$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json) Hash identifier: lq9+HrlylKhi8cH7D3MiGO9tJ2QQ1zY11TU46oCaUiU= Subject key identifier: 4F:B9:68:3C:F7:14:A7:5A:C7:AF:8F:E0:F4:A4:E6:B1:E7:27:AD:BB Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 01A1D9B82EC277B4121A5038B57A6A7B6449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft Manifest number: 1BDC Signing time: Sat 14 Nov 2026 11:01:28 +0000 Manifest this update: Sat 14 Nov 2026 11:01:28 +0000 Manifest next update: Sun 15 Nov 2026 11:01:28 +0000 Files and hashes: 1: 1oQjSm-kGBrxkRotrqHYaPNAYog.roa (hash: IIc8bR6RSqfXsFfLY0BAhVIj/jEYp+IGcje1VI5aU+I=) 2: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (hash: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8=) 3: 7ZAjxJz8mNYT9GoZY2ISy__StyA.roa (hash: Tovjyj/ixfD0Qu5YZBLHPxyuRU3vslMyzI2IpRvlQhA=) 4: B1hcAWVtfsu4p15wc7vb4f5FG2M.roa (hash: kyrwExxNdM9FgyuKFkeZaaofzfIrWd75BKVu637vFZc=) 5: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (hash: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o=) 6: EerEbo6dEgHiwfgFLCrAnWDppgo.roa (hash: 6Lz61K63KtUQqm0ALtF5HndpRmjb7aGgv3XeEAtY0Gc=) 7: I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa (hash: HcHmzW2d0+z9EOnUudoaXJQ2cKcQ7/kyTrWUvsVJQrw=) 8: ICt1Rkbvy2PurXTbs0JUqBhl_E8.roa (hash: vC+h6HjFcV/FpKrWeC9krmj9LLxIWfjfzAQgLBkIKBQ=) 9: J6-Cc4NWO6ccHc-jz_TXUtwpkRw.roa (hash: B2siFLp0M8HWVkio4t64n/1XBr5g9nYykLn0BL2yQr4=) 10: Lo8n8GTpAuX3cUT5TKIwpdDYMpk.roa (hash: LFfd8LdOzsN++zViD01pBmc6X7J6TGbEOTbK6bu+kU4=) 11: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (hash: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8=) 12: T4s5U1kBkhiB9WozjuHNDxBJBJg.roa (hash: NtcZQ+kpI/7HehNTUjPJKVo09mKaUlReAanTnbKc3mU=) 13: TU7bn-4WvpGzM5DZRCSE5GnOk_s.roa (hash: jqktT6B1SMH3/Qf7XOu//vVdhdh6w7AAhTBdW+2oehU=) 14: WFW_WIwBdI0SNLuZbC80uLnywXU.roa (hash: ECYS+U6BY2zt31zzKoFkN8wTRgzyvrgdtvRAK5RIgxM=) 15: Ygoju5Oyc9k80Ula_n8Oapmdc7s.roa (hash: Y4E+iVL27qh9sMv5NQH9GdnGL4GrlfjPNPOWCnvOupg=) 16: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: 7qabgf4tuJmm53HFmsd5o7ARxUb+SOsgCstEVCHdBEI=) 17: bd2_haPLBRYi9ES34EvG-zee_fI.roa (hash: zv3v3Yxo4I1/H7/mLZQ/IjI9COcfhoJxeb//tFFD0cU=) 18: c6GILi92RmWHgC81JVzcin9qgpQ.roa (hash: /jZx+yR2zbucT8wVOYKro8tRY6PFAOqzqpqt7tcefH8=) 19: cadLxZDfFrGwaInamoL1Q4iHhgQ.roa (hash: gzxwIkO59AlqlpWIdMRsXPPjrmFfLjGs4MCLCtSRYYw=) 20: cuTKnPSYIqMi_v6Ugbvmok1PROw.roa (hash: 23+0bEujcw5tIRr1F8V97O5sEK7TfNzRLUEsi4oLeZQ=) 21: eqX4HCtONznBtdkM0Yv1tIipxwA.roa (hash: MDuAY2fOHyll6nWj4kl7aul/nqNWMDpsUW4/eoDcPJk=) 22: giZ2uZ_m5due4lBiPxv8SG1NOGc.roa (hash: 9B02223i6VysXTKxWCnxBQOkAZWOwRjQUTSDwwP8F0A=) 23: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (hash: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE=) 24: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (hash: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ=) 25: msFoJS2lgnt0k3mYiMMf7W7m4XI.roa (hash: dakN/AD/BmQJDFFo8rBDUJU0AXGNYQnGLQfcB5HJcJc=) 26: om5p04_tlXfJMGB92P4eEh0OiKs.roa (hash: FBr9vlAQSPFIJgy+baLk+yfoI07x1poW7LSr0scZ/NA=) 27: pcJB0suH0TKhOCtzCq1NTEmpZsc.roa (hash: tQGobMEI0P8YC5UfhZCi3AUw8KkzMyZmbnGWFolo9VE=) 28: tKOJMA_Ej6G_X7mORPW8_8mTAAU.roa (hash: MkRKRrZeLxOIfkMxXa3JxJ8juek672QrpVGCDQT42S0=) 29: tLSGZw5-QpB_5fV81O2fLyOca60.roa (hash: QiSrJL6zpztpRwpWANYGtyIdsxsBMIWfzPt3CGOqWPA=) 30: zMqk1-WIYUxSncp-81GKb9JoWog.roa (hash: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw=) 31: zU2HJ5PgtcQML8iTOjpgWXwSlDM.roa (hash: A0t7MhTNtsKvXgVF3m6f1b9L8qaHqIE+QXT/0l0lYYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:d9:b8:2e:c2:77:b4:12:1a:50:38:b5:7a:6a:7b:64:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Nov 14 11:01:28 2026 GMT Not After : Nov 15 11:01:28 2026 GMT Subject: CN=4fb9683cf714a75ac7af8fe0f4a4e6b1e727adbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:5e:ac:59:9e:56:03:3b:eb:6e:02:db:b2: c4:e7:15:af:1d:d4:c1:f2:64:88:93:e2:a4:67:ba: c8:ca:6c:4c:30:4b:62:9a:f8:db:79:d1:ef:89:28: a1:6c:0e:7d:38:9c:01:da:79:c0:45:7f:d0:e3:87: fa:5c:be:9a:3e:ed:ab:41:a7:5c:41:a2:1e:46:60: e5:84:41:5a:b1:71:04:8e:23:9b:27:a4:1f:97:18: 29:9e:b7:a5:37:44:3f:c7:79:32:5d:1f:62:2b:f4: 3b:9a:d2:26:b2:b7:8b:60:11:b8:c4:db:91:bc:6c: be:64:fa:dd:71:a1:6a:07:70:0c:c7:7c:79:0f:f1: 54:4a:8c:96:6e:9b:49:f6:82:fe:0e:5e:d0:18:ad: 1d:d9:e2:15:04:db:31:a6:d2:20:a8:ac:80:ac:04: 3e:cb:1c:44:8e:a0:af:be:a7:74:c9:d0:42:09:2a: b9:31:07:e9:ea:52:0e:8f:01:90:e0:fe:ff:d2:d8: 95:4c:ef:eb:a8:13:63:64:02:91:57:62:7e:c6:47: 4a:72:cd:13:fd:09:b0:a3:b3:e2:91:50:93:2e:9e: 