$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: /8UmJ7b3nrFf/gd7mr/8/eFz6Vv2L777p38vQXyWFy4= Subject key identifier: 4C:EB:BD:B8:CF:4C:FD:71:46:09:F3:C6:25:95:0B:FB:FF:F0:89:DF Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 01A1A8CB8E986892B44143715CEACB714D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 1195 Signing time: Wed 04 Nov 2026 23:01:14 +0000 Manifest this update: Wed 04 Nov 2026 23:01:14 +0000 Manifest next update: Thu 05 Nov 2026 23:01:14 +0000 Files and hashes: 1: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (hash: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=) 2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=) 3: HaplqV3Ef0zu4d-NWCn0tW5HA_Q.roa (hash: cFw5LhsnrPo1FGiVCTLSLDceq01WGhZkM5Ig5NBXjTY=) 4: Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa (hash: cLm3e28GZktVy8Z4+oH4LT/NSGscOWAbP/gVnhYJ0do=) 5: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=) 6: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=) 7: dVmg3H_69aE6cwaIlYTR97afdPo.roa (hash: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=) 8: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=) 9: nSUmZB0jg43RpHkYWlfRXaPrn8c.roa (hash: RpAQ+Ocw+6QgtTuEKxPfy46Zgay038fVhuADeM4LOzQ=) 10: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=) 11: nweMMXjk-LzNxzx_8cOQtiUby1M.roa (hash: pe2/kfRL/sPr+c/LKdqRKmdAqvstf2be3koPjdv34F0=) 12: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: BqqzLMIzd90E9h9LmgLWeyS4ii+KcUpqyfBQ3fqMVm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a8:cb:8e:98:68:92:b4:41:43:71:5c:ea:cb:71:4d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Nov 4 23:01:14 2026 GMT Not After : Nov 5 23:01:14 2026 GMT Subject: CN=4cebbdb8cf4cfd714609f3c625950bfbfff089df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c2:dd:6a:0b:af:1c:49:19:42:e8:42:09:73: 64:87:f8:0e:be:31:df:cf:2e:a7:33:45:d4:b8:60: b4:36:fa:cc:e7:63:ea:04:b2:94:b8:79:6a:f8:31: ab:a0:0f:7b:5c:a4:1d:a7:3c:22:50:84:8e:ca:e8: 73:29:9c:9c:b3:a3:b7:48:57:5d:89:14:7c:dd:3d: 13:2d:44:72:c2:33:0c:35:c1:d8:4b:98:5e:50:40: ac:49:ed:da:70:a8:9b:2a:89:2f:c8:8c:d4:8f:8c: ad:ff:ec:fb:10:53:80:ec:72:26:dc:15:5f:ed:a2: 18:c5:57:b0:37:f5:1f:07:ee:d5:65:d4:8c:fc:ea: ce:64:a7:1f:6a:3a:7d:e6:86:19:63:e8:35:5f:aa: b7:ca:0a:41:d3:56:7e:81:85:6e:d0:c6:cf:24:ee: 36:c1:a5:f3:ba:13:5a:76:59:09:18:2c:3c:12:79: 2b:da:d3:83:34:c1:67:20:3b:aa:3d:d4:36:c1:c3: 5e:f2:08:ce:fd:0e:47:9f:43:0e:bb:bd:8b:f0:ab: 06:15:03:ef:97:5b:8d:83:fb:55:46:94:2a:b4:d5: 76:a2:3c:77:48:a7:8b:5a:d0:f6:3c:2d:25:1f:5f: cf:fd:6c:92:cb:0e:84:14:d3:b3:d7:f4:62:e0:3c: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EB:BD:B8:CF:4C:FD:71:46:09:F3:C6:25:95:0B:FB:FF:F0:89:DF X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:39:74:12:5b:a1:f8:b0:7a:3a:b3:d2:a0:48:02:fe:63:62: 31:b4:0c:7c:e6:67:c7:3f:59:71:69:ae:05:b3:4f:86:39:c7: 80:8e:4c:4c:35:3a:0a:00:bc:04:ff:97:77:87:3a:dc:22:ea: 30:b1:a7:99:f0:86:59:52:1a:86:4d:8f:bf:0e:6b:26:25:5b: ce:a2:c8:e7:80:70:ac:47:c8:f0:40:43:3c:8e:0e:15:c2:f2: d2:a6:10:cb:2e:4d:9f:52:59:0d:76:72:22:b0:4e:48:d2:ad: 04:e1:4a:7c:ba:a5:89:c4:79:d6:57:7c:69:a1:c9:c9:9d:de: 60:5e:ad:67:67:66:3c:88:aa:f1:9e:19:b3:23:1d:d1:72:d9: d5:c0:68:27:0f:ec:b0:b5:18:71:f7:8c:b6:2a:ce:3b:54:36: 35:a7:d7:13:88:09:c9:e7:20:37:26:47:89:9e:c0:f9:cb:0c: af:75:43:0d:4f:0e:b0:4e:2d:e1:a7:cb:72:5f:40:bb:a7:22: 3a:a2:df:a1:d9:58:70:ee:3a:a5:fa:1d:53:7f:76:36:63:b4: ab:d9:89:8f:a4:78:15:85:87:4c:47:01:67:4b:33:f8:1c:28: ae:a0:31:b8:7b:32:1d:c6:35:66:32:ff:40:f6:e4:05:ec:a6: 05:6f:a0:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGoy46YaJK0QUNxXOrLcU0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYxMTA0MjMwMTE0WhcNMjYxMTA1MjMwMTE0WjAzMTEwLwYDVQQD Eyg0Y2ViYmRiOGNmNGNmZDcxNDYwOWYzYzYyNTk1MGJmYmZmZjA4OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsLdaguvHEkZQuhCCXNkh/gOvjHf zy6nM0XUuGC0NvrM52PqBLKUuHlq+DGroA97XKQdpzwiUISOyuhzKZycs6O3SFdd iRR83T0TLURywjMMNcHYS5heUECsSe3acKibKokvyIzUj4yt/+z7EFOA7HIm3BVf 7aIYxVewN/UfB+7VZdSM/OrOZKcfajp95oYZY+g1X6q3ygpB01Z+gYVu0MbPJO42 waXzuhNadlkJGCw8Enkr2tODNMFnIDuqPdQ2wcNe8gjO/Q5Hn0MOu72L8KsGFQPv l1uNg/tVRpQqtNV2ojx3SKeLWtD2PC0lH1/P/WySyw6EFNOz1/Ri4Dz/BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzrvbjPTP1xRgnzxiWVC/v/8InfMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjl0Eluh +LB6OrPSoEgC/mNiMbQMfOZnxz9ZcWmuBbNPhjnHgI5MTDU6CgC8BP+Xd4c63CLq MLGnmfCGWVIahk2Pvw5rJiVbzqLI54BwrEfI8EBDPI4OFcLy0qYQyy5Nn1JZDXZy IrBOSNKtBOFKfLqlicR51ld8aaHJyZ3eYF6tZ2dmPIiq8Z4ZsyMd0XLZ1cBoJw/s sLUYcfeMtirOO1Q2NafXE4gJyecgNyZHiZ7A+csMr3VDDU8OsE4t4afLcl9Au6ci OqLfodlYcO46pfodU392NmO0q9mJj6R4FYWHTEcBZ0sz+BworqAxuHsyHcY1ZjL/ QPbkBeymBW+gQg== -----END CERTIFICATE-----Generated at Thu Nov 5 11:21:24 2026 by rpki-client