$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json) Hash identifier: a6EwefL3B06kfAUMjxUKjFUgQELFuwkXg+EhfFeJ1+s= Subject key identifier: 48:F9:60:BA:2A:66:9D:AF:79:1A:F8:9E:F5:32:04:1F:7F:36:4C:CB Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019D2627EDC2A8DA853FC9E9C3FD1F59D27F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft Manifest number: 0D48 Signing time: Wed 25 Mar 2026 18:00:44 +0000 Manifest this update: Wed 25 Mar 2026 18:00:44 +0000 Manifest next update: Thu 26 Mar 2026 18:00:44 +0000 Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=) 2: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=) 3: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=) 4: KO2DY0u9wdedPHwObsI7cPYbfFQ.roa (hash: chzNX5SpmlEt8RciW6ST6qYzL/lzzcsJcvqyYaAMbaQ=) 5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: JIpElayNz7X+jrvZakK139/yzvgjhLJ59McAA3GeyIU=) 6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=) 7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=) 8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=) 9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=) 10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:27:ed:c2:a8:da:85:3f:c9:e9:c3:fd:1f:59:d2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Mar 25 18:00:44 2026 GMT Not After : Mar 26 18:00:44 2026 GMT Subject: CN=48f960ba2a669daf791af89ef532041f7f364ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:44:0d:59:f2:4b:e5:ad:db:7a:95:0b:94: 5e:2f:d1:82:93:56:d2:59:89:2f:d6:cd:28:79:81: e9:c3:07:e5:de:07:4c:ba:f5:ac:c0:0b:87:19:3f: 9f:88:a7:ae:62:86:90:b9:84:77:db:98:7d:73:04: 15:fb:fa:43:bc:f5:ed:0e:ea:1b:db:05:06:84:e0: 9b:8d:67:c9:55:e8:f6:c5:9b:57:74:5d:1c:71:85: 1f:19:9b:61:12:9c:7f:7e:5f:b0:8a:ca:fe:7a:4d: 07:8f:f9:75:d6:91:60:d6:74:34:b6:56:73:0e:3a: 3b:33:21:af:9b:6e:44:25:fb:e2:c5:b3:70:6c:c9: 2d:82:34:85:0e:37:66:d5:54:cb:ed:31:fb:ae:c5: da:3d:e0:71:5e:59:cd:ae:7f:a1:59:e3:a1:7d:17: 7a:e3:42:c3:57:6e:a1:b9:aa:66:f6:30:c9:d9:0a: d7:d5:fb:70:5d:6a:ba:0a:75:3a:41:4f:88:96:01: a8:d6:99:d7:32:a2:00:7c:c0:bc:d7:9c:aa:33:fa: 5f:81:dc:83:e9:44:f5:23:af:6e:0a:91:be:36:61: d3:1f:e7:82:97:e8:98:c0:5e:57:67:6d:c3:e3:38: 59:f0:86:f7:0e:eb:4e:ca:8f:79:40:d3:dc:0a:25: ef:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F9:60:BA:2A:66:9D:AF:79:1A:F8:9E:F5:32:04:1F:7F:36:4C:CB X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d6:44:8c:2a:33:4a:de:1a:a8:7f:54:7b:ea:a7:ba:a9:1c: 0c:69:1e:6c:25:2d:70:be:83:50:4a:64:f0:c6:1a:10:8f:d4: 62:86:38:7f:30:f0:49:d1:14:f0:81:cd:45:c7:33:c4:c9:5d: 4d:4b:35:30:a2:64:83:40:6a:42:26:54:00:a6:e2:bb:3f:7f: 96:a2:3d:12:2f:98:19:2a:ad:46:a9:88:7b:13:c3:5d:73:a6: 32:8c:4e:b1:ca:8f:4b:03:2d:e6:a2:e6:21:10:e8:37:b9:e2: 22:8d:06:2f:c0:bb:89:bd:78:2b:90:11:68:dc:c9:50:4b:8c: 87:c0:7d:4e:8f:6d:1e:ef:fb:de:13:78:0e:dc:39:09:4f:71: d3:0c:40:ad:54:0b:3c:7e:97:82:ac:5c:f2:e8:af:e4:8b:70: ad:d3:c5:f7:fc:12:e5:0a:09:40:f5:f7:d9:94:79:69:50:f9: 4a:21:d0:a7:ff:18:eb:43:85:b7:c4:6e:ef:18:e9:1f:d8:17: e9:19:f2:8b:19:b1:7b:9d:53:a4:d1:13:c0:4d:76:b6:03:3f: 22:d5:ef:ea:80:a1:16:8a:58:f1:10:7d:5c:d1:bd:ae:04:7b: d0:69:37:0c:0b:51:69:71:27:1b:be:0a:35:a5:9f:af:10:f5: 0a:48:d0:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mJ+3CqNqFP8npw/0fWdJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwMzI1MTgwMDQ0WhcNMjYwMzI2MTgwMDQ0WjAzMTEwLwYDVQQD Eyg0OGY5NjBiYTJhNjY5ZGFmNzkxYWY4OWVmNTMyMDQxZjdmMzY0Y2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N5EDVnyS+Wt23qVC5ReL9GCk1bS WYkv1s0oeYHpwwfl3gdMuvWswAuHGT+fiKeuYoaQuYR325h9cwQV+/pDvPXtDuob 2wUGhOCbjWfJVej2xZtXdF0ccYUfGZthEpx/fl+wisr+ek0Hj/l11pFg1nQ0tlZz Djo7MyGvm25EJfvixbNwbMktgjSFDjdm1VTL7TH7rsXaPeBxXlnNrn+hWeOhfRd6 40LDV26huapm9jDJ2QrX1ftwXWq6CnU6QU+IlgGo1pnXMqIAfMC815yqM/pfgdyD 6UT1I69uCpG+NmHTH+eCl+iYwF5XZ23D4zhZ8Ib3DutOyo95QNPcCiXvuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEj5YLoqZp2veRr4nvUyBB9/NkzLMB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNZEjCoz St4aqH9Ue+qnuqkcDGkebCUtcL6DUEpk8MYaEI/UYoY4fzDwSdEU8IHNRcczxMld TUs1MKJkg0BqQiZUAKbiuz9/lqI9Ei+YGSqtRqmIexPDXXOmMoxOscqPSwMt5qLm IRDoN7niIo0GL8C7ib14K5ARaNzJUEuMh8B9To9tHu/73hN4Dtw5CU9x0wxArVQL PH6Xgqxc8uiv5ItwrdPF9/wS5QoJQPX32ZR5aVD5SiHQp/8Y60OFt8Ru7xjpH9gX 6Rnyixmxe51TpNETwE12tgM/ItXv6oChFopY8RB9XNG9rgR70Gk3DAtRaXEnG74K NaWfrxD1CkjQBQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:14:54 2026 by rpki-client