$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft File: zRMnjr9PSbQk-9SpxwB9J0du0wc.mft (raw, json) Hash identifier: rURWlrhoxSCgj56+rjnq0UPZrWH27XOQqqMX2bUILdM= Subject key identifier: 6B:0D:12:D2:9F:7B:E7:68:8C:A0:05:6D:47:63:3B:7D:31:FD:7E:8D Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Certificate serial: 01A0D98372539842B419779F24815BC963BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft Manifest number: ED Signing time: Fri 25 Sep 2026 17:01:05 +0000 Manifest this update: Fri 25 Sep 2026 17:01:05 +0000 Manifest next update: Sat 26 Sep 2026 17:01:05 +0000 Files and hashes: 1: 04r64BSfgd-5PgS5nj1HGaTj520.roa (hash: 9SQdIG786baBma7juCvYz1sYWzVfuKVeNspaB2HD5EY=) 2: 15fjy2AkOpBg_9vyM78z1akZIPk.roa (hash: bIlJ1psO6s3xZ1h3VhKbLXUCKK0nIMnTG5BVdZTHZv0=) 3: 1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa (hash: ZakCFcLNqaNCY/gWYoldNivincMH7px+JGQWSfeB/TQ=) 4: EDXcPCi28Qle9HGNvN1QUdaHRvk.roa (hash: DveWNs2wF7FORVxq4TmksxbQzy1QmZcV0OFUQhAfNgk=) 5: GoLAkvzsvB7zQDm_UIY2Yd-30Ck.roa (hash: bHM9/hEE2Yt9AtCFKUObnNhRfqUs2TKz2K8Vkkf2E90=) 6: NwxeeQ6vWLNv6_56WeekWnnIs9Q.roa (hash: 9SKp96P9zUqo/VKiBAf/OZS4gFdHPgagZHjvDhYmLNs=) 7: PG_mj7isjB910_5qft90gpkrSFw.roa (hash: Bnsv31XpCbZ6YlZT0KCPGtgHY8X949Ui1tJL10JOEO4=) 8: P_bdTkV7IZuzOClv_6ZvyP43Uho.roa (hash: lNcsKv1+gV/lLgtE9ucNZ9+OmqR8K2Sir1xcm0vQFHw=) 9: P_bsl56DtaIF1lt9rp-k5VLQWvY.roa (hash: c6m/3V7o5WSGGv1khR9dZE4zuxjrXjOt9iPFZZshU40=) 10: SuMlhQ-HB-UaOsy8czwHQqmRnqU.roa (hash: vr52aTXoFenQGQFoUChoI3VkTqBxutI1h8R96i3qxIo=) 11: dI4l3rVA1R2d9GEeOfxuH0__cjM.roa (hash: e/9rIsyNOvq2ikL7IWZjBodce5+tbnftj5+dpPekOpI=) 12: dQdXBh5qhRJrah76vMAURqhRRLA.roa (hash: u4zDNbiSFsql+JVohw4Hy2g3ZEQiG+Bl7RoGzgjhNiM=) 13: iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa (hash: aUgkab/Sy+ZB9wWqa8R/ZDM6rtQ1FrjWvsIE5FIMj3E=) 14: v3R0DtJMPZhzlajIduzXFhZoO_E.roa (hash: Sl285/xqAo03/LCxxgIVKjlExnIU20Jr5a1QIY+kGH0=) 15: yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa (hash: Nm0h82jqL4Nvgoi4mPrldwTgDk33jTBjxspRQ87cyk0=) 16: zRMnjr9PSbQk-9SpxwB9J0du0wc.crl (hash: DTSjxbDf+r3ny4r0megegiOCQvrMild6YDrQhqWS/00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d9:83:72:53:98:42:b4:19:77:9f:24:81:5b:c9:63:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Validity Not Before: Sep 25 17:01:05 2026 GMT Not After : Sep 26 17:01:05 2026 GMT Subject: CN=6b0d12d29f7be7688ca0056d47633b7d31fd7e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:b1:bc:f8:9e:e9:2a:58:b8:52:a4:65:98: 18:ad:60:4b:ad:2b:dc:1f:8d:e5:22:a6:3b:6f:fb: 4f:d4:23:10:8e:ee:6c:92:ae:74:c8:8f:34:f8:0d: bd:34:f2:c5:50:b3:af:84:2c:6a:53:ab:f5:bc:eb: 94:30:0a:c4:66:1b:06:46:0a:96:07:67:67:df:55: 2f:d3:56:ec:4e:74:e6:1a:3c:0b:c2:9a:b5:30:fe: 6e:70:f7:5d:24:cb:b1:da:8a:ef:73:41:f3:2a:41: 