$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: WTSG5oev+gfH1lMB3iZ4Pb7KFiqgZWSRYMyQjNMfwHc= Subject key identifier: 59:6E:3E:AB:90:9A:A7:FD:C0:E2:79:20:F8:36:44:40:02:A0:F8:99 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 01A1AAB9F52CA9849E089F6E4DBA992F38B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 1196 Signing time: Thu 05 Nov 2026 08:01:15 +0000 Manifest this update: Thu 05 Nov 2026 08:01:15 +0000 Manifest next update: Fri 06 Nov 2026 08:01:15 +0000 Files and hashes: 1: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (hash: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=) 2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=) 3: HaplqV3Ef0zu4d-NWCn0tW5HA_Q.roa (hash: cFw5LhsnrPo1FGiVCTLSLDceq01WGhZkM5Ig5NBXjTY=) 4: Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa (hash: cLm3e28GZktVy8Z4+oH4LT/NSGscOWAbP/gVnhYJ0do=) 5: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=) 6: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=) 7: dVmg3H_69aE6cwaIlYTR97afdPo.roa (hash: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=) 8: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=) 9: nSUmZB0jg43RpHkYWlfRXaPrn8c.roa (hash: RpAQ+Ocw+6QgtTuEKxPfy46Zgay038fVhuADeM4LOzQ=) 10: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=) 11: nweMMXjk-LzNxzx_8cOQtiUby1M.roa (hash: pe2/kfRL/sPr+c/LKdqRKmdAqvstf2be3koPjdv34F0=) 12: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: NVgsZQ09I5erhvmpfQBJQFoUePvWz3ALvtHLGwpfRvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:aa:b9:f5:2c:a9:84:9e:08:9f:6e:4d:ba:99:2f:38:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Nov 5 08:01:15 2026 GMT Not After : Nov 6 08:01:15 2026 GMT Subject: CN=596e3eab909aa7fdc0e27920f836444002a0f899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:78:da:de:5d:7f:de:c8:a6:12:72:eb:17: 6a:67:df:e5:22:36:98:dc:63:dd:54:be:e5:df:2e: 65:e5:99:33:1d:56:d5:37:6d:f7:d7:b4:21:cd:29: ad:3e:4e:71:73:9a:5a:72:8d:14:a5:f9:e1:ee:ad: 5c:59:7d:b8:47:ee:c3:12:c6:58:a8:6f:b1:14:b6: c2:8d:23:dc:92:56:c7:dd:0a:55:c6:5f:d0:0b:9f: 91:0c:80:ca:b3:ae:dc:97:b0:83:2a:d7:f8:ae:00: b4:59:82:29:b6:28:f3:ae:a4:4e:f1:00:28:09:03: 7f:d4:37:2a:87:ef:43:d4:73:9c:0f:12:21:70:43: 32:0a:77:2b:9e:2b:02:0f:05:06:40:f6:a3:ca:cb: 41:6a:ba:ec:08:3b:c8:45:e2:c4:76:1e:a1:ee:88: 63:36:7c:00:de:b9:6d:aa:d6:5f:80:a2:1a:c9:ed: f9:94:f8:6f:d4:1f:bd:57:51:34:ee:77:97:75:05: 9c:7b:3e:68:15:c1:41:ac:27:4c:bb:96:d8:cc:fc: 5d:d8:18:b8:d6:f5:ac:ee:be:53:a2:3d:a6:5f:57: d1:be:8f:bb:b7:46:99:60:a6:fc:3a:53:36:4c:0e: 57:08:b0:3d:e6:dd:a5:87:6f:20:6e:6b:54:67:40: 97:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6E:3E:AB:90:9A:A7:FD:C0:E2:79:20:F8:36:44:40:02:A0:F8:99 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7c:3b:9d:1e:3b:b4:f5:81:00:84:9f:11:06:07:e1:54:28: 60:99:02:07:9a:eb:58:9b:33:fe:3b:b8:64:3e:6b:c2:93:38: 07:cb:75:90:8d:93:be:ca:8f:d5:f6:2c:d6:34:90:7a:ce:59: ea:1c:13:07:3b:24:dc:3a:d8:6b:5f:95:db:a0:9d:f9:cf:6a: 7e:bd:24:84:3e:8e:48:e9:00:98:c4:3f:58:75:ea:27:ad:b3: b7:8e:3d:cc:78:bb:d8:0f:99:ba:45:9e:ad:cf:9d:91:42:6b: 16:0f:7a:78:ea:7d:59:c4:6e:eb:da:02:ee:0f:d7:b5:a0:7c: 2e:14:5b:ab:23:d2:f0:e4:41:6c:00:72:9b:9f:90:92:5d:5a: e2:40:ae:be:1e:c1:14:1a:60:dc:a9:45:9f:26:9b:ad:6c:98: 00:99:f5:df:72:67:38:84:af:55:97:ad:6a:bd:cd:c5:7b:86: 80:a9:0c:a6:70:5d:19:9a:e7:53:05:37:91:c5:aa:2a:da:c0: 31:b6:9c:5c:d9:4d:9f:be:aa:3e:95:a9:60:c2:fb:e9:8c:5e: b9:82:42:e6:21:7e:c8:44:52:37:12:67:02:51:3c:f4:31:07: 91:3d:06:b1:f4:d5:df:3f:f8:69:9d:54:ae:7f:89:09:78:de: 9b:c8:95:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGqufUsqYSeCJ9uTbqZLzi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYxMTA1MDgwMTE1WhcNMjYxMTA2MDgwMTE1WjAzMTEwLwYDVQQD Eyg1OTZlM2VhYjkwOWFhN2ZkYzBlMjc5MjBmODM2NDQ0MDAyYTBmODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHF42t5df97IphJy6xdqZ9/lIjaY 3GPdVL7l3y5l5ZkzHVbVN23317QhzSmtPk5xc5paco0Upfnh7q1cWX24R+7DEsZY qG+xFLbCjSPcklbH3QpVxl/QC5+RDIDKs67cl7CDKtf4rgC0WYIptijzrqRO8QAo CQN/1Dcqh+9D1HOcDxIhcEMyCncrnisCDwUGQPajystBarrsCDvIReLEdh6h7ohj NnwA3rltqtZfgKIaye35lPhv1B+9V1E07neXdQWcez5oFcFBrCdMu5bYzPxd2Bi4 1vWs7r5Toj2mX1fRvo+7t0aZYKb8OlM2TA5XCLA95t2lh28gbmtUZ0CXPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFluPquQmqf9wOJ5IPg2REACoPiZMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanw7nR47 tPWBAISfEQYH4VQoYJkCB5rrWJsz/ju4ZD5rwpM4B8t1kI2TvsqP1fYs1jSQes5Z 6hwTBzsk3DrYa1+V26Cd+c9qfr0khD6OSOkAmMQ/WHXqJ62zt449zHi72A+ZukWe rc+dkUJrFg96eOp9WcRu69oC7g/XtaB8LhRbqyPS8ORBbABym5+Qkl1a4kCuvh7B FBpg3KlFnyabrWyYAJn133JnOISvVZetar3NxXuGgKkMpnBdGZrnUwU3kcWqKtrA MbacXNlNn76qPpWpYML76YxeuYJC5iF+yERSNxJnAlE89DEHkT0GsfTV3z/4aZ1U rn+JCXjem8iV7Q== -----END CERTIFICATE-----Generated at Thu Nov 5 15:18:53 2026 by rpki-client