$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: wUJynLfn9Bc33LBeEtJEpHtMqmNPZh2o1n8D4EaiOLo= Subject key identifier: CE:EF:A8:A2:12:6C:1A:66:38:AE:03:3B:4F:84:AD:F3:0D:A0:B3:9A Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 01A0C96BA1AB4049E3596BCCF0D33CED8F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 0560 Signing time: Tue 22 Sep 2026 14:01:09 +0000 Manifest this update: Tue 22 Sep 2026 14:01:09 +0000 Manifest next update: Wed 23 Sep 2026 14:01:09 +0000 Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=) 2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=) 3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=) 4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=) 5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=) 6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=) 7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=) 8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=) 9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=) 10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=) 11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=) 12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: BlryVqPP54BUciMUst0dCrcGliofYhNVXz2+pa4PoEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:6b:a1:ab:40:49:e3:59:6b:cc:f0:d3:3c:ed:8f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Sep 22 14:01:09 2026 GMT Not After : Sep 23 14:01:09 2026 GMT Subject: CN=ceefa8a2126c1a6638ae033b4f84adf30da0b39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ea:68:cf:a0:8a:b8:80:e2:70:91:96:1f:e2: f7:30:bd:7f:25:32:fb:08:85:8a:d9:07:af:fa:29: 19:a8:74:a3:e7:e4:c2:9a:bb:5b:4e:78:b4:0e:d2: 79:b2:2a:e5:f4:e7:ab:20:28:41:88:b5:e7:84:7c: c0:6b:d3:75:8a:00:f0:a8:e9:be:87:69:04:45:b6: 02:f6:d5:a5:96:fa:90:d0:3c:71:5a:19:7f:35:68: 40:c3:da:d4:e4:a9:cb:a8:12:13:7d:54:e9:83:0f: 6d:a1:e5:c3:0f:02:59:9d:62:83:a5:c5:4f:a5:27: cc:1e:cf:31:00:49:74:05:87:de:07:84:20:ed:a0: a2:f5:b9:02:1c:01:15:26:e6:69:5d:e8:7e:18:15: ad:16:e7:34:01:19:a9:60:ea:59:8d:51:20:0b:41: 36:ba:6f:2f:61:ee:1b:7a:04:ab:10:d1:18:30:7f: 4f:04:e4:10:6d:dd:6c:16:a7:9e:33:37:12:4d:b2: 31:fe:3d:53:9a:44:fb:c7:e7:c6:db:4e:6f:e5:f7: 5f:f6:78:f5:bc:4c:d1:ef:44:09:20:cb:0f:fe:02: a1:72:8f:91:4d:2d:09:d2:97:d9:7a:1f:24:06:28: 09:0a:bb:d1:4e:65:e0:ea:6d:78:53:26:73:a9:23: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EF:A8:A2:12:6C:1A:66:38:AE:03:3B:4F:84:AD:F3:0D:A0:B3:9A X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:82:8a:3e:f1:2d:de:52:8c:b6:ad:fb:c3:d2:9d:2f:9e:0c: 7d:c7:d6:9f:be:c5:42:85:96:69:5a:4e:b2:00:bb:07:ff:8d: f4:c5:57:8f:ac:a9:3d:4e:1b:69:4c:a6:7b:87:e6:a7:b3:30: 11:0a:d7:e8:3b:0c:58:55:84:e9:d9:8a:0a:12:19:33:6e:d6: 29:fc:d9:cd:7f:b6:3c:90:65:96:0e:a5:2e:b9:57:7b:88:22: cd:8e:2a:ab:0a:a7:0c:7c:8d:63:4f:a6:f3:d6:c7:e7:73:5f: 15:55:01:a0:28:d6:92:7a:32:d1:48:04:36:1a:41:22:88:47: eb:60:02:21:9d:9c:da:c9:6e:f3:78:03:03:07:69:2b:17:58: e6:f9:61:84:d1:65:1c:e5:60:8e:ec:87:16:bc:b8:91:08:fa: d5:68:96:cc:c1:9a:66:13:b0:87:f6:70:85:fd:37:eb:be:96: 7c:1c:0f:45:39:11:2c:a8:11:82:1b:3e:ca:bc:2e:52:83:cf: 27:b0:62:7c:fa:b3:ef:eb:97:c6:ad:24:fe:0f:e4:56:f5:d8: 82:73:64:4a:2a:8d:29:47:67:d9:f0:c0:08:c0:c1:8c:72:18: 69:a2:fd:e7:0c:fc:fe:08:48:21:e7:d2:aa:95:02:4a:e3:5d: d3:e4:0d:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJa6GrQEnjWWvM8NM87Y+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwOTIyMTQwMTA5WhcNMjYwOTIzMTQwMTA5WjAzMTEwLwYDVQQD EyhjZWVmYThhMjEyNmMxYTY2MzhhZTAzM2I0Zjg0YWRmMzBkYTBiMzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoepoz6CKuIDicJGWH+L3ML1/JTL7 CIWK2Qev+ikZqHSj5+TCmrtbTni0DtJ5sirl9OerIChBiLXnhHzAa9N1igDwqOm+ h2kERbYC9tWllvqQ0DxxWhl/NWhAw9rU5KnLqBITfVTpgw9toeXDDwJZnWKDpcVP pSfMHs8xAEl0BYfeB4Qg7aCi9bkCHAEVJuZpXeh+GBWtFuc0ARmpYOpZjVEgC0E2 um8vYe4begSrENEYMH9PBOQQbd1sFqeeMzcSTbIx/j1TmkT7x+fG205v5fdf9nj1 vEzR70QJIMsP/gKhco+RTS0J0pfZeh8kBigJCrvRTmXg6m14UyZzqSODQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7vqKISbBpmOK4DO0+ErfMNoLOaMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3oKKPvEt 3lKMtq37w9KdL54MfcfWn77FQoWWaVpOsgC7B/+N9MVXj6ypPU4baUyme4fmp7Mw EQrX6DsMWFWE6dmKChIZM27WKfzZzX+2PJBllg6lLrlXe4gizY4qqwqnDHyNY0+m 89bH53NfFVUBoCjWknoy0UgENhpBIohH62ACIZ2c2slu83gDAwdpKxdY5vlhhNFl HOVgjuyHFry4kQj61WiWzMGaZhOwh/Zwhf03676WfBwPRTkRLKgRghs+yrwuUoPP J7BifPqz7+uXxq0k/g/kVvXYgnNkSiqNKUdn2fDACMDBjHIYaaL95wz8/ghIIefS qpUCSuNd0+QN3g== -----END CERTIFICATE-----Generated at Tue Sep 22 21:58:21 2026 by rpki-client