$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: W7TjeVlF0XOaq7QeDhDpRulsyx/KfxhG7b9MWUWMgvc= Subject key identifier: E8:3F:49:9F:BB:B0:7E:0A:59:A9:25:17:E4:FD:E0:D3:08:29:08:52 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019D9A3EA8A1C15ED921F41C37CDE8A41779 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 18D6 Signing time: Fri 17 Apr 2026 07:01:30 +0000 Manifest this update: Fri 17 Apr 2026 07:01:30 +0000 Manifest next update: Sat 18 Apr 2026 07:01:30 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: l/kOhgKAVGs2a5Se8iJmZjE3JtyRDXd42DWoneebmOU=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3e:a8:a1:c1:5e:d9:21:f4:1c:37:cd:e8:a4:17:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Apr 17 07:01:30 2026 GMT Not After : Apr 18 07:01:30 2026 GMT Subject: CN=e83f499fbbb07e0a59a92517e4fde0d308290852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ea:3d:d4:d0:ac:64:68:2c:dc:74:00:06:25: 92:61:72:72:a6:8c:3b:2d:be:d6:6f:b4:a1:f3:65: d6:02:58:b2:da:b0:f8:a3:1e:ab:51:5d:1e:cf:6d: 0a:2e:e7:47:1f:95:e6:1d:13:b2:ad:2d:af:6e:82: 43:64:7e:fe:c4:b1:c2:09:ac:0c:7a:eb:48:cb:9d: e3:91:f3:15:db:0e:fa:84:d3:ad:23:72:f2:47:15: 00:cb:6e:9e:6d:f1:c3:78:fb:1a:6d:9e:d2:36:29: ba:8a:79:6e:f4:23:dc:be:2e:0a:d9:de:d9:c4:58: 93:1a:e5:88:15:b2:af:5c:4c:f9:09:88:eb:b5:06: cb:e1:0c:e7:ac:33:a3:ad:97:6e:4d:88:77:23:49: 6b:74:e5:ee:b0:d6:25:fb:b4:16:25:9e:f5:eb:fd: d4:93:e9:1d:aa:79:98:f8:70:ac:27:7e:62:7d:c8: fc:e2:40:77:76:17:02:b7:c3:97:7e:3c:62:16:24: 70:db:bb:8b:43:ff:c7:a5:17:23:a9:99:01:76:c4: 9f:16:7e:f1:73:49:61:5b:4f:84:1e:2a:d3:45:c6: 91:01:0e:bf:e6:d9:dc:7d:2e:bd:c4:86:6b:29:71: a6:d9:d9:91:39:28:5c:95:13:7e:d9:66:7d:2c:97: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3F:49:9F:BB:B0:7E:0A:59:A9:25:17:E4:FD:E0:D3:08:29:08:52 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:92:5c:b4:e9:bd:15:4b:27:8d:96:21:b8:f5:ce:76:70:90: a4:a7:89:d6:db:3c:e2:c6:44:d7:ee:bd:c7:e0:9d:b5:17:fb: 53:a5:74:f7:1f:ae:36:52:4b:a9:18:83:ef:c4:18:29:a2:5a: b2:3e:8f:87:6d:ee:ed:aa:4b:a4:45:ae:1a:d8:6b:d8:89:75: c8:cd:6a:a5:2d:7b:9c:00:f0:36:52:32:1b:97:3c:39:53:f6: c1:0a:bf:e9:76:d7:0e:60:d8:50:10:0c:3e:5c:88:19:92:0a: 0d:16:f4:1a:34:1e:bb:60:da:b4:c2:9d:7d:a8:23:1e:71:01: 35:60:8d:1a:a1:02:5d:74:92:3f:61:04:89:c1:4b:3b:ec:41: 21:0b:a5:7b:d4:fb:d2:ef:a0:d0:b8:24:8e:6b:95:c4:0e:97: 94:da:6f:a5:64:d2:11:9b:43:70:78:f7:3c:3b:5c:50:88:f6: fa:29:61:d7:93:64:b0:7b:2f:6c:0c:88:a1:77:5a:c2:7c:b3: a3:2a:18:49:3f:4d:e8:f9:93:7d:dd:8f:76:2d:c4:df:6f:53: 79:20:f6:b5:01:07:8e:b4:b8:59:3c:aa:1c:c4:ac:5f:10:4d: 08:ec:4d:62:ac:07:45:51:16:2f:3e:63:51:a3:a4:11:69:21: d6:ea:48:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPqihwV7ZIfQcN83opBd5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwNDE3MDcwMTMwWhcNMjYwNDE4MDcwMTMwWjAzMTEwLwYDVQQD EyhlODNmNDk5ZmJiYjA3ZTBhNTlhOTI1MTdlNGZkZTBkMzA4MjkwODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Oo91NCsZGgs3HQABiWSYXJypow7 Lb7Wb7Sh82XWAliy2rD4ox6rUV0ez20KLudHH5XmHROyrS2vboJDZH7+xLHCCawM eutIy53jkfMV2w76hNOtI3LyRxUAy26ebfHDePsabZ7SNim6inlu9CPcvi4K2d7Z xFiTGuWIFbKvXEz5CYjrtQbL4QznrDOjrZduTYh3I0lrdOXusNYl+7QWJZ716/3U k+kdqnmY+HCsJ35ifcj84kB3dhcCt8OXfjxiFiRw27uLQ//HpRcjqZkBdsSfFn7x c0lhW0+EHirTRcaRAQ6/5tncfS69xIZrKXGm2dmROShclRN+2WZ9LJdV6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOg/SZ+7sH4KWaklF+T94NMIKQhSMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpJctOm9 FUsnjZYhuPXOdnCQpKeJ1ts84sZE1+69x+CdtRf7U6V09x+uNlJLqRiD78QYKaJa sj6Ph23u7apLpEWuGthr2Il1yM1qpS17nADwNlIyG5c8OVP2wQq/6XbXDmDYUBAM PlyIGZIKDRb0GjQeu2DatMKdfagjHnEBNWCNGqECXXSSP2EEicFLO+xBIQule9T7 0u+g0LgkjmuVxA6XlNpvpWTSEZtDcHj3PDtcUIj2+ilh15NksHsvbAyIoXdawnyz oyoYST9N6PmTfd2Pdi3E329TeSD2tQEHjrS4WTyqHMSsXxBNCOxNYqwHRVEWLz5j UaOkEWkh1upIZA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:23:58 2026 by rpki-client