$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json) Hash identifier: eESF46TjlwGZYR0+HZqj0L6sOSBbCGDaTVogSIeTA94= Subject key identifier: D5:E9:A2:BD:47:A3:A0:93:C6:86:24:4C:57:BF:E9:1F:77:AD:48:6B Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 01A1DEDE7BFA76935C3C181BD65601E2A456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft Manifest number: 1B0B Signing time: Sun 15 Nov 2026 11:01:24 +0000 Manifest this update: Sun 15 Nov 2026 11:01:24 +0000 Manifest next update: Mon 16 Nov 2026 11:01:24 +0000 Files and hashes: 1: 1-_-6SF0OeU0aUK5OH5TSq2x8iJU.roa (hash: U5KKsQZXnB3f4SiABQNbnkHpt5N7LJeYR33Tw+W5RJ4=) 2: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=) 3: 9PqkEGRCIk2yYfzY26gLFkQ-8js.roa (hash: jpfKtSlVYwWZpnaWDix/WKUF8NqzzWuC81b90Lt99zU=) 4: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=) 5: AYFFbDb3A2Id2QZmcQz4_5bAHZs.roa (hash: S6JRpy3bmHsrx74qGhjcEZtWymHQGnV4C16UhCDLJQw=) 6: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=) 7: LKjf7o_3WUfKZdN019fUVQORc-s.roa (hash: vlLPmEb1KK6Co5nJrgcvXX7ly4ij/lppSPEpt9g7Zos=) 8: ZTlU03e2qt__TpF-io4-AEKUOrU.roa (hash: Zw2bD+qyXYZT0vDGotQc/HMnILry5JdGYie/nLyOu5Q=) 9: giyDRFlMshEX2mtXW8ycxEHuiE4.roa (hash: GsxXhWgqxP7o620A/bgtO9saQ52eqvJn9bjuxq3cp7I=) 10: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: 3+S/+YzpSIB1WIPNBqNKMVXPVMbbb8FGyVTdQb59Xj0=) 11: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:de:7b:fa:76:93:5c:3c:18:1b:d6:56:01:e2:a4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Nov 15 11:01:24 2026 GMT Not After : Nov 16 11:01:24 2026 GMT Subject: CN=d5e9a2bd47a3a093c686244c57bfe91f77ad486b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:c8:7e:43:14:52:67:ca:6e:8e:2f:48:9a: 3e:ad:6c:6e:02:80:09:26:ec:a3:17:c1:9b:e0:85: 67:1f:fc:d5:41:b0:79:36:cc:6f:09:fd:34:b2:a3: 20:54:0a:49:75:53:f9:34:2d:68:5d:17:dc:13:03: 19:b4:40:ff:59:f4:ee:ff:bf:db:39:75:cb:f8:61: 52:f7:b9:6d:00:59:a6:01:20:fa:ce:06:bb:66:e4: 37:f9:cd:18:34:a4:94:09:3a:57:a5:cc:2e:07:a9: c5:97:02:b4:69:ab:b0:f5:49:1a:97:11:46:ce:2f: e1:b1:a0:da:08:db:9b:bb:b9:eb:b2:19:75:d4:da: 18:a6:98:37:c1:52:da:66:84:83:03:65:ea:9a:ed: 9a:be:ca:0c:c1:b1:da:e6:31:ca:32:15:43:be:21: d3:5e:f2:d3:d9:42:2f:bc:ce:75:28:e3:ad:b0:c2: 4d:e5:68:51:30:48:5e:ca:83:81:b2:86:2a:f5:0b: b2:ee:be:9c:e5:cb:80:73:2e:18:a7:b3:e5:89:0c: 