$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json) Hash identifier: t8otQg/qbLjE5fDXC0JLkw25u/0LiKfZXM+Os3o7ktQ= Subject key identifier: 42:C0:73:BE:17:D9:A9:80:58:7A:E5:66:8F:8E:80:6D:67:77:CE:88 Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 01A1DB01F7421201A4495E0E7716DD18D02F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft Manifest number: 1B09 Signing time: Sat 14 Nov 2026 17:01:41 +0000 Manifest this update: Sat 14 Nov 2026 17:01:41 +0000 Manifest next update: Sun 15 Nov 2026 17:01:41 +0000 Files and hashes: 1: 1-_-6SF0OeU0aUK5OH5TSq2x8iJU.roa (hash: U5KKsQZXnB3f4SiABQNbnkHpt5N7LJeYR33Tw+W5RJ4=) 2: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=) 3: 9PqkEGRCIk2yYfzY26gLFkQ-8js.roa (hash: jpfKtSlVYwWZpnaWDix/WKUF8NqzzWuC81b90Lt99zU=) 4: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=) 5: AYFFbDb3A2Id2QZmcQz4_5bAHZs.roa (hash: S6JRpy3bmHsrx74qGhjcEZtWymHQGnV4C16UhCDLJQw=) 6: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=) 7: LKjf7o_3WUfKZdN019fUVQORc-s.roa (hash: vlLPmEb1KK6Co5nJrgcvXX7ly4ij/lppSPEpt9g7Zos=) 8: ZTlU03e2qt__TpF-io4-AEKUOrU.roa (hash: Zw2bD+qyXYZT0vDGotQc/HMnILry5JdGYie/nLyOu5Q=) 9: giyDRFlMshEX2mtXW8ycxEHuiE4.roa (hash: GsxXhWgqxP7o620A/bgtO9saQ52eqvJn9bjuxq3cp7I=) 10: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: LiOlOp7/TahqEZJvv8LkTOSsAyrlQQDJW+ZPEYiPwcQ=) 11: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 17:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:01:f7:42:12:01:a4:49:5e:0e:77:16:dd:18:d0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Nov 14 17:01:41 2026 GMT Not After : Nov 15 17:01:41 2026 GMT Subject: CN=42c073be17d9a980587ae5668f8e806d6777ce88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fb:9a:ea:2e:3b:58:ea:c1:d1:d1:c0:88:7d: 56:8b:4b:4b:96:28:f2:6f:c7:5f:9e:11:0e:bc:95: 2a:54:4e:38:54:33:01:73:39:1c:97:6a:54:05:df: 47:1b:58:3a:75:4b:66:be:b8:61:fa:20:31:8b:27: 70:1e:50:59:d1:c3:18:25:bf:dd:cf:44:a2:8c:7a: 54:e1:a7:71:9e:e4:fa:dd:26:85:88:29:30:32:3a: 04:b1:65:fb:dc:14:16:87:18:17:c3:28:02:da:f2: 7b:de:5e:c0:22:da:ad:6a:c6:17:f9:e4:f2:bd:70: b3:00:1a:ee:9a:44:8c:41:01:90:1a:d0:57:f7:88: 85:32:40:46:e9:72:46:cc:74:6e:7e:69:e1:48:45: cd:12:b4:07:9c:b2:e3:62:60:3b:bc:af:e4:23:df: 21:a4:08:76:c3:a5:15:1f:4a:45:bc:81:72:eb:27: 30:ea:5d:84:be:a0:58:5f:49:ec:ff:da:63:71:0c: