$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: jb9tsFP+p53hH+IY6sfXEYsbt6tm6L+L/KOYcvEVa2c= Subject key identifier: 4F:CC:C1:29:D0:61:B7:3D:7F:80:DF:2D:E7:F4:6E:98:85:54:3D:0B Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019D2816AE1A2AA78CACA66EB450EB2251C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 10E6 Signing time: Thu 26 Mar 2026 03:01:07 +0000 Manifest this update: Thu 26 Mar 2026 03:01:07 +0000 Manifest next update: Fri 27 Mar 2026 03:01:07 +0000 Files and hashes: 1: 1nfCihSTwlJIQ4nvsiCslekY7NM.roa (hash: 4kEXXYbaPTR9rMQ4lw9zYV/v1K+AlDu09MYuRsUIkjU=) 2: 1rQSpSq9n0go-1sqt7J-jro-onw.roa (hash: A170zOdDKUFR8OjpxSyTeADzDSsnK0kS+5cwO4467+4=) 3: 4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa (hash: 5OBBvoknKe7BIhAFNY6E/EsSly4AA69+3FRzkxou83M=) 4: JWbtobpI47VXCFWlAi9tqrIVRvw.roa (hash: ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=) 5: Md6a-KQcbUfuxvWxKDr3cty5184.roa (hash: 0QYUuqR4NLEQ4pSl7SpM+UKRlpQJFGB4BeS1z7xH1dA=) 6: O-Lc9p7lKgu4RG8qbZStlySnjJw.roa (hash: VJbi6pgA5J9qOWeC5+ilPMjxUhX49jVlWxhniX3lMX8=) 7: RnEHdu41-R4PcF7uA7NCq1ymq-o.roa (hash: 1QIkC6nLYEKLiQP1dxQtxmlssoU62izuT6vjCEpQfEc=) 8: UFF8sc1cAlxiuca1UYpBZJuyruI.roa (hash: VvoB5niTEUFcEUXrlM/+U17VoiABVzzIIDopu2PtroE=) 9: euynJTb4DQRxhsqGUuIVKvMePvE.roa (hash: ApLmaeR70nQaei0kFKLHQPB8kjQglplGX2OnJJHWzlA=) 10: kjMi6obHpt9UHAnYG2JDcUbRz4I.roa (hash: eeNQkVMpQhVfJx2+o+C0G3gVG9NOsH6OImPcge0a9H8=) 11: ogYawkz_gBDjl6zl_q1fMXZNBvo.roa (hash: x588DAczbjPIl3pK5n5K7VZpFPPA1ral0L6/o6+ORO8=) 12: qBZkx98C2FyrYyHkdEdcNmhea-k.roa (hash: sIVCOdJ2FafZ1gXZEe6wh1i0aQqPT1MJAdBuWY+Cbzc=) 13: xbsOLy08hDmqcrHsStCHW6gzcKY.roa (hash: U+nyPksaAcVlKKdUnyPWFx4E2iIYZFylZhL+wDWilqE=) 14: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: V/x0Q3W0dyWdn03NqlHRUum7wEP91Dok8zBbAAiF1uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:ae:1a:2a:a7:8c:ac:a6:6e:b4:50:eb:22:51:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Mar 26 03:01:07 2026 GMT Not After : Mar 27 03:01:07 2026 GMT Subject: CN=4fccc129d061b73d7f80df2de7f46e9885543d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2e:01:2b:ab:55:e8:7c:80:f1:3d:0b:ce:18: ab:29:f6:b4:9b:98:07:f2:bb:07:5d:bb:8b:44:84: 28:04:52:fb:03:59:a8:48:3f:64:58:3f:61:24:1a: af:d3:91:a9:b7:ce:27:98:d5:30:40:b8:6e:20:9b: 85:ba:cf:d9:8f:ed:96:d5:f1:1d:c4:0d:40:72:d9: 9f:61:4d:7e:76:24:1e:7d:7f:04:5b:07:0f:02:80: 3a:64:00:7e:87:bf:60:8d:89:ba:00:21:7e:18:53: fd:fb:13:7f:1e:2b:84:bc:04:e1:64:ac:8f:82:28: e4:fa:a3:48:2c:2a:c1:95:83:c1:8e:a2:96:10:fe: bd:a6:25:aa:70:20:14:78:67:63:01:94:5b:05:38: 1d:77:94:e5:2a:9d:76:bc:70:a8:69:1f:d4:5a:76: a1:b5:13:c0:6f:90:f4:d8:01:12:a7:21:52:96:a5: 78:82:e9:b7:0a:8a:e8:7b:ab:0b:6e:78:32:8d:40: 7e:5b:56:35:38:44:9c:16:78:65:ad:5a:b7:10:42: 0d:b8:02:e9:03:8f:e7:69:a7:19:36:c5:84:88:fe: de:19:d8:dc:10:41:86:87:80:a2:4d:bf:fc:97:7c: 8b:0f:5b:f0:d9:05:fa:91:a6:6c:37:c1:85:e0:75: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CC:C1:29:D0:61:B7:3D:7F:80:DF:2D:E7:F4:6E:98:85:54:3D:0B X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a2:e4:7e:6b:9e:28:68:f8:65:ce:46:8c:82:b6:c5:a4:d9: b5:17:e9:64:2c:1d:2d:ae:49:18:b3:f7:76:17:33:a5:71:3f: 2b:48:08:b0:65:fc:24:25:60:a1:78:d7:50:0d:62:f4:3c:91: 5f:85:a6:4a:c9:99:17:5f:41:16:4d:dc:1c:9f:fd:ae:71:06: 8d:11:55:5c:92:cb:b9:3a:fe:05:c0:a3:ea:79:18:0d:cd:00: fc:15:5d:22:ec:e7:f3:38:bb:c3:a7:48:59:4f:e4:91:61:65: 29:d0:f1:33:36:15:12:b5:95:62:70:a1:df:18:9b:58:f1:8e: 8b:50:8e:1f:74:8a:02:68:a1:9d:38:2a:87:13:22:7e:be:b2: 54:c0:a0:bf:6f:a7:fd:57:77:54:5c:8b:1e:fe:dd:5f:48:9b: 1c:9b:e3:68:d6:23:6d:64:2b:b4:52:a0:36:48:bb:66:66:fd: 75:41:39:fb:5b:03:3b:a6:24:36:e1:5a:70:a8:6e:05:a7:cb: c4:6a:4e:d7:9e:96:6e:d5:ce:bc:2d:0b:41:d2:cf:92:17:66: dd:24:90:6f:db:47:22:95:12:46:02:8c:2b:a0:73:2c:d7:5a: dc:28:55:35:a8:d9:98:cd:7f:e1:85:b5:a3:7a:cb:4d:96:30: 32:74:ec:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFq4aKqeMrKZutFDrIlHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwMzI2MDMwMTA3WhcNMjYwMzI3MDMwMTA3WjAzMTEwLwYDVQQD Eyg0ZmNjYzEyOWQwNjFiNzNkN2Y4MGRmMmRlN2Y0NmU5ODg1NTQzZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C4BK6tV6HyA8T0LzhirKfa0m5gH 8rsHXbuLRIQoBFL7A1moSD9kWD9hJBqv05Gpt84nmNUwQLhuIJuFus/Zj+2W1fEd xA1ActmfYU1+diQefX8EWwcPAoA6ZAB+h79gjYm6ACF+GFP9+xN/HiuEvAThZKyP gijk+qNILCrBlYPBjqKWEP69piWqcCAUeGdjAZRbBTgdd5TlKp12vHCoaR/UWnah tRPAb5D02AESpyFSlqV4gum3Coroe6sLbngyjUB+W1Y1OEScFnhlrVq3EEINuALp A4/naacZNsWEiP7eGdjcEEGGh4CiTb/8l3yLD1vw2QX6kaZsN8GF4HUS3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/MwSnQYbc9f4DfLef0bpiFVD0LMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqLkfmue KGj4Zc5GjIK2xaTZtRfpZCwdLa5JGLP3dhczpXE/K0gIsGX8JCVgoXjXUA1i9DyR X4WmSsmZF19BFk3cHJ/9rnEGjRFVXJLLuTr+BcCj6nkYDc0A/BVdIuzn8zi7w6dI WU/kkWFlKdDxMzYVErWVYnCh3xibWPGOi1COH3SKAmihnTgqhxMifr6yVMCgv2+n /Vd3VFyLHv7dX0ibHJvjaNYjbWQrtFKgNki7Zmb9dUE5+1sDO6YkNuFacKhuBafL xGpO156WbtXOvC0LQdLPkhdm3SSQb9tHIpUSRgKMK6BzLNda3ChVNajZmM1/4YW1 o3rLTZYwMnTsSg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:13:49 2026 by rpki-client