$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: 8joQT53Ab9Cb8MzqDI0rgE4cRPanZDE9kOHLLhL9CEs= Subject key identifier: 2D:D9:87:3A:82:0F:88:F2:8A:AA:58:14:67:BC:88:FE:B7:5E:8C:76 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 01A0C256891A22F827665381509EF6A70B2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 111C Signing time: Mon 21 Sep 2026 05:00:45 +0000 Manifest this update: Mon 21 Sep 2026 05:00:45 +0000 Manifest next update: Tue 22 Sep 2026 05:00:45 +0000 Files and hashes: 1: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (hash: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=) 2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=) 3: Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa (hash: cLm3e28GZktVy8Z4+oH4LT/NSGscOWAbP/gVnhYJ0do=) 4: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=) 5: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=) 6: dVmg3H_69aE6cwaIlYTR97afdPo.roa (hash: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=) 7: dyRkPw_Wgnkcsg-KlHLl58bkM3I.roa (hash: P1/S907NZKJYyVb3ZIocqBJrz96aUfXN02sqKPQRYNA=) 8: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=) 9: nSUmZB0jg43RpHkYWlfRXaPrn8c.roa (hash: RpAQ+Ocw+6QgtTuEKxPfy46Zgay038fVhuADeM4LOzQ=) 10: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=) 11: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: 6xANWZ9WnTcVikqGImXit1rZlThcDwpJZS//GGZ95OA=) 12: putwklBPnj1JGOLLxL48FbAvJQo.roa (hash: 53SiIIxG8DR88drYfVMSXZ7IeFn+dKd25D+p3O1kcto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:56:89:1a:22:f8:27:66:53:81:50:9e:f6:a7:0b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Sep 21 05:00:45 2026 GMT Not After : Sep 22 05:00:45 2026 GMT Subject: CN=2dd9873a820f88f28aaa581467bc88feb75e8c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:71:96:cf:11:d7:df:c2:67:25:fd:ab:e5: b1:ee:1f:65:fd:33:05:d1:86:a0:af:dd:3d:d9:b9: a6:af:77:1c:b9:7c:8d:8e:49:b4:97:d4:dc:41:b4: a2:07:ab:30:40:d8:34:4a:2a:a8:31:d9:d2:12:84: ca:ad:56:f2:0c:da:17:fd:8d:96:c8:fe:d2:53:48: be:d5:29:b1:bb:9e:f2:11:3c:68:be:73:68:d9:6b: 33:f4:f0:a1:ab:24:bc:7a:6b:35:8f:97:5d:1d:af: c0:ca:ca:c6:2d:91:f5:30:06:63:3b:74:fa:59:43: 52:4e:d8:a2:18:06:95:d3:35:01:b1:e2:57:d8:99: 21:e8:a8:56:3a:13:14:66:01:bc:ff:f6:a5:d9:14: f9:9d:34:f6:19:27:a1:47:d6:80:26:3f:a9:6f:7d: 21:c9:74:e8:31:1b:e2:d2:d7:ea:94:b1:5b:4a:1c: 1e:b1:d7:eb:4f:96:43:7f:7a:68:35:f4:85:c0:24: 27:7b:bb:47:0a:d2:32:7a:1c:13:69:79:70:29:61: dd:e7:76:cd:0c:06:89:9d:aa:e9:d1:12:ff:5a:ff: 3f:49:10:76:1a:28:a5:e2:d1:f6:b5:40:74:da:96: 40:41:40:8b:61:9e:22:74:2b:21:a8:b7:f0:ae:1b: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:87:3A:82:0F:88:F2:8A:AA:58:14:67:BC:88:FE:B7:5E:8C:76 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:1e:f3:de:ec:3f:59:2f:56:27:60:1e:d6:48:42:5f:73:e2: 66:d0:13:e6:d6:65:77:b8:da:de:94:46:e8:81:6b:64:1e:a9: af:f7:fb:7a:c5:e9:03:cd:ac:02:22:14:e5:c0:91:41:59:39: 9c:eb:bc:0e:b4:89:48:98:c0:38:e8:b8:c8:90:88:f5:8b:6d: 9a:6b:9d:32:ac:55:4e:02:5f:41:52:8e:97:d6:39:3f:33:14: a7:30:5f:85:37:44:f5:6b:59:97:02:16:66:e9:c1:dc:c3:0a: 32:1b:43:45:47:37:4b:46:9d:ec:1c:10:33:94:c6:d5:0d:5f: 9d:bd:20:7b:48:f6:9d:16:f4:37:a0:18:26:c5:b1:e9:24:33: fe:c9:d0:c2:64:f8:d9:6a:1d:c3:b1:ff:74:38:ba:bf:ed:ba: 8c:35:6b:1c:9f:cc:d6:44:f1:7b:26:c5:fa:1c:70:a7:cf:16: b2:d9:fa:fd:63:83:2b:3c:9c:5a:70:80:81:79:b6:2e:15:54: 21:07:8c:59:93:ab:b4:38:94:f1:be:7d:d9:57:87:19:c6:34: 05:2c:dc:5e:35:17:25:10:2b:9e:c4:c0:fb:23:43:d7:22:2e: 07:fa:57:9b:01:77:82:f4:34:55:56:35:cc:80:c9:bf:3d:69: 15:a5:83:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCVokaIvgnZlOBUJ72pwssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYwOTIxMDUwMDQ1WhcNMjYwOTIyMDUwMDQ1WjAzMTEwLwYDVQQD EygyZGQ5ODczYTgyMGY4OGYyOGFhYTU4MTQ2N2JjODhmZWI3NWU4Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTpxls8R19/CZyX9q+Wx7h9l/TMF 0Yagr9092bmmr3ccuXyNjkm0l9TcQbSiB6swQNg0SiqoMdnSEoTKrVbyDNoX/Y2W yP7SU0i+1Smxu57yETxovnNo2Wsz9PChqyS8ems1j5ddHa/AysrGLZH1MAZjO3T6 WUNSTtiiGAaV0zUBseJX2Jkh6KhWOhMUZgG8//al2RT5nTT2GSehR9aAJj+pb30h yXToMRvi0tfqlLFbShwesdfrT5ZDf3poNfSFwCQne7tHCtIyehwTaXlwKWHd53bN DAaJnarp0RL/Wv8/SRB2Giil4tH2tUB02pZAQUCLYZ4idCshqLfwrhtYGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3ZhzqCD4jyiqpYFGe8iP63Xox2MB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwx7z3uw/ WS9WJ2Ae1khCX3PiZtAT5tZld7ja3pRG6IFrZB6pr/f7esXpA82sAiIU5cCRQVk5 nOu8DrSJSJjAOOi4yJCI9YttmmudMqxVTgJfQVKOl9Y5PzMUpzBfhTdE9WtZlwIW ZunB3MMKMhtDRUc3S0ad7BwQM5TG1Q1fnb0ge0j2nRb0N6AYJsWx6SQz/snQwmT4 2Wodw7H/dDi6v+26jDVrHJ/M1kTxeybF+hxwp88Wstn6/WODKzycWnCAgXm2LhVU IQeMWZOrtDiU8b592VeHGcY0BSzcXjUXJRArnsTA+yND1yIuB/pXmwF3gvQ0VVY1 zIDJvz1pFaWDrQ== -----END CERTIFICATE-----Generated at Mon Sep 21 09:54:24 2026 by rpki-client