$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft File: ZElsSn06I8ONKqy0awbLYXVHsR8.mft (raw, json) Hash identifier: CFV7ETYLr5jrmZ+CSyv2HlB/IKqSAhELVdnfyrMPqDI= Subject key identifier: 1D:A1:84:AF:5E:F7:6F:AD:75:E0:D5:7E:6D:B8:D8:E8:C6:B2:84:F4 Authority key identifier: 64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F Certificate issuer: /CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f Certificate serial: 01A1A55BF896AC882B5DC88C083081BADCD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft Manifest number: 1D Signing time: Wed 04 Nov 2026 07:00:30 +0000 Manifest this update: Wed 04 Nov 2026 07:00:30 +0000 Manifest next update: Thu 05 Nov 2026 07:00:30 +0000 Files and hashes: 1: B8yRPntqYPZUIAOWbomL0gXakqg.roa (hash: 5iSndeVak6Do7L6klp1/ODp4jhes2MCsCsEdMUsbpBc=) 2: T94rHWCZeayUsVELjFLeQOr8rJo.roa (hash: R4O/pNAe1wQ6587rVDJkW+iV0R6LvPpUThFTN5d/NEM=) 3: ZElsSn06I8ONKqy0awbLYXVHsR8-YqenvL4mDiSsMGfyJn6OnjLOd5o-bgpsec-00003cca-00000001.cer (hash: D2SqvGZIVa9aUVIb7sxySEQ252/VQRp9iK/vQ0CTpPQ=) 4: ZElsSn06I8ONKqy0awbLYXVHsR8-ixX35SBIanaumnihdls-egANKhs-bgpsec-00003cca-00000002.cer (hash: A7vutvIqL2MBtz5dsD9bOxIsY+UxzFSwZha04Rt+UiA=) 5: ZElsSn06I8ONKqy0awbLYXVHsR8.crl (hash: RT4cmOGyBUBmQ3z3vNZx0litoCLKlpw41K5ymSq6A2U=) 6: jLdlTOvaTnLzdI384tzQjMmvuCQ.asa (hash: AtE6QEed/vH4h+oZyqsi/AUwZuEeulzvIR1SmrbV2x4=) 7: tLoe4y_IbQH6FKoXKKLgcB_fUXs.roa (hash: vN3jsoaAoGFeF0TjPiRbe6ckXH0xWcv5zd/aMhz5Jac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a5:5b:f8:96:ac:88:2b:5d:c8:8c:08:30:81:ba:dc:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f Validity Not Before: Nov 4 07:00:30 2026 GMT Not After : Nov 5 07:00:30 2026 GMT Subject: CN=1da184af5ef76fad75e0d57e6db8d8e8c6b284f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:20:05:e5:14:3d:f8:14:bd:a1:a1:e1:3d: 92:bd:20:5f:9e:18:29:c0:86:3d:4b:a8:d7:c2:68: de:e5:f4:34:df:9b:03:22:dc:90:8b:69:6c:64:f2: 20:6e:28:cd:df:4f:86:21:66:1a:3c:be:cc:7b:5b: b5:44:7b:bb:81:37:d8:30:e9:44:81:03:4f:9d:44: 98:be:e7:94:a5:c7:df:e9:46:b7:23:b3:aa:0d:c4: ae:ff:75:7e:56:ec:aa:96:0f:ef:dd:b0:5d:a9:5a: aa:8c:d4:bf:23:39:bc:7a:92:9e:0e:60:b7:a8:66: 4f:a4:c9:1b:f2:e4:e8:65:c4:bc:23:58:12:56:0a: 6e:ab:b4:d2:cf:af:bb:d2:26:e3:ca:c0:b4:95:a7: 8b:6e:47:cb:f4:41:a9:76:c5:e7:58:70:48:86:e6: bd:4e:e8:97:1d:fe:31:92:b0:56:4c:a2:84:36:bd: c0:71:87:93:23:8f:c3:20:52:40:07:eb:d0:db:06: e5:1f:6c:43:b4:fe:c4:31:ef:be:20:dc:48:10:ca: dd:f7:82:78:83:0d:dc:d5:d7:d3:c4:da:0c:62:28: 9d:aa:04:c4:73:78:3c:58:de:dd:45:0c:43:e7:ec: