$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: o97Zmd1fFlNGCj+vH3TH7uenV1Gf/R7NoLgy/lbQ1B0= Subject key identifier: B7:C1:70:54:04:A0:99:58:9D:F0:96:F2:60:73:9C:07:71:6E:3C:F8 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 01A1DF830C747D53AD5A388B7BA4344E67F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 1B09 Signing time: Sun 15 Nov 2026 14:01:09 +0000 Manifest this update: Sun 15 Nov 2026 14:01:09 +0000 Manifest next update: Mon 16 Nov 2026 14:01:09 +0000 Files and hashes: 1: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 2: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 3: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 4: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 5: c9WQ2UD23ghc6w62neYjcrA0Hec.roa (hash: 6zkyskipE3HqNwSrbgIsZT9a9eFCr1VvbNhzrk2Ff0Y=) 6: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: XfYUP7Er6ujTfDMvb+m+jzNamuJq4DOjNbDU0T61SeY=) 8: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 9: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 10: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:83:0c:74:7d:53:ad:5a:38:8b:7b:a4:34:4e:67:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Nov 15 14:01:09 2026 GMT Not After : Nov 16 14:01:09 2026 GMT Subject: CN=b7c1705404a099589df096f260739c07716e3cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:df:b5:8d:fc:12:7a:ce:12:2d:f5:23:47:62: 72:96:1e:70:2a:65:1e:07:e7:f2:27:88:e1:fb:74: 21:e7:09:8c:c9:94:20:c7:6c:a9:e9:f0:f2:c0:da: de:0f:da:1f:69:a3:c3:91:51:c6:e0:1d:e8:43:d3: 9f:32:a4:5a:96:2a:f6:b1:4c:70:3f:68:97:92:10: cb:ea:84:e8:79:71:1d:65:f4:b9:65:86:0f:b0:9c: dc:d3:db:bc:79:07:59:d2:fd:20:2b:30:ac:1d:af: 59:2b:cd:9f:83:ec:75:f4:60:bb:00:73:6c:18:62: c5:72:b5:0c:14:48:63:48:4a:5c:62:f9:e6:4c:38: 0d:32:12:a6:07:a3:b4:d9:d7:b2:5a:1d:2d:82:61: 15:34:be:0b:17:b0:0f:ec:fb:6f:2c:77:8c:3b:2e: 18:c8:3b:04:d6:71:ee:19:1f:ce:59:d3:71:23:30: 9d:03:5e:b4:c8:86:a9:f3:ab:08:b7:a4:22:63:63: 15:f4:6b:b0:b0:3b:e6:87:e0:0b:34:3c:87:c9:e8: 3f:5f:98:6e:a7:14:21:1d:e0:e8:b0:0a:1e:91:31: b5:cf:5f:6a:31:8c:58:58:95:e3:28:32:46:cd:ad: bd:33:05:30:ff:b7:f1:d9:eb:a4:e0:94:2a:7e:5b: 82:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C1:70:54:04:A0:99:58:9D:F0:96:F2:60:73:9C:07:71:6E:3C:F8 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:40:6c:fb:c6:56:ac:8c:be:28:e4:fa:23:64:11:0e:56:d9: a4:3e:eb:0d:1e:58:91:49:b3:db:42:06:a3:2a:be:bd:00:c0: 53:0f:90:0f:f0:8c:9d:e7:7f:26:29:42:49:13:e1:ef:be:82: c3:f1:4f:9b:a8:39:55:26:ae:8b:9e:67:13:13:c4:96:51:d2: 92:ef:7e:3e:24:8e:45:82:80:3c:da:0b:3a:d5:f0:e4:bf:6f: dd:4c:33:9d:28:9e:54:e2:6f:91:7e:58:43:33:6c:f7:3f:18: 46:64:2b:3d:f8:8a:6f:3d:32:24:15:c2:c9:f8:24:32:4c:5f: ad:3f:0e:d4:cc:7f:e4:51:fe:6e:cd:12:3b:42:f0:93:f1:fc: 5a:b0:53:fd:24:2c:37:11:ee:31:38:ab:e7:a1:9e:20:1a:64: e3:bf:be:08:66:a4:41:1e:9a:13:aa:2a:01:6d:e0:d4:ea:38: c1:3b:1d:46:2c:95:7d:5e:01:e7:b0:38:db:cb:63:8c:be:87: 3e:28:4a:72:6e:b8:61:4a:c4:d7:62:77:86:86:46:4a:8a:f1: 22:4b:65:34:9e:2e:8c:db:6c:c1:a1:83:24:a6:f5:1e:6a:7f: 06:96:05:44:07:de:eb:b5:ee:7b:65:a2:b2:2d:a5:78:92:fd: 6f:9b:0c:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfgwx0fVOtWjiLe6Q0Tmf2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYxMTE1MTQwMTA5WhcNMjYxMTE2MTQwMTA5WjAzMTEwLwYDVQQD EyhiN2MxNzA1NDA0YTA5OTU4OWRmMDk2ZjI2MDczOWMwNzcxNmUzY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd+1jfwSes4SLfUjR2Jylh5wKmUe B+fyJ4jh+3Qh5wmMyZQgx2yp6fDywNreD9ofaaPDkVHG4B3oQ9OfMqRalir2sUxw P2iXkhDL6oToeXEdZfS5ZYYPsJzc09u8eQdZ0v0gKzCsHa9ZK82fg+x19GC7AHNs GGLFcrUMFEhjSEpcYvnmTDgNMhKmB6O02deyWh0tgmEVNL4LF7AP7PtvLHeMOy4Y yDsE1nHuGR/OWdNxIzCdA160yIap86sIt6QiY2MV9GuwsDvmh+ALNDyHyeg/X5hu pxQhHeDosAoekTG1z19qMYxYWJXjKDJGza29MwUw/7fx2euk4JQqfluCmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfBcFQEoJlYnfCW8mBznAdxbjz4MB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0Bs+8ZW rIy+KOT6I2QRDlbZpD7rDR5YkUmz20IGoyq+vQDAUw+QD/CMned/JilCSRPh776C w/FPm6g5VSaui55nExPEllHSku9+PiSORYKAPNoLOtXw5L9v3UwznSieVOJvkX5Y QzNs9z8YRmQrPfiKbz0yJBXCyfgkMkxfrT8O1Mx/5FH+bs0SO0Lwk/H8WrBT/SQs NxHuMTir56GeIBpk47++CGakQR6aE6oqAW3g1Oo4wTsdRiyVfV4B57A428tjjL6H PihKcm64YUrE12J3hoZGSorxIktlNJ4ujNtswaGDJKb1Hmp/BpYFRAfe67Xue2Wi si2leJL9b5sMcg== -----END CERTIFICATE-----Generated at Sun Nov 15 20:55:59 2026 by rpki-client