$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json) Hash identifier: mg4qKJ21FZPsBsfFi2iCa8gSqIwJmdl7fr6HlEOtpLQ= Subject key identifier: 37:7A:D4:49:1E:DB:1A:82:E3:A9:53:91:83:F1:8A:61:E7:4E:98:C4 Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 01A1C4B1103869DB9EC64A53797EA96F5E26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft Manifest number: 0CBB Signing time: Tue 10 Nov 2026 09:01:40 +0000 Manifest this update: Tue 10 Nov 2026 09:01:40 +0000 Manifest next update: Wed 11 Nov 2026 09:01:40 +0000 Files and hashes: 1: 4BtZ6ImulGiBNPfFEyIkenVvnSE.roa (hash: 6h+jPwLu4nddov8mWqAqvJNAzlSrWOgSVAeEWaQAHMQ=) 2: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (hash: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE=) 3: Gc-zxgRLIzAQa_iFPqWdSCs1AfA.roa (hash: knk2ar6caQbw//JlOcHZhkt4Z0WhcJB+DOpi0h0a7F4=) 4: HUdkOXLhBSaGi7zaB3tiAzHsu2w.roa (hash: SMC3snHw7F/Tr45ZUYM0iuFzgEgu3dYKECc195mdzRs=) 5: ZBdtDqtan4ryfsX_DPoSWN_nnIM.roa (hash: mMR9AMjlqz3mZdhz4HhiNub8llzDHhmNDp6KeOjkBNo=) 6: iMagr2JhNrn6UcBo9-V-8mQcTn4.roa (hash: mQklS7JkHJd3eY4Nb4US8i0zJjbD5uDxAwa3Ul/Mehk=) 7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: x1EamWfzVA/Az81C4IV+b3M096IytD2ncAi2ckU5Kxs=) 8: pTIdOhwN38ILsZQYi8bIDMjeY4U.roa (hash: GtMRQsNo+pmOf3YedJ1j8ncQIy9S7xqsYIsqepUk4Dw=) 9: tkLKI36bEE_d9mFrnpG75Jz1duc.roa (hash: GQR5CqcIcifEV/UVBCebbmLSOnvxcbQORub4i3S8oOk=) 10: ycU_XNZEXN413MBQCsimYNHq3Uc.roa (hash: Nto1BYyts37ycUiG2XmvVx1RqM7RGKIW4OTTPggZvXE=) 11: zt6aVptNzEemFtVcszL1t-xA0vs.roa (hash: pSOP40u7PQPwSGBic+DInKoefhITjHCDk1ttR6rrtpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:c4:b1:10:38:69:db:9e:c6:4a:53:79:7e:a9:6f:5e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Nov 10 09:01:40 2026 GMT Not After : Nov 11 09:01:40 2026 GMT Subject: CN=377ad4491edb1a82e3a9539183f18a61e74e98c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bb:13:e2:a4:36:77:25:77:11:55:06:7b:e2: dd:a6:ef:38:6b:4d:cf:2c:95:72:70:f5:c2:17:90: 95:c7:8a:80:77:b0:f5:22:f4:8b:5b:f6:9a:56:19: a4:9e:09:87:85:04:e5:f0:9d:2c:d8:04:14:72:53: 54:e2:cf:96:c6:01:f8:aa:e2:07:74:07:cf:7d:58: 97:0a:95:b9:ea:97:dc:d8:63:7d:85:e7:7e:4d:a3: 37:78:1e:81:89:1d:f0:e3:98:2f:35:63:ec:f4:dd: ac:fd:fb:26:59:49:78:b0:3e:6f:75:e6:9a:8e:a6: 91:97:14:4f:d6:a7:5f:5e:d2:84:e4:8e:82:be:25: 76:b4:af:eb:56:e0:13:5e:60:5a:79:bc:c2:36:57: f4:44:24:a4:32:e3:52:a4:5a:63:af:0f:c5:f2:d6: 