$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: 9iLEzkre8STJL7UtykDIWQq18m2SfyZ8/gvoAAGBjLs= Subject key identifier: B4:0F:C9:23:A9:1F:4D:87:1F:33:62:14:4A:DF:F2:04:17:A9:C2:5C Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 01A0E888ECA5EB07641CEB8F977A56E75963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 1A8C Signing time: Mon 28 Sep 2026 15:01:22 +0000 Manifest this update: Mon 28 Sep 2026 15:01:22 +0000 Manifest next update: Tue 29 Sep 2026 15:01:22 +0000 Files and hashes: 1: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=) 2: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=) 3: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=) 4: LBK2m0x43uiy3CDrXewo6CElebE.roa (hash: Melk19K0g3bAymWD/+lvWlNHh7zUQK9z4QHwwE2U65g=) 5: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=) 6: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=) 7: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=) 8: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=) 9: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=) 10: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=) 11: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=) 12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: yY4t7aJwhrvGj76zNqiD6z3Un/xX2gjKNu8QScNZixc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:88:ec:a5:eb:07:64:1c:eb:8f:97:7a:56:e7:59:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Sep 28 15:01:22 2026 GMT Not After : Sep 29 15:01:22 2026 GMT Subject: CN=b40fc923a91f4d871f3362144adff20417a9c25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:45:c0:a9:16:1d:fa:23:85:c8:ce:e4:e2:e0: 8d:bf:51:4f:82:84:6a:72:8a:c4:9d:29:43:e8:85: 65:30:cf:b8:b6:fe:74:32:eb:d2:81:9a:8d:58:2e: 80:05:4e:2f:4a:89:21:21:03:31:17:7a:77:e7:bf: 7c:a2:a3:7b:c7:4f:61:78:a8:82:0a:d0:87:56:db: 73:7a:b2:cb:f6:ed:af:b4:a0:a7:55:67:94:7e:c6: e8:3e:90:ee:4b:97:4a:a6:74:c1:5a:05:ae:bf:b3: 99:a8:45:b0:a9:fc:83:0e:c2:c8:8d:d1:78:c9:78: 27:a8:97:6c:d2:43:39:f6:03:9c:8b:d3:65:22:e3: 0a:05:92:46:a5:bd:58:a1:ff:24:64:c2:48:8c:2d: b8:a8:d5:fe:44:9d:a0:6a:c5:f6:81:26:fb:7e:31: 36:35:41:1a:56:75:4b:2c:78:f5:81:58:06:59:39: 2a:f2:ce:e5:24:d1:84:01:95:71:25:bf:5d:fb:87: 0a:5a:69:b9:94:2e:c3:72:35:9f:54:de:f5:4d:d1: 41:e2:07:e7:f2:ec:00:3b:2e:ef:87:55:a7:32:eb: 88:88:c4:66:d3:85:de:02:33:e4:79:23:5f:b8:11: dd:74:ba:50:68:07:2b:b5:ed:8c:36:86:63:dc:2e: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0F:C9:23:A9:1F:4D:87:1F:33:62:14:4A:DF:F2:04:17:A9:C2:5C X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:90:9b:d3:08:92:f7:71:ac:cb:dd:d0:fd:1b:06:6a:70:dd: 44:44:7d:28:0d:fb:84:b4:55:5f:b5:8c:62:42:74:ff:05:1e: ba:64:c2:af:34:ef:7b:2a:e3:ff:5a:c4:93:74:4f:0a:8f:1a: 0c:ea:11:7d:ba:70:6e:ae:b0:5f:06:b6:4b:4d:16:b6:07:ab: 10:7b:08:4e:ce:74:26:06:0e:56:46:88:4d:4a:da:c0:a7:d2: d7:79:bd:14:2e:0a:b2:b8:a5:1f:e6:bd:f9:c7:2a:8f:a1:60: e9:62:80:9c:3d:cb:cc:71:dd:cf:77:44:15:89:cf:ad:7f:ac: 4f:11:09:c9:c4:dc:36:be:9c:d1:0f:c1:75:e9:b1:dc:92:de: f2:b6:8d:51:ad:7b:12:b8:f6:fc:58:9e:de:0f:90:d2:e0:de: 2d:07:0b:be:6d:3e:19:27:a2:77:6e:69:a8:f1:39:62:b0:8a: a8:92:e4:c2:2c:3d:2c:60:33:65:ff:2e:ba:de:0e:a1:6b:ce: be:7b:75:54:5d:78:0b:3e:58:5a:7e:d0:45:b2:2e:0c:ad:91: e3:fb:f8:85:0c:9b:97:b1:45:59:c7:da:79:ad:d0:15:6c:47: 8a:e5:cf:54:7e:73:1a:95:e5:0a:89:e7:6c:f4:62:92:90:77: 46:3c:e5:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDoiOyl6wdkHOuPl3pW51ljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYwOTI4MTUwMTIyWhcNMjYwOTI5MTUwMTIyWjAzMTEwLwYDVQQD EyhiNDBmYzkyM2E5MWY0ZDg3MWYzMzYyMTQ0YWRmZjIwNDE3YTljMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUXAqRYd+iOFyM7k4uCNv1FPgoRq corEnSlD6IVlMM+4tv50MuvSgZqNWC6ABU4vSokhIQMxF3p35798oqN7x09heKiC CtCHVttzerLL9u2vtKCnVWeUfsboPpDuS5dKpnTBWgWuv7OZqEWwqfyDDsLIjdF4 yXgnqJds0kM59gOci9NlIuMKBZJGpb1Yof8kZMJIjC24qNX+RJ2gasX2gSb7fjE2 NUEaVnVLLHj1gVgGWTkq8s7lJNGEAZVxJb9d+4cKWmm5lC7DcjWfVN71TdFB4gfn 8uwAOy7vh1WnMuuIiMRm04XeAjPkeSNfuBHddLpQaAcrte2MNoZj3C6tKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQPySOpH02HHzNiFErf8gQXqcJcMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZCb0wiS 93Gsy93Q/RsGanDdRER9KA37hLRVX7WMYkJ0/wUeumTCrzTveyrj/1rEk3RPCo8a DOoRfbpwbq6wXwa2S00WtgerEHsITs50JgYOVkaITUrawKfS13m9FC4KsrilH+a9 +ccqj6Fg6WKAnD3LzHHdz3dEFYnPrX+sTxEJycTcNr6c0Q/Bdemx3JLe8raNUa17 Erj2/Fie3g+Q0uDeLQcLvm0+GSeid25pqPE5YrCKqJLkwiw9LGAzZf8uut4OoWvO vnt1VF14Cz5YWn7QRbIuDK2R4/v4hQybl7FFWcfaea3QFWxHiuXPVH5zGpXlConn bPRikpB3Rjzl8w== -----END CERTIFICATE-----Generated at Mon Sep 28 21:57:04 2026 by rpki-client