$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: GoXgz/aS6Q1Gw5sctRXbfb+HaOjYWNMBDDnJceLFBf0= Subject key identifier: 9D:0A:1A:36:6B:3F:5E:BB:D3:7D:B6:8D:86:97:6B:9A:37:ED:4B:F1 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 01A1DA5CC960576F195F0A25823EBDCA0002 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 1B1E Signing time: Sat 14 Nov 2026 14:01:16 +0000 Manifest this update: Sat 14 Nov 2026 14:01:16 +0000 Manifest next update: Sun 15 Nov 2026 14:01:16 +0000 Files and hashes: 1: 9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa (hash: 9BXX00EqfHS9Z+w4cbgMB5Q/vF0Ya/E+TQ5+Mz+KYTQ=) 2: BnZukZqVd6KV9zZv0-1mT53N6B4.roa (hash: csJptEqgIsdw4OHVQsysKkkL/8/bf7C7eKRJxVT6gbU=) 3: CVxfx3KQzEER-BBbsCQ4b2WjeFk.roa (hash: P12FxyadZ3+D6ncFfUITGrjK2DjmN6s5NrQ2Cl3FgF4=) 4: F2Hrf2ZO-e5Se-C1MVuiXNtFCts.roa (hash: z70EzbScXbGkEd63iR3gVuVrT2xNv1pFq/gzFaOfapw=) 5: IdGgLSVePL4Ag35cTRp5zqyuBEc.roa (hash: D5yVGulGMze85HvjnmBTSvUEhpL48qjlTFI0cEv/IxU=) 6: dWJfR3O78mdmRump4LfvKR4bPhk.roa (hash: QZkZflIPeyZVp29E1JD/NyFaBd5cvPYJz27bWSVn1CI=) 7: kcO4BOAkWp3hhCEc94FzIwrWhrI.roa (hash: NrtWTdf0j5FQGw747h0kekrVPakSWiurrTH39n7HJWo=) 8: koTgAFyzFSoTCzrVHkTbWrfryNs.roa (hash: aNxRjEaWtREsXUUDkBWGz5jJ0n92KgYyzWBEcWr4iFA=) 9: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: o/kchOK95UOqoXpMP5OceZ968CFJokqMN8TP4JCcddc=) 10: s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa (hash: nQwJUaWrVg5To0r/HnpgbyQFvZOuiUSeGVW/zjSMAz4=) 11: sPQTBXUhQk6UJZCQIfZBbd9Pv-U.roa (hash: TMIOrtwO5O4ZcGgyNNJHkTCwy9R3KRqkE9Z5jqJ0JJI=) 12: vsDkEDHGze175rfWuKRTPVMUAHI.roa (hash: 76MebX9O3+9C+jklAcOQPfKM01KbF6NsCvF61TJBNeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:5c:c9:60:57:6f:19:5f:0a:25:82:3e:bd:ca:00:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Nov 14 14:01:16 2026 GMT Not After : Nov 15 14:01:16 2026 GMT Subject: CN=9d0a1a366b3f5ebbd37db68d86976b9a37ed4bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9f:99:8a:1d:1c:78:82:93:e7:1a:3b:8f:f8: 53:2a:56:c6:ab:ff:bb:bc:4a:0e:12:78:e3:74:b2: 2b:4c:f6:b2:e1:30:e4:f4:13:82:d7:be:3e:2d:b1: 3e:e3:f4:aa:84:01:23:dd:c8:3a:b1:e8:43:24:fe: 14:9d:94:25:89:22:8e:cb:84:bb:cf:5d:14:d3:33: 06:b2:8f:9b:e2:02:27:02:92:4a:23:55:63:03:e4: 0d:b4:09:f8:0f:48:19:7e:bc:30:54:50:e2:e5:63: 86:a5:c9:bc:25:44:3d:d8:49:14:0d:6d:d6:70:db: 49:78:52:7c:2a:33:c0:54:8e:8e:48:d2:e3:62:b9: 93:01:a7:e4:5f:0f:22:ad:f3:1b:f4:1b:09:98:d4: 92:c8:a6:96:bc:47:b3:77:fa:f9:f0:8c:d4:ba:3b: cf:01:0c:84:5e:bf:5d:66:fe:bd:2a:3a:6a:91:7d: 06:82:99:bb:90:ef:6b:05:20:9f:8a:7e:7f:e4:19: 4a:68:20:5b:f9:2f:a4:9c:3e:49:9e:4a:36:3d:19: 84:45:6c:7b:ac:c3:c8:27:74:31:1e:28:ad:73:88: d8:a4:73:f3:04:b6:92:a7:af:9d:d7:5b:90:b5:d3: 17:fa:5f:10:f4:4e:63:ad:cf:25:bf:02:30:a3:d9: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0A:1A:36:6B:3F:5E:BB:D3:7D:B6:8D:86:97:6B:9A:37:ED:4B:F1 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ea:c3:1a:34:d0:c2:a0:75:93:c0:c1:b0:db:7f:1f:cd:ef: 4c:94:3a:c2:ca:e4:46:04:ae:ab:e5:ca:06:ea:d7:18:0c:08: 6c:bf:60:cc:59:73:54:78:c5:79:eb:76:e1:e7:fd:e6:0c:62: 54:29:a0:cf:5d:42:db:43:59:70:ef:34:33:d3:fc:65:cc:11: b3:83:fe:2c:8d:1f:f2:ba:80:aa:32:22:89:bd:bf:ed:61:4d: 37:9f:26:d4:e6:d4:e5:65:3f:96:a3:d1:10:09:68:88:f6:4a: 55:bc:b7:9b:02:bf:05:70:17:b7:1c:9b:26:40:31:68:23:1b: 8b:9b:09:00:c5:cc:bf:3e:c7:7f:88:fa:4f:f2:b5:4d:fd:bb: 2a:a2:40:be:d8:0f:fc:c5:39:78:af:8f:7c:8a:b1:ca:c8:c5: 08:4f:59:49:97:2f:f5:90:ea:9a:c9:7b:5a:97:8b:7b:3f:5f: 14:af:82:f0:23:3a:2a:62:8a:ce:b7:a9:dc:97:9a:0e:c0:f3: 10:e3:b5:ae:3d:ec:20:90:ce:2b:b0:4c:48:a2:38:19:be:04: 54:f8:4a:8a:52:3f:9c:fc:5f:dc:a2:a3:9f:c2:80:37:06:99: 34:21:2a:5f:e2:88:5f:ed:c5:f3:c7:ad:47:f7:18:52:83:5c: c2:af:75:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHaXMlgV28ZXwolgj69ygACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYxMTE0MTQwMTE2WhcNMjYxMTE1MTQwMTE2WjAzMTEwLwYDVQQD Eyg5ZDBhMWEzNjZiM2Y1ZWJiZDM3ZGI2OGQ4Njk3NmI5YTM3ZWQ0YmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp+Zih0ceIKT5xo7j/hTKlbGq/+7 vEoOEnjjdLIrTPay4TDk9BOC174+LbE+4/SqhAEj3cg6sehDJP4UnZQliSKOy4S7 z10U0zMGso+b4gInApJKI1VjA+QNtAn4D0gZfrwwVFDi5WOGpcm8JUQ92EkUDW3W cNtJeFJ8KjPAVI6OSNLjYrmTAafkXw8irfMb9BsJmNSSyKaWvEezd/r58IzUujvP AQyEXr9dZv69KjpqkX0Ggpm7kO9rBSCfin5/5BlKaCBb+S+knD5Jnko2PRmERWx7 rMPIJ3QxHiitc4jYpHPzBLaSp6+d11uQtdMX+l8Q9E5jrc8lvwIwo9nZdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0KGjZrP1670322jYaXa5o37UvxMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuerDGjTQ wqB1k8DBsNt/H83vTJQ6wsrkRgSuq+XKBurXGAwIbL9gzFlzVHjFeet24ef95gxi VCmgz11C20NZcO80M9P8ZcwRs4P+LI0f8rqAqjIiib2/7WFNN58m1ObU5WU/lqPR EAloiPZKVby3mwK/BXAXtxybJkAxaCMbi5sJAMXMvz7Hf4j6T/K1Tf27KqJAvtgP /MU5eK+PfIqxysjFCE9ZSZcv9ZDqmsl7WpeLez9fFK+C8CM6KmKKzrep3JeaDsDz EOO1rj3sIJDOK7BMSKI4Gb4EVPhKilI/nPxf3KKjn8KANwaZNCEqX+KIX+3F88et R/cYUoNcwq91Lw== -----END CERTIFICATE-----Generated at Sat Nov 14 22:31:07 2026 by rpki-client