$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: PEjb3he7mn19XKUWilhiLFfipZU3YJ6SubMfnz0Knk4= Subject key identifier: 7E:C5:64:54:5B:E9:C0:FD:FE:E5:6A:46:FA:CA:22:AF:CC:30:19:78 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019D999908702E4629B78860D5721CC45973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 18D0 Signing time: Fri 17 Apr 2026 04:00:36 +0000 Manifest this update: Fri 17 Apr 2026 04:00:36 +0000 Manifest next update: Sat 18 Apr 2026 04:00:36 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: ZAE6MNreQklHodS-dzXcd8WUAHI.roa (hash: a8xDwtFoUM04jxVU5IPyWh2mredIKSt7iSKSS+DBztA=) 11: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: 5XWqoFJEMBvGavdXRgrK4MIAckGndPcAOBfX6ft2vfY=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) 14: uMdvLhd0nAzb-t3qAHThe0aIqoc.roa (hash: R/qUt3vy2Q0qA3zo3sd4LqTWz9aSAv/W43kTlYx3ZuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:99:08:70:2e:46:29:b7:88:60:d5:72:1c:c4:59:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Apr 17 04:00:36 2026 GMT Not After : Apr 18 04:00:36 2026 GMT Subject: CN=7ec564545be9c0fdfee56a46faca22afcc301978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:38:6c:8a:a1:d6:e8:2f:82:99:08:40:ad: 3b:85:e1:47:36:de:b1:79:74:e1:5e:4f:6a:28:ec: 6c:35:2e:bc:db:54:56:b9:48:9e:c2:be:2a:bf:f2: d8:12:97:4a:c7:e9:b7:32:fa:a3:1b:10:5e:c8:55: 89:a6:66:65:30:4c:26:c3:e5:13:72:d4:49:f4:91: 98:a3:e5:2e:8a:a8:9f:1b:ec:53:fb:73:9e:0c:27: 6f:a7:d8:2f:22:f0:ca:e1:24:3c:a6:17:c6:f0:c5: 6d:25:35:c1:b7:57:ea:d7:cf:40:26:4c:25:74:98: 41:46:fe:cf:6b:fe:3f:49:a0:73:2a:db:c3:a6:88: a7:de:e6:d5:36:72:3f:d9:d4:e8:8b:9f:b7:c9:c3: e6:98:c6:40:a0:8b:34:15:4b:d1:43:44:84:24:da: 06:d7:06:2a:ed:79:58:5b:fd:7a:fc:4c:a8:10:95: a9:c6:f2:8f:c2:4b:97:4d:15:d2:21:1a:fa:1f:b8: bc:a8:10:58:cf:e2:b9:ce:a4:45:37:fc:9b:3b:63: 82:3a:85:55:8a:41:a0:37:be:7e:c2:93:31:c4:06: f5:d2:31:08:33:b3:b0:69:d0:46:f7:22:3c:b4:fc: 12:70:2b:28:3d:32:46:f0:6a:f7:fb:f4:c4:71:0e: 9e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C5:64:54:5B:E9:C0:FD:FE:E5:6A:46:FA:CA:22:AF:CC:30:19:78 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:11:66:44:c1:28:5e:3e:09:ad:df:20:6b:80:c7:09:2c:1e: 69:40:44:15:46:4b:9b:2a:b3:ce:bb:64:3c:96:e5:52:3a:ba: e9:69:14:49:d1:94:09:9c:da:65:f8:38:df:94:43:c4:f5:4d: 80:23:1e:47:dc:19:64:68:78:d7:05:1e:69:0d:4d:1d:7e:9e: 15:07:62:08:34:b7:86:22:5e:33:07:69:77:ef:8a:19:f7:03: 56:60:ba:f7:2f:9e:ee:22:f8:0f:75:de:ea:f6:aa:7a:95:96: cd:f1:03:2c:c4:37:f6:12:af:fd:b9:86:fb:c3:e9:b4:2a:45: 7d:da:c2:a3:ec:07:ae:a9:32:a4:36:d1:76:10:74:7f:ca:37: 38:00:ec:f9:a3:d7:13:da:63:21:1e:c7:8f:59:75:a5:2f:ac: a6:be:0b:bc:59:f1:13:0c:b4:d9:7f:d6:f9:aa:da:e5:c3:9f: 52:e1:31:35:53:9e:3f:da:d7:ca:af:d1:34:f2:c6:e8:21:62: 29:01:e0:40:6a:a5:7a:e6:7c:4b:3b:3c:b5:47:45:00:2c:e6: 3f:28:13:09:36:12:21:74:be:4a:42:5d:f5:52:f7:2f:ec:c5: 4d:75:f4:24:ca:2f:bb:0e:cd:06:26:88:7e:43:f5:63:a5:2b: 94:ca:2b:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmQhwLkYpt4hg1XIcxFlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwNDE3MDQwMDM2WhcNMjYwNDE4MDQwMDM2WjAzMTEwLwYDVQQD Eyg3ZWM1NjQ1NDViZTljMGZkZmVlNTZhNDZmYWNhMjJhZmNjMzAxOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUo4bIqh1ugvgpkIQK07heFHNt6x eXThXk9qKOxsNS6821RWuUiewr4qv/LYEpdKx+m3MvqjGxBeyFWJpmZlMEwmw+UT ctRJ9JGYo+UuiqifG+xT+3OeDCdvp9gvIvDK4SQ8phfG8MVtJTXBt1fq189AJkwl dJhBRv7Pa/4/SaBzKtvDpoin3ubVNnI/2dToi5+3ycPmmMZAoIs0FUvRQ0SEJNoG 1wYq7XlYW/16/EyoEJWpxvKPwkuXTRXSIRr6H7i8qBBYz+K5zqRFN/ybO2OCOoVV ikGgN75+wpMxxAb10jEIM7OwadBG9yI8tPwScCsoPTJG8Gr3+/TEcQ6e0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7FZFRb6cD9/uVqRvrKIq/MMBl4MB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRFmRMEo Xj4Jrd8ga4DHCSweaUBEFUZLmyqzzrtkPJblUjq66WkUSdGUCZzaZfg435RDxPVN gCMeR9wZZGh41wUeaQ1NHX6eFQdiCDS3hiJeMwdpd++KGfcDVmC69y+e7iL4D3Xe 6vaqepWWzfEDLMQ39hKv/bmG+8PptCpFfdrCo+wHrqkypDbRdhB0f8o3OADs+aPX E9pjIR7Hj1l1pS+spr4LvFnxEwy02X/W+ara5cOfUuExNVOeP9rXyq/RNPLG6CFi KQHgQGqleuZ8Szs8tUdFACzmPygTCTYSIXS+SkJd9VL3L+zFTXX0JMovuw7NBiaI fkP1Y6UrlMor7g== -----END CERTIFICATE-----Generated at Fri Apr 17 06:52:58 2026 by rpki-client