$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: fqxWqR0OeZjUKPZKvyyOTZ8tRUOvoZHWbs4h7Cbyv5c= Subject key identifier: 22:72:7E:58:3C:59:DF:22:CD:83:E0:28:79:52:7B:7D:B9:95:C8:1A Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 01A1DF4BF894AA62DC793BBECD0F0166319B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1B5B Signing time: Sun 15 Nov 2026 13:01:00 +0000 Manifest this update: Sun 15 Nov 2026 13:01:00 +0000 Manifest next update: Mon 16 Nov 2026 13:01:00 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 4V-9xblXh3p4hsMcELpD2FlsUlA.roa (hash: kRr8MpAPoenaKhVsIA64eElM5LVWHVB6/SUqnX6gbUI=) 7: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 8: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=) 9: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 10: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 11: CDJTXCKddgeS45cto4BDn6LGKXM.roa (hash: 53bZhsl27b4D4nLfge1Qmnrp5YltP0H1xlBZflfNcSw=) 12: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 13: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 14: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 15: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 16: MxzqwWMUSsptURJMzavxSHfUO8w.roa (hash: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=) 17: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 18: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 19: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 20: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 21: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 22: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 23: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 24: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 25: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: NRZG80hC3UxHAaz6yKFT5RX33qG77reY4xOBkq4lk6g=) 26: dbcdybGv00nsOtltVa4dyFU_6EE.roa (hash: usoQZJzAP9Yyuh6A0tgLlXKSV5FhHtp8AP7C2gTLa9A=) 27: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 28: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 29: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 30: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 31: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 32: oKSsMuSbioJTAAXxNUhX3aEkTkA.roa (hash: uN6o2dfQogWKiR10tNNdi8uBAG3yAcVpyMFsu4QzgWY=) 33: qFFcx3mLrYx2nk6029Hm7ZOdMDk.roa (hash: Jn9Y7Pa0WEwNSD3kcDgAMoYx0/NnNpXk4eVq0VyIbRU=) 34: qUwK9s2mmBLTPQlCS2E3qnCndLo.roa (hash: dl9QrW5kzVjvXWRYqlw9UrndrhoQTxzNmZ6VZwh8ncM=) 35: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:4b:f8:94:aa:62:dc:79:3b:be:cd:0f:01:66:31:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Nov 15 13:01:00 2026 GMT Not After : Nov 16 13:01:00 2026 GMT Subject: CN=22727e583c59df22cd83e02879527b7db995c81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:9d:a6:aa:db:31:96:bf:e7:e4:01:f5:0a: ee:1c:b4:ee:eb:2b:e5:05:52:2b:51:80:98:9a:cf: c0:1e:3d:cc:85:da:bf:03:41:ae:8a:39:a8:d3:0d: 98:a3:7b:33:57:17:22:c8:55:2a:eb:ee:16:83:3e: 4b:ca:7f:31:3a:c1:1e:7d:6c:58:f4:0c:0d:5e:3a: 22:38:e3:d9:38:80:9a:07:66:40:b9:48:3c:a1:2c: f0:a1:8f:4a:f0:b6:a0:8d:e3:64:25:19:b1:d6:c7: a6:3f:02:7a:d2:d1:01:4d:59:94:49:0d:e2:51:db: 1f:6d:1e:43:e7:c8:60:56:e6:a4:b9:3f:10:c0:a6: 0f:08:b0:80:b4:0e:43:cc:7d:84:70:bf:b9:21:93: ed:a5:63:60:5c:ff:50:cb:08:9a:15:6c:b8:60:6f: 13:46:cc:16:ba:d4:13:fe:7f:6b:3e:fc:93:d5:f5: 3f:ca:80:31:f7:9e:f5:dd:c5:62:33:5c:89:e2:e5: 90:f3:a5:8b:48:9b:c0:79:07:0b:71:6f:f1:e7:88: 52:dc:cf:73:8b:2a:17:5b:c3:00:f0:30:10:6c:19: bb:6d:f0:c1:26:94:e7:bd:2e:d6:c8:52:52:79:83: fa:f3:1b:d2:af:eb:7f:c0:80:da:d0:d6:69:95:68: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:72:7E:58:3C:59:DF:22:CD:83:E0:28:79:52:7B:7D:B9:95:C8:1A X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:95:7d:54:a1:12:a3:1d:05:fc:33:3f:3f:11:77:52:10:2c: b8:dd:26:86:38:fb:a4:65:ee:9c:7e:3b:af:63:ea:68:79:51: 97:38:c2:6b:44:04:83:72:39:57:94:86:0a:9a:fd:60:d7:05: 61:3a:0b:d8:bd:3a:e6:c6:5e:9c:60:42:bd:d9:4e:3b:40:c7: 45:11:a1:48:19:34:99:09:75:41:f6:03:69:fb:e8:58:e3:37: b3:52:2b:61:2b:e1:30:26:45:1a:ce:0b:c9:22:38:0e:3f:45: 23:a4:28:84:c3:09:5a:1b:cf:9c:1e:24:15:a0:e4:17:86:9b: 63:55:ac:55:1f:43:c0:1f:6a:04:89:cf:d6:cb:c8:ee:4e:63: ea:62:0f:6d:6a:46:61:9d:36:c7:8c:c3:ed:c0:24:6c:2c:ab: 83:14:b4:7f:ca:12:00:5a:64:86:8e:5f:d2:9e:63:c2:d4:6b: 32:15:e6:5d:d9:00:96:0f:a4:29:a9:2c:b4:b1:a5:45:dd:09: dc:55:e2:65:12:8f:32:25:fe:6a:c0:9c:4d:d8:9b:71:b5:4d: 83:13:ab:60:08:fe:04:08:98:e0:6a:cd:18:1c:11:df:75:f4: 58:39:8a:79:fb:86:57:51:f5:4a:1d:7a:eb:9d:2a:8c:c3:eb: 81:a1:dd:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfS/iUqmLceTu+zQ8BZjGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYxMTE1MTMwMTAwWhcNMjYxMTE2MTMwMTAwWjAzMTEwLwYDVQQD EygyMjcyN2U1ODNjNTlkZjIyY2Q4M2UwMjg3OTUyN2I3ZGI5OTVjODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOWdpqrbMZa/5+QB9QruHLTu6yvl BVIrUYCYms/AHj3Mhdq/A0Guijmo0w2Yo3szVxciyFUq6+4Wgz5Lyn8xOsEefWxY 9AwNXjoiOOPZOICaB2ZAuUg8oSzwoY9K8LagjeNkJRmx1semPwJ60tEBTVmUSQ3i UdsfbR5D58hgVuakuT8QwKYPCLCAtA5DzH2EcL+5IZPtpWNgXP9QywiaFWy4YG8T RswWutQT/n9rPvyT1fU/yoAx95713cViM1yJ4uWQ86WLSJvAeQcLcW/x54hS3M9z iyoXW8MA8DAQbBm7bfDBJpTnvS7WyFJSeYP68xvSr+t/wIDa0NZplWiWJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJyflg8Wd8izYPgKHlSe325lcgaMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJV9VKES ox0F/DM/PxF3UhAsuN0mhjj7pGXunH47r2PqaHlRlzjCa0QEg3I5V5SGCpr9YNcF YToL2L065sZenGBCvdlOO0DHRRGhSBk0mQl1QfYDafvoWOM3s1IrYSvhMCZFGs4L ySI4Dj9FI6QohMMJWhvPnB4kFaDkF4abY1WsVR9DwB9qBInP1svI7k5j6mIPbWpG YZ02x4zD7cAkbCyrgxS0f8oSAFpkho5f0p5jwtRrMhXmXdkAlg+kKakstLGlRd0J 3FXiZRKPMiX+asCcTdibcbVNgxOrYAj+BAiY4GrNGBwR33X0WDmKefuGV1H1Sh16 650qjMPrgaHd6w== -----END CERTIFICATE-----Generated at Sun Nov 15 15:37:33 2026 by rpki-client