$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: Nx7XgD6Y6WtHHZ/LvhRDW+VmKbtqBK3JJmpbsdc/Xc0= Subject key identifier: AC:62:18:CE:91:E0:8E:91:93:0A:6B:D4:6D:D9:F5:44:E3:05:61:E0 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 01A1DD94A76311AABFA049804DF26D7B96DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0FFA Signing time: Sun 15 Nov 2026 05:01:09 +0000 Manifest this update: Sun 15 Nov 2026 05:01:09 +0000 Manifest next update: Mon 16 Nov 2026 05:01:09 +0000 Files and hashes: 1: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=) 2: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: g+ZxKcD3xh+y0PdlN0DIjsN6tawdY++mbrIzT+7dfwI=) 3: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=) 4: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=) 5: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=) 6: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=) 7: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=) 8: _Mqv_JYiF8FH_vcrUd6z5iBTnaA.roa (hash: wgYSTyAlZdDyfFsa4EFJ55y+CMO3Ta5R634E3wfbtNM=) 9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=) 10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=) 11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=) 12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=) 13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=) 14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=) 15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=) 16: uNRa4zAzcrZDnOveV1CME0I3J4w.roa (hash: OR0NOoULuJszdvy9CmwD+cwSKbUxjzkFUFY9AzTSQAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:94:a7:63:11:aa:bf:a0:49:80:4d:f2:6d:7b:96:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Nov 15 05:01:09 2026 GMT Not After : Nov 16 05:01:09 2026 GMT Subject: CN=ac6218ce91e08e91930a6bd46dd9f544e30561e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ce:4d:fc:64:5d:3b:7f:0c:a6:39:eb:6e:83: 66:96:79:02:99:6a:95:d7:71:09:80:a8:d5:16:42: 15:91:b1:98:40:10:78:21:ae:4f:9c:b7:ba:e0:d5: 9b:40:45:c2:4c:af:13:0a:1d:7c:ad:17:87:cd:47: 87:54:95:8d:e0:1b:14:02:fa:5e:e0:61:d2:87:f3: 33:89:59:36:9b:e4:d7:7d:69:6c:11:a9:96:f7:64: e0:1f:83:63:6d:5f:d3:5f:9d:1f:b6:0b:03:ea:f8: cb:b0:16:e6:e9:3e:2f:eb:6c:77:de:a3:40:c4:33: 1f:21:67:29:5f:da:1a:65:ad:00:c4:91:0d:0c:33: a6:01:17:92:57:6d:37:f3:a2:52:cf:a5:36:2c:90: 26:99:05:c8:54:0e:d1:8b:96:f2:26:fe:57:5c:f0: df:bb:f0:f3:61:63:2a:21:31:5d:0e:f2:bc:cd:31: 6a:92:29:27:41:c7:87:3c:77:2b:d7:88:b0:eb:9d: d8:0e:f7:66:ff:ef:b0:12:76:31:5e:ed:d6:b6:bb: e4:4e:06:62:5c:31:e9:d7:e6:63:68:80:6b:86:df: bb:ab:ba:77:e7:1e:2c:93:ca:cf:85:76:ec:24:69: 87:d0:40:3f:e0:4f:c1:60:f1:28:4e:b9:6f:49:74: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:62:18:CE:91:E0:8E:91:93:0A:6B:D4:6D:D9:F5:44:E3:05:61:E0 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:5f:4f:99:f7:68:25:80:91:0b:a5:81:ff:cb:2c:ca:52:00: 9e:6b:8a:84:86:8a:df:d3:9a:83:59:8f:fc:64:0f:ad:36:77: cc:65:19:d5:14:b4:2b:f5:9f:27:6c:ad:79:97:31:4f:87:53: 25:e5:2b:ff:62:30:11:a2:3e:56:49:c3:c0:71:f0:12:9e:d2: ff:b7:ae:84:2b:52:fe:72:30:ba:fb:8c:cc:52:cd:1d:50:10: 14:27:53:10:3b:25:6c:c0:83:ec:c6:3a:8a:06:69:31:25:41: 63:0e:49:6d:56:2a:19:50:92:5b:64:88:07:2b:32:f8:a7:91: 91:d4:1b:5f:34:b0:b0:9d:2f:e1:cb:01:24:c6:78:07:2e:99: 3c:e6:a2:d3:5d:e2:fa:66:ec:35:91:50:77:8e:65:4e:25:ec: f2:55:90:c8:58:ef:1e:a2:4f:10:99:dc:3f:87:98:31:89:06: 95:bb:cc:89:c4:fd:d2:05:f3:1b:02:bd:e5:11:a5:c3:bf:27: e2:71:e2:ac:0c:a6:ca:6c:82:ed:d0:7e:84:5c:aa:8d:63:7b: 1b:fc:17:37:49:0c:cc:ac:58:ba:34:85:00:7f:38:b9:67:7b: db:d7:68:8c:a0:9e:b0:d1:c7:75:8d:dc:7f:ae:c1:9f:63:08: 73:6a:59:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdlKdjEaq/oEmATfJte5baMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYxMTE1MDUwMTA5WhcNMjYxMTE2MDUwMTA5WjAzMTEwLwYDVQQD EyhhYzYyMThjZTkxZTA4ZTkxOTMwYTZiZDQ2ZGQ5ZjU0NGUzMDU2MWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks5N/GRdO38MpjnrboNmlnkCmWqV 13EJgKjVFkIVkbGYQBB4Ia5PnLe64NWbQEXCTK8TCh18rReHzUeHVJWN4BsUAvpe 4GHSh/MziVk2m+TXfWlsEamW92TgH4NjbV/TX50ftgsD6vjLsBbm6T4v62x33qNA xDMfIWcpX9oaZa0AxJENDDOmAReSV20386JSz6U2LJAmmQXIVA7Ri5byJv5XXPDf u/DzYWMqITFdDvK8zTFqkiknQceHPHcr14iw653YDvdm/++wEnYxXu3WtrvkTgZi XDHp1+ZjaIBrht+7q7p35x4sk8rPhXbsJGmH0EA/4E/BYPEoTrlvSXQ+TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxiGM6R4I6Rkwpr1G3Z9UTjBWHgMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuF9Pmfdo JYCRC6WB/8ssylIAnmuKhIaK39Oag1mP/GQPrTZ3zGUZ1RS0K/WfJ2yteZcxT4dT JeUr/2IwEaI+VknDwHHwEp7S/7euhCtS/nIwuvuMzFLNHVAQFCdTEDslbMCD7MY6 igZpMSVBYw5JbVYqGVCSW2SIBysy+KeRkdQbXzSwsJ0v4csBJMZ4By6ZPOai013i +mbsNZFQd45lTiXs8lWQyFjvHqJPEJncP4eYMYkGlbvMicT90gXzGwK95RGlw78n 4nHirAymymyC7dB+hFyqjWN7G/wXN0kMzKxYujSFAH84uWd729dojKCesNHHdY3c f67Bn2MIc2pZcQ== -----END CERTIFICATE-----Generated at Sun Nov 15 11:53:15 2026 by rpki-client