$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: uoPc8LwKiCcXqrjv50SEwFuT5gG9FPQzzwnCAedfmf4= Subject key identifier: DE:EB:1D:60:F1:A5:7C:A0:87:89:0F:3F:8F:A9:88:A6:C3:33:BD:39 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 01A1DDCC0EF44770EE930D7D08D72261238C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0D30 Signing time: Sun 15 Nov 2026 06:01:40 +0000 Manifest this update: Sun 15 Nov 2026 06:01:40 +0000 Manifest next update: Mon 16 Nov 2026 06:01:40 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: Yq8slhVfbLYqjz2VlXER9sG6jntL+53nGyEz1cVBo78=) 2: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 3: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 4: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 5: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 6: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 7: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=) 8: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 9: WVRWTHu2jYG5NGmFC6GaDzPuyf0.roa (hash: ddR/0J3WSYMueqGWA4Jv4FzRBLir7poFgFFMNLJDNtY=) 10: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 11: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 12: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 13: hjslYSBRCy4Jv3YuUmTFlkgY7NI.roa (hash: sGKHjIrsfddZddoeN9cdUpOIrjfw7GmPvmQ33h1NH7U=) 14: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 15: opSIGkOnBkZvoVUAlYliwMWRtHM.roa (hash: UhK9HvzCWGQjnjOj5kqLjjS4yrTQ8KUq4l/hKCCuZEE=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: xCg-EAUTn22UnWGifIkWlZa5htY.roa (hash: reyx/w5lVDgDQxIsJVRfOyDg5aXHdRl+i9+tD3ANP7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:cc:0e:f4:47:70:ee:93:0d:7d:08:d7:22:61:23:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Nov 15 06:01:40 2026 GMT Not After : Nov 16 06:01:40 2026 GMT Subject: CN=deeb1d60f1a57ca087890f3f8fa988a6c333bd39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:94:f7:9e:95:03:18:4f:f5:42:78:1a:de: 10:7c:f1:79:cc:f2:98:58:94:af:57:17:d5:1c:ac: b8:ac:2d:68:09:c1:51:d3:ef:8e:39:8a:07:d3:f9: 66:09:8a:22:0c:77:e1:14:07:97:3b:eb:b2:8a:cb: 66:9d:04:7e:4b:90:ed:b7:fd:36:00:b1:a7:18:09: 7d:44:de:68:c7:13:a7:d5:a9:f0:cc:0b:b6:87:96: 50:a7:c3:38:a5:59:ec:c9:e7:0a:2e:09:ce:b5:e5: 61:02:c9:1b:43:75:2f:76:cd:ff:1e:42:e8:55:1d: 67:a1:c5:03:41:48:d8:5c:d8:6e:30:22:54:58:45: c8:c4:b7:20:b8:3b:cc:4c:5f:f0:a9:06:f4:0f:28: 63:bf:04:c4:75:4e:7a:6e:78:73:00:be:ab:9a:a9: 75:cd:00:96:67:75:fe:33:62:a6:e7:f9:8a:5c:86: 34:d7:99:a7:c7:bf:d7:5a:eb:89:c0:46:fb:16:40: 86:e0:e7:cb:0b:4e:b0:e1:42:1a:d5:e7:b7:46:e5: fc:40:fe:e6:c2:b9:5d:d0:33:71:1d:35:2a:a1:47: c3:9e:63:e7:41:9e:f5:3f:81:43:37:0c:78:3e:86: 7f:14:9a:6d:eb:54:a9:1f:1d:0e:bb:db:e4:2f:5d: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EB:1D:60:F1:A5:7C:A0:87:89:0F:3F:8F:A9:88:A6:C3:33:BD:39 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c1:6b:7a:56:df:aa:40:54:4f:da:af:00:d2:d8:67:f5:fe: 51:52:fc:f8:e7:af:17:5d:83:48:98:78:cc:d7:aa:e7:46:38: f7:64:fa:f3:01:86:f8:0e:20:40:cf:bb:81:e2:06:27:35:46: 37:bd:d2:a4:1b:de:1d:3e:37:4a:48:18:d6:fa:09:b8:34:e1: 47:80:f1:5a:0b:b4:fb:30:c7:a6:64:cb:95:dd:91:34:d2:68: 39:d1:c8:49:79:4b:0e:36:b0:34:cf:05:85:91:78:13:40:b8: 58:8e:b9:3d:ca:69:66:7e:fc:ff:90:cc:c6:2d:d1:b1:75:11: 04:94:fd:41:c3:c5:8a:00:b5:18:b5:b0:8c:1c:9f:eb:2b:f8: f1:21:70:ec:95:f7:60:e8:32:a8:9e:72:aa:90:84:37:1a:e0: b2:29:fc:29:9b:58:f0:5d:43:3f:c9:c9:de:c3:38:1d:56:44: 66:2a:f3:fc:f7:d5:7b:2b:7a:ee:9b:27:16:8a:be:46:bb:12: 7b:56:c2:ab:ac:9b:ab:97:51:f0:0f:78:78:fc:a0:d2:86:9b: a3:af:fc:bf:a0:a7:55:7f:99:73:c5:5f:a2:a6:d0:34:89:66: 6a:aa:40:e9:a1:e7:ef:ed:45:b8:80:93:cf:56:7c:18:59:b9: 48:26:2b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdzA70R3Dukw19CNciYSOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYxMTE1MDYwMTQwWhcNMjYxMTE2MDYwMTQwWjAzMTEwLwYDVQQD EyhkZWViMWQ2MGYxYTU3Y2EwODc4OTBmM2Y4ZmE5ODhhNmMzMzNiZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSiU956VAxhP9UJ4Gt4QfPF5zPKY WJSvVxfVHKy4rC1oCcFR0++OOYoH0/lmCYoiDHfhFAeXO+uyistmnQR+S5Dtt/02 ALGnGAl9RN5oxxOn1anwzAu2h5ZQp8M4pVnsyecKLgnOteVhAskbQ3Uvds3/HkLo VR1nocUDQUjYXNhuMCJUWEXIxLcguDvMTF/wqQb0DyhjvwTEdU56bnhzAL6rmql1 zQCWZ3X+M2Km5/mKXIY015mnx7/XWuuJwEb7FkCG4OfLC06w4UIa1ee3RuX8QP7m wrld0DNxHTUqoUfDnmPnQZ71P4FDNwx4PoZ/FJpt61SpHx0Ou9vkL10/SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7rHWDxpXygh4kPP4+piKbDM705MB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMFrelbf qkBUT9qvANLYZ/X+UVL8+OevF12DSJh4zNeq50Y492T68wGG+A4gQM+7geIGJzVG N73SpBveHT43SkgY1voJuDThR4DxWgu0+zDHpmTLld2RNNJoOdHISXlLDjawNM8F hZF4E0C4WI65PcppZn78/5DMxi3RsXURBJT9QcPFigC1GLWwjByf6yv48SFw7JX3 YOgyqJ5yqpCENxrgsin8KZtY8F1DP8nJ3sM4HVZEZirz/PfVeyt67psnFoq+RrsS e1bCq6ybq5dR8A94ePyg0oabo6/8v6CnVX+Zc8VfoqbQNIlmaqpA6aHn7+1FuICT z1Z8GFm5SCYrzg== -----END CERTIFICATE-----Generated at Sun Nov 15 16:38:56 2026 by rpki-client