab:55:9e:f5:98:bc:99:bb:a1:98:36:b9:d5: fa:47:01:fc:45:11:85:b9:71:77:1f:08:4b:09:24: 36:3f:75:11:10:e6:59:df:a6:6e:0d:fd:e9:01:e6: 6a:a7:7c:2e:ad:56:5d:96:79:74:fe:5f:76:b3:4c: c4:dc:5d:91:58:41:7a:b8:04:d1:d1:7a:2f:cd:38: 3a:25:96:ae:72:f2:b2:4d:b1:47:a3:f6:49:0c:56: e0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:61:69:A0:9D:A0:0C:9A:26:F2:59:8C:13:E3:33:2C:22:90:66:13 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:85:47:3f:8c:34:08:c8:c2:6c:bd:ad:28:39:76:2a:32:01: 26:09:27:d8:5e:11:67:0f:0e:9e:6e:24:31:75:c6:95:6c:b6: 6f:0c:23:94:e1:be:e5:43:f2:f4:e9:96:00:d6:21:8a:0c:1d: 91:46:23:6e:43:19:44:e5:00:2a:73:b6:19:91:72:ab:78:9b: cb:9f:9d:1b:b9:6a:cf:8c:9a:51:b6:d7:34:65:ee:76:68:5e: c4:3e:96:f9:e8:be:5a:a2:5c:d4:ab:fa:87:d2:85:8b:d4:b5: f3:fd:e0:3f:9a:a8:04:bb:43:0e:98:65:db:a5:f0:bf:f8:e0: 6c:f3:4c:d9:af:2b:22:f8:59:87:2c:b1:72:33:d6:0b:8e:6b: 98:8f:1b:ce:40:59:e4:01:cf:a2:40:d4:bc:2e:99:55:83:00: 48:cf:04:85:33:95:d6:6a:2a:70:ad:4b:ca:73:6c:34:e1:8f: 80:02:04:9e:ec:9c:f5:d5:94:f5:f2:94:76:e3:07:3b:d2:49: ea:d4:f5:c7:0e:20:f3:d0:87:f4:16:f9:36:74:aa:f2:e1:6d: 06:04:fc:91:6d:54:a8:a9:9b:f0:97:b6:ef:a1:d5:23:d7:a5: 18:fc:19:28:2f:e6:a4:67:2b:22:5b:5d:95:b7:5f:5e:5c:d4: 87:c4:67:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdy5gLI7ghsdx+vOt+yTuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYxMTE1MDYwMTA5WhcNMjYxMTE2MDYwMTA5WjAzMTEwLwYDVQQD EygzODYxNjlhMDlkYTAwYzlhMjZmMjU5OGMxM2UzMzMyYzIyOTA2NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5CB7jxn7fSyQpQRQuSH8RBuDS0/ QMQxw7OPCUKVzAdiyCP9VtqbRpmcxW4vQUiHBLWLiQ4tDVc2U9f6ZULKcEglOHe6 uvz6xJGX0gNR/mg9UfwahwbhhU7X1j02TgCsM81yUQdRRsr2zCSZhiUrPK6P7X8k cVBXuKNlkfcqGbF02xfuyIoPKEG2iJ9+peo7t3QGxRH5re2dw3vMT6lPxLYEn024 uKtVnvWYvJm7oZg2udX6RwH8RRGFuXF3HwhLCSQ2P3UREOZZ36ZuDf3pAeZqp3wu rVZdlnl0/l92s0zE3F2RWEF6uATR0XovzTg6JZaucvKyTbFHo/ZJDFbgbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhhaaCdoAyaJvJZjBPjMywikGYTMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoVHP4w0 CMjCbL2tKDl2KjIBJgkn2F4RZw8Onm4kMXXGlWy2bwwjlOG+5UPy9OmWANYhigwd kUYjbkMZROUAKnO2GZFyq3iby5+dG7lqz4yaUbbXNGXudmhexD6W+ei+WqJc1Kv6 h9KFi9S18/3gP5qoBLtDDphl26Xwv/jgbPNM2a8rIvhZhyyxcjPWC45rmI8bzkBZ 5AHPokDUvC6ZVYMASM8EhTOV1moqcK1LynNsNOGPgAIEnuyc9dWU9fKUduMHO9JJ 6tT1xw4g89CH9Bb5NnSq8uFtBgT8kW1UqKmb8Je276HVI9elGPwZKC/mpGcrIltd lbdfXlzUh8RnnA== -----END CERTIFICATE-----Generated at Sun Nov 15 17:00:51 2026 by rpki-client