$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: F3Nbs3efEKYl8yOM5dGI1RA4RbfO1qdAdtSvLonnopE= Subject key identifier: F8:4C:96:FC:65:B5:57:A3:82:62:50:56:5F:0C:E1:D0:11:9B:4E:18 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 01A1DEDE466E65601C7641626C035B52BEA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 11B1 Signing time: Sun 15 Nov 2026 11:01:11 +0000 Manifest this update: Sun 15 Nov 2026 11:01:11 +0000 Manifest next update: Mon 16 Nov 2026 11:01:11 +0000 Files and hashes: 1: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (hash: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=) 2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=) 3: HaplqV3Ef0zu4d-NWCn0tW5HA_Q.roa (hash: cFw5LhsnrPo1FGiVCTLSLDceq01WGhZkM5Ig5NBXjTY=) 4: Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa (hash: cLm3e28GZktVy8Z4+oH4LT/NSGscOWAbP/gVnhYJ0do=) 5: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=) 6: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=) 7: dVmg3H_69aE6cwaIlYTR97afdPo.roa (hash: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=) 8: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=) 9: nSUmZB0jg43RpHkYWlfRXaPrn8c.roa (hash: RpAQ+Ocw+6QgtTuEKxPfy46Zgay038fVhuADeM4LOzQ=) 10: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=) 11: nweMMXjk-LzNxzx_8cOQtiUby1M.roa (hash: pe2/kfRL/sPr+c/LKdqRKmdAqvstf2be3koPjdv34F0=) 12: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: AO7g7+nP4mWSoh7B+IF0yMWxUVSDtdJ3Ljzi2oE4kes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:de:46:6e:65:60:1c:76:41:62:6c:03:5b:52:be:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Nov 15 11:01:11 2026 GMT Not After : Nov 16 11:01:11 2026 GMT Subject: CN=f84c96fc65b557a3826250565f0ce1d0119b4e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:54:1f:c8:fb:4b:50:d1:3d:0b:78:c9:79: d2:52:4f:9e:3b:27:6c:07:bf:a7:3a:e0:83:bd:50: 29:1b:5b:7b:1f:40:6f:0a:2c:3f:33:c6:c0:c0:44: 7b:11:30:86:c9:4d:3a:93:aa:ca:40:4f:90:ce:38: 07:1d:1c:5a:e4:f4:a6:f7:15:4b:dd:55:39:a2:e5: 94:4a:97:2d:8f:11:ea:50:e3:07:03:54:61:52:58: bb:6a:b8:6e:01:ad:81:d7:5c:cd:a1:3f:14:21:fa: 44:34:9d:12:97:fd:48:67:44:03:5f:dc:78:a0:b5: 16:90:b9:cb:33:55:07:73:fe:8e:5e:44:eb:57:b4: db:ed:1c:3d:50:50:07:52:90:c1:2a:81:bc:b6:dd: 7c:e2:46:40:6f:45:c6:9f:99:a1:ce:2a:12:f3:3b: ef:d2:03:40:3a:21:00:4c:9f:8d:a3:84:ae:0e:7a: be:60:b9:05:df:d9:c8:d7:0a:e3:87:49:83:a4:0c: 6d:2a:d8:98:fd:7b:9f:4f:e8:e7:d7:fd:e4:4b:48: 0b:88:dc:27:04:45:6c:0a:fc:67:d6:45:b4:75:a7: 80:76:81:b5:02:46:53:bb:df:b1:a9:36:d8:6e:b6: f9:d7:61:46:ad:11:ca:42:32:6f:08:cc:91:67:f5: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4C:96:FC:65:B5:57:A3:82:62:50:56:5F:0C:E1:D0:11:9B:4E:18 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:fb:15:25:c7:c8:3b:66:7b:3a:e8:30:50:0c:28:0d:76:dc: 61:f5:1a:98:a2:3a:ef:50:3a:72:16:08:af:75:2c:63:8f:2c: a9:c1:15:93:31:21:e8:89:05:6a:92:33:b5:32:7f:fc:95:74: 88:81:be:43:1e:d5:ea:b7:a5:cd:1c:01:b7:fd:1b:ec:d2:44: c1:7c:c6:96:0e:20:48:20:d2:6c:a0:11:d4:27:aa:2e:49:79: ac:da:67:e2:1b:cc:e7:ad:de:9b:b3:0a:eb:42:de:ac:6c:2d: e6:69:dc:4b:70:5e:b1:80:01:f0:fb:85:26:c7:b9:1f:7d:54: cf:7f:05:39:a4:d6:af:fa:47:6d:4f:41:fd:45:60:ce:47:66: 59:7a:75:3c:25:68:33:7b:12:5e:00:91:89:67:6b:a1:1a:1a: c3:fd:48:33:dd:37:96:be:5f:34:9c:1e:6a:eb:1a:58:1f:85: 6a:d5:44:c8:cc:bc:41:03:75:36:89:21:b2:1c:76:ac:85:c0: d2:eb:36:3a:2e:4b:21:05:d7:e5:15:0d:08:61:f0:0f:e2:c5: 82:74:b5:43:cb:fc:7f:09:71:6f:3b:10:da:9c:34:ae:af:5c: 7c:d7:48:2f:ea:02:fa:d0:1c:1b:6b:08:43:aa:ee:2a:35:90: 52:16:79:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHe3kZuZWAcdkFibANbUr6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYxMTE1MTEwMTExWhcNMjYxMTE2MTEwMTExWjAzMTEwLwYDVQQD EyhmODRjOTZmYzY1YjU1N2EzODI2MjUwNTY1ZjBjZTFkMDExOWI0ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrtUH8j7S1DRPQt4yXnSUk+eOyds B7+nOuCDvVApG1t7H0BvCiw/M8bAwER7ETCGyU06k6rKQE+QzjgHHRxa5PSm9xVL 3VU5ouWUSpctjxHqUOMHA1RhUli7arhuAa2B11zNoT8UIfpENJ0Sl/1IZ0QDX9x4 oLUWkLnLM1UHc/6OXkTrV7Tb7Rw9UFAHUpDBKoG8tt184kZAb0XGn5mhzioS8zvv 0gNAOiEATJ+No4SuDnq+YLkF39nI1wrjh0mDpAxtKtiY/XufT+jn1/3kS0gLiNwn BEVsCvxn1kW0daeAdoG1AkZTu9+xqTbYbrb512FGrRHKQjJvCMyRZ/W2cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhMlvxltVejgmJQVl8M4dARm04YMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPsVJcfI O2Z7OugwUAwoDXbcYfUamKI671A6chYIr3UsY48sqcEVkzEh6IkFapIztTJ//JV0 iIG+Qx7V6relzRwBt/0b7NJEwXzGlg4gSCDSbKAR1CeqLkl5rNpn4hvM563em7MK 60LerGwt5mncS3BesYAB8PuFJse5H31Uz38FOaTWr/pHbU9B/UVgzkdmWXp1PCVo M3sSXgCRiWdroRoaw/1IM903lr5fNJweausaWB+FatVEyMy8QQN1Nokhshx2rIXA 0us2Oi5LIQXX5RUNCGHwD+LFgnS1Q8v8fwlxbzsQ2pw0rq9cfNdIL+oC+tAcG2sI Q6ruKjWQUhZ57g== -----END CERTIFICATE-----Generated at Sun Nov 15 13:13:56 2026 by rpki-client