$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json) Hash identifier: cUdp1DA8FaFfTMpzC9FEPdhLjerGV4EGJ+Rd+Dohkjk= Subject key identifier: 3D:2A:4C:C2:B3:2C:FA:E3:01:4D:7D:EF:84:92:D8:54:FF:86:73:CC Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60 Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060 Certificate serial: 01A1DFF19BE05092FA79B43A5891AC3FB7E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft Manifest number: 1B09 Signing time: Sun 15 Nov 2026 16:01:55 +0000 Manifest this update: Sun 15 Nov 2026 16:01:55 +0000 Manifest next update: Mon 16 Nov 2026 16:01:55 +0000 Files and hashes: 1: 0z9citdXF8752nMEZiQ4oSMIADQ.roa (hash: JsB61vUCFnFWtGQaFlnVeeC8gXBCxefSLsjNjYyY9/g=) 2: 1QDofdrdxn1wg6XblVl9BvBWUmc.roa (hash: 8Sto9TSm0VzEJfpih+W00AHEzAW1aUXacQ7edZT+jK8=) 3: C3TZvQ_1FiLujnsnS5txLHdX3-0.roa (hash: WPqRifdbE/iZ8UTmNAcTw90CByS2hScx4omMPgxhhpE=) 4: Dk3u4A5UVcvYqEi-Fn56RjPfGgA.roa (hash: c0I2HBAi5dZNXvxND0FAfLmvTxPB4PRVJ78n2uGboHU=) 5: G8ZpxEc3oBN39p3ugtLmH__SNsc.roa (hash: Onleoydby6v7prvyOLP0xEYsiattH3ZVTV0IrxaOVK8=) 6: PN3uQnF1hXtmQJr--krFjl0B47Y.roa (hash: v3hz3riIEe48WN1uQ4yg9Ks+lRstlm8/MIFI6IkTmW8=) 7: SiLSIEYAwNCN6yfvfGLloC6RIXg.roa (hash: f37/jtR+gmt7ksn8/WXr+fSg16YuTdrSXAgeLfyiBrs=) 8: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: 4DZCejvH5Btvid9NoEu3LMd1pFBscqYIssUWC6IcIdg=) 9: fqiuIvpNH-tr0Wy6HlXK7dZvA44.roa (hash: avqb2RzsJ5HL22g7MthH1xUfijxjvr1QQ694NR0PUi0=) 10: gis4ZllGRXq3jnr9xUPwSajdCr8.roa (hash: UH9tHhiuGPYkWT9akw0c0wCXLQCape12TIF+NbthbiM=) 11: ld_-vahqrZ8-EBjQmuFsbyYGBI8.roa (hash: DaJ3ryjddwCJyy1iuWs1b/b+iYJ85vib26a6gXtYJuc=) 12: mYZ-CoJ30ryRjfCq_ZwrN2mkqqU.roa (hash: yzaoDw2vJVnlrfgQa+Wm4W0pkL/1ud5VYXRkIehmaa4=) 13: vivzNK4w1TVYnua5SgoJCXmDNng.roa (hash: 9/40NjL27IpJKJ6tBTmAIkD9cPnZOn2LOM7782cQFOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:f1:9b:e0:50:92:fa:79:b4:3a:58:91:ac:3f:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66e92c341e769443fde1d27566044b4b65159060 Validity Not Before: Nov 15 16:01:55 2026 GMT Not After : Nov 16 16:01:55 2026 GMT Subject: CN=3d2a4cc2b32cfae3014d7def8492d854ff8673cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:00:d3:e6:38:00:14:cc:c5:6a:68:69:9c: a7:26:a5:76:c3:82:51:63:8c:01:4b:54:a3:46:f1: 89:87:fb:96:bb:1c:ca:a1:b5:53:b5:92:78:a0:2d: 60:63:d0:01:5c:3f:c9:d3:28:30:1d:00:d5:77:5d: 10:2c:a3:da:e5:b9:d0:da:30:6e:3d:ea:a3:aa:f0: 74:16:ee:7f:39:d3:7a:76:a3:e5:9d:a8:52:ec:dc: 36:03:dc:eb:7d:db:85:e2:8a:91:43:f1:ef:a6:25: 7c:5f:12:8f:05:2e:ee:48:46:2b:03:b6:e6:23:5a: ce:1e:11:9e:6d:63:21:d2:07:5a:85:99:0e:a1:de: 97:db:c8:17:b1:de:14:77:a4:63:c0:c7:63:24:aa: 4a:c8:80:8e:24:2a:fe:2e:2b:f3:a0:6e:22:94:a6: 