72:f0:19:a7:20:6e:7b:77:88:e5:84:20:70:6c:59: d0:43:a5:f0:b8:38:ed:24:a2:5b:70:b3:ef:b4:3e: d7:4d:1a:40:02:70:87:2e:a5:43:fb:d9:94:31:12: 13:c4:8e:96:d6:10:73:05:c9:d6:c2:70:ae:0b:b8: 9d:e6:61:d1:b8:79:05:59:c3:17:79:40:54:f0:89: 8b:a9:b0:1a:a6:b4:52:98:79:c5:91:19:dc:25:da: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7A:D4:49:1E:DB:1A:82:E3:A9:53:91:83:F1:8A:61:E7:4E:98:C4 X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:34:d1:84:b9:71:1c:46:fb:37:a0:e3:13:17:be:f7:67:03: b1:94:df:87:a9:a9:c1:72:89:b2:11:7e:1f:a4:b0:3c:f4:89: f1:7f:10:9a:6f:c8:9c:da:67:3e:9a:e1:93:af:40:61:fd:26: fb:cd:e5:49:c2:7e:e9:41:c3:53:54:c3:c2:9d:ae:0a:a3:04: e0:98:3c:25:24:e5:7e:bd:ae:96:63:fd:be:44:ac:f9:86:69: 98:ea:ff:20:45:31:1a:59:02:dc:c9:74:9f:f1:cf:a7:49:52: ea:ee:d3:f7:24:e3:68:0e:af:f1:87:08:ce:9c:3d:32:da:aa: a1:c8:60:11:f0:fe:69:b5:e1:31:8b:3c:2f:2b:6a:2c:c9:fd: 4e:51:5b:83:33:29:46:15:ab:3b:d5:bc:9c:94:45:3d:ee:13: 35:52:dd:c3:8b:e1:fb:cf:a6:af:5b:f4:6b:8c:1f:1b:03:19: a1:2f:16:30:02:9c:51:eb:4b:c0:4d:73:a1:30:1f:c9:a0:f6: 67:40:b2:2e:18:58:a0:2d:df:2f:92:d7:0e:af:a2:24:ee:be: 1d:48:cc:79:ab:03:50:b2:c4:a8:6d:94:79:a3:01:76:23:77: ce:ac:ef:88:b7:cb:0e:97:f5:56:d3:a8:f6:69:db:dc:cb:96: b3:db:36:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHEsRA4aduexkpTeX6pb14mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYxMTEwMDkwMTQwWhcNMjYxMTExMDkwMTQwWjAzMTEwLwYDVQQD EygzNzdhZDQ0OTFlZGIxYTgyZTNhOTUzOTE4M2YxOGE2MWU3NGU5OGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLsT4qQ2dyV3EVUGe+Ldpu84a03P LJVycPXCF5CVx4qAd7D1IvSLW/aaVhmkngmHhQTl8J0s2AQUclNU4s+WxgH4quIH dAfPfViXCpW56pfc2GN9hed+TaM3eB6BiR3w45gvNWPs9N2s/fsmWUl4sD5vdeaa jqaRlxRP1qdfXtKE5I6CviV2tK/rVuATXmBaebzCNlf0RCSkMuNSpFpjrw/F8tZy 8BmnIG57d4jlhCBwbFnQQ6XwuDjtJKJbcLPvtD7XTRpAAnCHLqVD+9mUMRITxI6W 1hBzBcnWwnCuC7id5mHRuHkFWcMXeUBU8ImLqbAaprRSmHnFkRncJdpJzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDd61Eke2xqC46lTkYPximHnTpjEMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzTRhLlx HEb7N6DjExe+92cDsZTfh6mpwXKJshF+H6SwPPSJ8X8Qmm/InNpnPprhk69AYf0m +83lScJ+6UHDU1TDwp2uCqME4Jg8JSTlfr2ulmP9vkSs+YZpmOr/IEUxGlkC3Ml0 n/HPp0lS6u7T9yTjaA6v8YcIzpw9MtqqochgEfD+abXhMYs8LytqLMn9TlFbgzMp RhWrO9W8nJRFPe4TNVLdw4vh+8+mr1v0a4wfGwMZoS8WMAKcUetLwE1zoTAfyaD2 Z0CyLhhYoC3fL5LXDq+iJO6+HUjMeasDULLEqG2UeaMBdiN3zqzviLfLDpf1VtOo 9mnb3MuWs9s2Rw== -----END CERTIFICATE-----Generated at Tue Nov 10 18:14:45 2026 by rpki-client