$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: ly/RqqTAtdmzthVwCGszwZ/AtA1p6DLJjW6voythzbo= Subject key identifier: BC:7A:7A:A0:3A:50:BC:0A:AD:AD:7B:37:33:C9:A0:2F:71:3B:07:77 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 01A1C69F1E38554AE8EA0F29717466677FA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0C63 Signing time: Tue 10 Nov 2026 18:01:18 +0000 Manifest this update: Tue 10 Nov 2026 18:01:18 +0000 Manifest next update: Wed 11 Nov 2026 18:01:18 +0000 Files and hashes: 1: 1mxm4aA8mprO3SiuYpHL45SLZ6E.roa (hash: f0DRKc/bZ2uPgiN6SskkmBBO+kuKWGaCsnu4rW9TsJw=) 2: BqWQxCnsQ0Pu5HCfqbDouobgXtE.roa (hash: yjWd6U2FD+P6Yc6f3oXbXkhcwLLIFFwx55f/HEBAHxw=) 3: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 4: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 5: NIlWiQEY3RuqoaUyaoDMEQwOomA.roa (hash: 2SReN7GjSlbbBzqYc2FsbGOus9FoN+9Ni58tpYY9o5I=) 6: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 7: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 8: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 9: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 10: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 11: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: yo9vRZTIy4t+R0Lwk6Bvk27iJ6PK069Y8LhotAkoJiU=) 12: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 13: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 14: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 16:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:c6:9f:1e:38:55:4a:e8:ea:0f:29:71:74:66:67:7f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Nov 10 18:01:18 2026 GMT Not After : Nov 11 18:01:18 2026 GMT Subject: CN=bc7a7aa03a50bc0aadad7b3733c9a02f713b0777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:97:59:ba:98:7d:a5:7e:4e:6e:0e:03:8b:1c: 3b:d2:be:42:93:05:aa:cd:8e:f1:4c:07:47:d2:22: 65:2e:68:7d:6d:57:6a:51:a4:f6:d9:ec:76:c3:b2: 1e:c5:1a:44:ca:9a:bc:b3:5a:6c:b0:24:89:9e:0c: b2:12:10:14:1d:f5:30:6b:d5:65:6e:34:21:52:8d: 9a:5f:fc:38:9f:d1:50:a4:27:7d:27:3b:88:85:20: 89:5d:8f:d4:81:af:0a:dd:d2:81:31:6d:64:3d:68: d7:8a:0c:c8:d4:0f:01:06:4f:94:ae:c4:a9:3b:c8: 54:c8:fe:a2:eb:b4:8b:24:93:23:9e:a3:44:b1:1a: b0:6f:9c:33:5c:9d:5e:9b:7f:22:aa:c6:3e:86:61: e9:53:41:51:6b:e2:3b:1e:3e:83:67:12:8c:2f:d7: 5a:92:30:92:75:51:d9:11:6a:c9:ea:3a:db:fa:8d: b0:ea:0c:d5:e1:d5:78:f1:d8:44:44:bc:85:f0:15: 50:c4:fe:bb:86:c7:d4:58:66:51:b8:0f:12:92:a4: 3f:21:49:12:24:f1:b6:52:ba:9e:07:de:32:ad:3f: 66:cf:6e:7a:2a:86:16:b9:8f:c0:2c:88:ff:79:2f: 5f:04:e3:4d:ca:45:83:d6:b7:a0:62:ea:e3:06:da: 0f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7A:7A:A0:3A:50:BC:0A:AD:AD:7B:37:33:C9:A0:2F:71:3B:07:77 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3b:cc:27:7b:8d:32:07:57:6c:95:ef:03:69:54:a8:db:88: 77:3a:43:27:9d:df:44:88:bc:a7:e1:46:3c:01:95:ab:07:2e: 93:5f:28:9d:d1:29:4d:c6:13:cf:b7:d2:a6:bf:c0:c2:89:3c: 39:7d:1d:fe:90:68:23:06:26:30:0b:5a:fc:bf:05:d4:42:88: 80:d4:72:cd:35:a7:dc:12:f7:b4:fc:1f:d4:f5:1d:e6:6a:62: c5:a9:e2:c9:3b:67:bc:fd:83:f8:33:33:d3:2a:c1:de:dc:08: 06:82:59:2b:52:1a:24:15:65:9a:23:7b:b7:ee:4d:11:41:4b: 8d:4e:b1:47:56:d8:4b:c7:d8:13:d8:9b:b2:6e:08:4c:fd:10: b9:3f:76:71:4c:3e:b1:76:fe:56:24:5b:1f:b1:73:d6:c5:39: a9:f5:ba:d4:e6:ee:bf:89:b8:c0:7d:e8:5b:fe:a8:4b:7e:e7: f1:6d:bd:2e:0f:ac:fc:48:b0:00:0f:76:79:32:4c:bf:95:fb: a0:0f:49:b2:97:8d:85:b1:35:15:f4:d9:07:80:0d:49:af:71: 1f:ff:21:0f:37:c5:6d:12:86:e2:3f:5f:c2:99:2f:48:a9:62: 44:57:f4:e3:6a:4b:3f:31:ab:ff:c7:41:e3:b2:4a:94:19:29: 4d:ce:9c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHGnx44VUro6g8pcXRmZ3+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYxMTEwMTgwMTE4WhcNMjYxMTExMTgwMTE4WjAzMTEwLwYDVQQD EyhiYzdhN2FhMDNhNTBiYzBhYWRhZDdiMzczM2M5YTAyZjcxM2IwNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JdZuph9pX5Obg4Dixw70r5CkwWq zY7xTAdH0iJlLmh9bVdqUaT22ex2w7IexRpEypq8s1pssCSJngyyEhAUHfUwa9Vl bjQhUo2aX/w4n9FQpCd9JzuIhSCJXY/Uga8K3dKBMW1kPWjXigzI1A8BBk+UrsSp O8hUyP6i67SLJJMjnqNEsRqwb5wzXJ1em38iqsY+hmHpU0FRa+I7Hj6DZxKML9da kjCSdVHZEWrJ6jrb+o2w6gzV4dV48dhERLyF8BVQxP67hsfUWGZRuA8SkqQ/IUkS JPG2UrqeB94yrT9mz256KoYWuY/ALIj/eS9fBONNykWD1regYurjBtoPcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx6eqA6ULwKra17NzPJoC9xOwd3MB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzvMJ3uN MgdXbJXvA2lUqNuIdzpDJ53fRIi8p+FGPAGVqwcuk18ondEpTcYTz7fSpr/Awok8 OX0d/pBoIwYmMAta/L8F1EKIgNRyzTWn3BL3tPwf1PUd5mpixaniyTtnvP2D+DMz 0yrB3twIBoJZK1IaJBVlmiN7t+5NEUFLjU6xR1bYS8fYE9ibsm4ITP0QuT92cUw+ sXb+ViRbH7Fz1sU5qfW61Obuv4m4wH3oW/6oS37n8W29Lg+s/EiwAA92eTJMv5X7 oA9JspeNhbE1FfTZB4ANSa9xH/8hDzfFbRKG4j9fwpkvSKliRFf042pLPzGr/8dB 47JKlBkpTc6cEA== -----END CERTIFICATE-----Generated at Tue Nov 10 21:01:18 2026 by rpki-client