$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json) Hash identifier: xdFxKakteKvymsU6iDolu2fge018mKzpUFI5Ry+0BOQ= Subject key identifier: 9B:FD:CC:EE:24:C5:4E:E9:1B:EB:DE:FE:EC:5A:70:5A:E5:A2:05:DE Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019D9C63592DF59960B8884A7FAD953D5A73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft Manifest number: 10B9 Signing time: Fri 17 Apr 2026 17:00:49 +0000 Manifest this update: Fri 17 Apr 2026 17:00:49 +0000 Manifest next update: Sat 18 Apr 2026 17:00:49 +0000 Files and hashes: 1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=) 2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=) 3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=) 4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=) 5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=) 6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=) 7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=) 8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=) 9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=) 10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=) 11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=) 12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=) 13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=) 14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=) 15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=) 16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=) 17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=) 18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=) 19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=) 20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=) 21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=) 22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=) 23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=) 24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=) 25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=) 26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=) 27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=) 28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=) 29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=) 30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: xJ1RRCvM/Lijz3IjRb7V3A01FOmA7wCMxyNc9uZQnhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:63:59:2d:f5:99:60:b8:88:4a:7f:ad:95:3d:5a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Apr 17 17:00:49 2026 GMT Not After : Apr 18 17:00:49 2026 GMT Subject: CN=9bfdccee24c54ee91bebdefeec5a705ae5a205de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5a:5d:88:fb:d9:27:fb:b5:2e:43:e3:0c:92: 8f:9a:76:50:2a:d8:4b:7f:e5:9e:78:4b:c0:f0:56: ea:45:68:21:d4:57:94:c5:1d:f9:9a:06:28:3e:7e: f7:05:20:d8:bb:50:c4:8e:72:f5:98:5c:a6:7c:07: da:d0:f2:0e:2c:0c:b1:b1:c7:61:33:f0:d1:a9:c5: cc:89:4d:16:1c:67:eb:fe:e6:b4:9c:82:d2:ee:1b: 35:5b:63:c8:92:84:bf:ee:9e:f7:90:ea:01:e2:b9: 05:15:ff:7b:e9:33:38:8d:5f:e3:f2:a3:0d:64:81: d4:16:9c:a8:60:9a:94:1f:fa:d7:6a:62:ee:81:3a: af:6b:a7:fb:02:f7:a2:9e:18:78:a7:f6:e8:12:68: 25:26:d7:b9:d5:73:36:38:59:51:0f:c7:fb:e5:3b: 03:0c:e3:4c:d4:90:70:8a:5a:7f:80:34:f5:52:09: 8f:97:58:ff:6d:04:68:4c:d4:d4:ab:1b:2d:66:04: 31:45:2b:95:8c:5b:e5:99:e5:30:22:94:9b:23:38: 90:a8:16:98:65:a0:2a:1f:64:ae:c8:66:b4:94:a0: f5:a3:33:a4:67:fa:7c:ac:1d:ac:3a:89:ff:35:7f: f5:e1:2f:ad:ae:e0:03:55:50:35:af:de:3c:ef:7b: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FD:CC:EE:24:C5:4E:E9:1B:EB:DE:FE:EC:5A:70:5A:E5:A2:05:DE X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6c:8b:26:21:41:cd:36:8c:1b:31:eb:69:f9:35:57:0f:18: 20:65:86:93:62:d1:70:49:62:39:ba:11:58:48:32:f2:9d:07: a0:0f:a7:62:8f:19:68:71:b3:d4:ba:58:20:ae:48:3e:6e:22: 21:41:9d:5f:e4:e3:31:5d:93:6d:b3:bd:50:38:d2:00:f4:58: f0:82:b3:db:05:8c:f1:1e:f0:c6:82:9e:4f:87:7f:bb:fc:ae: 78:88:12:13:b5:7d:1b:a8:85:db:11:0b:12:6e:39:80:d0:4e: cf:eb:f3:bd:10:68:58:70:de:48:f6:c8:4b:62:ac:b8:05:6b: 37:63:a2:ba:7d:a1:60:82:03:b0:a5:7d:fc:d3:0c:eb:5e:f4: fa:3b:b9:d9:79:3d:f7:3d:48:2f:9b:00:b1:73:2b:93:fe:52: 87:9f:6e:46:be:3c:81:6e:4e:be:00:a3:a9:26:1c:bc:24:69: 0a:2a:5c:41:a9:42:7d:c5:1d:23:ea:b9:e8:af:0d:b2:1f:45: 81:13:b9:bb:b6:f2:8b:8f:6f:69:91:0d:19:69:1a:a1:12:7f: ff:6f:63:3a:01:ef:54:aa:c2:2f:99:e7:17:af:41:00:9a:6b: e4:ab:64:62:19:80:73:c4:c7:df:49:c1:62:0f:5a:12:1b:80: 05:ca:d2:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cY1kt9ZlguIhKf62VPVpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwNDE3MTcwMDQ5WhcNMjYwNDE4MTcwMDQ5WjAzMTEwLwYDVQQD Eyg5YmZkY2NlZTI0YzU0ZWU5MWJlYmRlZmVlYzVhNzA1YWU1YTIwNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21pdiPvZJ/u1LkPjDJKPmnZQKthL f+WeeEvA8FbqRWgh1FeUxR35mgYoPn73BSDYu1DEjnL1mFymfAfa0PIOLAyxscdh M/DRqcXMiU0WHGfr/ua0nILS7hs1W2PIkoS/7p73kOoB4rkFFf976TM4jV/j8qMN ZIHUFpyoYJqUH/rXamLugTqva6f7Aveinhh4p/boEmglJte51XM2OFlRD8f75TsD DONM1JBwilp/gDT1UgmPl1j/bQRoTNTUqxstZgQxRSuVjFvlmeUwIpSbIziQqBaY ZaAqH2SuyGa0lKD1ozOkZ/p8rB2sOon/NX/14S+truADVVA1r94873u6pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJv9zO4kxU7pG+ve/uxacFrlogXeMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2yLJiFB zTaMGzHrafk1Vw8YIGWGk2LRcEliOboRWEgy8p0HoA+nYo8ZaHGz1LpYIK5IPm4i IUGdX+TjMV2TbbO9UDjSAPRY8IKz2wWM8R7wxoKeT4d/u/yueIgSE7V9G6iF2xEL Em45gNBOz+vzvRBoWHDeSPbIS2KsuAVrN2Oiun2hYIIDsKV9/NMM6170+ju52Xk9 9z1IL5sAsXMrk/5Sh59uRr48gW5OvgCjqSYcvCRpCipcQalCfcUdI+q56K8Nsh9F gRO5u7byi49vaZENGWkaoRJ//29jOgHvVKrCL5nnF69BAJpr5KtkYhmAc8TH30nB Yg9aEhuABcrSxQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:55:35 2026 by rpki-client