$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: iw5T6FBOEAln9+tg2oiSBJys7sW1guqlCbNK+TXg3Ko= Subject key identifier: E8:D2:9B:37:2F:60:54:81:03:62:0B:04:37:77:15:D9:85:6F:FE:C2 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 01A0BF8C1EB28B9677FE1E69F9D6D4604A74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1A77 Signing time: Sun 20 Sep 2026 16:00:26 +0000 Manifest this update: Sun 20 Sep 2026 16:00:26 +0000 Manifest next update: Mon 21 Sep 2026 16:00:26 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: qGkr4IIrQWZQWKwYD1zInNpYpCwd9P/IKtQdadmXeZc=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:8c:1e:b2:8b:96:77:fe:1e:69:f9:d6:d4:60:4a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Sep 20 16:00:26 2026 GMT Not After : Sep 21 16:00:26 2026 GMT Subject: CN=e8d29b372f60548103620b04377715d9856ffec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:3b:47:0a:3f:cb:7f:c7:09:2b:e7:1b:6e: d5:d2:de:67:f0:3e:3d:c8:d3:42:fa:e8:c1:13:98: 25:e2:e6:10:52:ad:b7:21:34:66:b2:47:d6:c0:c8: 21:e5:23:e2:ed:2b:0d:31:22:86:9b:bf:fe:42:6d: 66:44:c1:ee:b9:32:a7:f8:27:4d:3a:a5:62:fc:3f: 55:45:89:4a:fa:99:5b:70:2b:00:ac:fc:f7:3c:4e: 40:05:22:19:77:1a:83:0f:78:29:92:a6:f4:14:26: 8a:9f:86:77:2f:56:83:7b:63:2e:6a:a6:50:ba:d6: de:d7:fb:64:81:55:54:81:af:1e:31:d8:65:fc:ad: 70:1e:a8:2a:ca:01:85:20:b6:a3:fe:02:e1:9c:f3: 4d:39:85:be:14:d6:79:35:e6:ba:e2:8c:f6:a6:38: b3:ef:47:e8:4a:cf:66:5f:cf:dd:34:32:8d:ac:77: 32:52:86:13:03:0a:6d:a3:55:21:9d:44:ae:96:38: 3f:19:fe:79:cf:b6:3c:c3:c5:a5:19:e5:d1:8d:7e: d6:a3:83:df:bf:91:5f:0b:8b:b9:64:e5:2f:4e:e2: 33:bb:4a:64:d0:52:b5:b5:37:c2:40:12:8f:ef:91: 2f:69:7d:b3:a6:37:4c:cf:85:c9:2a:dc:49:31:a2: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D2:9B:37:2F:60:54:81:03:62:0B:04:37:77:15:D9:85:6F:FE:C2 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:93:62:40:45:d1:fa:d5:23:82:77:f7:ab:df:90:89:03:66: 00:c8:a6:c2:64:d4:cc:25:0f:6b:97:08:09:0b:8b:df:1b:47: c1:38:e2:14:5b:4b:58:4d:c2:71:5a:05:f0:a1:00:5f:2e:44: df:d3:33:7f:b5:d5:a0:89:ba:fc:9b:e9:25:77:2b:0d:c0:47: b9:44:f0:7a:db:ac:f2:09:ec:dd:dd:27:8e:45:81:9d:41:91: 64:7b:e3:b5:b0:f1:d2:4d:0d:19:b7:e8:4f:65:7e:ea:5b:ab: b9:ed:4b:11:31:be:35:a1:59:54:e1:3d:33:0e:17:d2:77:54: 9b:b9:d0:a2:10:35:2b:9b:ad:23:18:f0:ee:a0:b7:8b:3d:3f: ce:b0:1c:d9:fe:e0:2e:13:6f:3c:b7:32:9d:f8:33:4d:b6:5f: ea:e5:22:59:41:47:c7:2d:da:c3:53:73:d9:8b:7c:d6:b8:6c: 07:cd:1a:91:c8:7e:00:a4:86:f7:fc:bb:0f:b3:64:c0:e9:55: e2:69:54:6e:18:d4:f3:41:e0:f9:1e:b7:2a:0b:0e:a0:e7:c6: fc:b0:0b:52:82:4c:28:02:d3:46:18:5c:bb:70:29:90:96:e9: 0e:de:20:e2:8f:bf:7b:f9:4f:dd:c8:de:11:e3:b4:57:10:5c: e0:35:6e:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/jB6yi5Z3/h5p+dbUYEp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwOTIwMTYwMDI2WhcNMjYwOTIxMTYwMDI2WjAzMTEwLwYDVQQD EyhlOGQyOWIzNzJmNjA1NDgxMDM2MjBiMDQzNzc3MTVkOTg1NmZmZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA07Rwo/y3/HCSvnG27V0t5n8D49 yNNC+ujBE5gl4uYQUq23ITRmskfWwMgh5SPi7SsNMSKGm7/+Qm1mRMHuuTKn+CdN OqVi/D9VRYlK+plbcCsArPz3PE5ABSIZdxqDD3gpkqb0FCaKn4Z3L1aDe2MuaqZQ utbe1/tkgVVUga8eMdhl/K1wHqgqygGFILaj/gLhnPNNOYW+FNZ5Nea64oz2pjiz 70foSs9mX8/dNDKNrHcyUoYTAwpto1UhnUSuljg/Gf55z7Y8w8WlGeXRjX7Wo4Pf v5FfC4u5ZOUvTuIzu0pk0FK1tTfCQBKP75EvaX2zpjdMz4XJKtxJMaIvmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjSmzcvYFSBA2ILBDd3FdmFb/7CMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJNiQEXR +tUjgnf3q9+QiQNmAMimwmTUzCUPa5cICQuL3xtHwTjiFFtLWE3CcVoF8KEAXy5E 39Mzf7XVoIm6/JvpJXcrDcBHuUTwetus8gns3d0njkWBnUGRZHvjtbDx0k0NGbfo T2V+6lurue1LETG+NaFZVOE9Mw4X0ndUm7nQohA1K5utIxjw7qC3iz0/zrAc2f7g LhNvPLcynfgzTbZf6uUiWUFHxy3aw1Nz2Yt81rhsB80akch+AKSG9/y7D7NkwOlV 4mlUbhjU80Hg+R63KgsOoOfG/LALUoJMKALTRhhcu3ApkJbpDt4g4o+/e/lP3cje EeO0VxBc4DVugw== -----END CERTIFICATE-----Generated at Sun Sep 20 22:35:17 2026 by rpki-client