$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft File: ZElsSn06I8ONKqy0awbLYXVHsR8.mft (raw, json) Hash identifier: JAU3En/bey2Adxy2tuR9Gzxlfl5IjztvjS+8i7qO20k= Subject key identifier: D8:35:13:DE:D7:21:14:E8:A7:3C:DA:2C:E1:E6:73:30:D7:84:C5:0A Authority key identifier: 64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F Certificate issuer: /CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f Certificate serial: 01A1DD5E3D5D87AAA423AE996759E38D2A8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft Manifest number: 3A Signing time: Sun 15 Nov 2026 04:01:43 +0000 Manifest this update: Sun 15 Nov 2026 04:01:43 +0000 Manifest next update: Mon 16 Nov 2026 04:01:43 +0000 Files and hashes: 1: B8yRPntqYPZUIAOWbomL0gXakqg.roa (hash: 5iSndeVak6Do7L6klp1/ODp4jhes2MCsCsEdMUsbpBc=) 2: T94rHWCZeayUsVELjFLeQOr8rJo.roa (hash: R4O/pNAe1wQ6587rVDJkW+iV0R6LvPpUThFTN5d/NEM=) 3: ZElsSn06I8ONKqy0awbLYXVHsR8-YqenvL4mDiSsMGfyJn6OnjLOd5o-bgpsec-00003cca-00000001.cer (hash: D2SqvGZIVa9aUVIb7sxySEQ252/VQRp9iK/vQ0CTpPQ=) 4: ZElsSn06I8ONKqy0awbLYXVHsR8-ixX35SBIanaumnihdls-egANKhs-bgpsec-00003cca-00000002.cer (hash: A7vutvIqL2MBtz5dsD9bOxIsY+UxzFSwZha04Rt+UiA=) 5: ZElsSn06I8ONKqy0awbLYXVHsR8.crl (hash: F5y+nC1fE/VbyBZ798uHVGLlmJu1no34U6kX3HRFses=) 6: jLdlTOvaTnLzdI384tzQjMmvuCQ.asa (hash: AtE6QEed/vH4h+oZyqsi/AUwZuEeulzvIR1SmrbV2x4=) 7: tLoe4y_IbQH6FKoXKKLgcB_fUXs.roa (hash: vN3jsoaAoGFeF0TjPiRbe6ckXH0xWcv5zd/aMhz5Jac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 04:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:5e:3d:5d:87:aa:a4:23:ae:99:67:59:e3:8d:2a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f Validity Not Before: Nov 15 04:01:43 2026 GMT Not After : Nov 16 04:01:43 2026 GMT Subject: CN=d83513ded72114e8a73cda2ce1e67330d784c50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:c5:e3:ac:0f:03:08:9b:95:6b:23:60:7a: b0:f0:3e:2a:3c:7d:ba:25:a2:da:c8:34:b6:8c:bd: 73:75:dc:69:d8:4f:bc:5c:19:7b:3a:91:a9:fb:51: 74:87:75:87:8f:c8:bd:c9:62:f4:f9:84:89:bc:8b: d2:ee:c5:03:5a:52:42:08:b9:1b:51:e1:12:2b:01: 2e:50:5a:e9:36:85:0c:19:02:92:f1:60:fa:14:34: 86:b6:09:b2:78:54:13:3f:9e:25:c0:ca:ab:86:83: 9d:5d:85:31:92:46:ad:9b:93:88:12:fd:21:31:e3: d9:4e:b7:ef:20:9b:59:8f:b0:c3:7c:9c:16:43:f8: a6:3b:09:b1:c8:cc:44:21:e1:ad:40:af:d2:2b:f5: d1:fa:2b:17:eb:bf:f8:bc:3d:02:9c:2a:bd:76:97: 6d:e1:ad:59:05:3a:07:fb:da:c2:81:da:72:22:a3: 3d:85:05:72:89:98:a5:3b:14:60:71:3c:6b:04:90: 71:00:ae:49:8d:56:7f:b1:fc:a3:90:a2:25:40:4c: 40:fb:22:9e:b5:ae:ac:46:79:57:f7:71:0b:66:fb: 4e:2a:1e:69:63:22:5b:2e:53:9c:4d:67:36:be:b4: