$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft File: nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json) Hash identifier: TAmyOjYKLK1B0NmL9FY2JlCTI4m+rlqHvGugQFrXFB8= Subject key identifier: 0B:00:46:AF:67:DE:43:D3:CE:31:13:C4:73:37:9B:84:A9:D1:27:F0 Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30 Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30 Certificate serial: 01A1DD94D58446C49790C624CDAA5E331D68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft Manifest number: 031E Signing time: Sun 15 Nov 2026 05:01:21 +0000 Manifest this update: Sun 15 Nov 2026 05:01:21 +0000 Manifest next update: Mon 16 Nov 2026 05:01:21 +0000 Files and hashes: 1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=) 2: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=) 3: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=) 4: PJ-F3Qyitp5W4P_JmuXEhDwj95A.roa (hash: b6sH2r0w/lWXF9PFk3rc40IsaEaHPz3g/VKzI2NYj4g=) 5: Z3Ut3UJi9jEAPnsBvQE1E4LZn-k.roa (hash: 4aFydu6gTaGFBt1at8ydxXffwjFjIjZOCgz0ATVvCyQ=) 6: hHJ87o4bLWZr5Obd9ma4VbvzSD0.roa (hash: HHYqHL1PR6NZvqmrvZRC/xJgU4FJLjO/lta48BDUKJI=) 7: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=) 8: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: OnR4BV7wXWafAibgiwSW8/YvPBMO8qls4Q6Ou40MIFY=) 9: u8sQr_i3Ih81alrggKdk240TnlI.roa (hash: Ijdan9ym7JXzln5v1oShEjNr8aRq4GMfXQ+zDgdvKGs=) 10: vAmeNYoQrcHgLfD-RRXBc97W490.roa (hash: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:94:d5:84:46:c4:97:90:c6:24:cd:aa:5e:33:1d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30 Validity Not Before: Nov 15 05:01:21 2026 GMT Not After : Nov 16 05:01:21 2026 GMT Subject: CN=0b0046af67de43d3ce3113c473379b84a9d127f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:ec:3f:1c:94:0f:d1:86:e4:8f:67:75:a2: 5c:0f:f2:ae:8a:4b:02:e8:3b:59:79:59:9c:c8:04: 4a:25:6d:df:fe:19:e8:a3:e5:a6:34:a5:ff:94:38: 74:f6:a3:78:28:b4:1c:a1:e1:5b:34:80:8b:4f:ca: d7:65:37:fb:97:e9:e1:7b:d4:99:40:7f:ff:88:80: 4a:53:4c:8c:01:61:aa:45:86:7a:10:df:a9:6d:98: 67:61:83:1a:05:62:5e:b3:36:59:3a:70:06:bd:ee: 03:eb:08:dc:74:47:45:af:ca:bb:3c:a5:74:d8:78: f5:66:96:0b:fb:be:2d:c1:7d:a9:ba:be:9c:52:01: ad:0d:75:42:25:24:84:72:d3:47:10:71:e1:b7:2b: ba:98:3c:8b:08:b4:5e:4b:bf:4f:dd:a3:63:d5:46: 36:84:eb:af:6c:96:0c:55:16:34:f4:da:7d:73:83: 45:09:a9:90:be:a5:01:3b:83:09:c1:6d:65:74:f5: f7:85:14:2d:b6:2d:52:08:7e:5d:0e:0e:65:2f:6a: df:88:f0:fa:57:15:4d:7a:84:4c:cb:8e:89:7e:35: 58:78:41:7f:15:3b:18:c2:1d:1e:79:e8:7a:0e:b6: 