$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: hF8kqo6FTM7r+k9MY1A2OTXNCDCEu0JCzmOhr+Aeu2Q= Subject key identifier: 42:3B:66:B8:F9:2A:0B:53:36:FA:69:EE:B7:B2:CC:9A:C1:C5:24:31 Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 019D262832CB5A4FA9F6F552D14281805C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 15BC Signing time: Wed 25 Mar 2026 18:01:01 +0000 Manifest this update: Wed 25 Mar 2026 18:01:01 +0000 Manifest next update: Thu 26 Mar 2026 18:01:01 +0000 Files and hashes: 1: 0BfNXiDldo_liimaTypuMTcMOSA.roa (hash: qvgGIW8CiOWBIcpNa0moqJ+GSYLQ2vJbJF4fgORjC18=) 2: 0vetEjyw1WQWmCXUTx8290wF-5A.roa (hash: MRRpw2B7+36LyQgMqkGBs8Q1n0WozbWhLmzocDU6qn0=) 3: 1nhxPQG32vcSIjQSneD3Rx0UPrY.roa (hash: 7bTW2ORci72OzWYoeWMSPEDiNsHnos2acJbGJlZR0To=) 4: 2aBOuFf59wEBwbLziedpbp6FKYk.roa (hash: ZSpI5dlzWjQXy3Cna9NEiVVPFJtukMRorD24Z+VlJdk=) 5: 5ThevNNgZHzDF50h6krEfv1b2To.roa (hash: CbU07lcvi4HJ1brlMc0otrEIMctgZ4JB+I2bCfPEqZk=) 6: HdjsvuGngyQVaPI5fw1lo5MVCyY.roa (hash: 0CGNcQROu66TMRCGsRz+KuSUMZeH1aS1RfY+HTTw7Bg=) 7: MqZHWBmMNelEjKHD9rL777ZFFPQ.roa (hash: JT8l5waJdgBD+v5IZbCIxziinVIIlhSs3+boP+bJ1mw=) 8: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: phoWmfsaoe/6t6G2ygueHffOq+bxcK2LVJHn4hYj+1I=) 9: a_MXwN7MuegnVCIAkZ6clu1iX4o.roa (hash: 8VPNVVCKyMOejDUVqp4xHvLzU1vxgcPn/f9Z8nB1/Bk=) 10: jVIXwWQgWKZwGuSur5EA3NGOqW0.roa (hash: TF50UjRhC15wTuIUutY/LAyF28bPXMS3BlWJSGn8Kts=) 11: qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa (hash: ohCD8OmMg+2pYrzqMLQR/f066MDBc9Qpw07iNGnx7cY=) 12: uTfCplkKF4NNKr9z0oAQOp5Z6bQ.roa (hash: lIrYsFTfLPn7qzWjWmqg9roRmjTFishbKowqgCzglJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:28:32:cb:5a:4f:a9:f6:f5:52:d1:42:81:80:5c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Mar 25 18:01:01 2026 GMT Not After : Mar 26 18:01:01 2026 GMT Subject: CN=423b66b8f92a0b5336fa69eeb7b2cc9ac1c52431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:20:da:d0:17:fd:76:28:19:15:4b:15:1e: dc:3f:10:ff:43:30:b3:34:9b:18:c5:37:ce:a3:a4: d0:74:d9:19:2a:32:c3:6b:ee:53:b5:29:a2:bc:1f: d0:a3:a0:58:1c:c1:dc:69:c6:0b:51:7c:8c:23:f0: c2:7f:a5:ce:c1:2f:f1:69:24:7f:04:85:d3:e2:34: 86:b3:84:fb:ee:44:48:b2:e3:83:b6:79:f9:9e:61: 81:61:4a:e1:84:1a:b3:a8:d1:54:5c:52:3d:5a:e7: f0:3b:87:b3:25:16:94:ca:2b:c8:56:ab:b6:85:c2: 52:f1:55:c7:21:1f:cf:ca:4b:a9:40:71:11:cb:12: a8:d7:4c:d1:25:90:2a:1a:1b:1a:43:53:7a:a7:99: 8e:ac:3e:c1:95:02:e0:99:f1:bb:ce:1d:95:00:dd: 