$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: S4o+GH4VEgnIlttjy8Ne8WyR2+exfE5VgMHObLXBGFU= Subject key identifier: 2E:B0:07:4E:61:5F:DA:68:B4:9B:E3:65:FB:7E:BC:C0:02:37:B7:5A Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 01A1AAF077AEACD2B7113A9E118E05DB8E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0BEA Signing time: Thu 05 Nov 2026 09:00:48 +0000 Manifest this update: Thu 05 Nov 2026 09:00:48 +0000 Manifest next update: Fri 06 Nov 2026 09:00:48 +0000 Files and hashes: 1: 0c6IYCTjO_jUm2IyK1aNaygEARU.roa (hash: /56WRmvUOGjiJVTt3AeLM5iJwEZ5HBgbHnGRxUaLVzQ=) 2: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 3: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: JKntl0lE4Llv5JSHqq0ebMhz1gw.roa (hash: z+ETdiwBgtgBMRmUJl0EwbepoBHBWs+SUhOGYSF0hsU=) 6: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 7: Rj7C9HFWuzFDb2nAa-azSTKfGOQ.roa (hash: vFchV3jK24P/EgvD1iXL5CmPkvqderYcShvnrsGp47Y=) 8: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (hash: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=) 9: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: LZtMwV74trbVBtCkkw5vXVvmG6sxz+ofzL0EDW2usE0=) 10: uKCl0G6iXVlVe0afCzE82-C_3qI.roa (hash: RH3/03F7bmaXEqOent1C4xFrAuH6sCV3VBoe7T66+HA=) 11: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 12: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:aa:f0:77:ae:ac:d2:b7:11:3a:9e:11:8e:05:db:8e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Nov 5 09:00:48 2026 GMT Not After : Nov 6 09:00:48 2026 GMT Subject: CN=2eb0074e615fda68b49be365fb7ebcc00237b75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:df:a0:ad:32:fb:58:eb:4a:b8:6b:1b:35:b1: 2e:eb:6f:83:83:5b:5c:60:e7:e6:f7:9e:20:d0:51: c1:f4:ec:58:8d:1c:87:02:f1:85:09:80:76:42:a9: 48:f8:d7:d0:27:6d:97:3e:f1:0a:c3:39:e6:8a:c6: 24:21:8d:c6:0d:74:d5:27:7f:7d:91:b3:2f:3d:09: 17:11:26:1f:71:11:a9:84:77:a6:14:7f:34:b4:36: 9c:69:79:ba:90:6c:7c:ae:69:3b:bc:0e:85:23:a7: f3:d1:30:14:68:6d:99:54:59:a5:32:6b:dd:d7:a6: 04:3f:72:5f:89:70:9c:7c:4e:ee:88:1a:da:f7:3c: 1c:b1:3f:f8:13:58:42:2e:ab:ae:5f:5a:59:7c:1f: ce:be:37:72:c5:01:4c:77:7a:4f:c7:5a:93:50:83: fe:5c:c8:6b:dd:ad:3e:d3:9d:ab:c9:3c:be:e3:8d: 49:6d:fb:99:30:2b:14:38:c6:fb:3e:78:47:4f:46: b6:c9:28:a2:94:2e:3d:7e:0d:be:e4:fa:7c:7c:a2: 47:37:37:db:b7:47:91:19:a1:63:8f:cf:a6:1c:ae: 54:02:95:bb:be:c0:05:9b:bd:db:db:cf:ef:87:e2: 83:a0:b1:d6:2d:11:da:bc:2d:06:bf:f0:83:e4:f9: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B0:07:4E:61:5F:DA:68:B4:9B:E3:65:FB:7E:BC:C0:02:37:B7:5A X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:fa:3d:0c:34:42:51:c1:b6:c5:59:de:da:b0:99:18:e3:6d: 65:4a:31:94:35:77:07:04:cc:c8:a6:26:8e:c9:e7:ce:ed:1a: 13:5b:74:f2:f6:7d:7e:c0:02:4d:8a:b5:0b:21:c9:6f:3e:f3: b4:df:f0:de:c4:cf:3d:e1:73:00:81:81:e9:ca:f0:5a:75:31: b1:dd:44:50:ab:63:31:a7:13:2b:2e:00:47:25:aa:aa:0a:8b: fc:b8:08:48:fc:38:c8:c9:0c:61:6f:d8:51:58:36:3b:26:a8: 3f:73:92:a4:c8:b1:27:58:05:5a:4c:c9:8d:76:e2:78:e4:67: bf:3c:bc:85:0a:48:7a:f1:85:4e:0b:ba:3c:be:38:e8:5d:f5: 5f:0a:e9:5b:f9:d3:6d:0a:16:7e:de:33:c4:3a:35:f3:6b:fe: 4b:c0:15:45:2b:9e:2d:07:35:fd:36:ef:0f:38:67:89:f7:d5: 50:29:42:17:55:0c:cc:10:ec:43:b4:f1:c8:e0:fb:56:46:d7: 20:1f:f7:ec:9f:a8:77:f1:01:9b:12:71:4c:45:7d:0b:12:f8: 73:1a:3a:df:f8:e0:1d:c4:ab:1c:59:63:a5:f1:fc:60:46:5e: f9:08:12:c3:5f:82:b7:85:a0:22:9a:1b:1a:8a:90:e0:e6:77: 1a:49:66:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGq8HeurNK3ETqeEY4F244NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYxMTA1MDkwMDQ4WhcNMjYxMTA2MDkwMDQ4WjAzMTEwLwYDVQQD EygyZWIwMDc0ZTYxNWZkYTY4YjQ5YmUzNjVmYjdlYmNjMDAyMzdiNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d+grTL7WOtKuGsbNbEu62+Dg1tc YOfm954g0FHB9OxYjRyHAvGFCYB2QqlI+NfQJ22XPvEKwznmisYkIY3GDXTVJ399 kbMvPQkXESYfcRGphHemFH80tDacaXm6kGx8rmk7vA6FI6fz0TAUaG2ZVFmlMmvd 16YEP3JfiXCcfE7uiBra9zwcsT/4E1hCLquuX1pZfB/OvjdyxQFMd3pPx1qTUIP+ XMhr3a0+052ryTy+441JbfuZMCsUOMb7PnhHT0a2ySiilC49fg2+5Pp8fKJHNzfb t0eRGaFjj8+mHK5UApW7vsAFm73b28/vh+KDoLHWLRHavC0Gv/CD5Pl2SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6wB05hX9potJvjZft+vMACN7daMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/o9DDRC UcG2xVne2rCZGONtZUoxlDV3BwTMyKYmjsnnzu0aE1t08vZ9fsACTYq1CyHJbz7z tN/w3sTPPeFzAIGB6crwWnUxsd1EUKtjMacTKy4ARyWqqgqL/LgISPw4yMkMYW/Y UVg2OyaoP3OSpMixJ1gFWkzJjXbieORnvzy8hQpIevGFTgu6PL446F31XwrpW/nT bQoWft4zxDo182v+S8AVRSueLQc1/TbvDzhniffVUClCF1UMzBDsQ7TxyOD7VkbX IB/37J+od/EBmxJxTEV9CxL4cxo63/jgHcSrHFljpfH8YEZe+QgSw1+Ct4WgIpob GoqQ4OZ3GklmIw== -----END CERTIFICATE-----Generated at Thu Nov 5 16:36:00 2026 by rpki-client