$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json) Hash identifier: 2BZCcTxtjjFyrBL0EF1pkJ+pq8zfMpU3z8XHCk21hUw= Subject key identifier: 70:D1:80:5C:43:E9:CD:5A:FD:EC:7B:AD:46:EC:FA:EA:50:73:6D:2B Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Certificate serial: 01A1DEA736091DE3073ED917CFB868BAEED9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft Manifest number: 041E Signing time: Sun 15 Nov 2026 10:01:02 +0000 Manifest this update: Sun 15 Nov 2026 10:01:02 +0000 Manifest next update: Mon 16 Nov 2026 10:01:02 +0000 Files and hashes: 1: 0CCIV1hEHH3hY6pokk9jTnU8V30.roa (hash: GgaU+5w/qihCGGu/5k2TUotqsGtIXN8Ll7E8ReKlxoQ=) 2: 27Onk2ipikR9sCWrsjcv1XdwhhU.roa (hash: tYN0cEsdrNAHZ2qeeAujA9ZWZlxGIp9FSB29X48sim4=) 3: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=) 4: 7k8If11aObVXGmnKtKwIcne1q0o.roa (hash: YMdPgL5RHn3ZUXXjNuLlB+pdjKmlISEakxjgynyqsGg=) 5: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=) 6: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=) 7: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=) 8: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: KYIZQ44HKiib3M4ZTfIkiG7b99KaFkwgmPnfvG6rQAY=) 9: vdGT0nZTpJLGcOzDL6xuJ_FCZW8.roa (hash: Xc1ItXjvzK2wPVfmMfhj8HS0B6C/GKW+6dgSc1M77LU=) 10: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:a7:36:09:1d:e3:07:3e:d9:17:cf:b8:68:ba:ee:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Validity Not Before: Nov 15 10:01:02 2026 GMT Not After : Nov 16 10:01:02 2026 GMT Subject: CN=70d1805c43e9cd5afdec7bad46ecfaea50736d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:59:b9:78:33:d0:74:50:53:c6:86:9b:4e: a0:38:76:ec:80:bb:c2:fc:73:36:08:c0:cf:26:d2: 7d:1b:9a:c2:d2:ee:bf:b6:ec:5e:49:75:17:d6:00: 47:b8:26:e2:e5:c5:ac:b5:18:eb:2a:3a:9e:b0:58: 79:67:56:2e:18:5b:72:27:d6:6f:e6:39:60:64:a5: f8:bd:af:25:a2:ed:0f:61:46:1b:7e:c5:dd:7e:43: 89:76:48:32:4b:ae:ee:cb:f8:2b:e7:c1:fd:aa:8b: 30:a2:df:fa:ea:2c:6e:08:55:d9:26:17:b4:36:39: 8d:13:97:b7:5f:0f:eb:6a:d8:13:2b:83:dd:70:55: e5:c5:ad:ab:0d:13:d4:d2:a2:54:b1:ca:7f:3e:ea: 1f:b9:f2:2d:34:13:f2:02:8d:a6:90:0f:ae:9a:b6: bc:f7:6f:61:4c:11:e9:db:8d:71:88:2c:df:56:9d: 7c:4c:4b:d1:a7:6c:b4:20:e2:03:ba:6d:bc:d1:cf: de:b0:55:b4:39:bb:b7:4a:31:3a:92:0e:76:87:a8: 13:09:1f:1a:5f:0d:26:dc:1e:3e:8a:26:fc:87:df: 48:7a:b9:5f:cf:6b:21:4e:36:b8:7a:76:b8:be:aa: 44:9d:9f:6a:77:2d:d2:61:d2:53:5f:2f:19:74:2c: 44:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D1:80:5C:43:E9:CD:5A:FD:EC:7B:AD:46:EC:FA:EA:50:73:6D:2B X509v3 Authority Key Identifier: keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:58:7d:c3:99:82:08:74:51:bb:db:29:db:05:58:dc:10:2b: 22:93:40:f4:9e:4e:7f:31:b3:99:64:d5:fc:5c:bd:1e:12:f4: 77:a2:de:7d:18:d3:74:ad:9f:ba:dc:9e:7e:a9:df:54:2c:e5: 62:e2:7d:e5:56:70:16:72:95:17:f9:8a:9e:45:a0:f8:f9:fc: a0:e1:35:aa:e9:64:b2:1b:7d:f9:86:63:58:13:f6:d5:a2:f5: 9e:cc:70:0c:a9:03:9b:d6:52:e1:5f:2e:e9:4b:c9:bd:84:13: 7e:be:fc:55:1b:5c:a1:15:99:bf:22:39:a8:b8:b0:d2:a8:e1: 21:e1:bc:61:91:02:70:de:0e:a2:c2:f6:b0:ac:a9:90:4c:2a: 80:78:7e:ee:8b:5b:85:f9:bb:52:32:ff:b4:32:d5:ed:86:c7: 5a:c9:cd:29:03:7a:9a:6b:1d:af:5b:22:1e:d0:0c:24:0f:f3: cd:b7:a2:4b:4c:6b:08:2f:b3:87:df:e5:ef:83:bf:de:6c:a0: 4a:71:68:1f:4d:45:bf:7d:53:44:b7:7e:72:c0:3f:52:9a:41: 56:fe:5b:17:28:3c:a7:92:9b:60:08:b5:ff:18:c9:a7:f5:bd: 2b:f4:22:74:90:6c:04:a0:8e:40:f1:55:23:ab:ec:5f:27:f2: f8:af:85:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHepzYJHeMHPtkXz7houu7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjI1ZmQwMzVhN2NlNjRhN2M4OGJkZTcxYWViNTYwZjM0 ODM5NzQwHhcNMjYxMTE1MTAwMTAyWhcNMjYxMTE2MTAwMTAyWjAzMTEwLwYDVQQD Eyg3MGQxODA1YzQzZTljZDVhZmRlYzdiYWQ0NmVjZmFlYTUwNzM2ZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxJZuXgz0HRQU8aGm06gOHbsgLvC /HM2CMDPJtJ9G5rC0u6/tuxeSXUX1gBHuCbi5cWstRjrKjqesFh5Z1YuGFtyJ9Zv 5jlgZKX4va8lou0PYUYbfsXdfkOJdkgyS67uy/gr58H9qoswot/66ixuCFXZJhe0 NjmNE5e3Xw/ratgTK4PdcFXlxa2rDRPU0qJUscp/PuofufItNBPyAo2mkA+umra8 929hTBHp241xiCzfVp18TEvRp2y0IOIDum280c/esFW0Obu3SjE6kg52h6gTCR8a Xw0m3B4+iib8h99Ierlfz2shTja4ena4vqpEnZ9qdy3SYdJTXy8ZdCxENwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDRgFxD6c1a/ex7rUbs+upQc20rMB8GA1UdIwQY MBaAFLAiX9A1p85kp8iL3nGutWDzSDl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4Yzct NDQzZTRiYWI3ZGU2LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4YzctNDQzZTRiYWI3ZGU2 LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1h9w5mC CHRRu9sp2wVY3BArIpNA9J5OfzGzmWTV/Fy9HhL0d6LefRjTdK2futyefqnfVCzl YuJ95VZwFnKVF/mKnkWg+Pn8oOE1qulksht9+YZjWBP21aL1nsxwDKkDm9ZS4V8u 6UvJvYQTfr78VRtcoRWZvyI5qLiw0qjhIeG8YZECcN4OosL2sKypkEwqgHh+7otb hfm7UjL/tDLV7YbHWsnNKQN6mmsdr1siHtAMJA/zzbeiS0xrCC+zh9/l74O/3myg SnFoH01Fv31TRLd+csA/UppBVv5bFyg8p5KbYAi1/xjJp/W9K/QidJBsBKCOQPFV I6vsXyfy+K+FbA== -----END CERTIFICATE-----Generated at Sun Nov 15 13:15:07 2026 by rpki-client