$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json) Hash identifier: qnFGMF7n7FTQj4RrznqYrLMn91yUiNXWuVLa66p2kNI= Subject key identifier: 4C:C5:30:C6:9D:BF:B2:52:3E:85:7A:AB:84:12:A8:18:AC:B3:12:6E Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 01A1DE02E0C1D387255CF1E69280D07BA2A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft Manifest number: 0E2A Signing time: Sun 15 Nov 2026 07:01:32 +0000 Manifest this update: Sun 15 Nov 2026 07:01:32 +0000 Manifest next update: Mon 16 Nov 2026 07:01:32 +0000 Files and hashes: 1: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (hash: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo=) 2: 93ecOGMnd7Y-s5RhPxswRsvhxCo.roa (hash: He1fOw5Cf4EewUbKrykJy5YvOuvE3gcqYbxJ9oSfgJk=) 3: 9Hu5_KEvVkuaYsN5m6cQzzKMIjI.roa (hash: p+jhtgM1l26n79s209lOfRrA6/2Vzy+6l6es1YSywE4=) 4: 9JLkBsOIckt0fGh8k6XdADBHfHQ.roa (hash: TLvoYKT4BtmNh7oG4OJUqX5oIA4J7XUzNEdSMA4HlZ8=) 5: HSoISsJ-isLr8N_DHmCBMl3TpWs.roa (hash: eFtDBlD8d0dAnIzoz+b3NcMyduLIBF9yLf8ySSSmIvA=) 6: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: zhuLnpTBcjbIA0ZZF6O3V7iY5qmFjdfalWg30TxPwaI=) 7: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (hash: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM=) 8: M6wnPrDmWw7o372pn664G-6XMUM.roa (hash: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ=) 9: OTfefXpqJS5N6ZeJMEPi4o2glcE.roa (hash: EXmrtcvCwOgf/pC8L7II//3SohUrOG6Iw5W8LXbZAkA=) 10: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (hash: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI=) 11: _hBOrFv7fim--KrBCy30YmUAo3I.roa (hash: qzAl3O9RiG1n+2GEMGj8zSfO491bHrCZda9IZnWLPqI=) 12: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (hash: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM=) 13: mwE7644yuRyikfXfTRLC6TQjC0w.roa (hash: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:02:e0:c1:d3:87:25:5c:f1:e6:92:80:d0:7b:a2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Nov 15 07:01:32 2026 GMT Not After : Nov 16 07:01:32 2026 GMT Subject: CN=4cc530c69dbfb2523e857aab8412a818acb3126e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:9f:7b:50:83:c0:29:d0:a4:a1:33:09:c4: d9:12:df:86:34:73:f5:97:70:cf:e3:89:31:57:48: 8c:b5:bf:73:5d:24:c5:2d:84:d2:57:fb:9a:a8:ba: 8c:e4:4b:21:71:a8:03:50:6f:f7:7a:8c:d1:88:f0: aa:a3:6d:11:75:84:6b:b6:8e:bc:eb:ff:ab:33:4d: a3:20:17:d0:1d:d1:a9:f2:f0:8b:5d:3b:d9:1c:b4: 8c:a9:53:c1:76:2b:81:7c:d7:a6:b6:94:d4:0d:2d: 9d:26:f5:67:04:2e:8a:28:8b:b7:14:45:82:d9:b3: 14:f2:d8:cf:7a:ba:a0:88:ee:53:31:19:ca:3d:c7: 