$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: YsfxhJso68FhiV2d+zSxv4tcq981cbBMAfG2o9z442Q= Subject key identifier: 25:53:46:D8:3C:90:FD:85:5C:C6:C9:F4:C1:8B:4E:B9:BC:5C:DD:AD Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 01A0DCBBD637B3D84E9D5885A744E7DC8EAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 1A3B Signing time: Sat 26 Sep 2026 08:01:32 +0000 Manifest this update: Sat 26 Sep 2026 08:01:32 +0000 Manifest next update: Sun 27 Sep 2026 08:01:32 +0000 Files and hashes: 1: 0Co-4aPRt1mKhrjgNM3WUZdgXoI.asa (hash: OeNQYBhoPfaKZ8nvkbEq0E8aoRp5VdVHMz/gxZSMaaM=) 2: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 3: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: bV/LlXX6F5W54RFcIQN6TuwANSqtdipIP7dNHOghojo=) 11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) 12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 08:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dc:bb:d6:37:b3:d8:4e:9d:58:85:a7:44:e7:dc:8e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Sep 26 08:01:32 2026 GMT Not After : Sep 27 08:01:32 2026 GMT Subject: CN=255346d83c90fd855cc6c9f4c18b4eb9bc5cddad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:57:de:ff:f3:8b:10:d3:7d:0a:5e:51:b7: c7:ff:6c:6d:42:47:83:c9:d0:2c:2b:7d:75:07:33: 26:28:f6:1a:34:7a:cb:60:ca:d5:a7:b4:53:7e:cf: 67:b9:02:32:c5:77:f9:50:51:55:c5:a1:8d:06:e2: b9:89:4c:d2:da:df:ed:fc:78:e8:87:39:56:98:54: 8c:4a:1c:52:1e:fc:d2:87:45:05:37:ee:f2:52:2e: ea:e6:dd:58:ba:b3:d4:9c:a1:c8:12:7a:c6:6d:af: 79:4b:a7:43:c5:ac:09:c1:cc:ba:59:af:f1:bc:96: 89:9c:69:ff:de:d3:9c:cb:9f:b2:eb:91:07:06:e6: 9f:0c:ec:4b:4e:44:16:7d:91:6b:59:2e:a5:86:7d: 7b:9d:47:20:da:80:91:44:81:69:04:17:08:e0:b9: 0e:31:39:81:54:c2:cc:d2:85:ba:ed:6f:04:59:66: b2:db:c3:cc:92:db:64:8a:f7:f0:1a:41:42:55:99: ab:bf:82:25:b1:2a:67:f9:cb:b9:0d:31:47:02:e5: 90:c0:6e:28:d1:cf:95:3a:e8:c8:ce:d5:68:c0:c2: 62:5e:69:c2:74:d9:f4:11:1c:a4:0a:36:51:c4:d9: b9:9e:26:09:a6:c1:89:32:22:12:c9:39:05:52:ed: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:53:46:D8:3C:90:FD:85:5C:C6:C9:F4:C1:8B:4E:B9:BC:5C:DD:AD X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:96:08:01:ad:19:5b:35:9e:d0:e1:6a:e9:ba:36:8d:72:49: 9b:55:5b:84:35:1e:85:0e:36:50:11:c3:37:f1:1b:42:2c:d5: d0:c9:62:95:ac:6d:0f:79:48:2f:71:20:ac:5d:24:fa:cf:45: f6:0d:ac:95:af:23:73:44:02:c3:42:9b:98:91:00:63:83:c4: 61:c8:81:3c:8e:ef:29:b6:4e:ed:b6:e6:18:7d:4b:76:32:31: f8:a3:f8:b1:81:7c:94:ee:88:43:92:7c:e6:33:64:e3:45:d0: d3:b6:e1:1b:5c:50:16:c2:a6:2a:13:49:2e:bd:7b:e7:d4:c0: 67:6b:f1:c9:89:51:aa:55:7d:fe:f5:bd:17:c5:20:45:77:1f: bf:6d:20:01:88:7c:09:47:43:3a:68:df:9c:a5:bc:0a:21:d8: 7f:54:95:69:8e:03:d4:fe:83:a4:56:2e:da:bf:01:c0:6c:74: b2:68:b2:87:13:dd:c2:41:e9:6c:b7:bb:35:4a:60:7a:43:e7: 8c:22:f2:80:a6:93:c4:85:88:94:c5:51:b8:41:64:5b:69:e3: 6c:54:ee:7d:fb:1d:0f:6d:e9:92:ce:aa:8d:0d:23:8b:3d:e0: 52:f8:55:37:bd:b3:16:e0:cc:36:db:f7:4c:58:2c:46:47:d0: 27:1e:34:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDcu9Y3s9hOnViFp0Tn3I6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwOTI2MDgwMTMyWhcNMjYwOTI3MDgwMTMyWjAzMTEwLwYDVQQD EygyNTUzNDZkODNjOTBmZDg1NWNjNmM5ZjRjMThiNGViOWJjNWNkZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zRX3v/zixDTfQpeUbfH/2xtQkeD ydAsK311BzMmKPYaNHrLYMrVp7RTfs9nuQIyxXf5UFFVxaGNBuK5iUzS2t/t/Hjo hzlWmFSMShxSHvzSh0UFN+7yUi7q5t1YurPUnKHIEnrGba95S6dDxawJwcy6Wa/x vJaJnGn/3tOcy5+y65EHBuafDOxLTkQWfZFrWS6lhn17nUcg2oCRRIFpBBcI4LkO MTmBVMLM0oW67W8EWWay28PMkttkivfwGkFCVZmrv4IlsSpn+cu5DTFHAuWQwG4o 0c+VOujIztVowMJiXmnCdNn0ERykCjZRxNm5niYJpsGJMiISyTkFUu0TOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVTRtg8kP2FXMbJ9MGLTrm8XN2tMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpYIAa0Z WzWe0OFq6bo2jXJJm1VbhDUehQ42UBHDN/EbQizV0MlilaxtD3lIL3EgrF0k+s9F 9g2sla8jc0QCw0KbmJEAY4PEYciBPI7vKbZO7bbmGH1LdjIx+KP4sYF8lO6IQ5J8 5jNk40XQ07bhG1xQFsKmKhNJLr1759TAZ2vxyYlRqlV9/vW9F8UgRXcfv20gAYh8 CUdDOmjfnKW8CiHYf1SVaY4D1P6DpFYu2r8BwGx0smiyhxPdwkHpbLe7NUpgekPn jCLygKaTxIWIlMVRuEFkW2njbFTuffsdD23pks6qjQ0jiz3gUvhVN72zFuDMNtv3 TFgsRkfQJx40lw== -----END CERTIFICATE-----Generated at Sat Sep 26 20:56:35 2026 by rpki-client