$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: gJcvPDZDXVWUSkwowjf1WqmMWfkGva6C/TRjf3uqXN8= Subject key identifier: 9E:D4:08:08:BE:05:11:89:96:14:1D:22:3D:E0:49:1E:12:F8:32:45 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019FA975D3B161CA2596E7D3D9F79E678B42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 19E7 Signing time: Tue 28 Jul 2026 16:01:39 +0000 Manifest this update: Tue 28 Jul 2026 16:01:39 +0000 Manifest next update: Wed 29 Jul 2026 16:01:39 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: 9rjkNSbWGSl3xq3P8HiN649M4E83dekjvj4oU1O3Ipo=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:d3:b1:61:ca:25:96:e7:d3:d9:f7:9e:67:8b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jul 28 16:01:39 2026 GMT Not After : Jul 29 16:01:39 2026 GMT Subject: CN=9ed40808be05118996141d223de0491e12f83245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:33:45:8a:c1:00:93:09:db:14:17:6f:bd: 6f:7c:71:fa:e0:10:10:a7:e4:11:2d:bb:81:c6:23: ea:62:94:1a:d7:99:ed:e1:1c:8c:6c:56:a1:3d:8c: 7b:14:5e:a0:fb:b5:d2:de:4a:f2:d6:4e:19:ca:2a: f5:bd:0b:78:6d:e5:80:9a:40:35:da:25:88:95:a3: 66:dc:65:dd:02:f9:69:2c:32:6a:bd:c2:fc:5e:fe: 5b:fc:16:43:35:24:4c:a2:77:f4:c6:8e:f1:a7:fe: c5:c7:9e:6f:1e:aa:28:7f:e3:f2:ed:6c:e7:af:12: 26:12:73:e8:5d:64:ba:98:5d:a1:52:9f:ac:7d:b2: 88:9a:b2:96:81:f7:92:7c:05:5a:d6:26:96:e7:64: 6d:0e:70:02:30:4b:8b:db:7b:e2:c9:61:03:c6:44: da:79:56:07:0b:24:51:ba:c7:d7:09:cd:d6:24:8b: 9a:3f:3c:85:6c:2a:9f:b9:82:7b:d2:72:5c:48:5c: 39:97:6c:8b:fe:8a:63:a3:f9:5d:a3:7e:7d:8a:f0: cb:0b:75:4c:68:71:8f:26:1c:2f:2b:14:e9:c1:31: 5a:00:a0:89:69:5d:e0:a7:2e:68:49:c4:f1:62:28: 19:96:0a:ee:79:45:c9:c6:21:48:a7:36:14:57:8e: 5e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D4:08:08:BE:05:11:89:96:14:1D:22:3D:E0:49:1E:12:F8:32:45 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a8:88:10:01:08:0b:15:a0:2f:90:74:ca:e7:70:ca:02:2f: f5:d7:3c:26:4a:57:e0:57:0e:37:f9:c3:f8:ee:82:f7:ad:6a: 50:a9:77:4d:a2:18:fd:4d:22:40:bb:6c:c8:11:de:4b:e5:1a: 5c:f6:f0:c4:ce:69:57:78:5a:4b:bf:20:ba:0f:22:2f:ac:d4: e3:36:85:83:03:f8:15:c8:53:35:bc:52:25:67:51:7e:8a:34: 75:3b:41:1b:42:87:bd:7a:e7:04:ad:b7:22:71:09:86:21:d9: 31:29:13:47:4e:e2:c2:56:70:e8:4c:54:42:c1:b3:03:b6:04: 5d:d7:16:30:bc:92:52:18:4f:04:18:c5:8b:3e:c2:77:df:b4: 36:70:cd:f3:f4:02:73:ff:87:ee:21:64:df:df:81:e3:9e:54: 0e:09:39:a7:26:1b:19:cb:eb:b9:bc:98:6f:54:df:60:2f:24: 71:8f:fb:51:f9:8a:df:ac:fc:31:21:33:bb:24:a3:e7:cc:e9: 63:b7:f1:82:d8:ab:7d:a5:91:62:64:12:05:68:89:ca:e7:01: cc:e0:15:8b:d2:52:0f:e0:2c:0e:4a:a1:34:bf:04:94:31:b4: 91:0b:6f:25:31:5c:ef:91:50:e0:ba:ab:9a:64:5e:12:e8:9f: f5:91:73:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pddOxYcollufT2feeZ4tCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwNzI4MTYwMTM5WhcNMjYwNzI5MTYwMTM5WjAzMTEwLwYDVQQD Eyg5ZWQ0MDgwOGJlMDUxMTg5OTYxNDFkMjIzZGUwNDkxZTEyZjgzMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCEzRYrBAJMJ2xQXb71vfHH64BAQ p+QRLbuBxiPqYpQa15nt4RyMbFahPYx7FF6g+7XS3kry1k4Zyir1vQt4beWAmkA1 2iWIlaNm3GXdAvlpLDJqvcL8Xv5b/BZDNSRMonf0xo7xp/7Fx55vHqoof+Py7Wzn rxImEnPoXWS6mF2hUp+sfbKImrKWgfeSfAVa1iaW52RtDnACMEuL23viyWEDxkTa eVYHCyRRusfXCc3WJIuaPzyFbCqfuYJ70nJcSFw5l2yL/opjo/ldo359ivDLC3VM aHGPJhwvKxTpwTFaAKCJaV3gpy5oScTxYigZlgrueUXJxiFIpzYUV45eNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7UCAi+BRGJlhQdIj3gSR4S+DJFMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6iIEAEI CxWgL5B0yudwygIv9dc8JkpX4FcON/nD+O6C961qUKl3TaIY/U0iQLtsyBHeS+Ua XPbwxM5pV3haS78gug8iL6zU4zaFgwP4FchTNbxSJWdRfoo0dTtBG0KHvXrnBK23 InEJhiHZMSkTR07iwlZw6ExUQsGzA7YEXdcWMLySUhhPBBjFiz7Cd9+0NnDN8/QC c/+H7iFk39+B455UDgk5pyYbGcvrubyYb1TfYC8kcY/7UfmK36z8MSEzuySj58zp Y7fxgtirfaWRYmQSBWiJyucBzOAVi9JSD+AsDkqhNL8ElDG0kQtvJTFc75FQ4Lqr mmReEuif9ZFznA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:31:02 2026 by rpki-client