$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: qCtK/63p5L2oqJVXglIhjYjTdoV0AJ19N4lIduOP/eo= Subject key identifier: BA:1B:E7:E3:97:53:0B:AC:BF:02:C6:9E:96:EE:4B:9A:8E:BD:86:E0 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 01A1DE708F09A73D6F9017E1060F03D5F2E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0E59 Signing time: Sun 15 Nov 2026 09:01:20 +0000 Manifest this update: Sun 15 Nov 2026 09:01:20 +0000 Manifest next update: Mon 16 Nov 2026 09:01:20 +0000 Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=) 2: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: vA0vn1YJ4jOMqj3xpdVMy3kxfc3+PdNm66/5tmCuByM=) 3: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=) 4: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=) 5: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=) 6: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=) 7: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=) 8: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=) 9: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=) 10: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=) 11: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=) 12: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=) 13: qn7-xSOm3GNFbVMeEpI89BCHyGs.roa (hash: OAD6prCAz8lBbB+PhlF1Idqkbd0upRCxQF4VAJd3pnc=) 14: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=) 15: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:70:8f:09:a7:3d:6f:90:17:e1:06:0f:03:d5:f2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Nov 15 09:01:20 2026 GMT Not After : Nov 16 09:01:20 2026 GMT Subject: CN=ba1be7e397530bacbf02c69e96ee4b9a8ebd86e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:a4:7e:f4:18:d4:03:19:c8:66:a9:c1:73: e5:a9:60:82:71:25:2e:e0:94:af:d7:e9:19:0e:02: fd:9c:30:aa:9f:15:52:da:1d:76:a6:cc:45:15:5d: 33:a5:33:46:e5:cd:9f:e5:7d:ed:d2:65:e9:2c:b5: ee:96:d3:35:07:3f:58:08:74:79:cc:a5:38:bc:ad: 60:8f:28:6e:fa:92:02:45:44:92:d5:18:f1:2d:91: 55:8e:5f:40:49:71:c6:57:ea:a2:80:41:e0:15:5d: a9:5c:2b:0f:93:55:4e:70:4f:fd:25:23:d8:3c:e5: 2a:f6:c5:35:7d:33:38:26:98:51:7b:54:1d:35:45: 75:e8:03:5c:4c:26:16:fc:22:47:3a:21:d3:ca:fd: 32:00:4b:7a:38:07:d5:18:35:1f:40:d0:d4:7b:a4: fe:9c:1a:dc:f2:a5:7a:e5:0b:1c:c1:9c:07:c1:45: ea:a0:b7:ad:15:d2:96:3f:61:ff:27:c6:a1:8a:e3: 70:9a:40:2a:55:7b:1e:00:87:65:26:19:13:c3:01: b6:33:95:f2:76:e4:bf:8e:e5:2a:20:0b:8e:ff:19: 5a:a6:ba:7d:c3:34:3e:85:4b:4d:cc:b2:dd:53:57: b6:47:c7:ba:47:eb:28:3d:d4:10:45:c6:f8:6f:13: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1B:E7:E3:97:53:0B:AC:BF:02:C6:9E:96:EE:4B:9A:8E:BD:86:E0 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:09:18:7e:58:20:72:93:9e:10:6b:36:2b:c2:b8:fe:b2:28: fe:31:85:e4:95:36:ce:12:8c:2f:6f:f1:93:bc:a1:49:67:a0: 24:7a:c7:b4:b1:55:20:d9:e7:02:df:f7:98:e1:fe:cf:b2:d5: 33:a0:0f:04:f1:99:e2:0f:45:77:79:6a:94:5a:d4:76:99:bb: d7:f0:10:47:74:9a:7a:23:df:2c:b9:34:e1:ea:e9:ad:d5:76: 05:5d:e9:5c:85:37:e5:80:f2:2d:6a:41:9f:ae:7a:4d:f7:43: 56:d1:1d:0b:89:9d:45:71:a8:d2:b5:83:58:4e:28:79:c8:96: 07:b4:12:e6:b7:3b:8e:3b:fa:4e:64:c4:f6:a4:29:a6:c4:b8: 0b:88:ef:bb:96:66:89:74:50:35:4b:da:b4:76:73:b7:07:01: 7a:6c:3d:56:ff:d5:05:3c:49:57:af:67:49:e2:65:b0:2b:1f: 78:6b:60:43:76:20:66:3a:9a:80:fe:6d:f6:19:49:a9:68:de: 66:71:95:e4:a1:d4:31:3a:5f:4d:9b:cb:47:10:8d:ab:27:65: 84:05:68:e4:3a:75:da:b3:63:79:2c:b5:3a:ac:79:47:f9:e8: 70:da:38:c1:15:89:0b:99:43:5b:37:80:b1:f0:65:52:a4:fc: dd:29:98:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHecI8Jpz1vkBfhBg8D1fLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYxMTE1MDkwMTIwWhcNMjYxMTE2MDkwMTIwWjAzMTEwLwYDVQQD EyhiYTFiZTdlMzk3NTMwYmFjYmYwMmM2OWU5NmVlNGI5YThlYmQ4NmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw2kfvQY1AMZyGapwXPlqWCCcSUu 4JSv1+kZDgL9nDCqnxVS2h12psxFFV0zpTNG5c2f5X3t0mXpLLXultM1Bz9YCHR5 zKU4vK1gjyhu+pICRUSS1RjxLZFVjl9ASXHGV+qigEHgFV2pXCsPk1VOcE/9JSPY POUq9sU1fTM4JphRe1QdNUV16ANcTCYW/CJHOiHTyv0yAEt6OAfVGDUfQNDUe6T+ nBrc8qV65QscwZwHwUXqoLetFdKWP2H/J8ahiuNwmkAqVXseAIdlJhkTwwG2M5Xy duS/juUqIAuO/xlaprp9wzQ+hUtNzLLdU1e2R8e6R+soPdQQRcb4bxNpdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLob5+OXUwusvwLGnpbuS5qOvYbgMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgkYflgg cpOeEGs2K8K4/rIo/jGF5JU2zhKML2/xk7yhSWegJHrHtLFVINnnAt/3mOH+z7LV M6APBPGZ4g9Fd3lqlFrUdpm71/AQR3SaeiPfLLk04erprdV2BV3pXIU35YDyLWpB n656TfdDVtEdC4mdRXGo0rWDWE4oeciWB7QS5rc7jjv6TmTE9qQppsS4C4jvu5Zm iXRQNUvatHZztwcBemw9Vv/VBTxJV69nSeJlsCsfeGtgQ3YgZjqagP5t9hlJqWje ZnGV5KHUMTpfTZvLRxCNqydlhAVo5Dp12rNjeSy1Oqx5R/nocNo4wRWJC5lDWzeA sfBlUqT83SmY+Q== -----END CERTIFICATE-----Generated at Sun Nov 15 16:39:02 2026 by rpki-client