$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft File: ZElsSn06I8ONKqy0awbLYXVHsR8.mft (raw, json) Hash identifier: R12IRDJX6AIGYLhO/PoU+IYmh2QeNAlFD91I4hECzFg= Subject key identifier: DB:4A:07:71:36:D1:86:12:DA:5C:D9:96:97:88:81:56:61:E0:9D:86 Authority key identifier: 64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F Certificate issuer: /CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f Certificate serial: 01A1A9397FD1178F5087BA2D92365E57FA5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft Manifest number: 1F Signing time: Thu 05 Nov 2026 01:01:20 +0000 Manifest this update: Thu 05 Nov 2026 01:01:20 +0000 Manifest next update: Fri 06 Nov 2026 01:01:20 +0000 Files and hashes: 1: B8yRPntqYPZUIAOWbomL0gXakqg.roa (hash: 5iSndeVak6Do7L6klp1/ODp4jhes2MCsCsEdMUsbpBc=) 2: T94rHWCZeayUsVELjFLeQOr8rJo.roa (hash: R4O/pNAe1wQ6587rVDJkW+iV0R6LvPpUThFTN5d/NEM=) 3: ZElsSn06I8ONKqy0awbLYXVHsR8-YqenvL4mDiSsMGfyJn6OnjLOd5o-bgpsec-00003cca-00000001.cer (hash: D2SqvGZIVa9aUVIb7sxySEQ252/VQRp9iK/vQ0CTpPQ=) 4: ZElsSn06I8ONKqy0awbLYXVHsR8-ixX35SBIanaumnihdls-egANKhs-bgpsec-00003cca-00000002.cer (hash: A7vutvIqL2MBtz5dsD9bOxIsY+UxzFSwZha04Rt+UiA=) 5: ZElsSn06I8ONKqy0awbLYXVHsR8.crl (hash: GZzMHPKpkBDJNUQU4N4Tl0U0q/JOZOP+WMEfu53uVPY=) 6: jLdlTOvaTnLzdI384tzQjMmvuCQ.asa (hash: AtE6QEed/vH4h+oZyqsi/AUwZuEeulzvIR1SmrbV2x4=) 7: tLoe4y_IbQH6FKoXKKLgcB_fUXs.roa (hash: vN3jsoaAoGFeF0TjPiRbe6ckXH0xWcv5zd/aMhz5Jac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a9:39:7f:d1:17:8f:50:87:ba:2d:92:36:5e:57:fa:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f Validity Not Before: Nov 5 01:01:20 2026 GMT Not After : Nov 6 01:01:20 2026 GMT Subject: CN=db4a077136d18612da5cd9969788815661e09d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:9f:82:42:93:60:d5:2b:86:eb:7c:5c:9a:f8: b0:a0:df:a1:70:8f:db:d8:30:5c:86:a4:4a:7e:b3: 85:18:65:41:e5:c1:8b:fd:4d:8a:9d:22:8f:ef:82: c7:fd:43:86:a2:2d:76:09:22:75:7c:ea:7c:d4:e7: 08:d0:13:19:bb:67:18:77:5b:cd:50:96:4d:c7:dc: d8:a5:19:15:37:6b:4d:05:79:ff:9d:13:8d:17:05: 68:95:7e:77:6b:39:11:e9:f4:da:4f:f7:64:49:94: 3e:10:57:0b:f8:6b:d5:d4:68:59:9d:30:62:65:4c: c2:cd:ac:68:d2:5e:2f:46:4a:c1:f5:78:dd:7e:be: 47:33:bb:7d:ae:6b:c8:c0:16:7b:09:1d:03:aa:75: 2d:ed:d4:74:56:30:66:c6:0f:f3:1d:1b:5c:e7:19: 9a:70:4f:c6:97:de:5e:5a:12:62:46:1c:08:ca:e4: 2b:17:b9:c4:e0:20:82:78:44:03:9a:0d:00:bf:fc: 99:ee:8c:94:3e:48:ab:e0:0a:2d:8b:3d:58:f2:d8: 22:1c:62:78:63:c3:5b:ff:9c:28:20:b4:a5:28:fc: 39:8f:96:39:ea:f2:3a:40:15:19:82:67:25:02:c5: b4:f2:3c:97:3e:3a:f3:14:fb:d5:6c:20:74:eb:ac: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4A:07:71:36:D1:86:12:DA:5C:D9:96:97:88:81:56:61:E0:9D:86 X509v3 Authority Key Identifier: keyid:64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:94:ab:29:9d:fa:41:78:b8:1d:f9:00:72:a9:45:80:b7:81: 44:31:4d:6c:19:e4:b5:8a:86:80:92:cc:d9:01:8f:86:fd:ac: 2a:99:f9:fd:43:af:7f:ab:14:35:41:b4:59:7a:b3:8b:a5:fd: 46:fe:6a:cf:41:a6:c5:3d:84:a9:7c:6c:84:59:61:a5:02:f0: d3:a8:13:d6:e0:56:a6:2a:a6:40:12:da:ad:45:2e:b7:7d:33: 78:3a:f1:48:4d:e2:f7:11:61:73:98:14:12:7a:cc:8b:5a:31: 1e:89:e3:4d:df:b2:d2:81:ea:e8:de:81:62:12:a3:02:52:66: e5:fa:4b:0f:ca:4b:1c:f0:42:d0:fb:70:b7:0b:88:16:7e:17: ac:7d:50:67:4f:5b:9e:2b:4f:7e:ab:c5:86:00:b8:af:c3:37: 33:67:57:1b:4a:db:d9:ee:75:e0:04:84:90:96:b6:85:03:68: 22:54:f6:cc:ad:72:f5:d6:b0:d1:82:7e:68:77:7f:e1:6e:7e: 32:d4:c8:11:64:ca:c1:33:09:9a:6e:53:25:49:8b:16:c8:59: dd:ce:40:48:8d:f0:97:31:a1:16:13:b5:b2:51:77:a6:4d:10: dc:8a:db:d5:02:4d:ff:71:d3:f3:25:54:73:43:fc:6b:2a:a3: c9:65:b0:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGpOX/RF49Qh7otkjZeV/pcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NDk2YzRhN2QzYTIzYzM4ZDJhYWNiNDZiMDZjYjYxNzU0 N2IxMWYwHhcNMjYxMTA1MDEwMTIwWhcNMjYxMTA2MDEwMTIwWjAzMTEwLwYDVQQD EyhkYjRhMDc3MTM2ZDE4NjEyZGE1Y2Q5OTY5Nzg4ODE1NjYxZTA5ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Z+CQpNg1SuG63xcmviwoN+hcI/b 2DBchqRKfrOFGGVB5cGL/U2KnSKP74LH/UOGoi12CSJ1fOp81OcI0BMZu2cYd1vN UJZNx9zYpRkVN2tNBXn/nRONFwVolX53azkR6fTaT/dkSZQ+EFcL+GvV1GhZnTBi ZUzCzaxo0l4vRkrB9Xjdfr5HM7t9rmvIwBZ7CR0DqnUt7dR0VjBmxg/zHRtc5xma cE/Gl95eWhJiRhwIyuQrF7nE4CCCeEQDmg0Av/yZ7oyUPkir4Aotiz1Y8tgiHGJ4 Y8Nb/5woILSlKPw5j5Y56vI6QBUZgmclAsW08jyXPjrzFPvVbCB066ywxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtKB3E20YYS2lzZlpeIgVZh4J2GMB8GA1UdIwQY MBaAFGRJbEp9OiPDjSqstGsGy2F1R7EfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80OTMyODMtZTZjZC00MWJiLWI1YmMt NzhmNjA1MjJkMDM1LzEvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80OTMyODMtZTZjZC00MWJiLWI1YmMtNzhmNjA1MjJkMDM1 LzEvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJSrKZ36 QXi4HfkAcqlFgLeBRDFNbBnktYqGgJLM2QGPhv2sKpn5/UOvf6sUNUG0WXqzi6X9 Rv5qz0GmxT2EqXxshFlhpQLw06gT1uBWpiqmQBLarUUut30zeDrxSE3i9xFhc5gU EnrMi1oxHonjTd+y0oHq6N6BYhKjAlJm5fpLD8pLHPBC0PtwtwuIFn4XrH1QZ09b nitPfqvFhgC4r8M3M2dXG0rb2e514ASEkJa2hQNoIlT2zK1y9daw0YJ+aHd/4W5+ MtTIEWTKwTMJmm5TJUmLFshZ3c5ASI3wlzGhFhO1slF3pk0Q3Irb1QJN/3HT8yVU c0P8ayqjyWWwjA== -----END CERTIFICATE-----Generated at Thu Nov 5 14:02:54 2026 by rpki-client