88:2b:d5:6b:b6:22:c6:47:b0:e5:5e:2d:b8:1d:cd: 8a:55:3d:36:58:17:e5:94:98:be:16:99:1f:08:e9: 2e:5b:cf:98:7c:86:95:a5:c3:8c:8b:ed:8f:1d:9f: 33:5c:53:09:14:33:e2:3d:f1:03:a9:36:c2:ca:c6: de:1d:a6:e8:31:41:8f:cc:c5:09:e4:3f:46:b2:a4: 28:37:59:6d:86:42:06:10:cc:98:c0:c2:2c:36:0a: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3B:66:B8:F9:2A:0B:53:36:FA:69:EE:B7:B2:CC:9A:C1:C5:24:31 X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:93:5d:a0:bc:db:65:88:5e:90:c2:c1:7d:e9:8d:32:b5:14: c9:b4:27:ea:ad:15:3c:b5:fd:d6:46:d0:4e:1e:18:02:95:06: ef:a6:80:9d:30:ef:1d:df:7b:aa:db:73:54:0d:5c:c1:5a:a2: 6d:92:11:46:74:8f:16:0b:5c:c0:eb:23:4c:6c:cb:f9:a6:d3: db:f2:90:6b:aa:19:0a:07:e9:99:13:73:ce:a6:c0:e1:a4:38: 2e:ae:1c:1e:f8:11:d3:61:37:9f:d7:b0:46:d4:6f:7d:da:54: 31:0a:6e:73:65:a2:ee:3d:65:23:46:7b:15:d1:d2:49:be:f7: f8:bb:d7:fc:28:75:55:a3:89:28:c6:32:8d:c0:d8:77:51:7f: 21:fa:31:43:be:4a:cf:1a:0c:d3:7d:7b:fa:44:d3:0d:b8:b2: c5:ab:18:68:cf:2c:36:f2:bb:63:b8:2f:24:a0:76:87:a5:4f: 48:4f:54:38:2f:fb:05:2b:91:87:e8:1f:dd:28:bd:62:40:80: 60:4f:e8:f6:87:de:9d:6b:79:f9:ea:04:82:4d:7e:d2:28:ea: 97:eb:f0:2a:53:6b:e4:52:cd:98:cb:8c:a7:e7:15:8c:2e:0a: 32:3c:76:0a:77:a7:42:49:17:cc:5f:fa:1c:a2:4b:84:e5:c6: 0e:38:5a:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mKDLLWk+p9vVS0UKBgFyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjYwMzI1MTgwMTAxWhcNMjYwMzI2MTgwMTAxWjAzMTEwLwYDVQQD Eyg0MjNiNjZiOGY5MmEwYjUzMzZmYTY5ZWViN2IyY2M5YWMxYzUyNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0og2tAX/XYoGRVLFR7cPxD/QzCz NJsYxTfOo6TQdNkZKjLDa+5TtSmivB/Qo6BYHMHcacYLUXyMI/DCf6XOwS/xaSR/ BIXT4jSGs4T77kRIsuODtnn5nmGBYUrhhBqzqNFUXFI9WufwO4ezJRaUyivIVqu2 hcJS8VXHIR/PykupQHERyxKo10zRJZAqGhsaQ1N6p5mOrD7BlQLgmfG7zh2VAN2I K9VrtiLGR7DlXi24Hc2KVT02WBfllJi+FpkfCOkuW8+YfIaVpcOMi+2PHZ8zXFMJ FDPiPfEDqTbCysbeHaboMUGPzMUJ5D9GsqQoN1lthkIGEMyYwMIsNgpdFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI7Zrj5KgtTNvpp7reyzJrBxSQxMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApNdoLzb ZYhekMLBfemNMrUUybQn6q0VPLX91kbQTh4YApUG76aAnTDvHd97qttzVA1cwVqi bZIRRnSPFgtcwOsjTGzL+abT2/KQa6oZCgfpmRNzzqbA4aQ4Lq4cHvgR02E3n9ew RtRvfdpUMQpuc2Wi7j1lI0Z7FdHSSb73+LvX/Ch1VaOJKMYyjcDYd1F/IfoxQ75K zxoM0317+kTTDbiyxasYaM8sNvK7Y7gvJKB2h6VPSE9UOC/7BSuRh+gf3Si9YkCA YE/o9ofenWt5+eoEgk1+0ijql+vwKlNr5FLNmMuMp+cVjC4KMjx2CnenQkkXzF/6 HKJLhOXGDjhaaQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:36:15 2026 by rpki-client