95:e1:57:aa:73:85:de:0c:fa:53:62:2b:79:9c:08: 77:6b:64:a6:b7:5a:ca:1f:12:a8:40:67:05:fb:0a: 28:54:9c:a8:c8:5a:3c:3f:e2:98:01:cc:0e:c9:db: 29:78:34:27:18:05:64:d0:02:79:60:66:9b:28:15: f0:47:ce:f1:cc:25:91:0f:78:d8:71:33:46:14:5a: 31:e7:44:53:db:5c:a4:86:ff:5b:2a:86:67:4a:ae: e3:80:02:be:62:c0:74:52:18:10:ae:c6:d8:b8:6c: f6:4d:bd:9a:d2:84:59:62:69:0e:9b:ec:5d:6d:a7: 5b:59:ed:c4:68:77:03:96:d1:13:be:42:16:70:67: bd:75:94:c4:d1:c1:96:5a:94:0d:fb:1f:81:2d:c8: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0D:12:D2:9F:7B:E7:68:8C:A0:05:6D:47:63:3B:7D:31:FD:7E:8D X509v3 Authority Key Identifier: keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:89:8e:2a:91:f8:34:0f:56:c4:db:03:e2:4d:ad:cd:96:ff: 9b:82:f9:08:e6:8f:ac:d9:e2:8c:b4:d6:e0:14:ec:30:d9:77: b7:b4:7d:51:9b:8b:14:53:cb:07:e3:1f:ca:48:b7:29:04:12: 1d:bf:5d:3a:39:af:e7:0e:7d:df:b2:47:bd:46:5f:99:e8:8a: 6b:11:66:24:46:2c:65:f7:31:8f:66:c1:73:67:76:49:cf:52: 76:c2:0c:2e:b5:42:e8:4e:05:bd:78:98:63:a0:45:0c:dc:cb: e7:1b:15:13:7a:50:18:cb:2f:c3:62:11:4b:7f:83:e6:c0:9f: bb:99:b4:61:32:20:f3:8f:45:19:00:f1:e1:da:40:9b:84:32: 59:77:22:5b:24:bc:d5:96:f4:17:30:ff:1f:a7:c6:32:94:f0: 54:d9:3a:26:fe:64:25:6b:a9:18:65:2f:f6:0d:63:86:ad:3f: 83:2d:0f:63:23:81:1a:e6:20:7e:54:e6:a5:d9:a8:20:62:15: 76:59:f9:9d:98:11:11:cb:0b:9c:09:4a:1f:94:22:32:8b:28: 08:25:5c:05:32:21:a9:c9:32:67:f5:52:83:7c:b9:e7:93:d0: f4:cc:b6:9c:b7:4e:a2:27:47:f1:6f:03:06:af:0f:76:7d:9d: 29:13:53:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDZg3JTmEK0GXefJIFbyWO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTMyNzhlYmY0ZjQ5YjQyNGZiZDRhOWM3MDA3ZDI3NDc2 ZWQzMDcwHhcNMjYwOTI1MTcwMTA1WhcNMjYwOTI2MTcwMTA1WjAzMTEwLwYDVQQD Eyg2YjBkMTJkMjlmN2JlNzY4OGNhMDA1NmQ0NzYzM2I3ZDMxZmQ3ZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwKxvPie6SpYuFKkZZgYrWBLrSvc H43lIqY7b/tP1CMQju5skq50yI80+A29NPLFULOvhCxqU6v1vOuUMArEZhsGRgqW B2dn31Uv01bsTnTmGjwLwpq1MP5ucPddJMux2orvc0HzKkGV4Veqc4XeDPpTYit5 nAh3a2Smt1rKHxKoQGcF+wooVJyoyFo8P+KYAcwOydspeDQnGAVk0AJ5YGabKBXw R87xzCWRD3jYcTNGFFox50RT21ykhv9bKoZnSq7jgAK+YsB0UhgQrsbYuGz2Tb2a 0oRZYmkOm+xdbadbWe3EaHcDltETvkIWcGe9dZTE0cGWWpQN+x+BLchtrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsNEtKfe+dojKAFbUdjO30x/X6NMB8GA1UdIwQY MBaAFM0TJ46/T0m0JPvUqccAfSdHbtMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4mOKpH4 NA9WxNsD4k2tzZb/m4L5COaPrNnijLTW4BTsMNl3t7R9UZuLFFPLB+Mfyki3KQQS Hb9dOjmv5w5937JHvUZfmeiKaxFmJEYsZfcxj2bBc2d2Sc9SdsIMLrVC6E4FvXiY Y6BFDNzL5xsVE3pQGMsvw2IRS3+D5sCfu5m0YTIg849FGQDx4dpAm4QyWXciWyS8 1Zb0FzD/H6fGMpTwVNk6Jv5kJWupGGUv9g1jhq0/gy0PYyOBGuYgflTmpdmoIGIV dln5nZgREcsLnAlKH5QiMosoCCVcBTIhqckyZ/VSg3y555PQ9My2nLdOoidH8W8D Bq8Pdn2dKRNTNw== -----END CERTIFICATE-----Generated at Fri Sep 25 21:48:06 2026 by rpki-client