$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: Zv4DBfuotaM83p1WEJsS7mlTo1EQFokoxcHw6whkHfY= Subject key identifier: 74:C8:E3:05:D9:42:AA:AB:A8:36:E5:88:A5:A8:4B:46:FD:D2:0A:C9 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 01A0D5024FD7461F809F01E7941C375B7376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 1A37 Signing time: Thu 24 Sep 2026 20:01:33 +0000 Manifest this update: Thu 24 Sep 2026 20:01:33 +0000 Manifest next update: Fri 25 Sep 2026 20:01:33 +0000 Files and hashes: 1: 0Co-4aPRt1mKhrjgNM3WUZdgXoI.asa (hash: OeNQYBhoPfaKZ8nvkbEq0E8aoRp5VdVHMz/gxZSMaaM=) 2: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 3: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: rq5OxmpjD9jHraYOIHeMKj2JkAQWFZQmG2h1ki1QYwc=) 11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) 12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 20:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:02:4f:d7:46:1f:80:9f:01:e7:94:1c:37:5b:73:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Sep 24 20:01:33 2026 GMT Not After : Sep 25 20:01:33 2026 GMT Subject: CN=74c8e305d942aaaba836e588a5a84b46fdd20ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:cf:85:03:dd:ca:f1:ae:3c:bd:ed:e5:f0: 7a:f8:09:c4:e3:2d:3c:bd:21:24:fe:c2:13:a7:34: 13:da:18:df:85:60:47:c5:7d:a2:e4:91:e3:a2:04: fb:72:3c:a8:d2:39:9c:14:d1:d2:3c:01:0a:83:81: 60:b7:4a:5f:2c:80:f0:32:ac:50:d3:9f:45:78:16: a2:08:b7:17:33:4f:4d:c6:16:05:0a:29:53:f5:1d: a6:14:37:94:fa:1d:38:95:12:3d:e6:eb:31:ba:65: 5d:2c:71:3e:e0:2d:5b:bd:2d:94:0b:c1:84:01:9a: 65:86:d5:01:b6:4c:62:2a:65:6c:76:a7:77:a2:9d: 54:96:6a:f8:58:3c:ae:6b:79:24:92:1a:8d:69:46: f5:99:dc:04:07:a1:db:34:bc:32:05:29:f5:e4:0c: 64:a6:34:2d:b1:02:e7:23:bf:0f:c7:23:69:26:c1: 92:46:82:19:b6:9d:ea:4b:b6:13:c7:da:c6:c6:61: d2:d5:b6:74:32:da:90:c7:7a:9e:86:da:91:37:9c: cc:59:25:4e:ea:b6:65:c1:4e:0b:f5:da:7c:b6:e0: 95:fa:e2:77:63:d2:c7:c1:a4:61:d6:59:ce:81:28: 7a:0d:99:b2:bb:7e:24:b5:74:ea:bc:0f:e5:73:ca: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C8:E3:05:D9:42:AA:AB:A8:36:E5:88:A5:A8:4B:46:FD:D2:0A:C9 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:32:fd:16:b4:29:fc:69:6c:31:c8:7c:09:20:fe:30:5d:78: 1c:98:2f:6f:68:fa:c9:7f:80:ac:b5:84:04:d0:c2:ca:1a:20: 54:5d:fd:08:54:dc:af:9b:c4:9f:21:4b:51:30:f4:10:07:1f: 73:f1:2c:1e:a3:36:b0:53:7c:65:03:e5:f2:04:53:a2:8d:79: c9:ed:f5:b5:30:65:77:c1:97:c5:38:b2:d9:05:9f:03:d3:ae: 1b:88:d0:4a:9c:8f:dd:13:a2:c8:79:62:90:fb:9f:39:06:32: 31:a0:c2:90:c6:f4:cf:b4:93:30:b8:ca:45:f5:5f:b2:01:99: b0:42:99:a5:61:f6:fc:fa:ac:1c:55:60:21:8f:96:62:e7:e1: 21:58:87:e3:46:b5:4e:54:f1:cd:0f:a4:93:23:ba:ab:2a:5c: 79:a1:f6:e9:80:4a:97:12:18:8a:88:28:a0:1d:13:fd:c7:9b: 20:58:14:c9:f3:25:74:d1:ca:4c:40:01:f2:54:c5:20:10:a7: 11:8f:91:66:5f:95:30:29:c6:a5:b5:b3:49:d0:5f:84:17:81: 3f:91:55:0e:95:2a:03:e2:1d:08:5a:b4:85:fb:39:f5:96:54: f9:51:5c:bb:c0:fb:22:59:e4:a0:5a:dd:98:1c:07:75:b9:54: 71:48:b0:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVAk/XRh+AnwHnlBw3W3N2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwOTI0MjAwMTMzWhcNMjYwOTI1MjAwMTMzWjAzMTEwLwYDVQQD Eyg3NGM4ZTMwNWQ5NDJhYWFiYTgzNmU1ODhhNWE4NGI0NmZkZDIwYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUrPhQPdyvGuPL3t5fB6+AnE4y08 vSEk/sITpzQT2hjfhWBHxX2i5JHjogT7cjyo0jmcFNHSPAEKg4Fgt0pfLIDwMqxQ 059FeBaiCLcXM09NxhYFCilT9R2mFDeU+h04lRI95usxumVdLHE+4C1bvS2UC8GE AZplhtUBtkxiKmVsdqd3op1Ulmr4WDyua3kkkhqNaUb1mdwEB6HbNLwyBSn15Axk pjQtsQLnI78PxyNpJsGSRoIZtp3qS7YTx9rGxmHS1bZ0MtqQx3qehtqRN5zMWSVO 6rZlwU4L9dp8tuCV+uJ3Y9LHwaRh1lnOgSh6DZmyu34ktXTqvA/lc8qmGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTI4wXZQqqrqDbliKWoS0b90grJMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjL9FrQp /GlsMch8CSD+MF14HJgvb2j6yX+ArLWEBNDCyhogVF39CFTcr5vEnyFLUTD0EAcf c/EsHqM2sFN8ZQPl8gRToo15ye31tTBld8GXxTiy2QWfA9OuG4jQSpyP3ROiyHli kPufOQYyMaDCkMb0z7STMLjKRfVfsgGZsEKZpWH2/PqsHFVgIY+WYufhIViH40a1 TlTxzQ+kkyO6qypceaH26YBKlxIYiogooB0T/cebIFgUyfMldNHKTEAB8lTFIBCn EY+RZl+VMCnGpbWzSdBfhBeBP5FVDpUqA+IdCFq0hfs59ZZU+VFcu8D7IlnkoFrd mBwHdblUcUiwxQ== -----END CERTIFICATE-----Generated at Fri Sep 25 03:53:04 2026 by rpki-client