$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: jtlvyxuORiimSSDZ+5WZCFdvL7EVamifaodm31tsgBc= Subject key identifier: 12:CD:02:0E:FB:3C:FC:34:F1:28:93:EB:AA:DF:70:68:BD:C1:C0:23 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019D9B19E8890229A4A41D890A9CAA2018A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0C26 Signing time: Fri 17 Apr 2026 11:00:59 +0000 Manifest this update: Fri 17 Apr 2026 11:00:59 +0000 Manifest next update: Sat 18 Apr 2026 11:00:59 +0000 Files and hashes: 1: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=) 2: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=) 3: 7ZlxFMTrvWHxaDQj8cGRFKFOYRs.roa (hash: cMX6h6ESvCK8kLWWGv+cii+7hJJzZRIJOKQPIQ2Prc4=) 4: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=) 5: BVH6b7o32zruo819dGQ7RJqUDl8.roa (hash: xnWOB/u8pFkczKp6SQPwHh+agMf57JcMqkeEhSQno3k=) 6: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=) 7: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=) 8: Q319puPuZ6pEVFIow6HSoz6aiu4.roa (hash: w5OU1Qsqqe0TAPMfpoTlrKdZQKLeQmRMZSWdZEzQ0ZA=) 9: R2Xs7XqXEclO85JXT59oGHv2UUY.roa (hash: nIFGF9nru9tSwOgFOZOY266TEUqFgtMmSxtUiekx1us=) 10: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (hash: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ=) 11: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=) 12: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=) 13: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=) 14: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: MG+RJbVjTwCNIYQrCNVFobA1nZnYSdcl7szRgLLPX5I=) 15: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=) 16: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=) 17: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:19:e8:89:02:29:a4:a4:1d:89:0a:9c:aa:20:18:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Apr 17 11:00:59 2026 GMT Not After : Apr 18 11:00:59 2026 GMT Subject: CN=12cd020efb3cfc34f12893ebaadf7068bdc1c023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:57:e0:e5:8a:f3:13:18:68:21:dd:65:a5: 03:ac:92:77:39:12:b5:25:16:24:68:ad:d6:b5:59: e3:96:f8:ce:41:b3:8e:7b:75:83:b9:ec:35:ee:bd: 28:37:ea:60:6d:76:ae:1c:5f:e7:6d:c4:0f:d9:77: 83:a6:43:53:63:db:bf:43:1d:d5:9d:10:f0:f1:62: bc:30:c5:4e:92:5c:36:44:06:23:6c:c6:1e:5e:bf: ce:06:91:80:5f:7a:61:75:ae:6e:ee:de:f3:c9:4e: e9:94:d9:5c:2b:ea:71:d0:f2:85:4f:19:89:18:f5: 6d:99:61:06:33:88:e1:b4:b8:cb:5d:bb:37:a8:6c: df:a9:e5:35:21:1d:e1:a9:9a:41:a7:eb:40:55:e1: 29:7f:e3:fe:46:c0:29:23:0d:6e:63:0b:18:0a:8b: ac:86:d2:33:43:c4:6b:60:cb:6c:b0:51:26:c4:7c: d6:3f:f9:b6:b4:ad:c4:76:39:36:a9:e6:54:02:3f: 15:50:b1:6c:e4:e2:7d:c9:8a:13:17:7b:a6:d0:3d: a8:68:5f:ae:ed:f4:62:1a:a7:2b:1a:e4:d9:07:bf: 67:72:d9:2a:f3:20:36:8f:2c:9d:7c:ff:c6:62:e2: a5:61:35:98:af:11:39:ba:49:eb:52:76:3d:13:56: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CD:02:0E:FB:3C:FC:34:F1:28:93:EB:AA:DF:70:68:BD:C1:C0:23 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:53:a3:3a:44:dd:54:4f:9a:99:3e:6e:25:80:dd:f5:32:f7: d0:e8:f7:60:eb:99:73:30:a7:33:8f:a9:57:6a:a4:4f:7b:3a: 23:33:8f:06:ad:bf:7c:d7:ca:70:ce:eb:f8:6a:84:65:0a:2e: 0f:f3:9c:8a:8f:30:0b:43:27:8c:9a:f4:ed:3f:fa:61:53:6e: 0b:dc:c7:bc:69:26:2f:f5:71:ec:94:f1:ef:8b:bd:cf:61:c5: 5e:08:9a:a5:a6:9b:c9:96:a8:d5:cf:27:93:49:41:77:cb:8a: d6:e7:41:80:29:30:94:c2:34:28:40:32:16:b9:6b:cb:0e:e0: 24:3f:c1:63:bc:be:f8:18:e7:ee:ed:d8:70:47:30:9e:51:43: 09:86:ad:79:9e:64:e0:6b:0a:98:fb:0f:5d:7b:03:90:f5:5e: e4:c5:51:0b:30:dd:f9:d6:6d:4a:36:ed:20:7e:d4:ea:0b:80: d3:e6:44:63:ab:3e:75:a6:31:01:83:cc:96:f4:94:52:23:f0: 0c:6a:1f:cf:44:e4:95:84:ae:fa:ea:6e:44:c8:ed:0c:5d:1d: 86:63:e2:97:5f:3a:40:1f:68:e6:92:0d:13:19:dd:fe:66:e2: cc:e2:9c:8a:2d:af:89:e6:a2:75:4b:4e:2d:ed:00:fa:6c:89: 45:c0:eb:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bGeiJAimkpB2JCpyqIBimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwNDE3MTEwMDU5WhcNMjYwNDE4MTEwMDU5WjAzMTEwLwYDVQQD EygxMmNkMDIwZWZiM2NmYzM0ZjEyODkzZWJhYWRmNzA2OGJkYzFjMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPpX4OWK8xMYaCHdZaUDrJJ3ORK1 JRYkaK3WtVnjlvjOQbOOe3WDuew17r0oN+pgbXauHF/nbcQP2XeDpkNTY9u/Qx3V nRDw8WK8MMVOklw2RAYjbMYeXr/OBpGAX3phda5u7t7zyU7plNlcK+px0PKFTxmJ GPVtmWEGM4jhtLjLXbs3qGzfqeU1IR3hqZpBp+tAVeEpf+P+RsApIw1uYwsYCous htIzQ8RrYMtssFEmxHzWP/m2tK3Edjk2qeZUAj8VULFs5OJ9yYoTF3um0D2oaF+u 7fRiGqcrGuTZB79nctkq8yA2jyydfP/GYuKlYTWYrxE5uknrUnY9E1bl9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLNAg77PPw08SiT66rfcGi9wcAjMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFOjOkTd VE+amT5uJYDd9TL30Oj3YOuZczCnM4+pV2qkT3s6IzOPBq2/fNfKcM7r+GqEZQou D/Ocio8wC0MnjJr07T/6YVNuC9zHvGkmL/Vx7JTx74u9z2HFXgiapaabyZao1c8n k0lBd8uK1udBgCkwlMI0KEAyFrlryw7gJD/BY7y++Bjn7u3YcEcwnlFDCYateZ5k 4GsKmPsPXXsDkPVe5MVRCzDd+dZtSjbtIH7U6guA0+ZEY6s+daYxAYPMlvSUUiPw DGofz0TklYSu+upuRMjtDF0dhmPil186QB9o5pINExnd/mbizOKcii2vieaidUtO Le0A+myJRcDrdw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:38:38 2026 by rpki-client