5e:af:46:82:bf:d6:8c:81:63:32:6d:43:93:0f:5d: 15:07:3f:10:85:f5:1f:16:a5:ed:a5:a8:c4:fc:74: ab:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B9:68:3C:F7:14:A7:5A:C7:AF:8F:E0:F4:A4:E6:B1:E7:27:AD:BB X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5b:a0:e5:e9:d4:e5:b8:0a:04:d7:9a:a9:42:a0:e6:2f:07: 6e:36:36:13:67:5a:7d:b9:bc:b1:35:9e:ee:3e:96:9d:be:96: 62:ea:23:e5:1c:26:62:04:99:0c:13:a0:ae:7e:32:2f:ee:11: e9:39:f3:a6:5c:25:ce:d9:ee:2c:f6:b7:4c:96:97:06:eb:d9: a7:06:f9:ca:9e:a5:88:9f:c8:04:38:02:ba:ba:2e:00:ed:9b: 03:96:d6:23:18:a5:14:6d:9e:da:08:cc:52:f5:15:2b:55:c9: 60:5f:a9:0d:57:4b:7b:6b:7e:ea:fa:18:4e:ec:c7:23:a6:48: 7d:7f:1c:36:c2:60:14:3b:08:54:42:21:89:1d:46:18:86:76: fb:9a:36:26:49:77:97:34:9f:91:4b:dd:3f:06:44:b2:5e:50: 50:00:99:24:dc:9f:50:6d:88:94:0e:d8:29:ff:fd:29:7a:8f: 46:df:99:fc:57:74:94:6f:fd:a1:a0:e1:04:15:a4:42:7f:ff: 33:6c:df:e2:df:6a:78:d6:22:5c:c3:1e:05:34:04:af:97:b6: a1:ae:34:79:c8:69:5a:41:63:71:85:55:53:40:ce:6d:e7:4c: 5d:c9:45:0a:7a:32:45:55:10:b5:33:b4:cc:8f:ff:e6:d4:0c: 3f:0a:30:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHZuC7Cd7QSGlA4tXpqe2RJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYxMTE0MTEwMTI4WhcNMjYxMTE1MTEwMTI4WjAzMTEwLwYDVQQD Eyg0ZmI5NjgzY2Y3MTRhNzVhYzdhZjhmZTBmNGE0ZTZiMWU3MjdhZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrFerFmeVgM7624C27LE5xWvHdTB 8mSIk+KkZ7rIymxMMEtimvjbedHviSihbA59OJwB2nnARX/Q44f6XL6aPu2rQadc QaIeRmDlhEFasXEEjiObJ6QflxgpnrelN0Q/x3kyXR9iK/Q7mtImsreLYBG4xNuR vGy+ZPrdcaFqB3AMx3x5D/FUSoyWbptJ9oL+Dl7QGK0d2eIVBNsxptIgqKyArAQ+ yxxEjqCvvqd0ydBCCSq5MQfp6lIOjwGQ4P7/0tiVTO/rqBNjZAKRV2J+xkdKcs0T /Qmwo7PikVCTLp5er0aCv9aMgWMybUOTD10VBz8QhfUfFqXtpajE/HSr1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+5aDz3FKdax6+P4PSk5rHnJ627MB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlug5enU 5bgKBNeaqUKg5i8HbjY2E2dafbm8sTWe7j6Wnb6WYuoj5RwmYgSZDBOgrn4yL+4R 6TnzplwlztnuLPa3TJaXBuvZpwb5yp6liJ/IBDgCurouAO2bA5bWIxilFG2e2gjM UvUVK1XJYF+pDVdLe2t+6voYTuzHI6ZIfX8cNsJgFDsIVEIhiR1GGIZ2+5o2Jkl3 lzSfkUvdPwZEsl5QUACZJNyfUG2IlA7YKf/9KXqPRt+Z/Fd0lG/9oaDhBBWkQn// M2zf4t9qeNYiXMMeBTQEr5e2oa40echpWkFjcYVVU0DObedMXclFCnoyRVUQtTO0 zI//5tQMPwowyQ== -----END CERTIFICATE-----Generated at Sat Nov 14 21:48:28 2026 by rpki-client