$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: KF1f/rGjnYQiQH1lFI9SAU1fG4Ev6c9ZyW4zjcY4oO0= Subject key identifier: 5F:7E:5D:BD:1C:B8:C0:4E:82:68:2C:29:29:FC:68:33:25:66:E7:98 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019CA8D7DD04D277EC72132D24CFBB506E68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1859 Signing time: Sun 01 Mar 2026 10:00:44 +0000 Manifest this update: Sun 01 Mar 2026 10:00:44 +0000 Manifest next update: Mon 02 Mar 2026 10:00:44 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: 9IpI6GJQwD6cp7hfWYjjpSDitGbqRiQ2mebnX1zdr7I=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:d7:dd:04:d2:77:ec:72:13:2d:24:cf:bb:50:6e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Mar 1 10:00:44 2026 GMT Not After : Mar 2 10:00:44 2026 GMT Subject: CN=5f7e5dbd1cb8c04e82682c2929fc68332566e798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:c2:3c:8a:aa:38:ed:24:88:90:4b:64:a7: b4:57:19:61:89:55:b1:8c:53:01:bf:42:93:af:09: 02:32:cc:d1:2e:8f:c0:5b:3b:81:4a:40:55:40:09: d9:53:f4:0e:42:2d:6e:fa:77:87:12:4c:a5:5f:1e: a4:7c:b9:9c:61:4f:c2:e1:e6:a9:af:55:97:c0:18: 8e:d9:36:e2:16:4c:21:ba:97:91:79:bf:69:4c:37: ad:ac:28:e8:a6:ac:07:65:0c:e8:f9:86:15:5c:c5: b8:2c:5b:96:a9:22:e5:35:e6:16:51:69:6f:1f:3a: c1:da:64:a2:c9:9b:f5:6b:1c:ef:a3:d5:78:00:24: 9b:4b:27:84:07:00:cf:30:d2:76:4e:6f:f1:86:40: 25:e9:18:4c:d7:29:be:4b:74:c3:b2:c4:d2:17:87: f4:81:14:2e:e8:e2:e3:7a:05:9e:b2:d1:4c:20:83: 7a:08:1a:b5:8a:1b:3c:9e:50:15:4e:fa:98:02:6e: a2:95:c2:d5:1e:86:75:7b:6c:9e:9f:f8:1a:9b:e5: e3:e4:5c:42:61:38:a9:d7:4a:c2:25:7c:36:8d:bf: 35:27:8c:d9:d8:ed:f1:81:72:73:ed:90:dd:5d:12: 25:3b:66:44:53:cd:f3:09:aa:c3:b6:a4:3f:5c:91: 3f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7E:5D:BD:1C:B8:C0:4E:82:68:2C:29:29:FC:68:33:25:66:E7:98 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:12:b1:ab:6b:7e:41:45:6d:18:ab:c0:83:75:8e:b1:8e:9a: 73:6e:f5:81:53:ed:74:68:5c:65:b0:57:f3:6e:73:cf:2d:6a: 74:bd:85:8a:87:4e:7c:41:fc:79:46:1c:c9:53:48:c7:31:89: 3f:c2:2f:e5:19:4f:d3:fa:aa:3a:09:01:67:90:8d:97:aa:a9: 7c:57:f5:06:6a:3b:a7:ac:0b:f7:fa:3d:ce:00:03:73:e0:a8: c1:3e:a2:95:3d:03:e7:63:fc:34:81:f3:af:5f:1b:58:bb:f3: 26:2f:9c:6c:c8:bb:ed:0f:d9:b1:62:4a:49:b2:d8:ed:2e:3f: aa:81:40:77:08:e7:77:fb:70:6d:9d:43:46:84:25:50:a4:a0: 48:56:1a:85:9d:1c:1f:c8:f0:a5:d7:87:7d:80:1b:a1:ca:99: f9:23:15:f8:15:73:02:b7:e0:f0:3f:7c:21:e5:c0:c8:77:25: 2b:9d:9b:03:da:29:e3:ca:04:93:4f:5e:d1:9b:65:2d:79:91: 31:dc:38:4c:7d:74:15:ac:fd:1c:44:62:69:53:b9:1c:85:0f: f7:8c:b5:1b:6e:5e:ec:5a:8f:10:4b:df:09:19:57:2c:f4:b2: 6a:74:ee:79:41:0c:cf:08:b0:82:16:51:5d:5f:2a:d1:f6:f8: a1:73:fe:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyo190E0nfschMtJM+7UG5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwMzAxMTAwMDQ0WhcNMjYwMzAyMTAwMDQ0WjAzMTEwLwYDVQQD Eyg1ZjdlNWRiZDFjYjhjMDRlODI2ODJjMjkyOWZjNjgzMzI1NjZlNzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhjCPIqqOO0kiJBLZKe0VxlhiVWx jFMBv0KTrwkCMszRLo/AWzuBSkBVQAnZU/QOQi1u+neHEkylXx6kfLmcYU/C4eap r1WXwBiO2TbiFkwhupeReb9pTDetrCjopqwHZQzo+YYVXMW4LFuWqSLlNeYWUWlv HzrB2mSiyZv1axzvo9V4ACSbSyeEBwDPMNJ2Tm/xhkAl6RhM1ym+S3TDssTSF4f0 gRQu6OLjegWestFMIIN6CBq1ihs8nlAVTvqYAm6ilcLVHoZ1e2yen/gam+Xj5FxC YTip10rCJXw2jb81J4zZ2O3xgXJz7ZDdXRIlO2ZEU83zCarDtqQ/XJE/nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9+Xb0cuMBOgmgsKSn8aDMlZueYMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhKxq2t+ QUVtGKvAg3WOsY6ac271gVPtdGhcZbBX825zzy1qdL2FiodOfEH8eUYcyVNIxzGJ P8Iv5RlP0/qqOgkBZ5CNl6qpfFf1Bmo7p6wL9/o9zgADc+CowT6ilT0D52P8NIHz r18bWLvzJi+cbMi77Q/ZsWJKSbLY7S4/qoFAdwjnd/twbZ1DRoQlUKSgSFYahZ0c H8jwpdeHfYAbocqZ+SMV+BVzArfg8D98IeXAyHclK52bA9op48oEk09e0ZtlLXmR Mdw4TH10Faz9HERiaVO5HIUP94y1G25e7FqPEEvfCRlXLPSyanTueUEMzwiwghZR XV8q0fb4oXP+Zw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:36:28 2026 by rpki-client