$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: RKLMOCUMAKRui/uxan2pwOh5XN/X2XJnadA/PiDAyMA= Subject key identifier: 66:7C:C2:BA:E5:7D:E0:E7:4A:24:40:28:92:A4:47:5E:8F:F9:91:DB Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 01A1DB01CDEB08BA264B5610FF43DAA4CCDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 11AF Signing time: Sat 14 Nov 2026 17:01:30 +0000 Manifest this update: Sat 14 Nov 2026 17:01:30 +0000 Manifest next update: Sun 15 Nov 2026 17:01:30 +0000 Files and hashes: 1: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (hash: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=) 2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=) 3: HaplqV3Ef0zu4d-NWCn0tW5HA_Q.roa (hash: cFw5LhsnrPo1FGiVCTLSLDceq01WGhZkM5Ig5NBXjTY=) 4: Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa (hash: cLm3e28GZktVy8Z4+oH4LT/NSGscOWAbP/gVnhYJ0do=) 5: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=) 6: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=) 7: dVmg3H_69aE6cwaIlYTR97afdPo.roa (hash: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=) 8: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=) 9: nSUmZB0jg43RpHkYWlfRXaPrn8c.roa (hash: RpAQ+Ocw+6QgtTuEKxPfy46Zgay038fVhuADeM4LOzQ=) 10: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=) 11: nweMMXjk-LzNxzx_8cOQtiUby1M.roa (hash: pe2/kfRL/sPr+c/LKdqRKmdAqvstf2be3koPjdv34F0=) 12: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: AM0XlTHDHD7sHIwyeLJL1gmLZANFw+RAuuTnM2UtPAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:01:cd:eb:08:ba:26:4b:56:10:ff:43:da:a4:cc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Nov 14 17:01:30 2026 GMT Not After : Nov 15 17:01:30 2026 GMT Subject: CN=667cc2bae57de0e74a24402892a4475e8ff991db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0f:3c:c9:0a:f3:bf:ca:a8:4b:4d:78:a5:ce: c7:49:a4:b0:0b:4a:15:11:cc:b4:c7:c1:fa:d6:3a: 8b:14:5f:2e:8b:54:96:7b:64:a2:58:b2:fe:c6:30: b5:b3:24:28:be:95:d1:5a:68:2f:14:eb:22:06:ca: 24:ef:3c:ec:78:0d:ee:da:14:f5:bc:bb:8b:c4:0e: 22:f3:1d:49:6d:b3:ec:18:73:22:b9:1f:57:7f:07: 9c:72:f8:97:ae:34:29:81:01:58:a2:a2:ce:2e:25: 22:96:da:2b:7c:98:d5:fa:7a:42:0e:87:c0:c6:ab: 7f:a9:36:17:e3:41:fe:9a:c8:2f:24:32:05:59:a2: 3e:20:ae:40:10:df:53:2e:4c:ad:39:52:9e:17:cd: 09:5a:39:2c:8c:2c:ec:9a:65:23:19:3e:ef:cb:12: 41:6f:72:b0:5f:3f:b5:c3:21:2b:ab:37:8c:5b:e4: ef:e1:99:b6:5b:47:12:ea:21:d5:74:67:0b:1c:ab: 91:7c:85:35:15:97:35:14:4d:a6:17:f0:67:cc:01: 18:4c:53:6c:c5:cc:a2:db:ae:c4:86:c6:c9:2e:87: 10:b0:75:7f:aa:e9:ae:96:c2:df:55:56:68:37:74: 46:78:8a:22:91:91:b9:64:27:a7:f1:62:84:95:c5: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7C:C2:BA:E5:7D:E0:E7:4A:24:40:28:92:A4:47:5E:8F:F9:91:DB X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b2:97:fc:48:21:e8:ba:da:3d:fc:f4:db:c6:61:a2:af:53: c2:bb:2a:de:29:f2:ff:9d:c9:70:5d:5d:cc:04:1a:a5:42:37: ab:39:07:c3:c6:23:c9:18:69:26:e1:b7:53:cb:e4:da:c8:28: 20:e1:e2:a6:44:c1:b2:be:de:ec:e9:be:0b:82:7d:6e:3f:7b: 16:e7:0d:65:d2:50:02:5f:40:c9:fa:42:63:69:61:e4:7c:6f: f2:be:84:8e:6c:61:99:25:13:f4:b9:43:48:e4:0b:2e:04:d6: d7:f7:fc:47:5c:d3:5a:47:ce:0f:db:bf:06:68:52:e5:47:14: 84:f4:ff:5a:75:c9:21:e6:88:dc:b1:54:c9:c3:e8:3e:f2:32: 77:6b:58:33:97:35:a6:74:bb:84:9c:4f:33:22:0a:89:f0:f0: f9:5d:b1:e8:b4:6a:51:63:9a:a6:e5:b7:08:1f:d8:ed:52:90: 93:f6:ac:d0:af:cd:97:47:69:89:4f:ef:d6:d9:ac:57:53:c9: 60:46:f0:e1:68:0d:66:81:da:cc:54:8e:54:00:1d:ce:01:04: eb:21:a4:52:9f:82:bb:b4:a4:25:8d:10:b1:2a:af:b3:2f:5d: 23:12:f6:b7:df:bb:33:a2:bf:6f:9e:da:39:d7:c8:33:7f:ae: e5:44:ab:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbAc3rCLomS1YQ/0PapMzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYxMTE0MTcwMTMwWhcNMjYxMTE1MTcwMTMwWjAzMTEwLwYDVQQD Eyg2NjdjYzJiYWU1N2RlMGU3NGEyNDQwMjg5MmE0NDc1ZThmZjk5MWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g88yQrzv8qoS014pc7HSaSwC0oV Ecy0x8H61jqLFF8ui1SWe2SiWLL+xjC1syQovpXRWmgvFOsiBsok7zzseA3u2hT1 vLuLxA4i8x1JbbPsGHMiuR9XfweccviXrjQpgQFYoqLOLiUiltorfJjV+npCDofA xqt/qTYX40H+msgvJDIFWaI+IK5AEN9TLkytOVKeF80JWjksjCzsmmUjGT7vyxJB b3KwXz+1wyErqzeMW+Tv4Zm2W0cS6iHVdGcLHKuRfIU1FZc1FE2mF/BnzAEYTFNs xcyi267EhsbJLocQsHV/qumulsLfVVZoN3RGeIoikZG5ZCen8WKElcWu3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ8wrrlfeDnSiRAKJKkR16P+ZHbMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULKX/Egh 6LraPfz028Zhoq9Twrsq3iny/53JcF1dzAQapUI3qzkHw8YjyRhpJuG3U8vk2sgo IOHipkTBsr7e7Om+C4J9bj97FucNZdJQAl9AyfpCY2lh5Hxv8r6EjmxhmSUT9LlD SOQLLgTW1/f8R1zTWkfOD9u/BmhS5UcUhPT/WnXJIeaI3LFUycPoPvIyd2tYM5c1 pnS7hJxPMyIKifDw+V2x6LRqUWOapuW3CB/Y7VKQk/as0K/Nl0dpiU/v1tmsV1PJ YEbw4WgNZoHazFSOVAAdzgEE6yGkUp+Cu7SkJY0QsSqvsy9dIxL2t9+7M6K/b57a OdfIM3+u5USrBA== -----END CERTIFICATE-----Generated at Sat Nov 14 22:35:11 2026 by rpki-client