$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: BRDNdN9cDauZMchJE56GF1JEsgxp49lYEwcMcoj0EAg= Subject key identifier: 7D:F0:B3:0F:FF:10:35:B2:8C:B0:04:58:6B:D9:BF:3E:B1:5E:76:A1 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019E20FF399B269B4773B474B1FC1636A75E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 191B Signing time: Wed 13 May 2026 11:00:57 +0000 Manifest this update: Wed 13 May 2026 11:00:57 +0000 Manifest next update: Thu 14 May 2026 11:00:57 +0000 Files and hashes: 1: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=) 2: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=) 3: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=) 4: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=) 5: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=) 6: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=) 7: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=) 8: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=) 9: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=) 10: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=) 11: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: QK9Pg9sCjj6g932P8vAr1xal403dhbmR7ldkL7E3Np0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:20:ff:39:9b:26:9b:47:73:b4:74:b1:fc:16:36:a7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: May 13 11:00:57 2026 GMT Not After : May 14 11:00:57 2026 GMT Subject: CN=7df0b30fff1035b28cb004586bd9bf3eb15e76a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:41:52:65:25:56:6d:24:33:03:f8:a7:d2:0d: 95:14:4e:12:80:30:e5:b8:a4:a3:98:6a:bf:78:74: 39:8a:61:62:6d:9f:04:cd:1d:19:6b:59:c1:f8:62: 2c:6e:33:1b:d9:3d:1d:d5:8b:96:9b:c4:81:7d:4f: 29:47:63:3d:50:97:0f:1c:9c:8a:92:1d:81:59:d4: f8:01:4d:b9:20:ae:ec:26:78:00:08:71:83:1e:eb: cf:9b:54:81:ec:c3:62:b8:7a:b9:67:9f:12:35:74: f0:ac:25:c6:14:c2:b5:be:ca:23:74:5d:a1:05:a1: 4a:a4:6b:16:83:12:31:86:a1:36:10:df:07:1f:73: 86:4a:b5:76:e8:f0:43:f8:1a:a7:ac:2c:45:b5:82: f7:29:bb:a4:e7:8f:77:18:12:d6:d4:70:42:e5:0a: f5:71:85:a7:02:dc:cd:0e:ee:79:9c:b2:82:0b:ad: 16:43:fb:07:08:29:0c:e6:90:a5:ee:31:83:e0:28: 18:1a:90:a9:a3:76:a1:36:f5:11:83:bb:5f:a6:5f: c5:ae:7b:77:2f:d6:93:73:d5:4b:76:94:82:3c:90: 05:82:bf:91:03:85:48:da:3b:33:6d:01:c0:d7:5e: f0:2c:75:26:63:f9:ce:dc:11:3d:cc:20:73:82:df: c5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F0:B3:0F:FF:10:35:B2:8C:B0:04:58:6B:D9:BF:3E:B1:5E:76:A1 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:8f:0b:c9:07:f9:29:c5:5b:fe:d8:29:a5:df:50:bd:16:da: a6:c6:aa:3c:97:d8:4a:69:c0:bf:a4:76:15:54:b4:6d:13:a3: ed:a0:0e:69:a9:72:24:75:e4:79:3c:9b:a8:72:cc:42:22:0b: f2:09:bf:eb:86:44:b8:36:a9:85:e6:ab:5f:f3:8e:e4:df:8c: c5:02:b3:b2:0c:fc:95:1f:d4:82:5e:dd:29:86:d9:c3:dc:85: 90:a8:fd:d3:37:c9:72:ec:45:ae:2b:7c:f5:72:74:1e:2d:c7: c2:ee:5e:12:f0:33:d9:b8:32:b0:09:5c:5e:72:f2:3b:c4:1b: e5:eb:97:a1:ef:c2:f1:80:56:ac:0b:6c:a5:f6:72:7d:ce:8f: e6:eb:b1:03:3b:bd:28:3b:c1:a4:58:42:4f:9a:7a:4f:8d:24: e3:bb:83:56:e1:5f:3e:c8:14:cd:c5:88:24:22:f6:ea:a6:90: 46:1a:a2:6c:1d:28:b3:bc:ad:d3:b3:d0:29:e1:bd:1e:0f:fa: f7:5e:c4:ed:95:07:16:52:1a:f6:51:8b:75:a6:1d:44:e2:64: 88:f2:4d:45:65:12:51:f6:e0:91:b9:ee:42:66:d9:08:c9:80: cc:de:6d:e5:31:e8:c8:cd:ea:a5:3f:4d:46:e7:4e:2e:48:df: 1f:86:8f:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4g/zmbJptHc7R0sfwWNqdeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYwNTEzMTEwMDU3WhcNMjYwNTE0MTEwMDU3WjAzMTEwLwYDVQQD Eyg3ZGYwYjMwZmZmMTAzNWIyOGNiMDA0NTg2YmQ5YmYzZWIxNWU3NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEFSZSVWbSQzA/in0g2VFE4SgDDl uKSjmGq/eHQ5imFibZ8EzR0Za1nB+GIsbjMb2T0d1YuWm8SBfU8pR2M9UJcPHJyK kh2BWdT4AU25IK7sJngACHGDHuvPm1SB7MNiuHq5Z58SNXTwrCXGFMK1vsojdF2h BaFKpGsWgxIxhqE2EN8HH3OGSrV26PBD+BqnrCxFtYL3Kbuk5493GBLW1HBC5Qr1 cYWnAtzNDu55nLKCC60WQ/sHCCkM5pCl7jGD4CgYGpCpo3ahNvURg7tfpl/Frnt3 L9aTc9VLdpSCPJAFgr+RA4VI2jszbQHA117wLHUmY/nO3BE9zCBzgt/FgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3wsw//EDWyjLAEWGvZvz6xXnahMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA048LyQf5 KcVb/tgppd9QvRbapsaqPJfYSmnAv6R2FVS0bROj7aAOaalyJHXkeTybqHLMQiIL 8gm/64ZEuDaphearX/OO5N+MxQKzsgz8lR/Ugl7dKYbZw9yFkKj90zfJcuxFrit8 9XJ0Hi3Hwu5eEvAz2bgysAlcXnLyO8Qb5euXoe/C8YBWrAtspfZyfc6P5uuxAzu9 KDvBpFhCT5p6T40k47uDVuFfPsgUzcWIJCL26qaQRhqibB0os7yt07PQKeG9Hg/6 917E7ZUHFlIa9lGLdaYdROJkiPJNRWUSUfbgkbnuQmbZCMmAzN5t5THoyM3qpT9N RudOLkjfH4aPxQ== -----END CERTIFICATE-----Generated at Wed May 13 13:40:13 2026 by rpki-client