d2:32:d1:36:2e:5b:79:d6:72:7f:a7:31:5f:18:04: 43:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:35:13:DE:D7:21:14:E8:A7:3C:DA:2C:E1:E6:73:30:D7:84:C5:0A X509v3 Authority Key Identifier: keyid:64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4a:e5:ef:4f:1f:c0:13:7b:8d:4b:e9:e1:92:25:12:30:15: 50:36:c2:e9:f8:92:42:26:00:40:13:9a:c6:1b:8a:92:4a:94: 31:bd:9b:02:4f:8e:df:aa:ec:ed:b5:1c:cb:58:8f:ed:d2:d2: 8a:99:64:60:5f:0d:ed:34:c7:63:3a:be:19:13:38:0c:08:2c: be:73:39:a3:83:91:06:49:6a:5a:38:0a:12:ed:1d:b8:62:42: d2:bf:95:d7:ae:e9:25:53:c6:99:bc:62:43:85:4e:3d:1a:bb: 6f:17:1f:40:15:4b:aa:2e:1a:dc:e2:16:6b:e2:78:a5:7a:75: 72:98:00:e7:e8:ac:0e:f2:8c:80:8c:e8:2c:8d:6f:a7:c6:3d: cd:4a:0f:dd:de:fb:a0:57:06:2d:b9:de:25:87:ce:be:c5:d0: ca:37:c7:af:65:68:9d:ab:3c:6d:74:5a:bc:11:3e:72:6a:e4: e3:bc:c9:15:c6:be:8e:16:9c:82:89:e2:6a:7c:1c:21:cb:73: 67:f0:b3:db:15:d4:c9:2b:25:5d:f9:d9:27:2d:ef:08:29:3e: 32:2f:fe:e5:2e:0d:25:f5:48:de:6a:a0:ad:aa:bb:bc:6a:84: 71:f0:59:9b:df:93:e8:b8:11:30:0d:af:da:8d:1a:be:ad:f8: 02:c3:a9:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdXj1dh6qkI66ZZ1njjSqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NDk2YzRhN2QzYTIzYzM4ZDJhYWNiNDZiMDZjYjYxNzU0 N2IxMWYwHhcNMjYxMTE1MDQwMTQzWhcNMjYxMTE2MDQwMTQzWjAzMTEwLwYDVQQD EyhkODM1MTNkZWQ3MjExNGU4YTczY2RhMmNlMWU2NzMzMGQ3ODRjNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN3F46wPAwiblWsjYHqw8D4qPH26 JaLayDS2jL1zddxp2E+8XBl7OpGp+1F0h3WHj8i9yWL0+YSJvIvS7sUDWlJCCLkb UeESKwEuUFrpNoUMGQKS8WD6FDSGtgmyeFQTP54lwMqrhoOdXYUxkkatm5OIEv0h MePZTrfvIJtZj7DDfJwWQ/imOwmxyMxEIeGtQK/SK/XR+isX67/4vD0CnCq9dpdt 4a1ZBToH+9rCgdpyIqM9hQVyiZilOxRgcTxrBJBxAK5JjVZ/sfyjkKIlQExA+yKe ta6sRnlX93ELZvtOKh5pYyJbLlOcTWc2vrTSMtE2Llt51nJ/pzFfGARDOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNg1E97XIRTopzzaLOHmczDXhMUKMB8GA1UdIwQY MBaAFGRJbEp9OiPDjSqstGsGy2F1R7EfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80OTMyODMtZTZjZC00MWJiLWI1YmMt NzhmNjA1MjJkMDM1LzEvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80OTMyODMtZTZjZC00MWJiLWI1YmMtNzhmNjA1MjJkMDM1 LzEvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkrl708f wBN7jUvp4ZIlEjAVUDbC6fiSQiYAQBOaxhuKkkqUMb2bAk+O36rs7bUcy1iP7dLS iplkYF8N7TTHYzq+GRM4DAgsvnM5o4ORBklqWjgKEu0duGJC0r+V167pJVPGmbxi Q4VOPRq7bxcfQBVLqi4a3OIWa+J4pXp1cpgA5+isDvKMgIzoLI1vp8Y9zUoP3d77 oFcGLbneJYfOvsXQyjfHr2Vonas8bXRavBE+cmrk47zJFca+jhacgonianwcIctz Z/Cz2xXUySslXfnZJy3vCCk+Mi/+5S4NJfVI3mqgraq7vGqEcfBZm9+T6LgRMA2v 2o0avq34AsOpWw== -----END CERTIFICATE-----Generated at Sun Nov 15 12:22:06 2026 by rpki-client