$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json) Hash identifier: h7UQ5CvdpyjLKikgw0u2/gZlupUiayNu0ZZGmFVuwYM= Subject key identifier: E3:AC:B5:77:D5:4E:B5:67:5C:2D:B3:E0:E3:6B:36:E2:50:5B:14:0B Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 01A0CCA382844AC5D20A7471B3760CB4F73E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft Manifest number: 1AE9 Signing time: Wed 23 Sep 2026 05:01:02 +0000 Manifest this update: Wed 23 Sep 2026 05:01:02 +0000 Manifest next update: Thu 24 Sep 2026 05:01:02 +0000 Files and hashes: 1: 3Cc7zYr4wdMCZUe9g6dW_2i0ML8.roa (hash: pg5Ed7h72zzvUZD3Dywps0w/tKRJFUdallc5ZvXhwdQ=) 2: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=) 3: KuQWIegYdUJMwSsw6LOJEGnWJIU.roa (hash: n1+wc9tP5UGa0heg8onORKo3M069nKjqbj355TvV57s=) 4: MjlFeY87Fuw4BUyxFlxj8p6hgkc.roa (hash: WfGaTzFvV1fHjHe4I5TMtv/UZQaQnBppL5sd8Jukkv0=) 5: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=) 6: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: nz2G0qTSfld4fht3d5/jYLx3NK5/XvCrl5zsrfH5BNE=) 7: cnyVAm6n-mPk7D9NoefcfJS4h-I.roa (hash: hg++FUgze8SJYZRhrwDxmY/icpo7b2MPk9WotmoOGz0=) 8: kHVx3MxOhUHnvGzMhHMTh-h0xao.roa (hash: apdMUVkUsjvxSYU4NdkC22tvpcOKIkS/iIwnp6sgj8E=) 9: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=) 10: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=) 11: tant_iw39C5s5eHSo-fWpKRJVZI.roa (hash: 3Mfj9MzM5Fq754ib0F7hoqH7ufiZ177wLskV+BMlC5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:a3:82:84:4a:c5:d2:0a:74:71:b3:76:0c:b4:f7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Sep 23 05:01:02 2026 GMT Not After : Sep 24 05:01:02 2026 GMT Subject: CN=e3acb577d54eb5675c2db3e0e36b36e2505b140b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c1:a9:8e:76:6f:9c:c1:68:f1:ae:87:27:88: d6:07:b3:a0:7d:ff:18:a3:5d:e0:57:88:0d:2f:6d: 5d:88:5c:c9:8a:ad:bc:38:d2:b0:68:b9:77:ca:25: e9:46:c3:ea:60:3b:f8:fe:39:11:65:9c:d7:a0:01: 43:96:ee:a1:3e:b4:ac:b0:aa:6c:17:a8:26:05:4e: 47:e9:11:c0:1c:f9:0f:79:01:f9:0f:be:9f:8e:d4: 30:2c:f6:f6:70:d4:6d:07:47:17:dd:d8:61:92:58: d5:48:f1:a3:bc:98:60:3e:68:e0:cd:b0:37:69:56: f4:f8:b1:64:3a:9f:17:40:84:cc:b2:5a:c9:ed:69: 40:a1:20:1e:9a:f5:0a:20:db:c3:b5:bd:73:f1:1a: 68:a7:fe:1b:32:0e:70:aa:87:a6:96:c0:45:70:5b: 19:4d:94:f1:70:b4:ad:58:2b:c7:b9:f1:77:9d:eb: 61:0a:36:96:5e:ef:cd:7f:4b:78:3c:12:1e:61:bb: 