83:4e:8c:0c:df:e7:ae:ff:a2:55:1a:be:c8:a5:ff: bd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:00:46:AF:67:DE:43:D3:CE:31:13:C4:73:37:9B:84:A9:D1:27:F0 X509v3 Authority Key Identifier: keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:61:8b:85:db:e0:bd:9f:76:9f:c0:5c:ee:fa:22:29:46:74: a0:e4:60:5c:55:f8:79:1d:0f:a3:b5:5b:df:42:e5:d8:0f:a7: 3c:09:6b:54:94:7c:45:e3:43:1d:e8:32:ab:7f:f3:8f:aa:ee: d1:d4:7a:c2:c5:53:3b:26:93:1b:8c:92:f3:df:c8:ec:37:65: 69:1e:01:4f:41:c8:8c:05:b7:34:e8:af:7a:73:eb:6d:c6:ed: 37:d1:7d:19:ad:68:67:77:91:ec:e8:99:8b:6c:6a:f4:41:92: cc:88:0f:53:76:fb:bd:88:48:1f:79:dd:53:e0:a6:f1:d9:25: ff:2a:6d:fe:8c:47:e0:12:da:b8:96:e4:90:b4:e1:21:cc:85: 7d:87:f2:cb:81:62:1e:29:7a:cc:a9:af:25:7f:ee:4f:78:5a: 1a:e5:32:74:55:c9:ed:79:0e:d6:12:4f:5b:5d:20:12:3e:ca: 6c:f1:0a:82:f0:3e:3f:6b:0c:d8:a2:50:d9:e8:c0:e2:28:e5: 8e:98:eb:dc:b1:e0:7d:2e:60:19:62:14:b2:41:e3:d6:aa:b6: f3:82:78:23:85:fe:c3:28:06:07:e8:6d:4d:26:20:3a:8b:4e: 2a:94:fb:3f:33:25:94:f1:af:5b:02:84:cd:b6:d6:7d:2c:07: d0:9a:05:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdlNWERsSXkMYkzapeMx1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNmQxZGM2Y2FhNDFkM2JlZmZlOGQxZGEyNjcxYTUwZTdm NzlhMzAwHhcNMjYxMTE1MDUwMTIxWhcNMjYxMTE2MDUwMTIxWjAzMTEwLwYDVQQD EygwYjAwNDZhZjY3ZGU0M2QzY2UzMTEzYzQ3MzM3OWI4NGE5ZDEyN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDzsPxyUD9GG5I9ndaJcD/KuiksC 6DtZeVmcyARKJW3f/hnoo+WmNKX/lDh09qN4KLQcoeFbNICLT8rXZTf7l+nhe9SZ QH//iIBKU0yMAWGqRYZ6EN+pbZhnYYMaBWJeszZZOnAGve4D6wjcdEdFr8q7PKV0 2Hj1ZpYL+74twX2pur6cUgGtDXVCJSSEctNHEHHhtyu6mDyLCLReS79P3aNj1UY2 hOuvbJYMVRY09Np9c4NFCamQvqUBO4MJwW1ldPX3hRQtti1SCH5dDg5lL2rfiPD6 VxVNeoRMy46JfjVYeEF/FTsYwh0eeeh6DraDTowM3+eu/6JVGr7Ipf+9DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsARq9n3kPTzjETxHM3m4Sp0SfwMB8GA1UdIwQY MBaAFJ5tHcbKpB077/6NHaJnGlDn95owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNDkxZjktZGM3Ni00Nzc3LWI1YmUt ODNmOWE4ZDFkNGQ2LzEvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xNDkxZjktZGM3Ni00Nzc3LWI1YmUtODNmOWE4ZDFkNGQ2 LzEvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGGLhdvg vZ92n8Bc7voiKUZ0oORgXFX4eR0Po7Vb30Ll2A+nPAlrVJR8ReNDHegyq3/zj6ru 0dR6wsVTOyaTG4yS89/I7DdlaR4BT0HIjAW3NOivenPrbcbtN9F9Ga1oZ3eR7OiZ i2xq9EGSzIgPU3b7vYhIH3ndU+Cm8dkl/ypt/oxH4BLauJbkkLThIcyFfYfyy4Fi Hil6zKmvJX/uT3haGuUydFXJ7XkO1hJPW10gEj7KbPEKgvA+P2sM2KJQ2ejA4ijl jpjr3LHgfS5gGWIUskHj1qq284J4I4X+wygGB+htTSYgOotOKpT7PzMllPGvWwKE zbbWfSwH0JoFsw== -----END CERTIFICATE-----Generated at Sun Nov 15 16:25:12 2026 by rpki-client