$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json) Hash identifier: S7hvIqdgjX38XZCItgpTpvgugYz2aWNvANR981uXvdw= Subject key identifier: 63:3F:06:0E:A9:A8:3E:8C:9A:9D:9F:5A:D5:79:B2:C9:E9:60:76:74 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019FAB9A7E6D12B7DC1A3E51AE7DC86936E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft Manifest number: 11CA Signing time: Wed 29 Jul 2026 02:00:56 +0000 Manifest this update: Wed 29 Jul 2026 02:00:56 +0000 Manifest next update: Thu 30 Jul 2026 02:00:56 +0000 Files and hashes: 1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=) 2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=) 3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=) 4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=) 5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=) 6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=) 7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=) 8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=) 9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=) 10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=) 11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=) 12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=) 13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=) 14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=) 15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=) 16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=) 17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=) 18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=) 19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=) 20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=) 21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=) 22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=) 23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=) 24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=) 25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=) 26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=) 27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=) 28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=) 29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=) 30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: OQiaSFjAhrFURmI7J8dUyjKL5k4W3yunMdolj3xmo60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:9a:7e:6d:12:b7:dc:1a:3e:51:ae:7d:c8:69:36:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jul 29 02:00:56 2026 GMT Not After : Jul 30 02:00:56 2026 GMT Subject: CN=633f060ea9a83e8c9a9d9f5ad579b2c9e9607674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:16:78:48:6b:1a:73:81:67:23:d8:42:9d: a8:50:d6:59:f1:41:c8:82:f2:ba:aa:ac:ba:58:9f: 4a:08:d1:ab:be:ca:df:1b:f0:93:dd:38:51:c6:c1: 9d:6f:7e:8d:5c:83:61:00:04:02:fc:36:c8:0e:75: 86:64:66:27:51:06:b0:a2:47:58:f0:18:f6:27:70: d3:a5:89:6e:5b:a0:9c:34:a9:ea:c3:cd:7b:d6:40: ad:6b:66:89:5e:dd:a4:93:1c:6e:51:a2:cc:da:6b: 91:57:e5:6d:8d:4f:78:77:1b:11:09:c4:62:2e:0e: 8c:85:27:f8:b8:4f:20:50:fc:39:8c:29:a5:75:b3: 08:74:94:5b:d3:42:03:32:b2:9c:31:60:14:4d:cd: 28:fb:cd:c5:1f:5e:89:dd:33:1a:62:89:81:e2:e9: 01:f8:2e:c1:61:b9:19:e7:c2:c7:1a:20:24:78:ac: 06:6c:3b:3c:a0:cb:03:ef:d9:89:f2:90:05:99:5d: d3:38:49:32:74:e1:0f:31:73:16:7d:0a:6f:2e:c0: 51:9b:91:c6:cd:8a:95:12:e0:d5:f1:31:3a:90:45: f2:33:50:8f:76:12:1b:ab:83:ca:7b:57:41:e6:16: 57:6a:5c:8b:29:67:87:87:8c:1f:66:0b:aa:41:b2: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3F:06:0E:A9:A8:3E:8C:9A:9D:9F:5A:D5:79:B2:C9:E9:60:76:74 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:30:51:68:66:87:72:db:41:66:7d:a3:58:7a:36:34:2d:9c: 7f:44:bc:a4:c1:4a:4d:bc:11:b1:77:3e:52:e2:1b:14:70:4e: 65:3b:4d:fa:9a:c8:62:dc:93:38:66:fd:44:27:b8:c9:28:80: ca:a1:07:e3:b2:db:cd:95:16:c3:9a:3c:f5:11:1c:be:86:ea: 25:b5:fe:13:43:c8:63:f4:24:20:4b:61:6a:92:5b:fa:7f:d2: b8:ee:ee:73:d3:42:08:6c:7b:ee:b1:59:90:6c:8f:ea:e4:d7: 2d:1f:92:6f:35:f1:52:9a:e7:82:75:06:cd:20:7b:f5:24:2b: c9:78:8e:73:8b:a4:93:7a:e6:ed:cd:dc:c3:28:fa:be:4d:8a: 7a:a8:0e:5d:4c:e6:0a:99:02:ac:62:9c:a6:88:f8:c0:64:47: 4e:88:75:bf:94:63:e6:7e:87:c8:27:93:5b:02:3a:08:4e:d1: eb:57:2f:7c:5b:66:21:61:06:9a:22:3b:ea:34:8b:c1:a9:99: 45:34:d9:81:eb:80:87:96:17:d0:3e:b4:ff:09:4d:12:10:46: ab:39:c2:ca:86:10:8e:55:34:76:1b:fc:ee:38:84:d7:99:b4: 0c:d6:87:a8:8b:4b:16:a4:90:6d:e7:33:2e:d7:04:67:11:94: 07:2f:52:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rmn5tErfcGj5Rrn3IaTbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwNzI5MDIwMDU2WhcNMjYwNzMwMDIwMDU2WjAzMTEwLwYDVQQD Eyg2MzNmMDYwZWE5YTgzZThjOWE5ZDlmNWFkNTc5YjJjOWU5NjA3Njc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYsWeEhrGnOBZyPYQp2oUNZZ8UHI gvK6qqy6WJ9KCNGrvsrfG/CT3ThRxsGdb36NXINhAAQC/DbIDnWGZGYnUQawokdY 8Bj2J3DTpYluW6CcNKnqw8171kCta2aJXt2kkxxuUaLM2muRV+VtjU94dxsRCcRi Lg6MhSf4uE8gUPw5jCmldbMIdJRb00IDMrKcMWAUTc0o+83FH16J3TMaYomB4ukB +C7BYbkZ58LHGiAkeKwGbDs8oMsD79mJ8pAFmV3TOEkydOEPMXMWfQpvLsBRm5HG zYqVEuDV8TE6kEXyM1CPdhIbq4PKe1dB5hZXalyLKWeHh4wfZguqQbL+ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM/Bg6pqD6Mmp2fWtV5ssnpYHZ0MB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzBRaGaH cttBZn2jWHo2NC2cf0S8pMFKTbwRsXc+UuIbFHBOZTtN+prIYtyTOGb9RCe4ySiA yqEH47LbzZUWw5o89REcvobqJbX+E0PIY/QkIEthapJb+n/SuO7uc9NCCGx77rFZ kGyP6uTXLR+SbzXxUprngnUGzSB79SQryXiOc4ukk3rm7c3cwyj6vk2KeqgOXUzm CpkCrGKcpoj4wGRHToh1v5Rj5n6HyCeTWwI6CE7R61cvfFtmIWEGmiI76jSLwamZ RTTZgeuAh5YX0D60/wlNEhBGqznCyoYQjlU0dhv87jiE15m0DNaHqItLFqSQbecz LtcEZxGUBy9Sng== -----END CERTIFICATE-----Generated at Wed Jul 29 05:56:55 2026 by rpki-client