$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: drz8sqWpt6eYtUOa6vdIHIovx0zkCoMGDku4fEDQWYU= Subject key identifier: ED:36:94:9E:45:99:82:D7:4B:D4:8A:43:05:01:DD:26:30:6A:60:B8 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 01A11DF5DFD19EDFD8CCAE83BCEAAED31535 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 17C8 Signing time: Fri 09 Oct 2026 00:00:15 +0000 Manifest this update: Fri 09 Oct 2026 00:00:15 +0000 Manifest next update: Sat 10 Oct 2026 00:00:15 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 3: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 4: 8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa (hash: dgE2Ab9ZfpajFKmcACCOgi+fkWx+nQ+aZGAo8XG7CBs=) 5: GsdSTdPPwI0228ECIt2r0rK9RWw.roa (hash: X0Lt5c9WzmkCc5QBBKneyZXk9AJbwJF87NdzB2X/zUg=) 6: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: 5iAS8JOH+3iMl/wfi3IuNT8Xv8ZrvaDPaGUbCwRl+TY=) 7: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 8: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 9: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 10: cI3avh87O39OTH2EDCZqQutH5Ns.roa (hash: PWvhR3t5RRJ4KX9H65mhTT6EDfYi6lc1qIh3TLRHz2Y=) 11: d2890PaygR0MS5u8p7dH6H66pb4.roa (hash: HhGnLAPS8EnA/7AkwrL0JfpWX2Nt+s9/OgXKlvI6K0o=) 12: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 13: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 14: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) 15: yDHywWsdIhBQgVuHLGKPzw5EM7U.roa (hash: 9Ahh7dFFmiQE0dfQuEmxqO0TQHF9u86//wZZySbZLs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 22:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:1d:f5:df:d1:9e:df:d8:cc:ae:83:bc:ea:ae:d3:15:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Oct 9 00:00:15 2026 GMT Not After : Oct 10 00:00:15 2026 GMT Subject: CN=ed36949e459982d74bd48a430501dd26306a60b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:cb:cb:78:f2:ed:ff:89:9e:be:39:a1:02: 6a:32:37:8d:92:57:1b:cb:47:06:27:f4:90:d5:62: 60:aa:40:bb:b7:80:b9:de:7e:f2:62:06:a6:25:78: e6:de:77:5a:eb:ea:af:61:83:ce:bb:15:b0:2b:ce: cc:ab:0a:2d:21:c3:7d:0a:c5:ba:95:d3:5e:e6:7a: 88:98:f1:77:4d:89:5e:4b:42:e7:de:ca:83:30:0c: 2f:50:70:a9:8c:4b:0d:2f:84:bd:66:85:6e:a3:c0: 0e:e8:ba:03:31:f9:ca:98:f9:1d:9d:73:2e:a3:e9: 54:89:f4:86:b5:ed:67:75:a5:9d:4d:9e:a3:f1:98: 29:88:aa:81:b1:db:54:03:1f:b0:ec:39:d0:cd:09: 13:aa:b2:92:a5:a4:97:b3:a6:86:1f:55:25:78:68: 73:07:29:86:26:15:17:e1:6a:2d:7c:de:03:39:75: 42:aa:be:2a:0b:6f:97:e5:b6:2f:b5:cc:8c:30:85: bb:35:41:b4:8c:df:d3:f7:6e:f4:e7:fd:25:61:e9: 94:c5:36:a5:ff:92:76:91:41:da:5e:8d:4c:57:51: d0:71:fd:f9:1f:c9:e1:75:72:7f:a5:82:2c:9d:12: 02:25:03:e6:e4:d9:0f:ed:e2:e1:8e:8d:1b:56:39: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:94:9E:45:99:82:D7:4B:D4:8A:43:05:01:DD:26:30:6A:60:B8 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:43:cc:ba:e2:de:e8:e2:0f:8b:c1:e7:83:89:3d:e3:83:e6: dd:e4:ae:97:88:db:1e:3c:65:29:be:25:63:cf:46:99:c1:bb: 73:c8:0f:3b:16:44:b0:6a:1f:c0:ff:6f:46:ab:c3:be:68:07: 5c:b6:d2:81:30:fe:e8:ed:11:1b:29:96:d4:69:51:76:24:9d: ae:b6:fe:76:ca:ee:f0:da:88:4c:77:d0:1e:23:2c:85:8e:dd: 87:75:f7:7d:5a:b9:78:14:71:df:b3:c1:22:dd:af:d7:80:c4: 6c:41:a4:c4:a0:45:e4:10:3d:60:d9:3b:ce:9b:e1:3a:aa:cc: ff:28:c2:1c:0d:f8:a4:97:46:a1:10:76:20:a8:17:37:0c:ea: b2:cc:72:4b:35:87:5e:fd:c2:04:de:c8:94:a8:f2:fa:90:1d: 10:0e:b4:a6:0e:7b:8a:db:82:53:6c:19:ee:2b:68:41:6c:c7: 4e:33:ed:5f:97:3e:37:21:f2:f9:ff:3b:d1:bb:12:15:5b:d8: da:48:66:6b:a0:c6:eb:56:d6:3b:ee:f9:be:86:43:ac:fc:be: 0e:1c:3e:28:b1:cf:20:fd:80:5a:8f:f4:34:77:6e:4c:68:bc: 22:af:24:43:59:a4:e3:f4:f2:a6:0b:b6:75:c2:da:27:3e:32: c4:a7:c8:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEd9d/Rnt/YzK6DvOqu0xU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYxMDA5MDAwMDE1WhcNMjYxMDEwMDAwMDE1WjAzMTEwLwYDVQQD EyhlZDM2OTQ5ZTQ1OTk4MmQ3NGJkNDhhNDMwNTAxZGQyNjMwNmE2MGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSzLy3jy7f+Jnr45oQJqMjeNklcb y0cGJ/SQ1WJgqkC7t4C53n7yYgamJXjm3nda6+qvYYPOuxWwK87MqwotIcN9CsW6 ldNe5nqImPF3TYleS0Ln3sqDMAwvUHCpjEsNL4S9ZoVuo8AO6LoDMfnKmPkdnXMu o+lUifSGte1ndaWdTZ6j8ZgpiKqBsdtUAx+w7DnQzQkTqrKSpaSXs6aGH1UleGhz BymGJhUX4WotfN4DOXVCqr4qC2+X5bYvtcyMMIW7NUG0jN/T92705/0lYemUxTal /5J2kUHaXo1MV1HQcf35H8nhdXJ/pYIsnRICJQPm5NkP7eLhjo0bVjkX+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO02lJ5FmYLXS9SKQwUB3SYwamC4MB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkPMuuLe 6OIPi8Hng4k944Pm3eSul4jbHjxlKb4lY89GmcG7c8gPOxZEsGofwP9vRqvDvmgH XLbSgTD+6O0RGymW1GlRdiSdrrb+dsru8NqITHfQHiMshY7dh3X3fVq5eBRx37PB It2v14DEbEGkxKBF5BA9YNk7zpvhOqrM/yjCHA34pJdGoRB2IKgXNwzqssxySzWH Xv3CBN7IlKjy+pAdEA60pg57ituCU2wZ7itoQWzHTjPtX5c+NyHy+f870bsSFVvY 2khma6DG61bWO+75voZDrPy+Dhw+KLHPIP2AWo/0NHduTGi8Iq8kQ1mk4/Typgu2 dcLaJz4yxKfI4g== -----END CERTIFICATE-----Generated at Fri Oct 9 04:47:47 2026 by rpki-client