$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: Okrs63ReoeNOH2R00+3UGbN05ZTO3ehO+QfhtX7BTs0= Subject key identifier: 14:06:96:DB:64:AD:F4:DC:2A:E5:CF:C9:D6:78:63:74:23:06:A3:2A Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 01A1A939FCC6C44BC42A1554FD2097CCF2E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1AF0 Signing time: Thu 05 Nov 2026 01:01:51 +0000 Manifest this update: Thu 05 Nov 2026 01:01:51 +0000 Manifest next update: Fri 06 Nov 2026 01:01:51 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: iYGncz0RGNzRP5Zt5YCkiNl/lY3ydNlNS2+B8fJTULM=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a9:39:fc:c6:c4:4b:c4:2a:15:54:fd:20:97:cc:f2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Nov 5 01:01:51 2026 GMT Not After : Nov 6 01:01:51 2026 GMT Subject: CN=140696db64adf4dc2ae5cfc9d67863742306a32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:b6:2d:53:93:09:ab:4b:66:64:a3:f3:ca: 45:fb:fc:54:ed:64:04:5a:53:f9:2e:a8:e1:46:36: d2:7a:85:dd:80:5b:6d:b1:f4:6f:73:5f:22:18:f0: 04:a6:33:e0:31:ea:75:ea:79:9b:e5:2e:0e:19:9a: 2d:f3:30:22:ed:e6:03:4a:79:67:b2:d3:73:7f:26: a7:66:d4:78:22:3b:aa:ec:a5:db:10:17:30:8a:34: be:1a:58:bb:4e:6d:0a:71:1c:9f:fb:65:82:d5:14: 04:55:ea:1c:75:17:a2:36:7f:a9:ad:d1:8a:20:eb: bd:96:94:21:2e:18:0e:fb:0b:f0:a8:d7:c6:71:ad: 10:83:e2:19:eb:68:21:ec:c8:74:31:a9:e6:63:21: fa:46:96:c8:97:44:43:82:8b:ae:5a:56:bd:55:6a: 4b:0f:de:18:12:e2:54:17:fd:5d:b0:02:22:9a:9c: 4e:ea:0f:95:6d:b0:f4:c6:ba:f1:82:d4:24:32:8a: fe:45:3c:77:7c:e6:e3:bd:32:da:33:7d:22:90:31: 32:c2:8a:f3:cb:86:5b:00:6a:30:43:e3:4d:d6:c6: 86:37:be:2e:c9:b2:e9:b7:25:62:69:ec:8d:dc:a3: b7:c2:af:0c:60:b8:8c:ee:fb:c7:e4:0b:c8:3b:48: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:06:96:DB:64:AD:F4:DC:2A:E5:CF:C9:D6:78:63:74:23:06:A3:2A X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:16:80:2b:5d:60:de:1c:e6:17:d5:b9:8f:15:52:91:8d:b3: b5:ce:f8:23:3c:75:51:75:1a:76:28:c5:86:3b:7c:e1:f9:78: 64:dd:df:51:09:db:c8:73:f9:80:81:67:62:99:18:de:e9:f8: ec:a3:29:73:85:c9:a6:ba:93:01:29:35:67:6f:87:39:61:9e: f0:2e:c2:0f:f7:4a:7f:b0:0b:4e:c4:6d:1a:5b:07:79:6e:f6: 48:11:72:d9:25:f3:bf:87:15:f6:d8:db:6b:e5:cd:29:31:4a: ac:c8:7a:e1:e0:b1:ff:70:ca:8f:c5:23:8d:ad:69:d7:6e:2e: 4b:0e:64:69:5c:fc:eb:1f:fe:bf:7b:5d:57:26:d1:4a:82:a1: 5e:d7:47:6e:de:0a:b9:61:33:b4:28:40:4e:c7:fb:59:2c:c2: 26:c9:37:70:b8:7c:52:0f:b7:44:53:98:e3:66:c1:eb:6d:99: 54:74:ea:68:cd:54:eb:ba:db:55:6b:e5:ac:b9:04:43:a7:54: 19:68:a7:55:6d:0d:a8:9b:fc:34:5c:fa:26:c5:02:4d:f0:0f: 99:f3:a3:a6:ae:38:79:c7:1c:ed:7a:fe:11:43:c1:ec:72:56: 84:c8:d6:57:9c:15:a2:88:18:3f:99:38:be:ff:f1:0a:d3:b9: 42:a7:a0:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGpOfzGxEvEKhVU/SCXzPLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYxMTA1MDEwMTUxWhcNMjYxMTA2MDEwMTUxWjAzMTEwLwYDVQQD EygxNDA2OTZkYjY0YWRmNGRjMmFlNWNmYzlkNjc4NjM3NDIzMDZhMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlu2LVOTCatLZmSj88pF+/xU7WQE WlP5LqjhRjbSeoXdgFttsfRvc18iGPAEpjPgMep16nmb5S4OGZot8zAi7eYDSnln stNzfyanZtR4Ijuq7KXbEBcwijS+Gli7Tm0KcRyf+2WC1RQEVeocdReiNn+prdGK IOu9lpQhLhgO+wvwqNfGca0Qg+IZ62gh7Mh0ManmYyH6RpbIl0RDgouuWla9VWpL D94YEuJUF/1dsAIimpxO6g+VbbD0xrrxgtQkMor+RTx3fObjvTLaM30ikDEyworz y4ZbAGowQ+NN1saGN74uybLptyViaeyN3KO3wq8MYLiM7vvH5AvIO0i/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQGlttkrfTcKuXPydZ4Y3QjBqMqMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBaAK11g 3hzmF9W5jxVSkY2ztc74Izx1UXUadijFhjt84fl4ZN3fUQnbyHP5gIFnYpkY3un4 7KMpc4XJprqTASk1Z2+HOWGe8C7CD/dKf7ALTsRtGlsHeW72SBFy2SXzv4cV9tjb a+XNKTFKrMh64eCx/3DKj8Ujja1p124uSw5kaVz86x/+v3tdVybRSoKhXtdHbt4K uWEztChATsf7WSzCJsk3cLh8Ug+3RFOY42bB622ZVHTqaM1U67rbVWvlrLkEQ6dU GWinVW0NqJv8NFz6JsUCTfAPmfOjpq44eccc7Xr+EUPB7HJWhMjWV5wVoogYP5k4 vv/xCtO5QqegxA== -----END CERTIFICATE-----Generated at Thu Nov 5 12:28:58 2026 by rpki-client