$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json) Hash identifier: C3ScZKlK/IDFBE60EGSL2u6LYgYGGUIYuQgLwSWi4yQ= Subject key identifier: D8:78:A2:CF:A2:9F:50:34:E5:6E:FF:65:77:16:B9:E1:50:6F:26:4E Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 01A1DACAABAE305F8211B579E71FC7B3E673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft Manifest number: 1B79 Signing time: Sat 14 Nov 2026 16:01:17 +0000 Manifest this update: Sat 14 Nov 2026 16:01:17 +0000 Manifest next update: Sun 15 Nov 2026 16:01:17 +0000 Files and hashes: 1: 3Cc7zYr4wdMCZUe9g6dW_2i0ML8.roa (hash: pg5Ed7h72zzvUZD3Dywps0w/tKRJFUdallc5ZvXhwdQ=) 2: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=) 3: KuQWIegYdUJMwSsw6LOJEGnWJIU.roa (hash: n1+wc9tP5UGa0heg8onORKo3M069nKjqbj355TvV57s=) 4: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=) 5: WrzqxUbHWF7HcxsL8cQxuxpNdmY.roa (hash: WlfUvOzQ5YqMfbAGnnKjEm1gW/UCmNr5ct407GHIsZc=) 6: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: KVCFFP7r+K67bBe7aselOYRy/nUgIchF9wgpCa4Lte0=) 7: cnyVAm6n-mPk7D9NoefcfJS4h-I.roa (hash: hg++FUgze8SJYZRhrwDxmY/icpo7b2MPk9WotmoOGz0=) 8: iNpfv2H8aBWlKXZF26UnnW9pbIg.roa (hash: QvFWxjKcfe2bGZQbuqD0AHyjjwdonraBq3f/+QRF0aM=) 9: kHVx3MxOhUHnvGzMhHMTh-h0xao.roa (hash: apdMUVkUsjvxSYU4NdkC22tvpcOKIkS/iIwnp6sgj8E=) 10: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=) 11: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=) 12: tant_iw39C5s5eHSo-fWpKRJVZI.roa (hash: 3Mfj9MzM5Fq754ib0F7hoqH7ufiZ177wLskV+BMlC5s=) 13: teIJU3IzQjABNZdvAkf-RlLgbuA.roa (hash: ccrV+63o7ehToisIPBsha0uUlXX9qqvCuMxenbqL9Is=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:ca:ab:ae:30:5f:82:11:b5:79:e7:1f:c7:b3:e6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Nov 14 16:01:17 2026 GMT Not After : Nov 15 16:01:17 2026 GMT Subject: CN=d878a2cfa29f5034e56eff657716b9e1506f264e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:98:87:44:be:57:71:a2:72:e0:c4:c8:e7: aa:95:69:ad:35:b2:a7:4a:94:9e:37:4f:fa:e2:62: 60:9f:31:98:43:01:43:c2:4b:68:93:c2:ec:37:70: 88:be:ed:d6:0e:87:f4:e4:e5:f4:51:64:e1:9e:d9: ba:c8:68:e8:bd:06:00:b8:e4:30:9d:24:6a:8f:fb: 5d:c0:e4:57:bb:c2:3f:10:9c:9a:93:2b:10:b2:bc: a7:66:f3:8b:a7:56:07:bb:b9:61:52:99:0a:6e:0a: e9:76:86:dd:15:30:8e:3d:02:25:14:42:71:d6:b5: 85:b6:6e:a1:da:f4:7a:b5:fa:17:32:1f:40:38:ca: 7a:a4:4f:12:74:5e:3e:ef:62:3d:9b:b3:ec:4f:4b: 24:35:72:47:d2:94:10:d3:ac:aa:6a:71:f1:36:93: 