$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: BgvpaQtbJ0CKY/MMJSxb+Yl3QGIQg6H55syS9FqJL0Q= Subject key identifier: CA:8B:F6:C8:35:0F:19:65:84:C4:C1:F6:9D:EB:BB:D0:09:39:FE:6C Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 01A0C09FBE35C2B89138B919148EA9458AC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1A6E Signing time: Sun 20 Sep 2026 21:01:29 +0000 Manifest this update: Sun 20 Sep 2026 21:01:29 +0000 Manifest next update: Mon 21 Sep 2026 21:01:29 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: a/be4XZZI1p7Y6gMjRv+APzzr/8Q23A9aHGTFzmIoT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 21:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:9f:be:35:c2:b8:91:38:b9:19:14:8e:a9:45:8a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Sep 20 21:01:29 2026 GMT Not After : Sep 21 21:01:29 2026 GMT Subject: CN=ca8bf6c8350f196584c4c1f69debbbd00939fe6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:f4:66:44:fa:10:52:40:ce:38:e4:e8:c7: 7c:2b:08:25:99:05:cb:25:e1:a6:4b:69:70:e7:9b: 3e:6a:92:69:b1:2c:8f:41:4b:87:be:8f:f8:ca:88: 27:57:d6:8b:0f:07:7f:dc:0a:92:19:05:61:e6:66: 79:58:f4:59:10:4e:77:d3:61:d2:d1:ba:36:6c:ee: ff:21:a2:ed:87:31:2a:10:5e:71:88:0e:d1:da:ec: 62:33:84:9f:24:70:80:47:74:1e:3d:13:99:5a:e7: 1d:ee:28:a8:e8:96:b3:49:ad:1f:cb:f9:69:e8:7f: 58:0f:3f:45:18:0b:c6:3e:5d:07:a0:ed:9f:6a:ea: 56:c2:aa:aa:02:10:e6:53:a7:f4:ba:39:b1:bc:6a: 67:23:0b:ca:f7:d5:4f:a9:0c:3d:a7:d1:50:ae:a4: 06:0b:ab:f7:7c:9d:aa:7d:03:de:15:45:d9:f9:08: 16:89:cc:ba:01:18:c3:10:04:0d:36:2d:5f:98:ba: d9:ba:4e:2c:98:84:9b:43:8c:3c:dc:93:d7:60:88: 97:fb:3f:8b:40:9b:8c:ff:46:46:a6:84:9b:42:a7: 77:5f:eb:4a:87:19:50:4d:0e:5c:a2:c9:ae:51:c9: 96:e0:4f:2b:a1:4f:a2:08:0d:ef:0a:07:82:ae:26: b4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8B:F6:C8:35:0F:19:65:84:C4:C1:F6:9D:EB:BB:D0:09:39:FE:6C X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:84:1a:bd:eb:b9:b6:28:9c:82:fd:10:3c:5f:01:7b:b7:38: 99:db:99:d5:29:1e:19:ea:e6:69:9d:77:0e:70:6c:f0:9e:ef: d4:77:96:77:47:c8:5b:6a:b2:3f:5b:c0:8b:68:a6:77:0d:b9: 79:e1:a2:58:fb:39:3c:06:91:a0:7b:c3:ad:ee:5a:a1:6f:44: b7:22:33:be:d7:24:4e:d6:64:4c:ca:d3:76:b1:6a:4e:47:73: c5:54:7f:1a:68:ca:c1:1a:ce:87:63:5e:1e:4f:71:43:ac:63: 91:19:95:6e:d3:9e:40:0c:b3:c4:93:16:87:41:f0:dc:4d:f0: 1a:cb:11:5a:0b:34:cc:90:f6:29:5c:75:54:91:e5:9b:36:90: a9:2b:ac:1a:3f:30:d4:ef:2d:1d:9f:7c:a6:56:e1:8f:61:73: 9d:7c:c9:ac:77:d0:3f:8b:02:5d:1b:03:16:2d:8b:a8:7d:6d: a8:4e:b7:4e:a3:f8:1d:9e:95:a6:09:ce:be:b7:e9:b6:77:24: 3e:c5:84:2c:85:07:1c:09:95:10:22:d6:a5:83:7e:f0:fd:f7: e1:95:ae:7d:f3:38:86:50:bf:14:9d:0d:30:fb:09:13:8b:23: 8d:4d:0b:d2:a0:32:d7:75:c9:07:c2:37:60:d6:0b:5b:e6:97: c4:23:29:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAn741wriROLkZFI6pRYrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwOTIwMjEwMTI5WhcNMjYwOTIxMjEwMTI5WjAzMTEwLwYDVQQD EyhjYThiZjZjODM1MGYxOTY1ODRjNGMxZjY5ZGViYmJkMDA5MzlmZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLP0ZkT6EFJAzjjk6Md8KwglmQXL JeGmS2lw55s+apJpsSyPQUuHvo/4yognV9aLDwd/3AqSGQVh5mZ5WPRZEE5302HS 0bo2bO7/IaLthzEqEF5xiA7R2uxiM4SfJHCAR3QePROZWucd7iio6JazSa0fy/lp 6H9YDz9FGAvGPl0HoO2faupWwqqqAhDmU6f0ujmxvGpnIwvK99VPqQw9p9FQrqQG C6v3fJ2qfQPeFUXZ+QgWicy6ARjDEAQNNi1fmLrZuk4smISbQ4w83JPXYIiX+z+L QJuM/0ZGpoSbQqd3X+tKhxlQTQ5cosmuUcmW4E8roU+iCA3vCgeCria0ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqL9sg1DxllhMTB9p3ru9AJOf5sMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4Qaveu5 tiicgv0QPF8Be7c4mduZ1SkeGermaZ13DnBs8J7v1HeWd0fIW2qyP1vAi2imdw25 eeGiWPs5PAaRoHvDre5aoW9EtyIzvtckTtZkTMrTdrFqTkdzxVR/GmjKwRrOh2Ne Hk9xQ6xjkRmVbtOeQAyzxJMWh0Hw3E3wGssRWgs0zJD2KVx1VJHlmzaQqSusGj8w 1O8tHZ98plbhj2FznXzJrHfQP4sCXRsDFi2LqH1tqE63TqP4HZ6VpgnOvrfptnck PsWELIUHHAmVECLWpYN+8P334ZWuffM4hlC/FJ0NMPsJE4sjjU0L0qAy13XJB8I3 YNYLW+aXxCMp5w== -----END CERTIFICATE-----Generated at Mon Sep 21 08:09:05 2026 by rpki-client