$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: vZIexESE0WIehUYkUl3nftksuEtZgvqMVVvQWq4acfU= Subject key identifier: 29:87:83:16:8F:D2:6E:16:FE:54:08:A5:51:63:6E:A9:67:E0:C0:F5 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 01A1C58CD4899FA1D836EB1EAA6C0862DE7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 02D8 Signing time: Tue 10 Nov 2026 13:01:43 +0000 Manifest this update: Tue 10 Nov 2026 13:01:43 +0000 Manifest next update: Wed 11 Nov 2026 13:01:43 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: x5ttnGdjimfVzuQSsvpxzin0HzvtYdvHxbe26zhvlLQ=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:c5:8c:d4:89:9f:a1:d8:36:eb:1e:aa:6c:08:62:de:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Nov 10 13:01:43 2026 GMT Not After : Nov 11 13:01:43 2026 GMT Subject: CN=298783168fd26e16fe5408a551636ea967e0c0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:d9:d7:6a:ab:c4:2a:11:3e:06:86:80:23: 51:ac:20:e1:67:8e:1b:6d:15:36:42:54:74:b0:7e: 87:60:d3:99:a3:b8:04:61:a8:0f:3e:3f:2e:5c:8b: 5d:ab:cf:5e:da:96:f2:f7:27:d0:b3:9e:fb:18:27: 34:92:04:a4:4e:47:2b:6f:20:e8:f7:55:73:01:4a: 31:f4:a3:f4:05:06:b3:14:02:5a:1d:6a:67:ac:e1: b8:d3:3b:cc:88:fd:2d:cf:f9:93:b4:0b:21:8a:35: 2e:aa:d5:db:a5:c5:9b:37:ce:41:da:4d:6c:62:a9: ad:86:4e:ee:b3:74:25:64:cf:93:b4:b7:f6:da:9f: bc:c9:46:4d:cf:23:df:fc:dd:51:27:13:2e:39:d1: ca:40:f5:15:af:e5:42:cc:79:f7:6b:41:3f:be:f8: 7b:c6:91:e4:77:2a:85:33:4e:c6:be:92:9d:cb:37: 05:35:00:e9:69:13:b6:fe:b5:18:6d:de:f0:9a:9a: 89:4d:47:67:2a:40:91:56:bf:93:d4:07:b8:02:e7: 5c:7a:db:a3:29:1c:b9:4c:ef:fd:f6:5d:98:d8:09: 2b:ee:b4:ff:4d:96:2f:62:de:14:d6:8d:24:e0:ea: db:19:38:44:5f:1c:a8:d0:a4:06:cd:df:35:4b:3f: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:83:16:8F:D2:6E:16:FE:54:08:A5:51:63:6E:A9:67:E0:C0:F5 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:07:fd:89:ff:60:b0:58:82:1d:4d:1b:1d:a6:af:0f:87:94: 1d:1b:21:70:d8:b9:50:de:99:2c:d4:16:17:fd:8d:5f:81:46: f3:db:e7:c7:ac:33:f2:d9:ad:dc:01:f5:62:35:84:09:11:dd: b8:cc:ac:06:c3:d0:45:ff:5b:cd:cd:47:da:3e:44:0a:34:e1: b0:cc:b1:08:a2:57:69:0a:54:53:e9:ed:ab:21:c5:fa:78:56: c2:6c:03:0d:dd:0f:05:7a:53:29:3e:8a:69:66:26:6e:5d:a1: 43:cf:42:f5:70:26:bc:61:53:28:af:43:5e:5f:7a:df:2e:bd: 82:93:51:82:5c:23:c9:a1:96:58:d0:fa:31:40:15:05:2c:07: 89:ca:a4:7f:fe:f8:4c:1c:4c:22:90:f7:d7:80:0f:b3:76:7a: b0:9a:be:4b:54:5b:34:3f:92:dd:38:9f:97:b2:48:68:f8:a6: aa:6d:2b:3f:48:ce:d8:ae:cc:43:c8:15:b4:3e:07:3d:cc:2a: 15:96:f0:54:b8:a1:9e:bd:3b:08:ab:dd:57:98:2d:9e:82:85: bd:d6:2a:ef:fe:0d:f6:88:7f:56:94:13:19:04:05:6e:67:ec: 1c:bc:7f:d1:e8:40:b0:df:64:c5:3f:5c:cc:37:f1:19:1e:a9: 66:0d:db:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHFjNSJn6HYNuseqmwIYt5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYxMTEwMTMwMTQzWhcNMjYxMTExMTMwMTQzWjAzMTEwLwYDVQQD EygyOTg3ODMxNjhmZDI2ZTE2ZmU1NDA4YTU1MTYzNmVhOTY3ZTBjMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdjZ12qrxCoRPgaGgCNRrCDhZ44b bRU2QlR0sH6HYNOZo7gEYagPPj8uXItdq89e2pby9yfQs577GCc0kgSkTkcrbyDo 91VzAUox9KP0BQazFAJaHWpnrOG40zvMiP0tz/mTtAshijUuqtXbpcWbN85B2k1s Yqmthk7us3QlZM+TtLf22p+8yUZNzyPf/N1RJxMuOdHKQPUVr+VCzHn3a0E/vvh7 xpHkdyqFM07GvpKdyzcFNQDpaRO2/rUYbd7wmpqJTUdnKkCRVr+T1Ae4Audcetuj KRy5TO/99l2Y2Akr7rT/TZYvYt4U1o0k4OrbGThEXxyo0KQGzd81Sz/tVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmHgxaP0m4W/lQIpVFjbqln4MD1MB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQf9if9g sFiCHU0bHaavD4eUHRshcNi5UN6ZLNQWF/2NX4FG89vnx6wz8tmt3AH1YjWECRHd uMysBsPQRf9bzc1H2j5ECjThsMyxCKJXaQpUU+ntqyHF+nhWwmwDDd0PBXpTKT6K aWYmbl2hQ89C9XAmvGFTKK9DXl963y69gpNRglwjyaGWWND6MUAVBSwHicqkf/74 TBxMIpD314APs3Z6sJq+S1RbND+S3Tifl7JIaPimqm0rP0jO2K7MQ8gVtD4HPcwq FZbwVLihnr07CKvdV5gtnoKFvdYq7/4N9oh/VpQTGQQFbmfsHLx/0ehAsN9kxT9c zDfxGR6pZg3b3w== -----END CERTIFICATE-----Generated at Wed Nov 11 00:16:04 2026 by rpki-client