$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: L+aSktgVmpDCX0ZrFe/dSmzXr6+976a5V3OO0Xij3fc= Subject key identifier: 66:E7:B8:5D:D7:F1:B5:69:E9:D8:DE:7E:D7:C0:C7:69:01:C9:29:C5 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019D996225451E9CF61F7CEAECBE1475029B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 18CC Signing time: Fri 17 Apr 2026 03:00:39 +0000 Manifest this update: Fri 17 Apr 2026 03:00:39 +0000 Manifest next update: Sat 18 Apr 2026 03:00:39 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: 0tqEjWkToQZ8/yALl7iuqo+OeIdrDVGCkEvB3yAfOak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:25:45:1e:9c:f6:1f:7c:ea:ec:be:14:75:02:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Apr 17 03:00:39 2026 GMT Not After : Apr 18 03:00:39 2026 GMT Subject: CN=66e7b85dd7f1b569e9d8de7ed7c0c76901c929c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:e2:59:fd:70:32:e3:d1:f7:c7:8e:1f:fe: 43:e9:f7:e2:d9:4a:f0:f0:a4:a6:bc:c6:3a:26:4f: 5b:0c:6a:f3:2d:a6:e2:88:c4:7b:2b:90:b6:32:d1: 58:46:77:d7:d7:3c:e2:9e:09:41:6e:99:ff:90:44: 9c:b7:10:84:ea:c0:8d:4c:97:a9:90:f2:4f:96:38: 63:5e:d8:0a:a0:67:f1:b5:45:9a:da:33:41:91:95: 22:b9:7a:f9:42:db:3a:27:8a:02:2c:55:c2:67:d9: 21:68:30:53:7e:9d:92:6d:f7:63:b1:7a:14:31:ed: b0:02:e5:e1:4c:f2:59:7e:8b:5d:79:14:0b:51:c8: 37:aa:86:34:f1:60:f9:0c:38:6d:2a:68:46:33:0c: 86:36:44:54:9b:94:bd:42:5e:2a:1f:c5:d5:c7:e9: 5b:a7:37:13:cf:a2:24:cc:8c:56:44:bb:9a:14:f8: 94:10:4c:c6:a4:f5:5e:9d:f7:63:48:51:b7:c6:c4: 92:79:e6:c4:69:58:55:f8:83:ba:f3:de:87:ef:1c: a4:52:47:9f:9a:f0:2c:83:ef:55:72:41:a3:5a:1e: 8d:eb:ae:fe:1d:33:e4:a9:ca:61:0b:87:b2:16:bd: 26:bb:44:1d:1c:98:4c:9d:2f:32:96:f1:03:31:8b: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E7:B8:5D:D7:F1:B5:69:E9:D8:DE:7E:D7:C0:C7:69:01:C9:29:C5 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a1:43:91:00:64:1f:b6:df:ef:40:58:ea:c3:ce:24:60:0c: da:16:b8:9b:e6:25:6b:22:d0:a7:40:7c:2c:98:a0:6d:92:7d: 86:73:ac:78:56:1b:9a:7c:49:2c:fd:2e:e4:d6:27:b1:3f:e1: 37:ab:0c:47:22:96:e8:d1:8d:1f:1a:00:bc:ae:f1:33:84:b7: 66:4f:5f:eb:7e:17:22:b2:41:17:9d:d4:f7:ee:0a:92:61:84: 02:a5:ea:24:ab:b9:2a:f6:9c:1e:6d:cc:a5:16:1d:c6:45:5e: 8a:3b:e3:fb:7c:b9:43:bd:cb:c7:10:97:4b:bd:e9:1a:a2:23: 82:b8:de:52:27:75:10:ab:2f:e9:d8:36:6f:ef:c7:80:17:86: 97:cf:b7:d9:f5:47:c3:40:15:97:f7:62:4b:57:f1:ce:f0:e6: 9d:1b:23:24:bb:72:6f:32:34:24:92:6d:9d:e8:44:25:72:b8: e3:df:c1:4c:c5:c3:a4:40:95:c4:84:dd:f2:79:9d:40:38:d8: 62:ef:5d:c9:6b:30:d1:b0:8a:28:00:13:6b:10:f7:3d:2a:31: 47:a6:9e:a5:a5:3b:94:b3:9a:07:92:46:be:e1:f2:2b:41:09: 13:2b:48:90:2b:3b:a5:47:3c:15:da:0b:30:86:78:25:76:d2: e9:41:cd:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYiVFHpz2H3zq7L4UdQKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwNDE3MDMwMDM5WhcNMjYwNDE4MDMwMDM5WjAzMTEwLwYDVQQD Eyg2NmU3Yjg1ZGQ3ZjFiNTY5ZTlkOGRlN2VkN2MwYzc2OTAxYzkyOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuniWf1wMuPR98eOH/5D6ffi2Urw 8KSmvMY6Jk9bDGrzLabiiMR7K5C2MtFYRnfX1zzinglBbpn/kESctxCE6sCNTJep kPJPljhjXtgKoGfxtUWa2jNBkZUiuXr5Qts6J4oCLFXCZ9khaDBTfp2SbfdjsXoU Me2wAuXhTPJZfotdeRQLUcg3qoY08WD5DDhtKmhGMwyGNkRUm5S9Ql4qH8XVx+lb pzcTz6IkzIxWRLuaFPiUEEzGpPVenfdjSFG3xsSSeebEaVhV+IO6896H7xykUkef mvAsg+9VckGjWh6N667+HTPkqcphC4eyFr0mu0QdHJhMnS8ylvEDMYsplwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbnuF3X8bVp6djeftfAx2kBySnFMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6FDkQBk H7bf70BY6sPOJGAM2ha4m+YlayLQp0B8LJigbZJ9hnOseFYbmnxJLP0u5NYnsT/h N6sMRyKW6NGNHxoAvK7xM4S3Zk9f634XIrJBF53U9+4KkmGEAqXqJKu5KvacHm3M pRYdxkVeijvj+3y5Q73LxxCXS73pGqIjgrjeUid1EKsv6dg2b+/HgBeGl8+32fVH w0AVl/diS1fxzvDmnRsjJLtybzI0JJJtnehEJXK449/BTMXDpECVxITd8nmdQDjY Yu9dyWsw0bCKKAATaxD3PSoxR6aepaU7lLOaB5JGvuHyK0EJEytIkCs7pUc8FdoL MIZ4JXbS6UHNpQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:35:40 2026 by rpki-client