24:4b:c9:35:67:6b:7d:26:a2:58:4d:14:4b:b4:4a: 92:20:ca:d0:4d:44:96:52:57:40:fe:54:7b:53:ca: 0a:97:0b:08:e2:ce:8c:ae:c7:84:71:2a:cd:ed:94: d3:3f:96:4a:b0:6d:72:51:1f:c7:72:91:08:0a:54: 51:b9:28:4d:3b:01:31:73:60:f3:38:e5:97:8e:ad: 13:90:4b:dc:c2:2c:d6:4f:74:f6:9b:50:2f:61:c8: 3b:90:ee:68:ce:5a:ef:00:24:71:9b:ee:c7:ec:a6: c8:66:c1:c0:15:03:b0:ec:f9:eb:e9:c1:0f:06:d2: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C5:30:C6:9D:BF:B2:52:3E:85:7A:AB:84:12:A8:18:AC:B3:12:6E X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e9:08:d5:6d:24:f3:db:0f:1d:05:30:23:60:69:40:e9:5e: a1:8a:e3:cf:f7:80:b0:60:47:c0:23:27:20:ac:48:3c:00:d9: 9c:62:7a:d5:c5:01:02:ff:91:14:9f:5f:a1:66:57:25:f0:1c: 19:49:0f:a3:d7:e7:10:00:aa:8c:bd:45:e2:17:b3:24:5c:f4: 0f:33:e6:cd:f9:9a:cb:13:fd:ec:01:0f:37:b2:4c:f7:e1:62: 9c:ef:5d:ca:53:ca:73:88:51:1c:05:0b:37:e3:d5:7f:7f:fa: 7f:e2:cf:e5:45:3d:6d:da:59:d9:74:5e:dd:b2:4a:2a:c7:4b: da:64:d9:89:7e:4c:86:64:c6:18:48:88:7c:9a:74:48:3c:53: a9:d5:4e:22:3d:43:81:a3:51:c7:de:b4:b7:99:98:f4:be:c1: 94:a2:66:e4:e9:bd:2c:7e:23:fa:9d:48:7f:25:1c:a4:d1:3e: c7:f1:be:70:bc:08:86:81:83:cb:db:d6:5c:6a:21:e4:e2:7b: e1:df:0b:b1:a4:e3:5c:5b:f1:2a:8d:f5:f5:d4:10:ec:1e:1b: d2:00:24:bb:5f:50:a1:45:a0:32:ff:72:eb:a7:0a:44:2a:00: f0:0e:d4:f8:6e:d8:3b:49:62:08:76:1e:a1:d5:b8:16:14:84: 57:96:39:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeAuDB04clXPHmkoDQe6KpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYxMTE1MDcwMTMyWhcNMjYxMTE2MDcwMTMyWjAzMTEwLwYDVQQD Eyg0Y2M1MzBjNjlkYmZiMjUyM2U4NTdhYWI4NDEyYTgxOGFjYjMxMjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujafe1CDwCnQpKEzCcTZEt+GNHP1 l3DP44kxV0iMtb9zXSTFLYTSV/uaqLqM5EshcagDUG/3eozRiPCqo20RdYRrto68 6/+rM02jIBfQHdGp8vCLXTvZHLSMqVPBdiuBfNemtpTUDS2dJvVnBC6KKIu3FEWC 2bMU8tjPerqgiO5TMRnKPcckS8k1Z2t9JqJYTRRLtEqSIMrQTUSWUldA/lR7U8oK lwsI4s6MrseEcSrN7ZTTP5ZKsG1yUR/HcpEIClRRuShNOwExc2DzOOWXjq0TkEvc wizWT3T2m1AvYcg7kO5ozlrvACRxm+7H7KbIZsHAFQOw7Pnr6cEPBtKC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzFMMadv7JSPoV6q4QSqBissxJuMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+kI1W0k 89sPHQUwI2BpQOleoYrjz/eAsGBHwCMnIKxIPADZnGJ61cUBAv+RFJ9foWZXJfAc GUkPo9fnEACqjL1F4hezJFz0DzPmzfmayxP97AEPN7JM9+FinO9dylPKc4hRHAUL N+PVf3/6f+LP5UU9bdpZ2XRe3bJKKsdL2mTZiX5MhmTGGEiIfJp0SDxTqdVOIj1D gaNRx960t5mY9L7BlKJm5Om9LH4j+p1IfyUcpNE+x/G+cLwIhoGDy9vWXGoh5OJ7 4d8LsaTjXFvxKo319dQQ7B4b0gAku19QoUWgMv9y66cKRCoA8A7U+G7YO0liCHYe odW4FhSEV5Y5pA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:48:46 2026 by rpki-client