$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json) Hash identifier: q8m841XveOqeTturDlObCdkrcpZy0Lv9pNlVYHSIV20= Subject key identifier: 5E:F9:31:BE:F4:95:89:14:05:57:B3:95:F4:3E:D7:7A:10:43:94:B3 Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 01A1152A2C6D84302EA6BBCBEBBCCCB9D997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft Manifest number: 1AA1 Signing time: Wed 07 Oct 2026 07:00:47 +0000 Manifest this update: Wed 07 Oct 2026 07:00:47 +0000 Manifest next update: Thu 08 Oct 2026 07:00:47 +0000 Files and hashes: 1: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=) 2: 9PqkEGRCIk2yYfzY26gLFkQ-8js.roa (hash: jpfKtSlVYwWZpnaWDix/WKUF8NqzzWuC81b90Lt99zU=) 3: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=) 4: AYFFbDb3A2Id2QZmcQz4_5bAHZs.roa (hash: S6JRpy3bmHsrx74qGhjcEZtWymHQGnV4C16UhCDLJQw=) 5: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=) 6: LKjf7o_3WUfKZdN019fUVQORc-s.roa (hash: vlLPmEb1KK6Co5nJrgcvXX7ly4ij/lppSPEpt9g7Zos=) 7: ZTlU03e2qt__TpF-io4-AEKUOrU.roa (hash: Zw2bD+qyXYZT0vDGotQc/HMnILry5JdGYie/nLyOu5Q=) 8: hMETGb9VAC5A2KuzQKg4WmxFmJA.roa (hash: rjUrw2hE9fEw4IxQF4Ze8WeXj/DO7a6kjsn9RA2w4Os=) 9: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: oHOYhl9cBqz5duLqODeWF+cZFOdorgFAqQ6Ko9Q+tB0=) 10: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:15:2a:2c:6d:84:30:2e:a6:bb:cb:eb:bc:cc:b9:d9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Oct 7 07:00:47 2026 GMT Not After : Oct 8 07:00:47 2026 GMT Subject: CN=5ef931bef49589140557b395f43ed77a104394b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:5c:3c:92:4e:40:bd:87:4e:69:44:a9:40: d7:cd:1c:81:2d:b0:5a:3d:42:c8:69:6a:60:89:16: 02:8b:e1:9a:27:9f:69:8a:4f:9b:16:d5:75:32:0c: 6e:67:f5:ea:6f:3b:ed:37:03:3c:7d:05:20:83:11: e4:26:b6:ac:d7:a9:2d:26:b7:43:a5:33:6b:1e:ec: 36:1b:91:7c:77:8e:79:c6:e2:3b:75:f4:74:8e:64: 59:88:03:50:ed:17:3a:d5:2a:2a:39:47:d8:fb:81: 74:90:79:bc:56:08:d0:0d:08:c9:5a:b6:75:97:a4: 47:e6:65:2c:b7:8d:8b:59:66:c7:94:df:fc:ad:47: 39:16:63:70:80:17:1d:92:6e:22:81:0c:32:a6:0d: 7c:0e:74:d8:5f:9d:57:be:5b:f9:9e:4c:87:66:df: b6:e7:22:5b:36:0e:38:88:57:e7:3c:5e:92:45:f3: 50:b0:0f:15:1a:b4:ae:80:51:b2:19:4f:f0:9e:88: 67:7d:a2:ac:aa:ad:00:51:d2:a6:52:64:40:b9:8f: 56:ad:12:21:1d:41:4e:b6:bc:9d:0c:18:a5:04:70: 6d:c2:51:ad:45:bb:47:f9:b6:7f:71:d2:9f:10:17: f1:49:6f:7f:ff:6a:36:50:90:c6:49:c5:b9:61:98: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F9:31:BE:F4:95:89:14:05:57:B3:95:F4:3E:D7:7A:10:43:94:B3 X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d2:f8:02:d8:7f:3b:3a:ca:e9:78:c2:26:6e:72:72:12:77: 80:49:0c:94:35:42:a8:ef:ea:9c:89:46:19:56:fe:63:60:c8: 9c:7d:9c:3d:10:87:66:dc:6d:e7:3e:09:86:63:71:c7:ba:7c: 3a:5c:ca:84:b1:50:ac:65:f9:42:26:f0:7f:26:67:f9:71:f4: 62:ce:94:d3:58:59:5c:71:65:5d:6a:d0:94:76:80:f0:01:59: 49:86:03:d9:3e:69:c7:13:bf:df:11:8a:85:5e:e6:fa:ef:c6: 56:88:40:17:fe:23:e1:e7:ef:94:99:11:6f:4c:29:ef:ae:ab: 33:c3:fc:6c:1c:a6:99:dd:10:de:14:fc:5b:9d:c5:bd:82:74: 21:2c:cc:57:af:00:e4:b8:15:e2:85:70:b5:3b:4e:58:05:79: bb:03:43:18:9a:20:ae:6c:83:92:43:bd:01:d4:d3:14:ce:48: bf:77:18:f2:eb:0d:33:5f:e2:21:28:b1:e5:52:35:71:0b:ea: 5d:39:9b:7a:64:90:f1:44:eb:e0:9c:fe:c3:fd:9b:b0:24:54: d7:cd:8a:70:a7:da:64:3f:f8:e1:2d:d8:1b:fe:82:3c:10:ce: 40:62:c7:6e:55:32:0b:7c:91:fa:e1:f3:50:e8:71:64:d9:70: e6:00:66:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEVKixthDAuprvL67zMudmXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjYxMDA3MDcwMDQ3WhcNMjYxMDA4MDcwMDQ3WjAzMTEwLwYDVQQD Eyg1ZWY5MzFiZWY0OTU4OTE0MDU1N2IzOTVmNDNlZDc3YTEwNDM5NGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/9cPJJOQL2HTmlEqUDXzRyBLbBa PULIaWpgiRYCi+GaJ59pik+bFtV1MgxuZ/XqbzvtNwM8fQUggxHkJras16ktJrdD pTNrHuw2G5F8d455xuI7dfR0jmRZiANQ7Rc61SoqOUfY+4F0kHm8VgjQDQjJWrZ1 l6RH5mUst42LWWbHlN/8rUc5FmNwgBcdkm4igQwypg18DnTYX51Xvlv5nkyHZt+2 5yJbNg44iFfnPF6SRfNQsA8VGrSugFGyGU/wnohnfaKsqq0AUdKmUmRAuY9WrRIh HUFOtrydDBilBHBtwlGtRbtH+bZ/cdKfEBfxSW9//2o2UJDGScW5YZh07QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF75Mb70lYkUBVezlfQ+13oQQ5SzMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNL4Ath/ OzrK6XjCJm5ychJ3gEkMlDVCqO/qnIlGGVb+Y2DInH2cPRCHZtxt5z4JhmNxx7p8 OlzKhLFQrGX5QibwfyZn+XH0Ys6U01hZXHFlXWrQlHaA8AFZSYYD2T5pxxO/3xGK hV7m+u/GVohAF/4j4efvlJkRb0wp766rM8P8bBymmd0Q3hT8W53FvYJ0ISzMV68A 5LgV4oVwtTtOWAV5uwNDGJogrmyDkkO9AdTTFM5Iv3cY8usNM1/iISix5VI1cQvq XTmbemSQ8UTr4Jz+w/2bsCRU182KcKfaZD/44S3YG/6CPBDOQGLHblUyC3yR+uHz UOhxZNlw5gBmJg== -----END CERTIFICATE-----Generated at Wed Oct 7 17:19:40 2026 by rpki-client