$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: PMXY+gniiPrMtzL79Rz7RMc1HtvxMd21CQ0QY+l4k7M= Subject key identifier: 44:BE:BE:8D:08:7B:BA:2D:60:CC:FF:76:B3:EE:FA:24:70:53:5A:2B Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 01A1DC821528B8E6E6C72A461A95D34C91F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1B01 Signing time: Sun 15 Nov 2026 00:01:14 +0000 Manifest this update: Sun 15 Nov 2026 00:01:14 +0000 Manifest next update: Mon 16 Nov 2026 00:01:14 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: C+ax9h4uo01DpgQOxGHTBw4+m5LzWFf4v+d+28gBxw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:82:15:28:b8:e6:e6:c7:2a:46:1a:95:d3:4c:91:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Nov 15 00:01:14 2026 GMT Not After : Nov 16 00:01:14 2026 GMT Subject: CN=44bebe8d087bba2d60ccff76b3eefa2470535a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:cf:2d:b6:cf:40:96:32:5d:e4:bc:48:87: 2b:37:a9:d2:16:9d:82:49:7b:44:33:e9:fa:be:48: 96:04:24:c4:32:6c:6a:c3:ee:93:86:af:69:61:16: b3:38:6c:8a:ef:9b:47:81:36:e3:5a:5a:4e:6a:d7: 6c:4f:e2:a7:4c:c2:36:15:40:27:80:9e:5a:df:96: 02:61:7c:b9:01:68:6e:27:83:9c:fe:71:5f:29:97: 79:ba:46:3a:14:f3:02:18:8f:50:b9:85:8e:3a:1d: 79:3b:78:5a:1e:55:fa:44:e5:e8:3b:1c:76:36:c9: 85:69:d1:bc:5b:62:96:ea:f8:0a:e1:02:df:85:03: f2:aa:d1:06:f0:f0:bb:06:e3:a1:e2:0b:db:27:57: 4a:00:07:83:be:ca:81:f6:7f:93:2a:7c:2f:2d:88: ff:5a:3e:1a:99:01:9b:28:94:4a:54:16:ab:d9:87: 47:6e:ee:35:ed:1c:b5:d9:5d:b7:99:78:b8:30:f4: 74:57:13:57:4e:88:64:72:52:ea:ac:8d:8c:12:58: dd:b6:2e:01:63:dc:4e:91:74:57:4b:c3:4e:8c:34: 42:30:92:22:a3:4d:28:f0:34:20:bd:ed:46:d2:88: 39:f5:a6:ac:0a:ff:10:4e:af:cd:d8:bb:08:77:be: c9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BE:BE:8D:08:7B:BA:2D:60:CC:FF:76:B3:EE:FA:24:70:53:5A:2B X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:17:9b:c2:50:b9:23:bc:28:a6:1b:db:f1:ec:9f:7d:05:ab: 3d:c0:ea:c4:e2:6e:03:fd:1d:4b:8a:87:3c:7c:94:8c:3c:55: 30:6b:52:f8:70:e6:a3:1a:77:4e:31:81:32:98:2d:bc:83:63: 2e:a1:d7:52:d3:15:7f:3c:1b:b1:b6:ca:2c:37:2e:71:98:6e: dd:c6:a4:86:81:fe:1a:e8:6e:54:a3:ca:07:aa:41:83:26:a5: 30:64:b5:7e:aa:ce:1b:60:de:1e:2e:35:cb:a8:4b:87:5d:a1: e1:2f:1a:34:10:54:f0:de:ff:cc:64:17:87:82:f6:a7:39:40: 3f:f6:75:3f:ea:55:c7:b6:24:a5:91:f6:d8:76:65:b3:46:40: 59:2b:bd:7d:8b:41:5b:75:c8:49:6c:81:fe:9d:68:1b:d0:73: de:28:3c:12:5c:c2:3b:18:64:97:88:ee:6a:39:c8:10:f2:b9: d1:91:f7:4d:68:89:0c:c4:8e:62:da:c4:3b:12:f4:27:ef:2e: ec:15:52:9d:0e:50:ce:c7:87:ea:43:4c:25:5f:70:78:e8:d5: 98:44:11:e7:5a:0a:7f:43:f4:9f:c4:77:1c:bb:40:6f:f7:45: c0:ba:22:9b:4f:2f:bc:2b:12:24:a3:ea:17:35:1f:54:df:43: f3:fc:e3:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcghUouObmxypGGpXTTJH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYxMTE1MDAwMTE0WhcNMjYxMTE2MDAwMTE0WjAzMTEwLwYDVQQD Eyg0NGJlYmU4ZDA4N2JiYTJkNjBjY2ZmNzZiM2VlZmEyNDcwNTM1YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxczPLbbPQJYyXeS8SIcrN6nSFp2C SXtEM+n6vkiWBCTEMmxqw+6Thq9pYRazOGyK75tHgTbjWlpOatdsT+KnTMI2FUAn gJ5a35YCYXy5AWhuJ4Oc/nFfKZd5ukY6FPMCGI9QuYWOOh15O3haHlX6ROXoOxx2 NsmFadG8W2KW6vgK4QLfhQPyqtEG8PC7BuOh4gvbJ1dKAAeDvsqB9n+TKnwvLYj/ Wj4amQGbKJRKVBar2YdHbu417Ry12V23mXi4MPR0VxNXTohkclLqrI2MEljdti4B Y9xOkXRXS8NOjDRCMJIio00o8DQgve1G0og59aasCv8QTq/N2LsId77JtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFES+vo0Ie7otYMz/drPu+iRwU1orMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThebwlC5 I7wophvb8eyffQWrPcDqxOJuA/0dS4qHPHyUjDxVMGtS+HDmoxp3TjGBMpgtvINj LqHXUtMVfzwbsbbKLDcucZhu3cakhoH+GuhuVKPKB6pBgyalMGS1fqrOG2DeHi41 y6hLh12h4S8aNBBU8N7/zGQXh4L2pzlAP/Z1P+pVx7YkpZH22HZls0ZAWSu9fYtB W3XISWyB/p1oG9Bz3ig8ElzCOxhkl4juajnIEPK50ZH3TWiJDMSOYtrEOxL0J+8u 7BVSnQ5QzseH6kNMJV9weOjVmEQR51oKf0P0n8R3HLtAb/dFwLoim08vvCsSJKPq FzUfVN9D8/zjog== -----END CERTIFICATE-----Generated at Sun Nov 15 10:09:32 2026 by rpki-client