$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: ZZld17VImw2LfjDwAesRCF+5dVFEEKNyAq81koyI8gs= Subject key identifier: 57:58:7D:08:2B:29:E1:58:1D:80:BC:95:08:38:97:C2:C4:92:5E:39 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 01A1AC70FA611DF2C32C91C3DC854D291A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 02CB Signing time: Thu 05 Nov 2026 16:00:47 +0000 Manifest this update: Thu 05 Nov 2026 16:00:47 +0000 Manifest next update: Fri 06 Nov 2026 16:00:47 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: BBisOhRNWZszNsC8FxV2XVu3anMgcsgFkHWHrxtL+8A=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:ac:70:fa:61:1d:f2:c3:2c:91:c3:dc:85:4d:29:1a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Nov 5 16:00:47 2026 GMT Not After : Nov 6 16:00:47 2026 GMT Subject: CN=57587d082b29e1581d80bc95083897c2c4925e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:65:6f:43:00:cf:fd:32:51:25:57:bf:fa: 2e:a6:d6:1b:c7:2d:06:81:60:c2:ce:e8:e3:79:06: dc:f7:1a:4e:8d:8b:f1:43:fc:1b:96:43:ac:d1:d4: d2:1b:81:7a:f4:8b:de:fb:9b:03:0a:14:96:f8:31: 30:d9:ee:06:3a:eb:92:79:11:83:aa:d8:57:85:ce: 0f:ea:05:e6:a1:d4:39:9d:d2:72:bf:68:30:fb:2b: 6c:77:c9:1b:89:77:76:8b:b6:33:97:19:84:26:48: e7:92:21:9e:eb:8c:0e:25:43:a6:64:b7:25:44:4c: 8d:0e:e0:bb:21:a3:c6:44:3b:22:6c:85:ea:a3:ff: cb:fa:00:dc:64:8a:17:52:5a:86:95:1e:a0:29:ee: 02:69:85:a6:98:64:d3:a0:3e:c0:8f:5d:e5:60:21: b0:15:20:84:5d:8b:4d:db:a8:e3:db:69:9a:43:83: 9a:83:f3:ff:e8:da:2b:69:fa:09:83:d6:3c:43:00: b2:b4:63:d6:bc:63:67:f7:70:46:d5:b8:af:1d:5a: d1:90:0a:31:6e:58:5e:fd:af:4c:a0:d4:a9:86:e2: 19:bf:a1:1c:20:ce:bd:cb:5b:c2:ef:80:27:d6:7d: 49:45:72:ed:f4:3f:2a:6e:16:48:1c:84:82:85:c0: fb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:58:7D:08:2B:29:E1:58:1D:80:BC:95:08:38:97:C2:C4:92:5E:39 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:52:d3:f2:9d:9c:85:84:64:f7:26:8a:fd:e8:95:dc:26:78: 8b:7c:5b:f7:ab:01:64:96:0a:b1:b1:2f:ec:8f:b1:36:8a:67: c1:b0:18:48:6e:6f:9b:b4:ca:04:d0:ca:ea:b5:46:43:1b:30: 9c:0a:34:96:60:84:3b:fd:ff:82:42:5e:80:90:ee:78:1b:74: e2:74:07:8f:f2:af:40:7b:b9:f4:04:7f:6c:35:28:a1:19:cf: d6:94:11:2d:40:f7:a9:2b:d9:a2:93:bc:51:b2:92:46:36:1d: 35:72:4e:60:54:ec:e0:6b:5a:36:5b:9a:13:76:84:8e:76:f0: 01:aa:21:59:86:67:08:8f:36:f2:f2:23:fa:75:8d:8b:d8:6f: 99:bf:30:c4:b5:ce:d9:d0:51:56:cf:f3:79:2b:4b:71:95:44: 44:f7:c0:2c:26:63:9f:1e:a1:5a:6b:44:65:6d:45:7e:dd:46: a8:26:9b:cd:e3:2f:7d:35:8b:d9:2b:59:f9:ea:51:a4:27:c9: df:c3:ad:54:7e:54:55:fe:2e:1f:5d:23:67:f2:49:f5:74:9d: 2d:2c:4b:64:6c:76:a9:a3:98:6f:22:76:d9:72:44:a7:3d:62: 9c:45:54:ea:97:c2:81:3d:7b:ed:c7:d5:5a:57:4c:0a:7d:8f: f8:73:5b:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGscPphHfLDLJHD3IVNKRpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYxMTA1MTYwMDQ3WhcNMjYxMTA2MTYwMDQ3WjAzMTEwLwYDVQQD Eyg1NzU4N2QwODJiMjllMTU4MWQ4MGJjOTUwODM4OTdjMmM0OTI1ZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseplb0MAz/0yUSVXv/ouptYbxy0G gWDCzujjeQbc9xpOjYvxQ/wblkOs0dTSG4F69Ive+5sDChSW+DEw2e4GOuuSeRGD qthXhc4P6gXmodQ5ndJyv2gw+ytsd8kbiXd2i7YzlxmEJkjnkiGe64wOJUOmZLcl REyNDuC7IaPGRDsibIXqo//L+gDcZIoXUlqGlR6gKe4CaYWmmGTToD7Aj13lYCGw FSCEXYtN26jj22maQ4Oag/P/6NorafoJg9Y8QwCytGPWvGNn93BG1bivHVrRkAox blhe/a9MoNSphuIZv6EcIM69y1vC74An1n1JRXLt9D8qbhZIHISChcD7pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdYfQgrKeFYHYC8lQg4l8LEkl45MB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1LT8p2c hYRk9yaK/eiV3CZ4i3xb96sBZJYKsbEv7I+xNopnwbAYSG5vm7TKBNDK6rVGQxsw nAo0lmCEO/3/gkJegJDueBt04nQHj/KvQHu59AR/bDUooRnP1pQRLUD3qSvZopO8 UbKSRjYdNXJOYFTs4GtaNluaE3aEjnbwAaohWYZnCI828vIj+nWNi9hvmb8wxLXO 2dBRVs/zeStLcZVERPfALCZjnx6hWmtEZW1Fft1GqCabzeMvfTWL2StZ+epRpCfJ 38OtVH5UVf4uH10jZ/JJ9XSdLSxLZGx2qaOYbyJ22XJEpz1inEVU6pfCgT177cfV WldMCn2P+HNbsw== -----END CERTIFICATE-----Generated at Thu Nov 5 18:57:14 2026 by rpki-client