cc:0f:88:83:e3:ab:c4:97:61:7d:f2:68:f4:34:a6: 9d:b3:c9:d5:32:1e:65:dc:19:45:df:4a:1d:5b:29: 60:d5:b8:5c:db:7b:20:27:e2:b9:cd:ac:ce:5e:e7: 49:42:b5:d2:df:25:78:fb:9f:0e:83:9b:42:51:c6: b4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C0:73:BE:17:D9:A9:80:58:7A:E5:66:8F:8E:80:6D:67:77:CE:88 X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:67:52:69:c8:db:13:d5:0a:23:83:26:57:1d:d3:8e:62:ee: 17:f7:82:37:77:65:e1:84:47:3c:cc:19:1f:d4:45:bd:9c:d1: eb:17:fe:a5:5f:a2:bd:14:9a:64:2a:f0:2d:6e:f8:55:fd:81: 65:53:b4:1c:da:c1:78:21:9a:2a:7d:66:d6:7a:c4:ab:02:85: 2d:c7:df:3b:45:04:24:90:60:26:93:9b:d5:54:03:68:5c:c0: 4f:74:c3:18:c4:fe:de:07:b9:b0:25:10:65:dd:9d:a7:b3:1a: 80:60:d1:84:4f:07:2b:04:6c:e4:60:30:3a:76:51:6c:bb:5f: 6e:48:8a:02:5d:14:fd:55:6d:81:41:58:4d:97:a3:56:09:5d: 91:f4:a0:fb:ec:d4:74:6d:ee:10:a2:2b:4c:2c:08:12:d4:98: c6:61:ce:a2:9e:25:f7:17:66:dc:eb:5c:96:78:3c:00:6e:7e: 25:c2:a7:36:dc:98:5f:02:a6:6d:52:37:4d:93:55:e8:b3:80: 99:8d:08:72:bd:55:5f:42:8e:10:fd:0c:c8:a6:2b:ff:db:27: 00:bc:b5:23:84:6c:e0:d8:d3:69:f6:85:07:e7:5d:e1:8e:e0: b4:ea:61:a1:9a:a6:2e:e3:e2:24:fd:47:05:ee:1b:da:38:0c: f9:4b:6a:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbAfdCEgGkSV4OdxbdGNAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjYxMTE0MTcwMTQxWhcNMjYxMTE1MTcwMTQxWjAzMTEwLwYDVQQD Eyg0MmMwNzNiZTE3ZDlhOTgwNTg3YWU1NjY4ZjhlODA2ZDY3NzdjZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ua6i47WOrB0dHAiH1Wi0tLlijy b8dfnhEOvJUqVE44VDMBczkcl2pUBd9HG1g6dUtmvrhh+iAxiydwHlBZ0cMYJb/d z0SijHpU4adxnuT63SaFiCkwMjoEsWX73BQWhxgXwygC2vJ73l7AItqtasYX+eTy vXCzABrumkSMQQGQGtBX94iFMkBG6XJGzHRufmnhSEXNErQHnLLjYmA7vK/kI98h pAh2w6UVH0pFvIFy6ycw6l2EvqBYX0ns/9pjcQzMD4iD46vEl2F98mj0NKads8nV Mh5l3BlF30odWylg1bhc23sgJ+K5zazOXudJQrXS3yV4+58Og5tCUca0TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELAc74X2amAWHrlZo+OgG1nd86IMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmdSacjb E9UKI4MmVx3TjmLuF/eCN3dl4YRHPMwZH9RFvZzR6xf+pV+ivRSaZCrwLW74Vf2B ZVO0HNrBeCGaKn1m1nrEqwKFLcffO0UEJJBgJpOb1VQDaFzAT3TDGMT+3ge5sCUQ Zd2dp7MagGDRhE8HKwRs5GAwOnZRbLtfbkiKAl0U/VVtgUFYTZejVgldkfSg++zU dG3uEKIrTCwIEtSYxmHOop4l9xdm3Otclng8AG5+JcKnNtyYXwKmbVI3TZNV6LOA mY0Icr1VX0KOEP0MyKYr/9snALy1I4Rs4NjTafaFB+dd4Y7gtOphoZqmLuPiJP1H Be4b2jgM+UtqQw== -----END CERTIFICATE-----Generated at Sun Nov 15 01:21:29 2026 by rpki-client