$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: tJHGCDw6RbEovmta0agBycRosbbj+pF2zfCSSdNV7uE= Subject key identifier: 69:FB:01:C2:FE:F6:CE:92:41:5E:C7:1F:D6:31:E7:4C:A4:D4:5F:21 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 01A0DACD93A49B8C3BC758342A1C9790AC23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 1A3A Signing time: Fri 25 Sep 2026 23:01:40 +0000 Manifest this update: Fri 25 Sep 2026 23:01:40 +0000 Manifest next update: Sat 26 Sep 2026 23:01:40 +0000 Files and hashes: 1: 0Co-4aPRt1mKhrjgNM3WUZdgXoI.asa (hash: OeNQYBhoPfaKZ8nvkbEq0E8aoRp5VdVHMz/gxZSMaaM=) 2: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 3: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: ghJ7m2UzmVkGQAED+mYu5VrIbENJtBsHJzbl605e93M=) 11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) 12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 23:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:cd:93:a4:9b:8c:3b:c7:58:34:2a:1c:97:90:ac:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Sep 25 23:01:40 2026 GMT Not After : Sep 26 23:01:40 2026 GMT Subject: CN=69fb01c2fef6ce92415ec71fd631e74ca4d45f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6e:74:cf:87:cb:86:17:e6:94:73:56:4d:91: ca:8a:d5:4c:6a:52:2c:cf:ab:62:2b:29:b4:80:91: 8c:d1:0c:fc:76:0e:7a:ac:cb:b9:bf:16:83:96:ab: 20:ac:39:cd:e6:c3:ce:3a:f4:dd:3c:ad:4d:0f:fe: 7c:94:15:98:2b:e6:63:51:e9:18:a4:7d:b9:30:b4: a5:0d:f6:b1:b4:6d:ec:30:43:ad:46:ba:a5:88:d3: 11:0c:81:e4:08:8c:5d:f9:c8:d7:c2:3f:1d:0d:be: 76:e4:ad:29:3a:af:ee:37:f5:01:3b:dd:ea:fe:10: 1c:18:25:c3:d0:51:a4:69:43:10:d1:41:76:52:34: 8d:d3:fb:d1:e0:73:72:d0:e4:e5:7a:b7:c2:21:40: 08:2b:0b:ba:6b:5d:8d:44:1a:65:6d:5a:f9:df:ca: 61:5f:90:34:bd:21:de:6f:21:5b:dd:d9:79:58:e8: 8a:92:e1:e8:03:08:82:83:37:5e:96:b1:26:66:fa: a2:29:1c:1c:f2:22:8d:e6:5e:75:4e:70:b2:a8:8e: d1:39:80:e7:0c:15:15:25:b5:48:60:24:ed:77:d0: 6a:71:85:b8:60:d0:21:8d:c7:94:67:51:dc:b1:c4: cf:51:a1:53:f3:52:6f:02:8e:94:1a:51:25:5d:a7: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FB:01:C2:FE:F6:CE:92:41:5E:C7:1F:D6:31:E7:4C:A4:D4:5F:21 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:26:71:34:bd:c3:8b:3f:de:b5:62:db:3f:ca:83:fa:e2:88: cc:77:ff:b3:1a:86:37:7a:f7:b8:13:dd:36:d8:4b:0c:0e:00: 17:b5:53:d9:c9:4c:91:e3:a3:b2:02:7c:b9:0a:bf:5f:1b:81: 8f:76:a1:d8:89:f8:44:51:7d:bb:57:a4:47:d9:37:07:86:87: 27:7e:43:fa:59:cc:b3:06:ec:b2:0c:ee:87:49:f5:2d:7a:ae: ea:1d:bb:6a:30:45:9b:bc:a4:51:ec:e3:ab:93:68:1e:c5:a2: c3:3d:ba:a8:74:b9:9b:3d:cf:9b:93:04:5b:55:f6:4b:fc:db: 0b:c7:6b:8d:c3:09:ee:0a:48:15:8b:c1:40:94:35:7d:26:f2: 35:e5:6a:e5:51:06:46:cd:c2:57:dc:31:a3:bb:cc:59:ec:44: 52:aa:c4:a2:85:f3:fe:9c:d3:56:14:08:6b:c7:42:b0:b4:4e: a8:07:a7:5c:03:09:d6:aa:15:1a:0f:4e:d5:23:9f:7a:74:d1: 03:2e:ea:10:df:e1:26:05:39:24:cb:56:9c:75:ba:03:ec:14: ff:3a:d1:d7:68:78:87:3b:98:bd:ab:1c:20:19:3a:0c:14:b2: 35:56:21:f5:93:54:55:6f:de:f3:15:a1:c5:e3:13:0d:8f:ee: db:36:89:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDazZOkm4w7x1g0KhyXkKwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwOTI1MjMwMTQwWhcNMjYwOTI2MjMwMTQwWjAzMTEwLwYDVQQD Eyg2OWZiMDFjMmZlZjZjZTkyNDE1ZWM3MWZkNjMxZTc0Y2E0ZDQ1ZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7250z4fLhhfmlHNWTZHKitVMalIs z6tiKym0gJGM0Qz8dg56rMu5vxaDlqsgrDnN5sPOOvTdPK1ND/58lBWYK+ZjUekY pH25MLSlDfaxtG3sMEOtRrqliNMRDIHkCIxd+cjXwj8dDb525K0pOq/uN/UBO93q /hAcGCXD0FGkaUMQ0UF2UjSN0/vR4HNy0OTlerfCIUAIKwu6a12NRBplbVr538ph X5A0vSHebyFb3dl5WOiKkuHoAwiCgzdelrEmZvqiKRwc8iKN5l51TnCyqI7ROYDn DBUVJbVIYCTtd9BqcYW4YNAhjceUZ1HcscTPUaFT81JvAo6UGlElXaf3ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn7AcL+9s6SQV7HH9Yx50yk1F8hMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyZxNL3D iz/etWLbP8qD+uKIzHf/sxqGN3r3uBPdNthLDA4AF7VT2clMkeOjsgJ8uQq/XxuB j3ah2In4RFF9u1ekR9k3B4aHJ35D+lnMswbssgzuh0n1LXqu6h27ajBFm7ykUezj q5NoHsWiwz26qHS5mz3Pm5MEW1X2S/zbC8drjcMJ7gpIFYvBQJQ1fSbyNeVq5VEG Rs3CV9wxo7vMWexEUqrEooXz/pzTVhQIa8dCsLROqAenXAMJ1qoVGg9O1SOfenTR Ay7qEN/hJgU5JMtWnHW6A+wU/zrR12h4hzuYvascIBk6DBSyNVYh9ZNUVW/e8xWh xeMTDY/u2zaJiw== -----END CERTIFICATE-----Generated at Sat Sep 26 07:16:48 2026 by rpki-client