2f:61:a8:5e:c3:0e:3a:b5:bc:69:65:1f:e7:09:df: bd:d0:a8:67:2c:9f:fe:0a:6a:11:82:62:fd:b9:c1: e3:5f:da:2a:2a:07:c3:79:a5:15:d5:c5:cd:2c:69: 6a:b6:05:f1:c2:35:cc:2a:05:78:2b:dc:bf:cb:f9: dd:fb:18:03:c7:aa:2e:8c:80:69:d3:ff:bb:52:08: 69:da:09:61:40:3a:bb:a3:f2:57:7c:36:f7:aa:1a: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:4C:C2:B3:2C:FA:E3:01:4D:7D:EF:84:92:D8:54:FF:86:73:CC X509v3 Authority Key Identifier: keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fd:7f:09:6b:47:2f:cd:03:7a:f1:64:37:37:f3:9c:80:10: af:fe:7b:e7:6f:0a:6d:d8:5f:6d:1a:86:73:f4:9b:b4:01:f9: bf:75:63:85:fe:16:4a:73:96:4d:b5:7c:98:76:c3:87:ea:8e: 50:25:b6:2b:b6:78:27:e6:01:9e:fc:66:63:99:65:8e:c4:1c: 39:0d:72:26:7d:ab:b0:12:a6:40:b7:dc:ff:f5:71:cb:9e:25: a8:87:9f:73:cd:4b:4c:cd:4d:93:7b:f5:2c:89:ec:d6:0a:6a: 91:ae:29:40:95:71:5a:84:c8:db:7f:e4:5e:7f:3e:e5:79:0d: e4:2a:c1:78:7c:c1:21:fb:40:a5:e8:26:64:53:89:68:69:76: bc:b9:be:cc:d3:33:4a:fc:95:5c:a2:72:8a:0c:1f:8e:8b:d4: 30:44:cb:08:08:cd:ba:1f:b9:39:9a:89:75:ce:fe:a1:fd:55: a2:1f:ea:ac:39:13:fd:88:e0:d4:ec:4f:b2:14:7e:b4:5c:83: 0f:9f:31:22:e9:0d:be:2f:24:2d:95:02:06:fd:6f:aa:39:63: 80:19:f8:e8:e6:13:3d:a8:89:59:0c:a1:01:c8:39:38:46:9c: 7d:f5:e5:46:42:e5:91:ce:b2:e2:d8:28:f9:17:7c:bc:5d:57: 52:53:61:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHf8ZvgUJL6ebQ6WJGsP7fgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZTkyYzM0MWU3Njk0NDNmZGUxZDI3NTY2MDQ0YjRiNjUx NTkwNjAwHhcNMjYxMTE1MTYwMTU1WhcNMjYxMTE2MTYwMTU1WjAzMTEwLwYDVQQD EygzZDJhNGNjMmIzMmNmYWUzMDE0ZDdkZWY4NDkyZDg1NGZmODY3M2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyMA0+Y4ABTMxWpoaZynJqV2w4JR Y4wBS1SjRvGJh/uWuxzKobVTtZJ4oC1gY9ABXD/J0ygwHQDVd10QLKPa5bnQ2jBu PeqjqvB0Fu5/OdN6dqPlnahS7Nw2A9zrfduF4oqRQ/HvpiV8XxKPBS7uSEYrA7bm I1rOHhGebWMh0gdahZkOod6X28gXsd4Ud6RjwMdjJKpKyICOJCr+LivzoG4ilKYv Yaheww46tbxpZR/nCd+90KhnLJ/+CmoRgmL9ucHjX9oqKgfDeaUV1cXNLGlqtgXx wjXMKgV4K9y/y/nd+xgDx6oujIBp0/+7Ughp2glhQDq7o/JXfDb3qhr+NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0qTMKzLPrjAU1974SS2FT/hnPMMB8GA1UdIwQY MBaAFGbpLDQedpRD/eHSdWYES0tlFZBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYt YzFkMjk2ZjhmZDA3LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYtYzFkMjk2ZjhmZDA3 LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv1/CWtH L80DevFkNzfznIAQr/57528KbdhfbRqGc/SbtAH5v3Vjhf4WSnOWTbV8mHbDh+qO UCW2K7Z4J+YBnvxmY5lljsQcOQ1yJn2rsBKmQLfc//Vxy54lqIefc81LTM1Nk3v1 LIns1gpqka4pQJVxWoTI23/kXn8+5XkN5CrBeHzBIftApegmZFOJaGl2vLm+zNMz SvyVXKJyigwfjovUMETLCAjNuh+5OZqJdc7+of1Voh/qrDkT/Yjg1OxPshR+tFyD D58xIukNvi8kLZUCBv1vqjljgBn46OYTPaiJWQyhAcg5OEacffXlRkLlkc6y4tgo +Rd8vF1XUlNh9A== -----END CERTIFICATE-----Generated at Sun Nov 15 18:38:36 2026 by rpki-client