$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: TfYXP3ZVVTFG/AzhZkKTOpyjCTapWpGzgp91ngFBaK0= Subject key identifier: D6:D3:5C:D5:BE:75:94:FB:7A:5D:C8:9C:97:D7:FC:35:F7:52:56:CB Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019D99CFEE240D81090D304EE333E115B35E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 188A Signing time: Fri 17 Apr 2026 05:00:34 +0000 Manifest this update: Fri 17 Apr 2026 05:00:34 +0000 Manifest next update: Sat 18 Apr 2026 05:00:34 +0000 Files and hashes: 1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: pnGSoNcL2XJzIxQnIYTwJMrfXXtJlg8xpD8r7uDv7no=) 11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) 12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:cf:ee:24:0d:81:09:0d:30:4e:e3:33:e1:15:b3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Apr 17 05:00:34 2026 GMT Not After : Apr 18 05:00:34 2026 GMT Subject: CN=d6d35cd5be7594fb7a5dc89c97d7fc35f75256cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:c8:5e:64:ed:36:e5:44:2c:54:5a:d2:eb: 13:af:c5:0d:8c:20:82:4e:2c:dc:bd:6a:51:46:b6: 85:07:74:e9:dd:69:e1:5f:03:f2:39:d1:ad:7c:43: c6:37:26:74:30:cd:5b:16:b7:8d:5a:76:1a:ec:57: 5a:34:b9:38:4b:ed:6b:9f:ad:36:67:63:c7:2c:a5: 34:da:ca:de:03:b2:ec:e0:aa:0c:d0:6a:28:0d:0d: e8:6e:2b:ee:44:9c:ee:33:e7:5d:1f:5a:71:e9:60: 83:4e:3a:0b:7c:3a:0c:b8:39:65:97:3d:4f:50:bd: 2a:19:fd:0b:35:9a:8e:ef:0f:8d:c6:8c:8e:ef:b0: df:49:09:7a:f2:47:c6:15:c2:5a:d4:58:c4:e3:7f: 39:ad:0c:89:99:54:fc:59:15:42:37:d6:d8:66:75: de:9d:d0:af:09:8c:2a:df:02:87:be:79:fb:4e:31: 2e:cd:72:ca:17:41:8f:5d:8f:39:2b:34:e2:c2:31: 56:4d:3c:79:1c:76:34:e0:fa:32:57:68:1a:a4:76: c9:b9:99:76:c6:63:d6:d8:7f:35:c7:38:c3:51:d9: 3e:fa:11:64:f1:f3:98:1c:5d:cd:b7:a3:cc:c8:29: 7d:41:eb:95:4a:6f:93:38:b2:4d:6e:04:df:d7:15: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D3:5C:D5:BE:75:94:FB:7A:5D:C8:9C:97:D7:FC:35:F7:52:56:CB X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:af:40:59:7b:65:c4:b8:ff:8c:6b:5b:87:e3:67:ff:fc:1d: 53:bf:1c:81:ea:d8:92:43:7d:b2:5c:b8:c4:40:07:56:25:2e: f2:0b:02:18:ae:58:64:cb:df:a9:90:80:bc:14:b8:7d:d0:84: 98:2f:a6:39:38:49:14:c3:a0:d7:51:84:77:41:c3:c6:a2:50: 36:ca:65:92:0e:4e:a9:55:98:f4:d1:00:18:36:b3:3d:a4:75: b9:ad:ad:74:0b:e1:1b:28:fc:94:80:f0:39:39:4b:b2:2e:f5: 38:d0:68:90:c3:f5:e8:53:db:fb:f5:82:ac:ac:4b:3c:b2:86: 9c:4e:7a:5d:df:8e:5f:99:84:9c:8a:48:d3:d4:20:05:27:17: eb:a1:47:63:93:1b:fd:ce:1c:ac:e1:e6:0d:68:3f:41:f2:0d: b6:f8:46:ff:3c:f8:8e:52:d4:23:d5:91:2b:27:0e:f9:ab:03: 06:ac:a3:41:c6:e0:52:5a:96:43:4c:8f:5c:27:a4:cb:fa:d4: 24:23:bc:fd:e5:d5:72:3c:4e:e6:70:75:94:6f:02:75:15:24: 6c:a0:be:d1:df:71:67:74:ca:f7:42:8e:49:3f:81:fa:f2:dc: b1:af:00:81:b5:4a:28:5c:35:33:a5:d9:aa:00:59:f3:e1:70: 27:90:b2:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Zz+4kDYEJDTBO4zPhFbNeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwNDE3MDUwMDM0WhcNMjYwNDE4MDUwMDM0WjAzMTEwLwYDVQQD EyhkNmQzNWNkNWJlNzU5NGZiN2E1ZGM4OWM5N2Q3ZmMzNWY3NTI1NmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA043IXmTtNuVELFRa0usTr8UNjCCC TizcvWpRRraFB3Tp3WnhXwPyOdGtfEPGNyZ0MM1bFreNWnYa7FdaNLk4S+1rn602 Z2PHLKU02sreA7Ls4KoM0GooDQ3obivuRJzuM+ddH1px6WCDTjoLfDoMuDlllz1P UL0qGf0LNZqO7w+NxoyO77DfSQl68kfGFcJa1FjE4385rQyJmVT8WRVCN9bYZnXe ndCvCYwq3wKHvnn7TjEuzXLKF0GPXY85KzTiwjFWTTx5HHY04PoyV2gapHbJuZl2 xmPW2H81xzjDUdk++hFk8fOYHF3Nt6PMyCl9QeuVSm+TOLJNbgTf1xXaJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbTXNW+dZT7el3InJfX/DX3UlbLMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW69AWXtl xLj/jGtbh+Nn//wdU78cgerYkkN9sly4xEAHViUu8gsCGK5YZMvfqZCAvBS4fdCE mC+mOThJFMOg11GEd0HDxqJQNsplkg5OqVWY9NEAGDazPaR1ua2tdAvhGyj8lIDw OTlLsi71ONBokMP16FPb+/WCrKxLPLKGnE56Xd+OX5mEnIpI09QgBScX66FHY5Mb /c4crOHmDWg/QfINtvhG/zz4jlLUI9WRKycO+asDBqyjQcbgUlqWQ0yPXCeky/rU JCO8/eXVcjxO5nB1lG8CdRUkbKC+0d9xZ3TK90KOST+B+vLcsa8AgbVKKFw1M6XZ qgBZ8+FwJ5Cy3g== -----END CERTIFICATE-----Generated at Fri Apr 17 10:25:10 2026 by rpki-client