89:33:2a:c2:bd:99:69:c2:cd:c5:71:e4:88:a5:f1: 31:a7:2f:19:7c:c7:35:21:9d:f6:2f:58:ab:5b:dd: 74:ca:2d:ae:9a:75:55:39:82:3d:6f:b0:66:62:b9: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E9:A2:BD:47:A3:A0:93:C6:86:24:4C:57:BF:E9:1F:77:AD:48:6B X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:11:7a:88:5d:0f:d5:0e:d9:cf:d0:1d:f7:b9:4d:5f:b6:5d: 09:96:1a:6f:d8:16:0e:03:d1:22:30:39:dc:0e:4a:8f:27:c9: e5:7e:47:d6:02:f5:46:c6:87:ac:1e:f0:54:05:0b:04:a8:f0: 75:5f:17:84:18:3f:1a:22:1e:97:ba:c2:74:f8:26:25:6d:29: 96:b6:cb:fc:7d:01:1b:65:49:c3:7b:34:49:e5:1c:fc:cb:a4: 42:52:2f:d9:91:52:28:62:fa:85:b2:f9:90:b5:5d:ab:5f:64: 6f:aa:42:bb:59:ab:d0:0a:6a:10:a3:96:5d:13:09:0e:0a:5b: 6f:48:57:fc:50:15:49:7d:13:9d:7a:a4:a7:66:57:0b:4e:ae: b8:95:ce:2b:26:49:1c:e6:16:a8:98:71:3a:51:68:d3:7d:39: de:f2:c9:53:7a:22:a5:7d:8d:d1:15:8a:57:53:f7:fd:72:51: 92:75:c2:aa:c7:ce:8e:0a:cd:17:72:35:dc:98:60:2b:88:76: 8a:e4:8a:43:37:ed:9e:f6:f6:a7:4d:08:0e:58:ed:a2:94:84: 36:80:c8:b8:5a:dd:3a:c8:59:b5:0b:7e:d4:75:c4:dd:de:f0: a7:5f:f7:d1:1d:a0:76:45:ac:3b:ba:7c:09:7b:82:b4:8b:61: bb:e2:4c:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHe3nv6dpNcPBgb1lYB4qRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjYxMTE1MTEwMTI0WhcNMjYxMTE2MTEwMTI0WjAzMTEwLwYDVQQD EyhkNWU5YTJiZDQ3YTNhMDkzYzY4NjI0NGM1N2JmZTkxZjc3YWQ0ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPDIfkMUUmfKbo4vSJo+rWxuAoAJ JuyjF8Gb4IVnH/zVQbB5NsxvCf00sqMgVApJdVP5NC1oXRfcEwMZtED/WfTu/7/b OXXL+GFS97ltAFmmASD6zga7ZuQ3+c0YNKSUCTpXpcwuB6nFlwK0aauw9UkalxFG zi/hsaDaCNubu7nrshl11NoYppg3wVLaZoSDA2Xqmu2avsoMwbHa5jHKMhVDviHT XvLT2UIvvM51KOOtsMJN5WhRMEheyoOBsoYq9Quy7r6c5cuAcy4Yp7PliQyJMyrC vZlpws3FceSIpfExpy8ZfMc1IZ32L1irW910yi2umnVVOYI9b7BmYrlIoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXpor1Ho6CTxoYkTFe/6R93rUhrMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxF6iF0P 1Q7Zz9Ad97lNX7ZdCZYab9gWDgPRIjA53A5KjyfJ5X5H1gL1RsaHrB7wVAULBKjw dV8XhBg/GiIel7rCdPgmJW0plrbL/H0BG2VJw3s0SeUc/MukQlIv2ZFSKGL6hbL5 kLVdq19kb6pCu1mr0ApqEKOWXRMJDgpbb0hX/FAVSX0TnXqkp2ZXC06uuJXOKyZJ HOYWqJhxOlFo03053vLJU3oipX2N0RWKV1P3/XJRknXCqsfOjgrNF3I13JhgK4h2 iuSKQzftnvb2p00IDljtopSENoDIuFrdOshZtQt+1HXE3d7wp1/30R2gdkWsO7p8 CXuCtIthu+JMWQ== -----END CERTIFICATE-----Generated at Sun Nov 15 20:31:50 2026 by rpki-client