$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json) Hash identifier: ETo4IQlOmXDzy0sxdqna85+0ZqmHn+1seoUtxtiPZKo= Subject key identifier: F9:21:D1:36:AE:E0:4B:2A:5E:6F:3A:11:D8:F1:93:62:64:CB:8B:F4 Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019CA8A123B1065AEE50B72E85FBAC4C5AD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft Manifest number: 0D07 Signing time: Sun 01 Mar 2026 09:00:58 +0000 Manifest this update: Sun 01 Mar 2026 09:00:58 +0000 Manifest next update: Mon 02 Mar 2026 09:00:58 +0000 Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=) 2: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=) 3: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=) 4: KO2DY0u9wdedPHwObsI7cPYbfFQ.roa (hash: chzNX5SpmlEt8RciW6ST6qYzL/lzzcsJcvqyYaAMbaQ=) 5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: d153i4KEhZKVewaTMJDFqmoB/r/SzM7o0vS6RyrZOJw=) 6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=) 7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=) 8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=) 9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=) 10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:a1:23:b1:06:5a:ee:50:b7:2e:85:fb:ac:4c:5a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Mar 1 09:00:58 2026 GMT Not After : Mar 2 09:00:58 2026 GMT Subject: CN=f921d136aee04b2a5e6f3a11d8f1936264cb8bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dd:25:7a:95:fd:40:c1:a8:24:8b:6e:48:74: 9f:9e:c1:32:07:56:32:fc:a3:c6:c4:e9:fe:7f:af: 48:0d:35:0a:dc:a6:e1:d4:fb:83:f3:7c:a4:a8:44: 76:b9:fe:1c:a3:81:75:5a:d5:05:3b:f8:35:74:b9: 19:25:cb:89:e1:41:d1:dc:15:63:23:72:a4:34:da: 79:58:70:7f:b8:ce:33:18:60:27:cf:13:03:19:4f: ff:ec:0a:d8:bf:04:c1:0f:da:f0:9d:f8:cb:f9:51: 9b:6d:ce:30:52:2b:f5:38:dd:cd:c8:fd:e8:8b:8f: 2c:63:27:23:9d:cf:85:fd:c9:b9:42:89:2b:7f:7d: b4:e7:38:74:55:d6:7b:eb:ec:4e:f7:da:10:01:26: 13:47:6b:0a:5f:a3:a4:69:99:cd:5a:d9:7a:06:4d: 28:f5:8d:60:c5:f4:02:9b:f1:52:73:c9:67:89:52: 9e:49:3a:62:f4:a9:f4:9f:62:1b:8f:54:41:56:da: 4d:bb:70:2b:98:a0:6e:2c:57:d4:d8:51:56:c5:cf: 43:f2:31:ed:60:0a:78:14:2c:40:78:5d:54:5b:01: 4c:ec:ab:a9:2f:39:47:d5:f6:77:90:39:c1:be:b9: 1d:d5:5b:b5:4b:7d:20:63:6d:d3:9d:a7:f3:23:a6: 50:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:21:D1:36:AE:E0:4B:2A:5E:6F:3A:11:D8:F1:93:62:64:CB:8B:F4 X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d4:68:e2:d8:6e:0a:24:14:e3:0b:34:d2:a8:38:42:e3:c5: 12:2c:02:be:ed:eb:b3:f4:85:c8:1b:32:52:32:01:24:18:dd: 75:20:cb:ad:9d:b2:8a:d9:fd:ac:75:0b:ad:07:82:08:46:11: 21:fa:ac:59:28:a3:92:c0:c3:c4:07:00:50:fa:2f:54:67:bf: 29:47:ec:ae:55:d1:90:a6:10:ca:c5:9d:c2:c8:29:16:1b:76: 4c:0f:5d:43:f6:e2:fc:80:6b:2a:bb:5e:be:8d:eb:f9:7e:27: 2d:62:4b:2e:99:4a:a1:ad:22:a7:db:fd:c6:cd:38:a8:04:d0: 6c:1c:ac:16:54:e5:29:e2:c8:e0:ac:4f:fb:0f:f3:42:e6:74: 98:d2:c2:be:b0:58:4e:ad:95:fe:12:b7:16:eb:09:aa:79:8c: 92:6d:64:70:22:e5:8f:7b:5a:21:7d:1b:2e:e1:45:53:03:c2: dd:9f:ec:87:98:17:b6:35:12:c0:06:c7:40:62:80:a7:41:dc: c3:bd:51:91:83:4d:b0:7f:41:3e:81:e5:c3:f7:96:4e:d4:77: ba:8e:eb:c8:fc:8e:0f:0d:e1:8c:ba:38:91:c1:e1:f5:ce:89: e5:20:7f:e7:cd:f7:5d:10:e5:c9:aa:89:7b:bd:46:9f:9d:df: 70:d2:93:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyooSOxBlruULcuhfusTFrWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwMzAxMDkwMDU4WhcNMjYwMzAyMDkwMDU4WjAzMTEwLwYDVQQD EyhmOTIxZDEzNmFlZTA0YjJhNWU2ZjNhMTFkOGYxOTM2MjY0Y2I4YmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN0lepX9QMGoJItuSHSfnsEyB1Yy /KPGxOn+f69IDTUK3Kbh1PuD83ykqER2uf4co4F1WtUFO/g1dLkZJcuJ4UHR3BVj I3KkNNp5WHB/uM4zGGAnzxMDGU//7ArYvwTBD9rwnfjL+VGbbc4wUiv1ON3NyP3o i48sYycjnc+F/cm5Qokrf3205zh0VdZ76+xO99oQASYTR2sKX6OkaZnNWtl6Bk0o 9Y1gxfQCm/FSc8lniVKeSTpi9Kn0n2Ibj1RBVtpNu3ArmKBuLFfU2FFWxc9D8jHt YAp4FCxAeF1UWwFM7KupLzlH1fZ3kDnBvrkd1Vu1S30gY23TnafzI6ZQ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkh0Tau4EsqXm86Edjxk2Jky4v0MB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNRo4thu CiQU4ws00qg4QuPFEiwCvu3rs/SFyBsyUjIBJBjddSDLrZ2yitn9rHULrQeCCEYR IfqsWSijksDDxAcAUPovVGe/KUfsrlXRkKYQysWdwsgpFht2TA9dQ/bi/IBrKrte vo3r+X4nLWJLLplKoa0ip9v9xs04qATQbBysFlTlKeLI4KxP+w/zQuZ0mNLCvrBY Tq2V/hK3FusJqnmMkm1kcCLlj3taIX0bLuFFUwPC3Z/sh5gXtjUSwAbHQGKAp0Hc w71RkYNNsH9BPoHlw/eWTtR3uo7ryPyODw3hjLo4kcHh9c6J5SB/5833XRDlyaqJ e71Gn53fcNKTyw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:26:19 2026 by rpki-client