$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: 6KW7hmp9UBqZWKZ4lgCHidEG7nNAfOmzig5aApKPHlI= Subject key identifier: F2:F4:E7:A0:5D:8A:0F:F5:50:D9:4F:D3:19:BD:77:74:55:73:1A:92 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019FAA87FD5C0CEB523D2CD37B5F210D12DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 19DE Signing time: Tue 28 Jul 2026 21:01:06 +0000 Manifest this update: Tue 28 Jul 2026 21:01:06 +0000 Manifest next update: Wed 29 Jul 2026 21:01:06 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: KOZDqc92tZFe45hEnEWon4Zgva3E957er6YhmNOAiVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:87:fd:5c:0c:eb:52:3d:2c:d3:7b:5f:21:0d:12:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jul 28 21:01:06 2026 GMT Not After : Jul 29 21:01:06 2026 GMT Subject: CN=f2f4e7a05d8a0ff550d94fd319bd777455731a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:e9:b6:a6:50:60:a4:2e:77:23:eb:89:71: ed:40:3a:9a:a3:c8:27:60:03:75:3f:d0:c3:b3:41: c5:27:20:8d:57:44:87:3c:7c:12:b0:ac:c3:72:20: f0:bb:91:c6:85:91:da:5f:ab:da:19:83:06:08:29: 81:f2:e3:7b:a6:6d:61:96:12:20:45:3b:4c:0e:44: 2d:7b:e3:b1:bc:a5:b8:50:10:e0:fd:df:b2:14:37: 97:7a:d0:09:8f:cc:de:5c:2c:5c:98:13:4b:a4:b0: 73:de:d3:8e:54:7f:0b:4c:c1:dd:31:79:1f:86:c7: fa:6d:a8:7a:9f:6e:fe:0f:9a:21:e0:e2:2d:63:83: 12:de:32:e8:6e:5c:de:06:bf:30:42:65:b7:05:f1: 39:9b:3f:11:cd:f4:84:56:1a:37:25:8d:df:6a:1c: 33:09:d1:97:53:01:cb:d7:b6:0c:8b:af:ab:f8:fe: 14:29:47:2b:ce:14:b0:e9:62:81:41:cd:61:ed:7b: 99:ce:5b:fe:0f:a1:5f:90:04:3c:f4:82:8e:73:66: 21:1c:4f:40:e0:62:1a:49:69:d1:88:21:51:30:22: fd:f2:22:e2:64:1a:8f:42:81:f0:2c:bd:40:68:55: 17:84:6c:6a:69:02:64:07:65:f6:9a:fe:ab:6c:e1: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F4:E7:A0:5D:8A:0F:F5:50:D9:4F:D3:19:BD:77:74:55:73:1A:92 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a3:c6:82:5f:ce:90:7f:0a:33:f8:5f:25:bb:c3:b5:15:20: 14:a1:0d:85:05:a2:36:45:51:0a:61:53:71:80:d0:75:ad:7b: df:14:90:ef:09:2b:6b:4a:0a:13:11:2c:ba:f7:b6:47:7d:17: 95:ae:11:e7:b5:f1:74:b7:c8:f5:20:2f:2c:05:ed:49:e5:e7: 30:94:9f:b5:81:00:d5:97:9e:4d:64:cc:78:14:54:4a:8d:7e: 00:25:91:4e:53:c8:5f:3b:1a:da:e2:b1:85:2d:cd:17:43:56: 8d:a5:36:53:e3:aa:d6:21:77:89:3d:cf:b7:8f:aa:6e:1e:d1: 64:ca:6e:5f:b5:3e:14:4e:36:25:c4:1c:1a:9f:66:11:ee:69: 79:40:33:3a:a5:93:e2:2a:88:73:c4:e9:46:fb:c2:12:1b:cc: aa:01:4a:aa:88:bf:26:50:a9:dc:98:cb:0c:a8:e6:14:73:b4: 70:de:57:dc:de:4b:00:95:e5:92:26:f9:ae:c8:c7:7c:1c:64: e6:5f:23:ab:d6:86:5f:47:c8:67:d0:d6:52:b1:14:cf:51:4f: d7:08:45:e6:17:e0:c2:82:54:b3:f4:95:20:68:7a:83:99:22: 58:fd:9c:76:58:b5:e1:00:5a:05:ee:a8:a8:74:15:dd:f7:10: f2:9c:68:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qh/1cDOtSPSzTe18hDRLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwNzI4MjEwMTA2WhcNMjYwNzI5MjEwMTA2WjAzMTEwLwYDVQQD EyhmMmY0ZTdhMDVkOGEwZmY1NTBkOTRmZDMxOWJkNzc3NDU1NzMxYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlfptqZQYKQudyPriXHtQDqao8gn YAN1P9DDs0HFJyCNV0SHPHwSsKzDciDwu5HGhZHaX6vaGYMGCCmB8uN7pm1hlhIg RTtMDkQte+OxvKW4UBDg/d+yFDeXetAJj8zeXCxcmBNLpLBz3tOOVH8LTMHdMXkf hsf6bah6n27+D5oh4OItY4MS3jLoblzeBr8wQmW3BfE5mz8RzfSEVho3JY3fahwz CdGXUwHL17YMi6+r+P4UKUcrzhSw6WKBQc1h7XuZzlv+D6FfkAQ89IKOc2YhHE9A 4GIaSWnRiCFRMCL98iLiZBqPQoHwLL1AaFUXhGxqaQJkB2X2mv6rbOEJFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL056Bdig/1UNlP0xm9d3RVcxqSMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKPGgl/O kH8KM/hfJbvDtRUgFKENhQWiNkVRCmFTcYDQda173xSQ7wkra0oKExEsuve2R30X la4R57XxdLfI9SAvLAXtSeXnMJSftYEA1ZeeTWTMeBRUSo1+ACWRTlPIXzsa2uKx hS3NF0NWjaU2U+Oq1iF3iT3Pt4+qbh7RZMpuX7U+FE42JcQcGp9mEe5peUAzOqWT 4iqIc8TpRvvCEhvMqgFKqoi/JlCp3JjLDKjmFHO0cN5X3N5LAJXlkib5rsjHfBxk 5l8jq9aGX0fIZ9DWUrEUz1FP1whF5hfgwoJUs/SVIGh6g5kiWP2cdli14QBaBe6o qHQV3fcQ8pxoYw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:12:12 2026 by rpki-client