$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: Cm0K+I620JAmbDJ7TjGQgxeWv4tA4OmHqAkxQxJb5Jk= Subject key identifier: AB:27:D9:42:12:30:E8:26:75:27:1B:B6:09:9C:9B:CE:80:AE:58:A5 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 01A0D2014DCF5F6D528553E45CCCE4986299 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1A77 Signing time: Thu 24 Sep 2026 06:01:35 +0000 Manifest this update: Thu 24 Sep 2026 06:01:35 +0000 Manifest next update: Fri 25 Sep 2026 06:01:35 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: EgMSmftUTLxF2AG6yWU4xSMl5hqio26FbyLPrNpESl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:01:4d:cf:5f:6d:52:85:53:e4:5c:cc:e4:98:62:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Sep 24 06:01:35 2026 GMT Not After : Sep 25 06:01:35 2026 GMT Subject: CN=ab27d9421230e82675271bb6099c9bce80ae58a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:e8:eb:21:0e:8d:b8:0c:60:75:5a:bb:ad: 59:09:70:a9:bf:f1:bb:36:2f:c4:86:a7:fc:24:41: 39:3a:4e:84:80:34:98:e7:c4:73:16:cc:25:64:fb: e5:20:b3:40:82:b1:07:fc:33:93:cc:d3:c9:a5:28: ed:4f:07:b7:6d:64:28:e6:f3:1c:17:9f:bd:a9:17: 8c:3d:75:89:ee:ce:9b:13:63:86:19:be:1b:1c:22: c5:0e:3a:ff:be:13:b3:30:e6:a9:75:16:f7:34:9b: 7b:0d:9c:86:6f:94:b7:a9:f1:a8:e5:cc:10:ab:95: 4f:a0:5c:5f:28:d9:47:de:38:31:af:72:78:8c:dd: cd:32:77:8a:de:00:f1:d3:4b:08:63:cc:46:41:f7: 9d:c7:5f:02:c8:98:13:71:5e:f7:4d:e3:0e:5c:61: 6f:1f:ca:8e:4a:03:f8:49:88:22:b8:18:69:0c:27: e8:a8:51:f0:fd:d4:e6:65:26:d9:d3:b4:b4:47:fe: 03:96:04:09:aa:e5:18:c1:aa:91:dd:27:60:64:95: 65:bb:97:96:e3:1c:3a:9e:55:1e:de:7f:e5:40:0c: 34:bb:ee:84:c3:23:32:f1:28:d9:87:f5:8e:65:76: bc:ea:17:23:37:cc:d6:88:18:b4:ec:8b:52:79:af: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:27:D9:42:12:30:E8:26:75:27:1B:B6:09:9C:9B:CE:80:AE:58:A5 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b8:05:af:be:26:19:b0:ae:9d:3f:ac:e3:fb:23:c1:83:74: f9:bb:ae:89:d8:d8:07:c5:53:ab:1e:dd:c9:69:62:2e:56:ad: 3d:43:8c:83:a4:3f:78:dc:52:8f:bc:9f:3a:0b:a5:ae:e0:36: f8:33:54:9e:2c:c8:ff:87:aa:b5:73:50:62:6e:3f:64:cf:f4: 0b:85:81:0d:23:e2:56:ce:06:58:86:e0:04:bb:35:08:b2:c7: bc:4a:84:95:1d:13:d7:6b:7a:f3:48:d2:eb:b4:3e:8d:bc:09: 07:11:ae:ee:3e:9f:9d:73:85:0b:26:b7:23:b8:57:69:71:97: 1a:0d:59:1c:75:73:57:96:98:7b:b4:e1:d5:27:07:59:c5:00: 00:a9:17:aa:df:d4:fd:ac:26:c6:62:c9:61:66:d1:df:32:90: 67:5d:79:18:dd:30:1f:01:ea:96:fa:83:ee:ea:39:95:19:eb: f2:97:2a:61:44:7f:c1:dc:3e:cb:4f:bf:2e:34:17:f2:e8:77: 04:18:2e:cc:ca:50:cc:21:2b:c7:d8:a4:4b:b2:3f:22:87:83: 2d:91:7a:8e:e7:50:2f:b8:26:c1:fa:e5:d9:51:95:78:24:96: 14:7a:eb:68:23:71:e9:5b:76:79:2c:14:39:bf:9f:6a:86:47: 06:a4:55:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSAU3PX21ShVPkXMzkmGKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwOTI0MDYwMTM1WhcNMjYwOTI1MDYwMTM1WjAzMTEwLwYDVQQD EyhhYjI3ZDk0MjEyMzBlODI2NzUyNzFiYjYwOTljOWJjZTgwYWU1OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbLo6yEOjbgMYHVau61ZCXCpv/G7 Ni/Ehqf8JEE5Ok6EgDSY58RzFswlZPvlILNAgrEH/DOTzNPJpSjtTwe3bWQo5vMc F5+9qReMPXWJ7s6bE2OGGb4bHCLFDjr/vhOzMOapdRb3NJt7DZyGb5S3qfGo5cwQ q5VPoFxfKNlH3jgxr3J4jN3NMneK3gDx00sIY8xGQfedx18CyJgTcV73TeMOXGFv H8qOSgP4SYgiuBhpDCfoqFHw/dTmZSbZ07S0R/4DlgQJquUYwaqR3SdgZJVlu5eW 4xw6nlUe3n/lQAw0u+6EwyMy8SjZh/WOZXa86hcjN8zWiBi07ItSea/uxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsn2UISMOgmdScbtgmcm86ArlilMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7gFr74m GbCunT+s4/sjwYN0+buuidjYB8VTqx7dyWliLlatPUOMg6Q/eNxSj7yfOgulruA2 +DNUnizI/4eqtXNQYm4/ZM/0C4WBDSPiVs4GWIbgBLs1CLLHvEqElR0T12t680jS 67Q+jbwJBxGu7j6fnXOFCya3I7hXaXGXGg1ZHHVzV5aYe7Th1ScHWcUAAKkXqt/U /awmxmLJYWbR3zKQZ115GN0wHwHqlvqD7uo5lRnr8pcqYUR/wdw+y0+/LjQX8uh3 BBguzMpQzCErx9ikS7I/IoeDLZF6judQL7gmwfrl2VGVeCSWFHrraCNx6Vt2eSwU Ob+faoZHBqRV7w== -----END CERTIFICATE-----Generated at Thu Sep 24 09:08:53 2026 by rpki-client