$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: ZwEAF9JHLcrhs2pq8FqY4Ar/Ft0hdZrb3Zlpd6jXXy8= Subject key identifier: 2D:27:E0:8A:D9:E5:41:01:62:BD:C1:D0:08:45:E2:CE:87:A6:9C:58 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019E1F4794CAF5ED57E1FD2B18B74790BFD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 1166 Signing time: Wed 13 May 2026 03:00:45 +0000 Manifest this update: Wed 13 May 2026 03:00:45 +0000 Manifest next update: Thu 14 May 2026 03:00:45 +0000 Files and hashes: 1: 1nfCihSTwlJIQ4nvsiCslekY7NM.roa (hash: 4kEXXYbaPTR9rMQ4lw9zYV/v1K+AlDu09MYuRsUIkjU=) 2: 1rQSpSq9n0go-1sqt7J-jro-onw.roa (hash: A170zOdDKUFR8OjpxSyTeADzDSsnK0kS+5cwO4467+4=) 3: 4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa (hash: 5OBBvoknKe7BIhAFNY6E/EsSly4AA69+3FRzkxou83M=) 4: JWbtobpI47VXCFWlAi9tqrIVRvw.roa (hash: ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=) 5: Md6a-KQcbUfuxvWxKDr3cty5184.roa (hash: 0QYUuqR4NLEQ4pSl7SpM+UKRlpQJFGB4BeS1z7xH1dA=) 6: O-Lc9p7lKgu4RG8qbZStlySnjJw.roa (hash: VJbi6pgA5J9qOWeC5+ilPMjxUhX49jVlWxhniX3lMX8=) 7: RnEHdu41-R4PcF7uA7NCq1ymq-o.roa (hash: 1QIkC6nLYEKLiQP1dxQtxmlssoU62izuT6vjCEpQfEc=) 8: UFF8sc1cAlxiuca1UYpBZJuyruI.roa (hash: VvoB5niTEUFcEUXrlM/+U17VoiABVzzIIDopu2PtroE=) 9: euynJTb4DQRxhsqGUuIVKvMePvE.roa (hash: ApLmaeR70nQaei0kFKLHQPB8kjQglplGX2OnJJHWzlA=) 10: kjMi6obHpt9UHAnYG2JDcUbRz4I.roa (hash: eeNQkVMpQhVfJx2+o+C0G3gVG9NOsH6OImPcge0a9H8=) 11: ogYawkz_gBDjl6zl_q1fMXZNBvo.roa (hash: x588DAczbjPIl3pK5n5K7VZpFPPA1ral0L6/o6+ORO8=) 12: qBZkx98C2FyrYyHkdEdcNmhea-k.roa (hash: sIVCOdJ2FafZ1gXZEe6wh1i0aQqPT1MJAdBuWY+Cbzc=) 13: xbsOLy08hDmqcrHsStCHW6gzcKY.roa (hash: U+nyPksaAcVlKKdUnyPWFx4E2iIYZFylZhL+wDWilqE=) 14: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: 0NxG9b5UWLY59MFgAEcWtxVgv0AwmOnfgDFj5fm6s+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:47:94:ca:f5:ed:57:e1:fd:2b:18:b7:47:90:bf:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: May 13 03:00:45 2026 GMT Not After : May 14 03:00:45 2026 GMT Subject: CN=2d27e08ad9e5410162bdc1d00845e2ce87a69c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:8f:ba:4c:1e:2f:46:ca:42:cf:e1:8a:14: 27:62:0b:5e:30:f4:2c:ca:a8:d6:e4:5b:d2:53:83: bd:5b:df:b0:3d:73:30:d6:7c:f7:f7:42:2a:4c:79: bc:f4:31:5f:4e:e6:d2:92:50:16:67:a8:97:19:0c: 57:1e:06:65:a6:d1:58:05:53:b4:38:c1:41:b0:c5: 22:b1:1a:2b:ea:16:82:db:93:a1:02:8e:ae:64:cf: db:c5:4b:74:66:c0:41:45:61:e8:65:37:cd:19:80: 46:44:d6:38:ca:10:8b:a4:32:bb:64:ca:a3:ab:a9: 26:b3:a0:a0:54:9e:34:5e:f4:0f:88:d9:73:70:9b: 