2e:af:4b:67:e4:9c:8e:49:07:38:ab:3a:dc:e8:3a: 9b:a2:d9:fa:75:dc:3a:11:ba:3f:55:98:0d:cd:6b: 52:06:c0:90:c2:32:1f:44:5b:bd:50:60:cc:8a:48: c3:1b:8e:1c:49:db:bb:a2:ed:c2:b1:a1:4d:70:c7: 2b:a2:d1:24:77:30:cd:f0:2c:86:f8:5d:68:7d:4a: a5:73:5a:12:b5:98:c0:80:eb:33:a4:3e:59:8a:fc: be:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:78:A2:CF:A2:9F:50:34:E5:6E:FF:65:77:16:B9:E1:50:6F:26:4E X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d5:b4:1f:f2:19:db:69:84:8c:c5:56:4c:6c:fe:15:32:a3: ef:d4:59:c6:e9:4e:af:97:6a:e0:90:cc:0a:4f:dc:dc:0f:5e: 6c:70:69:60:71:42:52:b7:07:1b:9a:be:7c:09:d4:8b:2e:0c: 2e:9b:a5:4c:2a:0c:09:74:0f:a5:e1:2b:10:60:72:29:95:23: 26:28:28:8a:f6:be:99:38:a8:e5:53:81:39:d1:d6:0b:69:bb: d9:fb:7a:74:96:1d:51:ab:42:7c:f4:ae:ed:17:44:83:65:7e: 57:94:61:3e:31:39:35:4b:24:93:f7:21:1b:aa:ec:5c:0e:46: 80:f1:39:e4:65:e4:48:57:20:1e:9f:69:4e:7f:1f:fe:8f:d2: cb:31:05:5b:b2:94:6f:f7:2f:73:d1:37:5f:3c:c0:c9:44:7a: 10:4b:82:58:ce:f9:b6:7f:d8:ea:1a:0d:34:ff:f1:ea:5d:c1: 05:92:a5:2f:78:e3:a8:32:44:49:3d:89:df:da:97:92:87:82: e9:36:a5:1e:d8:f3:87:8f:c6:0f:a2:3a:1b:f0:01:a5:b6:5f: ff:be:52:e2:eb:59:39:d3:ff:af:30:26:52:ff:94:dd:0f:d6: d4:a5:81:30:31:dd:ac:95:72:92:7b:73:d2:d9:9f:35:04:8c: 8e:d1:f8:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHayquuMF+CEbV55x/Hs+ZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYxMTE0MTYwMTE3WhcNMjYxMTE1MTYwMTE3WjAzMTEwLwYDVQQD EyhkODc4YTJjZmEyOWY1MDM0ZTU2ZWZmNjU3NzE2YjllMTUwNmYyNjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCCYh0S+V3GicuDEyOeqlWmtNbKn SpSeN0/64mJgnzGYQwFDwktok8LsN3CIvu3WDof05OX0UWThntm6yGjovQYAuOQw nSRqj/tdwORXu8I/EJyakysQsrynZvOLp1YHu7lhUpkKbgrpdobdFTCOPQIlFEJx 1rWFtm6h2vR6tfoXMh9AOMp6pE8SdF4+72I9m7PsT0skNXJH0pQQ06yqanHxNpMu r0tn5JyOSQc4qzrc6Dqbotn6ddw6Ebo/VZgNzWtSBsCQwjIfRFu9UGDMikjDG44c Sdu7ou3CsaFNcMcrotEkdzDN8CyG+F1ofUqlc1oStZjAgOszpD5Zivy+5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNh4os+in1A05W7/ZXcWueFQbyZOMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtW0H/IZ 22mEjMVWTGz+FTKj79RZxulOr5dq4JDMCk/c3A9ebHBpYHFCUrcHG5q+fAnUiy4M LpulTCoMCXQPpeErEGByKZUjJigoiva+mTio5VOBOdHWC2m72ft6dJYdUatCfPSu 7RdEg2V+V5RhPjE5NUskk/chG6rsXA5GgPE55GXkSFcgHp9pTn8f/o/SyzEFW7KU b/cvc9E3XzzAyUR6EEuCWM75tn/Y6hoNNP/x6l3BBZKlL3jjqDJEST2J39qXkoeC 6TalHtjzh4/GD6I6G/ABpbZf/75S4utZOdP/rzAmUv+U3Q/W1KWBMDHdrJVykntz 0tmfNQSMjtH42Q== -----END CERTIFICATE-----Generated at Sun Nov 15 00:52:39 2026 by rpki-client