$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: JxuYss1xwjjZpOojpH6VqkC2DmfmMakpTP1WPY+YbEM= Subject key identifier: DD:FD:A6:76:A9:00:88:8B:62:E5:22:A8:5D:2A:CF:EA:D7:46:F1:20 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 01A1A9026654EA71476EEC30969B376350B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1AEF Signing time: Thu 05 Nov 2026 00:01:08 +0000 Manifest this update: Thu 05 Nov 2026 00:01:08 +0000 Manifest next update: Fri 06 Nov 2026 00:01:08 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: AWyqQuO48E7EaLT6RH2W8bAgQ3s.asa (hash: y1Ag5qpmzSxVFKEJWy+4MLdDTnH6Pp80lG+LaPL+S8M=) 3: Gpn9n84tYhkYaDMGGKjziY1wajo.asa (hash: +9BgoCUtarT6JeveJ/0Adks2MenEvBj4hlB1aELk8Yw=) 4: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 5: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 6: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 7: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 8: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 9: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: bICj9BaDKGyfpeeGInmh5+IQt/MihbFdGXD3kRE1mT0=) 10: idgi1k7anhDqQRqHUOPCKe0uEMY.roa (hash: 2Wv9basY5e601X5c9PrC/HchRjopIiI93QMlP9PCKcM=) 11: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 12: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 13: yq7Etfb4dWzBvbcN-Rlb9C-Z6wA.roa (hash: OWlK989Wx/WGtxwLKowAN45MRmglMXaVRn+t0dtJ9Uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a9:02:66:54:ea:71:47:6e:ec:30:96:9b:37:63:50:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Nov 5 00:01:08 2026 GMT Not After : Nov 6 00:01:08 2026 GMT Subject: CN=ddfda676a900888b62e522a85d2acfead746f120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:be:9b:2c:cb:b6:3a:5e:30:d9:07:d0:bb: ae:e2:e4:24:45:20:29:c1:95:bb:87:af:0f:22:c2: 4d:60:34:13:3e:a0:03:51:f9:c0:da:99:0a:fc:7b: ce:f3:86:59:a1:7d:7c:41:5e:e5:f5:1a:b0:78:01: b9:07:5d:d1:f3:64:1b:9f:14:fb:83:ed:21:a5:4b: d0:f4:ca:f4:04:fc:5c:e9:1c:88:9a:a1:ed:d2:5b: 66:b5:5c:1d:f9:14:d8:85:83:54:c9:21:02:e7:6f: 07:d4:6a:73:ad:f9:70:ca:6e:6d:6d:f9:2d:af:32: 13:dd:13:5d:39:76:d0:c0:3f:e1:9f:92:9a:c5:47: b2:6f:59:7c:51:d7:a5:66:1d:08:3b:65:b3:7e:73: 8e:d9:df:1b:c7:20:67:90:a1:90:e7:f0:dc:9f:21: 52:a1:28:d8:73:4d:96:c1:da:8c:58:6a:2f:d4:2e: e8:01:bf:59:ac:9a:3a:74:0b:45:d3:6e:e3:11:2c: 70:9e:50:e9:c3:24:83:a9:04:3d:48:49:f7:33:f1: 85:e2:8b:30:5c:f3:30:31:86:3e:89:5a:3c:0b:cb: ef:3f:b9:14:e7:03:ee:65:fe:4f:ce:5b:48:2c:4c: a4:18:c5:b3:cb:70:dc:e9:d2:17:7d:da:d2:88:82: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FD:A6:76:A9:00:88:8B:62:E5:22:A8:5D:2A:CF:EA:D7:46:F1:20 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d1:9f:db:51:25:01:cc:44:4b:bb:e6:c7:40:6c:b1:da:ce: c6:08:7c:26:d1:bc:5a:09:79:dc:f1:8c:b6:c7:93:db:17:4d: 90:10:f5:55:8e:4f:38:4d:ec:0f:30:b0:15:11:c2:ed:a0:d5: e5:93:47:95:9c:a6:b9:fd:48:0b:2f:e6:05:f3:8d:32:fa:95: cc:dd:07:ac:1d:14:78:c4:1c:b0:f3:2e:36:76:f7:42:b9:47: a7:ea:ec:ed:e3:e0:e5:c8:72:4b:cb:26:62:82:1b:29:82:21: a9:66:8b:3c:d3:03:d4:fe:39:10:f2:f4:20:1f:74:51:0a:50: c8:c0:ec:39:6c:bc:60:5d:0e:30:60:76:25:6b:d5:b8:3a:e7: 36:32:5e:59:20:90:a1:15:db:40:9f:ee:e4:05:4f:6f:de:f2: 83:25:e7:61:ee:14:bd:f3:25:7d:23:76:25:62:0b:c7:ba:48: 45:cf:45:fe:ba:54:15:3a:b0:0a:b3:79:a6:c9:d6:c1:6d:21: ad:5b:21:68:a7:28:05:03:48:bf:29:7d:47:36:53:1a:42:15: cb:34:54:23:8f:54:ab:80:a2:4a:d0:f9:6d:13:b9:b7:b3:b4: 63:8f:09:70:26:d4:8a:95:03:aa:c5:62:ee:e2:06:76:5f:5f: b1:fb:44:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGpAmZU6nFHbuwwlps3Y1CzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYxMTA1MDAwMTA4WhcNMjYxMTA2MDAwMTA4WjAzMTEwLwYDVQQD EyhkZGZkYTY3NmE5MDA4ODhiNjJlNTIyYTg1ZDJhY2ZlYWQ3NDZmMTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYe+myzLtjpeMNkH0Luu4uQkRSAp wZW7h68PIsJNYDQTPqADUfnA2pkK/HvO84ZZoX18QV7l9RqweAG5B13R82QbnxT7 g+0hpUvQ9Mr0BPxc6RyImqHt0ltmtVwd+RTYhYNUySEC528H1Gpzrflwym5tbfkt rzIT3RNdOXbQwD/hn5KaxUeyb1l8UdelZh0IO2WzfnOO2d8bxyBnkKGQ5/DcnyFS oSjYc02WwdqMWGov1C7oAb9ZrJo6dAtF027jESxwnlDpwySDqQQ9SEn3M/GF4osw XPMwMYY+iVo8C8vvP7kU5wPuZf5PzltILEykGMWzy3Dc6dIXfdrSiIJEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN39pnapAIiLYuUiqF0qz+rXRvEgMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNGf21El AcxES7vmx0BssdrOxgh8JtG8Wgl53PGMtseT2xdNkBD1VY5POE3sDzCwFRHC7aDV 5ZNHlZymuf1ICy/mBfONMvqVzN0HrB0UeMQcsPMuNnb3QrlHp+rs7ePg5chyS8sm YoIbKYIhqWaLPNMD1P45EPL0IB90UQpQyMDsOWy8YF0OMGB2JWvVuDrnNjJeWSCQ oRXbQJ/u5AVPb97ygyXnYe4UvfMlfSN2JWILx7pIRc9F/rpUFTqwCrN5psnWwW0h rVshaKcoBQNIvyl9RzZTGkIVyzRUI49Uq4CiStD5bRO5t7O0Y48JcCbUipUDqsVi 7uIGdl9fsftEpQ== -----END CERTIFICATE-----Generated at Thu Nov 5 05:22:04 2026 by rpki-client