$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: PXjCOC5bryCyWwyI2f9e09b6s0+AwyZXh8pfgJURgPk= Subject key identifier: C8:E3:5F:0F:2F:25:3C:F1:4C:66:AD:29:0B:9D:8B:04:7A:A6:21:75 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 01A0BA9CCAAA1460C8A0198C30AA8E118C23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 1118 Signing time: Sat 19 Sep 2026 17:00:32 +0000 Manifest this update: Sat 19 Sep 2026 17:00:32 +0000 Manifest next update: Sun 20 Sep 2026 17:00:32 +0000 Files and hashes: 1: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (hash: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=) 2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=) 3: Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa (hash: cLm3e28GZktVy8Z4+oH4LT/NSGscOWAbP/gVnhYJ0do=) 4: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=) 5: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=) 6: dVmg3H_69aE6cwaIlYTR97afdPo.roa (hash: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=) 7: dyRkPw_Wgnkcsg-KlHLl58bkM3I.roa (hash: P1/S907NZKJYyVb3ZIocqBJrz96aUfXN02sqKPQRYNA=) 8: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=) 9: nSUmZB0jg43RpHkYWlfRXaPrn8c.roa (hash: RpAQ+Ocw+6QgtTuEKxPfy46Zgay038fVhuADeM4LOzQ=) 10: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=) 11: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: bEKEJBXnPGjB0a0+VcenqOfwhRn+d6HaNNwSiuskjg0=) 12: putwklBPnj1JGOLLxL48FbAvJQo.roa (hash: 53SiIIxG8DR88drYfVMSXZ7IeFn+dKd25D+p3O1kcto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 11:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ba:9c:ca:aa:14:60:c8:a0:19:8c:30:aa:8e:11:8c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Sep 19 17:00:32 2026 GMT Not After : Sep 20 17:00:32 2026 GMT Subject: CN=c8e35f0f2f253cf14c66ad290b9d8b047aa62175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:1c:8d:cc:3b:2b:53:dc:66:57:1d:02:53: 35:b9:11:15:05:9b:95:fb:c4:84:8a:9d:8f:43:19: 04:51:8f:1c:7d:e2:71:16:86:9a:fc:22:48:db:04: cf:e5:56:99:88:ea:80:99:47:23:75:5f:32:0c:c9: 10:01:be:0f:5c:ed:6e:1c:c3:eb:78:d8:1f:fa:35: 62:93:e9:78:1e:e9:f3:e1:83:f6:fe:ad:9b:b5:d9: 77:27:29:7a:c9:ae:09:33:7e:8d:ed:d2:ec:e8:87: 7d:d2:6d:4e:0c:8c:a7:bf:3e:d9:52:24:23:62:fb: db:6f:b3:01:cb:24:cb:b3:60:51:cc:66:04:d6:39: 66:c0:9a:8b:46:48:2c:c8:c7:f9:f7:94:20:d5:e6: 96:3f:3a:db:07:8d:c6:96:ac:5a:20:3d:2e:7c:40: a5:90:7f:40:b5:a6:9f:01:45:37:f4:f3:eb:c9:43: da:e9:7d:76:f1:ac:8a:21:d2:39:ef:58:5a:a9:7b: 00:86:51:2d:1f:a8:c4:67:8b:dc:08:59:f7:5c:c2: ec:c5:c4:d9:a9:68:19:7f:25:c6:79:f7:df:a2:78: ab:1c:cd:df:f0:ba:ac:8f:93:69:14:8d:47:54:9b: 40:12:50:f8:41:e1:21:2c:da:e1:eb:5d:5a:3f:a4: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E3:5F:0F:2F:25:3C:F1:4C:66:AD:29:0B:9D:8B:04:7A:A6:21:75 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0f:1d:da:30:d6:9d:e0:c2:58:d2:4c:1b:7a:4c:07:35:4a: 7e:a7:e6:88:18:42:1b:cf:69:45:2f:cb:00:6c:e5:f3:6e:41: c9:90:8e:74:7a:fb:7b:06:22:07:e6:9c:17:fb:24:c3:9a:18: 28:02:e2:eb:19:f6:59:36:73:79:2e:1c:1f:12:50:fe:19:8f: f3:eb:09:94:a1:90:25:ac:6d:fd:66:66:54:05:cd:f2:73:4e: 8b:07:70:32:6a:6d:f3:54:04:1f:27:5f:cc:22:99:04:bf:cd: 7a:31:ce:d2:c6:1a:68:ac:9a:af:02:36:08:bc:36:59:d5:b1: d5:98:46:a9:df:04:7e:99:1f:0b:3d:35:15:17:1b:04:bf:37: f1:1e:9e:7c:97:62:33:2a:8f:4a:a9:7e:b0:0d:48:69:a0:e2: 0b:51:07:b4:c3:cb:a4:08:d1:36:4f:8f:e5:5e:13:7c:fb:0b: 2d:a9:ad:89:75:6f:ab:3f:ff:bf:aa:50:15:ae:b2:34:f7:3b: 15:f0:17:2f:b8:7a:ac:76:45:93:6c:7d:91:55:31:0f:04:f7: 22:e8:53:d2:5e:c2:06:c7:65:fa:65:79:ba:2a:0c:18:02:ea: a3:84:17:46:48:0e:94:20:cd:58:b3:d8:d2:8a:0c:0e:a6:06: 6e:2f:86:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC6nMqqFGDIoBmMMKqOEYwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYwOTE5MTcwMDMyWhcNMjYwOTIwMTcwMDMyWjAzMTEwLwYDVQQD EyhjOGUzNWYwZjJmMjUzY2YxNGM2NmFkMjkwYjlkOGIwNDdhYTYyMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkccjcw7K1PcZlcdAlM1uREVBZuV +8SEip2PQxkEUY8cfeJxFoaa/CJI2wTP5VaZiOqAmUcjdV8yDMkQAb4PXO1uHMPr eNgf+jVik+l4Hunz4YP2/q2btdl3Jyl6ya4JM36N7dLs6Id90m1ODIynvz7ZUiQj Yvvbb7MByyTLs2BRzGYE1jlmwJqLRkgsyMf595Qg1eaWPzrbB43GlqxaID0ufECl kH9AtaafAUU39PPryUPa6X128ayKIdI571haqXsAhlEtH6jEZ4vcCFn3XMLsxcTZ qWgZfyXGefffonirHM3f8Lqsj5NpFI1HVJtAElD4QeEhLNrh611aP6R8WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjjXw8vJTzxTGatKQudiwR6piF1MB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQ8d2jDW neDCWNJMG3pMBzVKfqfmiBhCG89pRS/LAGzl825ByZCOdHr7ewYiB+acF/skw5oY KALi6xn2WTZzeS4cHxJQ/hmP8+sJlKGQJaxt/WZmVAXN8nNOiwdwMmpt81QEHydf zCKZBL/NejHO0sYaaKyarwI2CLw2WdWx1ZhGqd8EfpkfCz01FRcbBL838R6efJdi MyqPSql+sA1IaaDiC1EHtMPLpAjRNk+P5V4TfPsLLamtiXVvqz//v6pQFa6yNPc7 FfAXL7h6rHZFk2x9kVUxDwT3IuhT0l7CBsdl+mV5uioMGALqo4QXRkgOlCDNWLPY 0ooMDqYGbi+GYw== -----END CERTIFICATE-----Generated at Sat Sep 19 19:56:47 2026 by rpki-client