$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: 4hZx9gMgjN6XAk1ZEl21ufCMdELjUkXBATydfCTe/BY= Subject key identifier: 9B:39:67:50:81:A8:D5:8C:4E:49:1F:3E:DD:36:57:D8:30:30:06:EC Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019D9A06C5086459B30A61DD1B9DD0AE9780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 1121 Signing time: Fri 17 Apr 2026 06:00:28 +0000 Manifest this update: Fri 17 Apr 2026 06:00:28 +0000 Manifest next update: Sat 18 Apr 2026 06:00:28 +0000 Files and hashes: 1: 1nfCihSTwlJIQ4nvsiCslekY7NM.roa (hash: 4kEXXYbaPTR9rMQ4lw9zYV/v1K+AlDu09MYuRsUIkjU=) 2: 1rQSpSq9n0go-1sqt7J-jro-onw.roa (hash: A170zOdDKUFR8OjpxSyTeADzDSsnK0kS+5cwO4467+4=) 3: 4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa (hash: 5OBBvoknKe7BIhAFNY6E/EsSly4AA69+3FRzkxou83M=) 4: JWbtobpI47VXCFWlAi9tqrIVRvw.roa (hash: ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=) 5: Md6a-KQcbUfuxvWxKDr3cty5184.roa (hash: 0QYUuqR4NLEQ4pSl7SpM+UKRlpQJFGB4BeS1z7xH1dA=) 6: O-Lc9p7lKgu4RG8qbZStlySnjJw.roa (hash: VJbi6pgA5J9qOWeC5+ilPMjxUhX49jVlWxhniX3lMX8=) 7: RnEHdu41-R4PcF7uA7NCq1ymq-o.roa (hash: 1QIkC6nLYEKLiQP1dxQtxmlssoU62izuT6vjCEpQfEc=) 8: UFF8sc1cAlxiuca1UYpBZJuyruI.roa (hash: VvoB5niTEUFcEUXrlM/+U17VoiABVzzIIDopu2PtroE=) 9: euynJTb4DQRxhsqGUuIVKvMePvE.roa (hash: ApLmaeR70nQaei0kFKLHQPB8kjQglplGX2OnJJHWzlA=) 10: kjMi6obHpt9UHAnYG2JDcUbRz4I.roa (hash: eeNQkVMpQhVfJx2+o+C0G3gVG9NOsH6OImPcge0a9H8=) 11: ogYawkz_gBDjl6zl_q1fMXZNBvo.roa (hash: x588DAczbjPIl3pK5n5K7VZpFPPA1ral0L6/o6+ORO8=) 12: qBZkx98C2FyrYyHkdEdcNmhea-k.roa (hash: sIVCOdJ2FafZ1gXZEe6wh1i0aQqPT1MJAdBuWY+Cbzc=) 13: xbsOLy08hDmqcrHsStCHW6gzcKY.roa (hash: U+nyPksaAcVlKKdUnyPWFx4E2iIYZFylZhL+wDWilqE=) 14: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: HmbBSG9YRJ28TEdz4hQR798MNecm8nhWjVs2Cjx7vcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:06:c5:08:64:59:b3:0a:61:dd:1b:9d:d0:ae:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Apr 17 06:00:28 2026 GMT Not After : Apr 18 06:00:28 2026 GMT Subject: CN=9b39675081a8d58c4e491f3edd3657d8303006ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:56:00:0b:cd:df:48:40:16:7b:3f:71:31: fb:6a:ee:15:9f:20:ec:f1:bd:44:4f:bd:a3:e5:41: a8:8a:df:07:19:8a:d5:52:fe:1a:a6:3f:10:36:fc: 8c:25:64:da:0f:df:30:93:95:62:30:79:c2:bf:23: 56:cd:b6:ad:97:35:45:90:2a:10:41:c2:02:bc:b0: 17:9e:96:b1:08:cc:62:3e:07:11:14:5a:af:0b:ec: ab:61:a9:09:a8:c4:e5:21:b7:0b:14:8f:cb:c5:2e: 1e:38:65:8c:7d:05:5a:46:9b:3f:fd:eb:2b:0a:ea: bf:eb:d5:ff:74:9d:c4:40:01:df:2a:04:99:0b:0d: bd:31:d9:7a:74:d1:23:66:c8:0b:7e:c7:a1:5a:20: f7:18:26:cd:4d:85:26:17:81:a5:c1:05:de:6a:45: 85:91:d7:5c:f2:02:51:fa:c8:3b:e5:bb:c3:a7:01: cd:c5:2f:a7:30:61:1a:07:69:c6:80:d7:92:e2:c7: c8:41:02:dd:63:50:8f:54:6d:18:8c:4b:43:41:9b: b6:32:24:87:63:93:8b:81:70:1c:21:db:73:b1:31: fa:97:45:c7:78:81:0f:1c:3c:db:c9:dc:a4:57:f6: 35:5c:01:92:4b:36:8d:eb:c7:9f:35:44:47:91:db: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:39:67:50:81:A8:D5:8C:4E:49:1F:3E:DD:36:57:D8:30:30:06:EC X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:aa:d5:ee:05:ba:d9:68:4a:8b:1d:82:d6:a5:e8:5c:ea:86: 0e:9a:f3:6a:b4:36:83:b9:b2:e2:20:60:d9:1f:25:33:ab:6b: 18:27:f3:dd:73:35:a9:f0:1e:77:a3:fe:93:16:0f:17:f2:56: 15:2d:c5:58:e6:b9:fd:9a:55:21:f5:2a:30:ca:dc:fb:68:7a: d0:3e:f5:30:dc:23:a6:c5:b8:bb:44:b4:c9:ab:88:a4:e5:12: a0:62:50:fe:7d:d3:31:f1:ca:32:32:e9:34:be:7c:27:41:28: 29:ea:e9:ee:e3:5f:71:b9:fe:d1:d0:e3:00:bb:9a:9b:a7:00: 43:99:a2:4e:af:4a:70:a9:88:41:3f:b4:33:ef:e4:44:6d:74: 1d:2c:b1:f4:cb:45:01:3d:3c:72:a0:c5:61:76:54:d0:a5:43: 4a:75:c6:28:6e:dd:e3:19:23:f5:b5:45:e1:6a:f4:45:d6:9b: 34:b1:a2:84:6e:e8:f3:4a:29:70:f6:9b:4b:35:76:9e:e6:cc: 44:d2:12:ac:ec:d3:2e:3b:32:5e:6c:da:16:a6:df:df:06:7b: b1:0c:8a:93:dc:20:d9:7f:1a:34:07:92:7e:45:14:8e:8f:25: be:f2:84:3a:f2:66:52:8f:12:c5:4b:e5:18:be:cc:04:b5:db: b3:45:63:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBsUIZFmzCmHdG53QrpeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwNDE3MDYwMDI4WhcNMjYwNDE4MDYwMDI4WjAzMTEwLwYDVQQD Eyg5YjM5Njc1MDgxYThkNThjNGU0OTFmM2VkZDM2NTdkODMwMzAwNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbNWAAvN30hAFns/cTH7au4VnyDs 8b1ET72j5UGoit8HGYrVUv4apj8QNvyMJWTaD98wk5ViMHnCvyNWzbatlzVFkCoQ QcICvLAXnpaxCMxiPgcRFFqvC+yrYakJqMTlIbcLFI/LxS4eOGWMfQVaRps//esr Cuq/69X/dJ3EQAHfKgSZCw29Mdl6dNEjZsgLfsehWiD3GCbNTYUmF4GlwQXeakWF kddc8gJR+sg75bvDpwHNxS+nMGEaB2nGgNeS4sfIQQLdY1CPVG0YjEtDQZu2MiSH Y5OLgXAcIdtzsTH6l0XHeIEPHDzbydykV/Y1XAGSSzaN68efNURHkdvK5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJs5Z1CBqNWMTkkfPt02V9gwMAbsMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6rV7gW6 2WhKix2C1qXoXOqGDprzarQ2g7my4iBg2R8lM6trGCfz3XM1qfAed6P+kxYPF/JW FS3FWOa5/ZpVIfUqMMrc+2h60D71MNwjpsW4u0S0yauIpOUSoGJQ/n3TMfHKMjLp NL58J0EoKerp7uNfcbn+0dDjALuam6cAQ5miTq9KcKmIQT+0M+/kRG10HSyx9MtF AT08cqDFYXZU0KVDSnXGKG7d4xkj9bVF4Wr0RdabNLGihG7o80opcPabSzV2nubM RNISrOzTLjsyXmzaFqbf3wZ7sQyKk9wg2X8aNAeSfkUUjo8lvvKEOvJmUo8SxUvl GL7MBLXbs0VjTQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:51:31 2026 by rpki-client