$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft File: zRMnjr9PSbQk-9SpxwB9J0du0wc.mft (raw, json) Hash identifier: JkRRadujbi+VjhBpV1roJm2L54P6m7q/wQpmXUcoHZc= Subject key identifier: DA:8C:1C:12:93:3C:F3:BE:95:85:62:AE:E9:F4:E0:63:36:FA:3C:F2 Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Certificate serial: 01A0C444B6EA1BEB543193D3D258ADE99DE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft Manifest number: E2 Signing time: Mon 21 Sep 2026 14:00:32 +0000 Manifest this update: Mon 21 Sep 2026 14:00:32 +0000 Manifest next update: Tue 22 Sep 2026 14:00:32 +0000 Files and hashes: 1: 04r64BSfgd-5PgS5nj1HGaTj520.roa (hash: 9SQdIG786baBma7juCvYz1sYWzVfuKVeNspaB2HD5EY=) 2: 15fjy2AkOpBg_9vyM78z1akZIPk.roa (hash: bIlJ1psO6s3xZ1h3VhKbLXUCKK0nIMnTG5BVdZTHZv0=) 3: 1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa (hash: ZakCFcLNqaNCY/gWYoldNivincMH7px+JGQWSfeB/TQ=) 4: EDXcPCi28Qle9HGNvN1QUdaHRvk.roa (hash: DveWNs2wF7FORVxq4TmksxbQzy1QmZcV0OFUQhAfNgk=) 5: GoLAkvzsvB7zQDm_UIY2Yd-30Ck.roa (hash: bHM9/hEE2Yt9AtCFKUObnNhRfqUs2TKz2K8Vkkf2E90=) 6: NwxeeQ6vWLNv6_56WeekWnnIs9Q.roa (hash: 9SKp96P9zUqo/VKiBAf/OZS4gFdHPgagZHjvDhYmLNs=) 7: PG_mj7isjB910_5qft90gpkrSFw.roa (hash: Bnsv31XpCbZ6YlZT0KCPGtgHY8X949Ui1tJL10JOEO4=) 8: P_bdTkV7IZuzOClv_6ZvyP43Uho.roa (hash: lNcsKv1+gV/lLgtE9ucNZ9+OmqR8K2Sir1xcm0vQFHw=) 9: P_bsl56DtaIF1lt9rp-k5VLQWvY.roa (hash: c6m/3V7o5WSGGv1khR9dZE4zuxjrXjOt9iPFZZshU40=) 10: SuMlhQ-HB-UaOsy8czwHQqmRnqU.roa (hash: vr52aTXoFenQGQFoUChoI3VkTqBxutI1h8R96i3qxIo=) 11: dI4l3rVA1R2d9GEeOfxuH0__cjM.roa (hash: e/9rIsyNOvq2ikL7IWZjBodce5+tbnftj5+dpPekOpI=) 12: dQdXBh5qhRJrah76vMAURqhRRLA.roa (hash: u4zDNbiSFsql+JVohw4Hy2g3ZEQiG+Bl7RoGzgjhNiM=) 13: iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa (hash: aUgkab/Sy+ZB9wWqa8R/ZDM6rtQ1FrjWvsIE5FIMj3E=) 14: v3R0DtJMPZhzlajIduzXFhZoO_E.roa (hash: Sl285/xqAo03/LCxxgIVKjlExnIU20Jr5a1QIY+kGH0=) 15: yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa (hash: Nm0h82jqL4Nvgoi4mPrldwTgDk33jTBjxspRQ87cyk0=) 16: zRMnjr9PSbQk-9SpxwB9J0du0wc.crl (hash: I7UQC+W9j2KrlbsBGetruyFcWdwkfdyyOjy0UHzw6EE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:44:b6:ea:1b:eb:54:31:93:d3:d2:58:ad:e9:9d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Validity Not Before: Sep 21 14:00:32 2026 GMT Not After : Sep 22 14:00:32 2026 GMT Subject: CN=da8c1c12933cf3be958562aee9f4e06336fa3cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:e6:13:04:21:b1:4a:79:c3:97:8a:64:0b: 9f:0e:a2:a4:81:fe:2b:81:ec:bc:83:82:57:f7:16: 95:85:43:94:9e:40:99:6b:fb:8f:81:c4:46:ba:71: 74:b4:3f:98:99:c6:20:82:b3:f1:60:6c:a6:15:91: d1:67:fb:ed:03:e6:b2:1f:f2:43:cd:42:c1:a7:d9: 82:96:17:2a:0d:01:fd:c0:96:24:f0:d4:aa:c6:42: b6:85:3e:e3:52:9a:80:c0:c6:e3:29:7e:9b:50:f5: a8:56:c0:cb:6b:d8:59:76:01:a1:a8:f4:9d:07:af: cf:28:b6:b7:e2:33:4b:52:90:c0:84:f8:17:9f:e2: d4:d7:25:21:6d:a7:83:8e:05:b5:6f:ed:cd:4d:39: c6:70:d3:be:ea:f8:90:13:c6:81:29:cb:4c:14:26: b7:1f:c5:3a:d9:6e:d7:91:23:23:59:79:85:dc:c2: be:f1:88:94:8f:44:6a:83:b4:40:de:6c:77:61:40: be:88:65:7e:58:e3:4c:8c:62:ef:5b:9d:f9:92:c9: b6:71:64:56:a3:d7:21:1a:18:57:a1:3f:dc:a3:4b: aa:85:23:ba:c7:a6:0d:6a:ff:b0:73:5b:52:05:ec: 60:c9:f5:a1:17:08:9f:3a:94:16:e7:a0:1d:f1:86: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8C:1C:12:93:3C:F3:BE:95:85:62:AE:E9:F4:E0:63:36:FA:3C:F2 X509v3 Authority Key Identifier: keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2f:16:57:3c:b4:3f:62:e9:d6:cf:9b:28:af:97:4d:75:89: 28:e1:50:49:84:32:12:e5:db:c1:f1:44:7c:07:d0:d2:b6:33: a2:96:51:3c:d0:a8:2a:9a:e4:02:03:37:97:5a:c4:6e:6c:2c: 46:56:91:f5:49:d6:48:3b:4a:8e:71:b3:23:35:7d:85:d3:77: d3:f2:87:e7:19:94:2c:aa:25:bb:4c:b6:10:9e:88:4a:9e:29: 4b:34:ba:a3:ff:88:a5:6a:cb:8f:d2:98:ef:df:81:67:3c:30: bd:fc:56:99:80:57:d6:73:4b:48:88:11:48:e2:6d:2a:78:c8: 7a:24:f5:0d:f2:1a:c5:ee:93:28:a8:dc:43:9b:6a:77:7f:b2: 13:35:e5:12:1e:fe:47:b2:8d:6c:a5:63:fe:49:0b:c0:69:86: eb:28:51:11:c9:a2:47:50:43:c5:db:a4:df:3e:c0:6e:ba:1c: f3:74:ef:d6:fb:41:b2:61:f6:27:35:dd:5d:45:5f:a1:21:75: c2:06:b7:ff:f9:f0:0a:72:74:ab:b0:c1:bf:9e:80:2e:6a:22: 6e:35:c7:5d:46:88:b6:a9:cb:f3:35:27:fe:78:26:bd:d5:c7: a7:56:e6:e7:66:b3:61:0a:ba:63:1b:2b:a4:42:30:88:6c:58: 13:1f:a7:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDERLbqG+tUMZPT0lit6Z3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTMyNzhlYmY0ZjQ5YjQyNGZiZDRhOWM3MDA3ZDI3NDc2 ZWQzMDcwHhcNMjYwOTIxMTQwMDMyWhcNMjYwOTIyMTQwMDMyWjAzMTEwLwYDVQQD EyhkYThjMWMxMjkzM2NmM2JlOTU4NTYyYWVlOWY0ZTA2MzM2ZmEzY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubTmEwQhsUp5w5eKZAufDqKkgf4r gey8g4JX9xaVhUOUnkCZa/uPgcRGunF0tD+YmcYggrPxYGymFZHRZ/vtA+ayH/JD zULBp9mClhcqDQH9wJYk8NSqxkK2hT7jUpqAwMbjKX6bUPWoVsDLa9hZdgGhqPSd B6/PKLa34jNLUpDAhPgXn+LU1yUhbaeDjgW1b+3NTTnGcNO+6viQE8aBKctMFCa3 H8U62W7XkSMjWXmF3MK+8YiUj0Rqg7RA3mx3YUC+iGV+WONMjGLvW535ksm2cWRW o9chGhhXoT/co0uqhSO6x6YNav+wc1tSBexgyfWhFwifOpQW56Ad8YalcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqMHBKTPPO+lYVirun04GM2+jzyMB8GA1UdIwQY MBaAFM0TJ46/T0m0JPvUqccAfSdHbtMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGC8WVzy0 P2Lp1s+bKK+XTXWJKOFQSYQyEuXbwfFEfAfQ0rYzopZRPNCoKprkAgM3l1rEbmws RlaR9UnWSDtKjnGzIzV9hdN30/KH5xmULKolu0y2EJ6ISp4pSzS6o/+IpWrLj9KY 79+BZzwwvfxWmYBX1nNLSIgRSOJtKnjIeiT1DfIaxe6TKKjcQ5tqd3+yEzXlEh7+ R7KNbKVj/kkLwGmG6yhREcmiR1BDxduk3z7Abroc83Tv1vtBsmH2JzXdXUVfoSF1 wga3//nwCnJ0q7DBv56ALmoibjXHXUaItqnL8zUn/ngmvdXHp1bm52azYQq6Yxsr pEIwiGxYEx+nNw== -----END CERTIFICATE-----Generated at Mon Sep 21 23:44:16 2026 by rpki-client