$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json) Hash identifier: Jfh9OkNQ7dVvANX1D52M7y8/D/4JU/Hsiyo4Mhs/kBI= Subject key identifier: CF:45:9C:1A:DA:D5:44:C8:94:73:E4:80:F0:0E:D7:0F:9C:CB:3E:68 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019CACEB727414AEDBBA93D332F383585627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft Manifest number: 103D Signing time: Mon 02 Mar 2026 05:00:37 +0000 Manifest this update: Mon 02 Mar 2026 05:00:37 +0000 Manifest next update: Tue 03 Mar 2026 05:00:37 +0000 Files and hashes: 1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=) 2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=) 3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=) 4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=) 5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=) 6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=) 7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=) 8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=) 9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=) 10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=) 11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=) 12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=) 13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=) 14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=) 15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=) 16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=) 17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=) 18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=) 19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=) 20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=) 21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=) 22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=) 23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=) 24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=) 25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=) 26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=) 27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=) 28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=) 29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=) 30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: zKNP0jYOMFM6xHxGh8Q95+8QRH7b5AbGamzWFjcY68U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:eb:72:74:14:ae:db:ba:93:d3:32:f3:83:58:56:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Mar 2 05:00:37 2026 GMT Not After : Mar 3 05:00:37 2026 GMT Subject: CN=cf459c1adad544c89473e480f00ed70f9ccb3e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:90:26:f7:72:06:45:59:dd:33:b2:95:c0: 6d:96:ed:7b:7b:8e:1e:41:1a:88:09:47:ee:e5:5f: 57:83:ca:52:b0:5a:f9:9d:d9:13:a0:af:88:24:d2: ea:ff:d1:27:d7:cc:18:0e:7a:d4:8d:88:be:9f:21: d4:8e:f0:2f:20:5a:b0:4a:38:03:95:0f:d7:c2:77: 5c:f7:10:9e:e5:f0:a7:66:84:77:95:ea:fe:fe:55: 7c:1a:8d:fd:70:86:29:19:b9:19:83:b8:43:4b:a5: 28:9b:bd:5e:4e:46:d9:7e:79:e6:e0:41:3e:9c:dc: 69:98:6b:28:a5:85:48:ff:e8:71:dd:b6:86:85:ff: 63:59:8c:24:38:d4:a4:05:4c:56:8d:5d:31:56:ef: 18:57:89:a8:9b:a0:75:42:3d:26:ab:3b:82:48:32: 4e:0d:7c:d8:e5:ac:5a:c1:11:6d:c5:e2:a6:ca:f3: 83:2d:5b:3f:57:ca:0a:e6:c2:9c:32:20:2e:75:fd: d9:75:67:80:71:d5:73:51:cf:7d:4f:a0:89:d0:b2: e3:2a:92:45:f1:d2:05:a9:72:bb:67:59:69:0d:0b: 8d:85:48:1e:4d:b2:86:43:e9:42:d3:58:7a:ca:34: 9e:40:4a:80:91:d8:e7:de:d4:b4:ff:66:f5:b2:2d: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:45:9C:1A:DA:D5:44:C8:94:73:E4:80:F0:0E:D7:0F:9C:CB:3E:68 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:6a:ce:36:1d:ea:43:53:c1:95:b2:97:eb:b7:d4:aa:0c:df: 4c:b1:2c:7c:48:2b:01:e0:c6:62:6a:a0:17:9a:f9:d5:d3:ae: c7:00:30:20:50:7c:64:f5:cd:ff:48:7f:f4:f4:b5:bf:43:32: 38:04:ec:e1:b1:ee:2a:e6:4f:f3:aa:93:5d:bd:35:fd:c4:4a: d1:f8:6b:48:d1:da:51:25:37:1d:b3:b6:df:40:d3:70:3c:f6: 3c:a7:17:da:56:f0:07:90:9b:3d:17:a9:1c:fd:be:06:6a:f7: 05:12:c3:8f:c7:2f:d6:58:ae:c2:49:99:5c:07:17:84:09:e8: f3:ec:f5:5b:e6:c3:26:00:9d:7e:4d:8b:89:5e:48:79:ed:b8: 07:83:87:c1:b8:b9:11:22:92:ea:96:dd:c8:ca:fd:d8:66:95: 82:ae:18:24:bf:f4:87:74:89:2d:1e:82:ae:0e:8c:7c:2e:5d: b6:13:46:17:70:c7:96:f4:8c:1a:1d:a3:37:6a:7b:41:46:23: 9e:2e:14:1a:88:c7:d7:fc:53:11:94:9b:e8:d2:0c:d9:74:63: 24:98:8e:21:38:46:e3:6a:a1:be:d9:d3:11:22:84:3f:58:36: e1:df:af:19:51:be:bc:d5:aa:a4:25:7d:76:98:36:e6:42:4d: 82:de:6a:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZys63J0FK7bupPTMvODWFYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMzAyMDUwMDM3WhcNMjYwMzAzMDUwMDM3WjAzMTEwLwYDVQQD EyhjZjQ1OWMxYWRhZDU0NGM4OTQ3M2U0ODBmMDBlZDcwZjljY2IzZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmyQJvdyBkVZ3TOylcBtlu17e44e QRqICUfu5V9Xg8pSsFr5ndkToK+IJNLq/9En18wYDnrUjYi+nyHUjvAvIFqwSjgD lQ/Xwndc9xCe5fCnZoR3ler+/lV8Go39cIYpGbkZg7hDS6Uom71eTkbZfnnm4EE+ nNxpmGsopYVI/+hx3baGhf9jWYwkONSkBUxWjV0xVu8YV4mom6B1Qj0mqzuCSDJO DXzY5axawRFtxeKmyvODLVs/V8oK5sKcMiAudf3ZdWeAcdVzUc99T6CJ0LLjKpJF 8dIFqXK7Z1lpDQuNhUgeTbKGQ+lC01h6yjSeQEqAkdjn3tS0/2b1si28YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9FnBra1UTIlHPkgPAO1w+cyz5oMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWrONh3q Q1PBlbKX67fUqgzfTLEsfEgrAeDGYmqgF5r51dOuxwAwIFB8ZPXN/0h/9PS1v0My OATs4bHuKuZP86qTXb01/cRK0fhrSNHaUSU3HbO230DTcDz2PKcX2lbwB5CbPRep HP2+Bmr3BRLDj8cv1liuwkmZXAcXhAno8+z1W+bDJgCdfk2LiV5Iee24B4OHwbi5 ESKS6pbdyMr92GaVgq4YJL/0h3SJLR6Crg6MfC5dthNGF3DHlvSMGh2jN2p7QUYj ni4UGojH1/xTEZSb6NIM2XRjJJiOIThG42qhvtnTESKEP1g24d+vGVG+vNWqpCV9 dpg25kJNgt5q1w== -----END CERTIFICATE-----Generated at Mon Mar 2 11:46:20 2026 by rpki-client