a2:2d:b6:ff:a2:1f:75:61:bd:c6:56:36:12:05:33: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A1:84:AF:5E:F7:6F:AD:75:E0:D5:7E:6D:B8:D8:E8:C6:B2:84:F4 X509v3 Authority Key Identifier: keyid:64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d4:ac:ea:a6:0b:33:50:b5:01:44:b1:e2:b5:a7:c4:16:1c: 29:f1:54:30:78:b6:97:dd:6c:22:9b:05:0a:b8:71:32:9d:a1: f0:a4:4c:a8:64:7b:45:ab:89:4e:8f:cc:66:aa:93:7a:8e:01: 75:c5:45:0f:05:6b:aa:d2:c2:73:a5:73:99:3c:90:28:1c:cb: 93:e4:28:6c:96:c3:fc:d5:a5:c3:f4:2a:22:b4:a2:74:78:88: 8e:06:38:51:85:73:c4:6c:01:4e:2b:b4:94:ec:44:55:c2:d7: 16:09:16:c8:90:ad:40:9a:1a:96:62:c4:d7:c6:5b:5e:f1:b5: 08:d6:86:fc:c9:69:8c:11:52:49:ec:85:fb:c4:73:13:76:74: c3:75:1f:05:94:52:67:49:f1:65:a4:64:a9:65:52:44:34:ed: 43:d7:aa:22:8c:ad:b4:66:18:f5:7a:67:9f:b0:1b:c7:8d:3c: 80:2b:61:5c:21:5e:1c:77:71:91:b3:3f:31:ee:c1:69:e3:00: e8:c0:d7:d9:51:f2:a1:85:0b:1a:b5:72:b9:da:a6:6d:8e:f1: 26:1a:87:d0:ef:c9:16:19:b1:91:dc:6c:50:02:79:b0:cb:ec: 29:3b:16:e5:80:b2:97:a0:8f:30:95:0c:68:eb:fe:ee:47:dc: cb:43:b8:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGlW/iWrIgrXciMCDCButzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NDk2YzRhN2QzYTIzYzM4ZDJhYWNiNDZiMDZjYjYxNzU0 N2IxMWYwHhcNMjYxMTA0MDcwMDMwWhcNMjYxMTA1MDcwMDMwWjAzMTEwLwYDVQQD EygxZGExODRhZjVlZjc2ZmFkNzVlMGQ1N2U2ZGI4ZDhlOGM2YjI4NGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzUgBeUUPfgUvaGh4T2SvSBfnhgp wIY9S6jXwmje5fQ035sDItyQi2lsZPIgbijN30+GIWYaPL7Me1u1RHu7gTfYMOlE gQNPnUSYvueUpcff6Ua3I7OqDcSu/3V+Vuyqlg/v3bBdqVqqjNS/Izm8epKeDmC3 qGZPpMkb8uToZcS8I1gSVgpuq7TSz6+70ibjysC0laeLbkfL9EGpdsXnWHBIhua9 TuiXHf4xkrBWTKKENr3AcYeTI4/DIFJAB+vQ2wblH2xDtP7EMe++INxIEMrd94J4 gw3c1dfTxNoMYiidqgTEc3g8WN7dRQxD5+yiLbb/oh91Yb3GVjYSBTM1owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2hhK9e92+tdeDVfm242OjGsoT0MB8GA1UdIwQY MBaAFGRJbEp9OiPDjSqstGsGy2F1R7EfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80OTMyODMtZTZjZC00MWJiLWI1YmMt NzhmNjA1MjJkMDM1LzEvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80OTMyODMtZTZjZC00MWJiLWI1YmMtNzhmNjA1MjJkMDM1 LzEvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtSs6qYL M1C1AUSx4rWnxBYcKfFUMHi2l91sIpsFCrhxMp2h8KRMqGR7RauJTo/MZqqTeo4B dcVFDwVrqtLCc6VzmTyQKBzLk+QobJbD/NWlw/QqIrSidHiIjgY4UYVzxGwBTiu0 lOxEVcLXFgkWyJCtQJoalmLE18ZbXvG1CNaG/MlpjBFSSeyF+8RzE3Z0w3UfBZRS Z0nxZaRkqWVSRDTtQ9eqIoyttGYY9Xpnn7Abx408gCthXCFeHHdxkbM/Me7BaeMA 6MDX2VHyoYULGrVyudqmbY7xJhqH0O/JFhmxkdxsUAJ5sMvsKTsW5YCyl6CPMJUM aOv+7kfcy0O4xQ== -----END CERTIFICATE-----Generated at Wed Nov 4 16:42:03 2026 by rpki-client