$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: BbYFoVLA8Kvka1GfZAKe4AEqBEq6bzyQY0+jSNgYBhY= Subject key identifier: FB:59:FB:14:63:69:D4:67:97:C7:FB:67:D1:FF:0E:14:74:5B:FF:30 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 01A1DB6FEBF45BCE06BAC9028AFB44144333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1B0A Signing time: Sat 14 Nov 2026 19:01:47 +0000 Manifest this update: Sat 14 Nov 2026 19:01:47 +0000 Manifest next update: Sun 15 Nov 2026 19:01:47 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: Of/EPd2ay4KLHREWda2f9O0x9Kbd5XDtYZBn8fhYOwg=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 19:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:6f:eb:f4:5b:ce:06:ba:c9:02:8a:fb:44:14:43:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Nov 14 19:01:47 2026 GMT Not After : Nov 15 19:01:47 2026 GMT Subject: CN=fb59fb146369d46797c7fb67d1ff0e14745bff30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:02:a8:24:85:0f:9d:ab:23:e7:bb:55:ba: 54:12:c0:b8:c9:1c:2a:bb:4f:56:f5:76:18:95:c7: fd:e4:d1:ff:25:d1:48:e1:9f:0e:02:23:c0:e7:90: 21:d3:cf:ff:5a:c8:ac:75:a6:70:8e:62:4f:60:ed: 02:15:e3:85:ca:d6:59:3d:5e:98:0c:56:03:8a:41: ab:ad:b0:13:6f:d2:47:d8:0f:e7:64:e2:30:95:b8: d0:5a:7d:2c:d4:bf:e1:aa:29:8f:37:ba:eb:67:43: ea:ca:4c:26:eb:63:a9:95:bf:56:5d:e3:99:ce:24: 95:ad:5a:17:93:7f:f3:51:db:60:09:dc:cb:5b:57: 2a:81:87:69:91:f2:b2:ff:33:1b:fc:92:84:b7:0b: 97:78:6d:21:07:bd:18:bf:73:d0:39:98:fb:0b:55: cb:c5:2b:23:78:e6:de:50:44:d7:3e:f0:33:62:49: 62:a4:ac:98:17:aa:12:ae:a0:b0:6e:46:df:c6:c5: 7c:a9:71:4e:f3:2b:ed:42:66:31:0b:90:9e:b8:94: 1d:f0:67:40:2d:aa:6e:d1:f7:f6:8b:39:b6:fc:22: c0:d3:64:d3:6c:8d:fc:a6:f5:54:c0:3e:8d:52:b1: e1:d9:36:ed:1a:2c:3a:62:93:1a:d0:d4:2b:28:c2: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:59:FB:14:63:69:D4:67:97:C7:FB:67:D1:FF:0E:14:74:5B:FF:30 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:27:47:82:6a:f5:09:3a:a0:f6:0c:ee:20:10:f6:77:45:90: bc:8c:55:12:80:ea:3e:93:10:32:4d:de:82:fa:da:6a:8e:0e: 8c:3b:58:9e:ca:84:d9:ad:23:fb:e5:5f:4b:e2:ec:6b:0b:6a: f3:9d:7b:82:0f:f1:ac:66:e0:89:8f:8a:a0:8d:ef:98:a6:31: e9:b7:6e:b4:25:d2:ec:23:30:ed:2a:8a:25:38:8a:99:c0:ea: 69:ae:5c:12:be:a5:92:ce:19:a7:d3:9f:8e:2c:9d:41:11:a4: dc:74:68:9c:86:ec:68:ab:00:b2:38:83:ed:33:cf:f8:f1:b2: 9d:2b:87:5a:ed:5a:19:f4:77:92:19:4b:fc:0a:26:c0:fc:37: a9:e2:f2:23:47:81:de:4d:10:fe:f5:49:bb:ea:85:63:37:a0: 9e:1d:f6:bc:90:06:3b:6e:69:80:11:ab:ca:f2:4e:29:7b:1c: 85:18:7c:70:d9:c5:db:c2:13:98:8d:2b:69:f2:6f:f1:1b:85: d6:eb:e6:e8:df:1c:37:46:c3:c2:e1:3b:4b:ae:6c:05:7a:e2: 07:c8:e4:05:6e:9e:5c:e9:a6:b4:71:30:0f:8a:f9:20:74:44: 30:bb:19:32:23:23:82:17:3b:eb:e6:9c:c9:e8:59:ba:e9:ec: 4d:8e:58:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbb+v0W84GuskCivtEFEMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYxMTE0MTkwMTQ3WhcNMjYxMTE1MTkwMTQ3WjAzMTEwLwYDVQQD EyhmYjU5ZmIxNDYzNjlkNDY3OTdjN2ZiNjdkMWZmMGUxNDc0NWJmZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp4CqCSFD52rI+e7VbpUEsC4yRwq u09W9XYYlcf95NH/JdFI4Z8OAiPA55Ah08//WsisdaZwjmJPYO0CFeOFytZZPV6Y DFYDikGrrbATb9JH2A/nZOIwlbjQWn0s1L/hqimPN7rrZ0Pqykwm62Oplb9WXeOZ ziSVrVoXk3/zUdtgCdzLW1cqgYdpkfKy/zMb/JKEtwuXeG0hB70Yv3PQOZj7C1XL xSsjeObeUETXPvAzYklipKyYF6oSrqCwbkbfxsV8qXFO8yvtQmYxC5CeuJQd8GdA Lapu0ff2izm2/CLA02TTbI38pvVUwD6NUrHh2TbtGiw6YpMa0NQrKMKmTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtZ+xRjadRnl8f7Z9H/DhR0W/8wMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCdHgmr1 CTqg9gzuIBD2d0WQvIxVEoDqPpMQMk3egvraao4OjDtYnsqE2a0j++VfS+Lsawtq 8517gg/xrGbgiY+KoI3vmKYx6bdutCXS7CMw7SqKJTiKmcDqaa5cEr6lks4Zp9Of jiydQRGk3HRonIbsaKsAsjiD7TPP+PGynSuHWu1aGfR3khlL/AomwPw3qeLyI0eB 3k0Q/vVJu+qFYzegnh32vJAGO25pgBGryvJOKXschRh8cNnF28ITmI0rafJv8RuF 1uvm6N8cN0bDwuE7S65sBXriB8jkBW6eXOmmtHEwD4r5IHREMLsZMiMjghc76+ac yehZuunsTY5YqA== -----END CERTIFICATE-----Generated at Sun Nov 15 00:29:35 2026 by rpki-client