58:78:e2:a1:2a:b4:fe:f3:eb:b8:42:79:8b:de:61: 7f:c5:19:84:6d:6e:ae:34:eb:5d:5a:95:63:b8:24: 70:f4:fd:79:f8:84:0d:99:e0:68:1c:6c:82:03:34: 63:2c:d8:55:da:c6:68:63:96:c0:00:1b:ae:79:14: dc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AC:B5:77:D5:4E:B5:67:5C:2D:B3:E0:E3:6B:36:E2:50:5B:14:0B X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6d:18:f4:a8:d2:b7:0c:64:d0:64:00:61:ba:70:49:c7:30: 8e:2e:6e:b5:8f:37:45:5c:00:54:a6:75:5e:41:28:f5:7e:d7: 79:2e:5e:73:da:9d:d0:45:1a:ac:17:19:e8:bc:75:8c:1e:f1: c4:c7:21:2c:48:a4:9a:09:4d:86:51:9e:ac:3e:a1:ca:a2:c6: 0a:fc:7c:16:36:f9:c0:34:fb:24:f9:5c:f7:8e:e0:da:95:6a: 24:ac:ad:c0:61:41:83:04:92:50:cb:d6:16:b7:21:41:e4:6e: 74:66:50:04:5e:98:d0:e7:c8:f5:c4:cf:3a:4a:8a:39:4b:6c: dd:1c:39:64:29:fc:ba:fd:98:eb:59:dc:02:49:09:5e:70:e3: 25:3e:c4:58:b0:a5:9b:e6:2e:90:bf:48:5f:6e:8e:20:6c:1e: ce:2c:ea:99:93:bc:18:7a:b9:85:b7:9b:6b:10:ee:57:cf:52: 7a:b1:42:19:fb:b9:4f:06:5a:9a:98:e4:4e:97:dc:d8:af:44: a1:82:83:39:0a:6c:c2:5d:9b:34:f0:e2:3c:97:25:3c:ca:97: f9:ee:91:72:af:4d:97:b4:a2:5c:36:37:70:8f:9d:43:93:be: 41:ac:b1:b1:da:6f:85:e7:7b:31:fd:7b:de:99:9d:86:10:48: 8b:dd:d7:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMo4KESsXSCnRxs3YMtPc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYwOTIzMDUwMTAyWhcNMjYwOTI0MDUwMTAyWjAzMTEwLwYDVQQD EyhlM2FjYjU3N2Q1NGViNTY3NWMyZGIzZTBlMzZiMzZlMjUwNWIxNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58GpjnZvnMFo8a6HJ4jWB7Ogff8Y o13gV4gNL21diFzJiq28ONKwaLl3yiXpRsPqYDv4/jkRZZzXoAFDlu6hPrSssKps F6gmBU5H6RHAHPkPeQH5D76fjtQwLPb2cNRtB0cX3dhhkljVSPGjvJhgPmjgzbA3 aVb0+LFkOp8XQITMslrJ7WlAoSAemvUKINvDtb1z8Rpop/4bMg5wqoemlsBFcFsZ TZTxcLStWCvHufF3nethCjaWXu/Nf0t4PBIeYbtYeOKhKrT+8+u4QnmL3mF/xRmE bW6uNOtdWpVjuCRw9P15+IQNmeBoHGyCAzRjLNhV2sZoY5bAABuueRTctQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOstXfVTrVnXC2z4ONrNuJQWxQLMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlm0Y9KjS twxk0GQAYbpwSccwji5utY83RVwAVKZ1XkEo9X7XeS5ec9qd0EUarBcZ6Lx1jB7x xMchLEikmglNhlGerD6hyqLGCvx8Fjb5wDT7JPlc947g2pVqJKytwGFBgwSSUMvW FrchQeRudGZQBF6Y0OfI9cTPOkqKOUts3Rw5ZCn8uv2Y61ncAkkJXnDjJT7EWLCl m+YukL9IX26OIGwezizqmZO8GHq5hbebaxDuV89SerFCGfu5TwZampjkTpfc2K9E oYKDOQpswl2bNPDiPJclPMqX+e6Rcq9Nl7SiXDY3cI+dQ5O+Qayxsdpvhed7Mf17 3pmdhhBIi93XSA== -----END CERTIFICATE-----Generated at Wed Sep 23 11:03:45 2026 by rpki-client