27:70:4d:60:4f:8a:19:ca:6f:32:09:29:6a:5d:b3: 4f:5c:1d:29:2b:7e:38:e8:43:8a:a5:d1:34:49:6c: 30:b9:1e:e3:cb:7c:27:58:b8:cc:f4:aa:6a:62:10: 57:9a:c6:c8:6d:54:9b:78:f5:14:3f:12:fe:e1:84: 32:c7:26:ed:77:9f:dc:7c:63:0b:3b:92:87:03:4a: e7:e6:8f:25:ab:57:07:c6:b3:12:13:e6:c4:1e:ac: 69:6b:f0:a9:9c:e3:49:dd:1e:32:77:c5:fa:32:80: a9:3f:de:a3:f7:c0:f4:79:64:d1:37:37:2d:3c:fc: 27:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:27:E0:8A:D9:E5:41:01:62:BD:C1:D0:08:45:E2:CE:87:A6:9C:58 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e7:4a:d4:85:65:a6:9c:28:fa:ae:0c:06:a9:9c:de:4a:b8: 76:53:17:41:83:1d:05:22:9d:cf:88:e8:c3:a6:1c:5a:7f:13: bd:24:68:e6:07:76:64:fb:24:52:35:0d:8c:df:ea:e4:1e:ea: 9e:13:c6:c3:25:4a:c2:3f:9c:17:3a:e6:15:4f:79:29:2b:ec: a7:34:d5:e7:40:2f:b1:f6:4d:8e:5a:de:57:18:02:33:64:6e: bc:64:e1:45:e4:2c:e9:3e:60:38:d8:cd:cf:67:8e:f6:99:91: 67:18:97:ad:15:48:1e:e6:de:9b:d6:1b:a5:0e:2e:6f:3b:79: 3c:8b:bb:fa:bc:dc:45:b8:ea:2e:66:f7:9e:b1:68:38:02:51: c3:b6:e6:d7:d0:26:29:86:55:85:29:0e:51:bf:99:50:93:28: dd:94:e5:35:07:a3:6f:ea:50:3e:50:9c:4e:7a:e1:9f:e0:6a: fb:fb:c1:f8:43:86:6d:3d:36:48:7e:3f:35:14:ed:e6:8e:30: ed:5e:89:cf:b6:25:46:c9:ec:8a:2e:c2:93:37:ea:78:a6:f6: 21:05:e0:8c:40:03:59:3b:4c:c2:50:29:fe:b0:38:43:c6:f5: 2a:ed:16:f9:9c:c7:c4:22:f7:20:2f:98:8c:47:5c:03:ad:7c: d8:c0:32:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4fR5TK9e1X4f0rGLdHkL/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwNTEzMDMwMDQ1WhcNMjYwNTE0MDMwMDQ1WjAzMTEwLwYDVQQD EygyZDI3ZTA4YWQ5ZTU0MTAxNjJiZGMxZDAwODQ1ZTJjZTg3YTY5YzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTuPukweL0bKQs/hihQnYgteMPQs yqjW5FvSU4O9W9+wPXMw1nz390IqTHm89DFfTubSklAWZ6iXGQxXHgZlptFYBVO0 OMFBsMUisRor6haC25OhAo6uZM/bxUt0ZsBBRWHoZTfNGYBGRNY4yhCLpDK7ZMqj q6kms6CgVJ40XvQPiNlzcJsncE1gT4oZym8yCSlqXbNPXB0pK3446EOKpdE0SWww uR7jy3wnWLjM9KpqYhBXmsbIbVSbePUUPxL+4YQyxybtd5/cfGMLO5KHA0rn5o8l q1cHxrMSE+bEHqxpa/CpnONJ3R4yd8X6MoCpP96j98D0eWTRNzctPPwnTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0n4IrZ5UEBYr3B0AhF4s6HppxYMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKudK1IVl ppwo+q4MBqmc3kq4dlMXQYMdBSKdz4jow6YcWn8TvSRo5gd2ZPskUjUNjN/q5B7q nhPGwyVKwj+cFzrmFU95KSvspzTV50AvsfZNjlreVxgCM2RuvGThReQs6T5gONjN z2eO9pmRZxiXrRVIHubem9YbpQ4ubzt5PIu7+rzcRbjqLmb3nrFoOAJRw7bm19Am KYZVhSkOUb+ZUJMo3ZTlNQejb+pQPlCcTnrhn+Bq+/vB+EOGbT02SH4/NRTt5o4w 7V6Jz7YlRsnsii7CkzfqeKb2IQXgjEADWTtMwlAp/rA4Q8b1Ku0W+ZzHxCL3IC+Y jEdcA6182MAyqQ== -----END CERTIFICATE-----Generated at Wed May 13 05:53:26 2026 by rpki-client