$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json) Hash identifier: Y5DaVKThitHVfQONETka9hfLIfZmSt5HuW60fGc6v04= Subject key identifier: B1:3D:2B:4D:E1:67:2A:DA:43:25:72:8E:48:4B:AB:27:E5:6C:BE:0C Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 01A0D2105EB8978C5D95F51FD3A1CF3DC85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft Manifest number: 0D2C Signing time: Thu 24 Sep 2026 06:18:03 +0000 Manifest this update: Thu 24 Sep 2026 06:18:03 +0000 Manifest next update: Fri 25 Sep 2026 06:18:03 +0000 Files and hashes: 1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=) 2: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=) 3: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=) 4: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=) 5: 98oECme-w_GgSaFmZh37RLhYD9g.roa (hash: iPDzJ3v3jfejnPGzBAdLpmHo920TlkgN96SVjOqNj5w=) 6: B4ObdB5-uV4pLu6x9dcbkFq2GrI.roa (hash: wSwh8QpiS5FR1lWM/wQRbFfUYho9vYOx2FceddMQvps=) 7: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=) 8: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=) 9: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=) 10: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (hash: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=) 11: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=) 12: SqdW3wEJdQI6pSiu6sKuLSekouM.roa (hash: rTImG/VwG887tYh4ok8g2ubTFK65bX66Ir6rONB+lXc=) 13: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=) 14: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=) 15: XRbYp6FDnp1AtNuZXLrfLub5nuc.roa (hash: SgUgHK8CB2wAUJD4MixZKl+/Cz+SEY/Xajfx5TX1zsA=) 16: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=) 17: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=) 18: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: QGUX4bMayKAqvmLpnbtosI+IYcrh1AL8KlZ7o5yQO/Y=) 19: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=) 20: eEYECPuTAMSxPzkjToe-AsGHG0o.roa (hash: qvifZPjdOwY78+6g7aEHucIxOME1hkTUXil2N+iv3W0=) 21: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=) 22: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=) 23: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=) 24: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=) 25: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=) 26: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=) 27: rOXM7w2Bi2wjKDx3UdCCEn_XoNc.roa (hash: jO75JoginvMuRlRlIbd+oIuJpNIVudUke0+lCckHlKk=) 28: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=) 29: urz4_AKUeHVYjJAJbjRXtg7l6R0.roa (hash: Lc5cV4YVr/KMErRPjabqXug9W3uT5uCRR+WjWueC5dU=) 30: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=) 31: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (hash: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=) 32: zrPBo584QAwD8wD1UiOiivzG-lY.roa (hash: AG1/xkS8rTZ2sL8uSI3tuRloFXAbUoEivjF0J/Yra5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 06:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:10:5e:b8:97:8c:5d:95:f5:1f:d3:a1:cf:3d:c8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Sep 24 06:18:03 2026 GMT Not After : Sep 25 06:18:03 2026 GMT Subject: CN=b13d2b4de1672ada4325728e484bab27e56cbe0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:cc:3f:92:e3:3e:34:b9:9b:5e:24:b2:40: 32:d5:e6:56:5e:01:86:19:fd:ce:93:9a:51:22:67: 04:9d:b0:35:0c:ef:4e:62:37:4c:51:1b:9b:f0:5b: ba:91:f7:c6:cb:fc:cf:9f:57:e7:de:8d:30:73:4a: dc:b3:e0:04:c3:13:e8:11:e9:ca:29:aa:9d:5c:95: dd:51:89:ec:dd:a6:c1:8a:83:10:27:0a:07:38:c5: 1b:11:e5:50:b0:76:96:c2:d7:9c:78:e4:81:26:55: ca:29:2a:47:9b:0a:50:c5:9e:da:ae:c4:ce:39:f0: 41:87:98:93:eb:99:b8:83:bf:aa:a8:8e:29:d7:49: be:1d:ab:7e:9e:47:ba:8d:ac:4a:50:8b:d4:19:30: b1:46:7e:64:3a:45:f6:12:12:13:69:0f:37:a5:fd: 5b:72:83:5b:df:d1:02:84:14:e0:c5:f2:2d:5d:d7: 49:0a:07:3a:72:83:8c:2b:55:b5:66:a6:97:bd:c5: 8d:29:b3:d7:c7:9a:b0:e9:f3:72:2c:67:9f:55:da: 9c:e4:81:b5:7c:ed:21:ee:98:0d:da:32:c5:11:8e: 09:b4:ee:33:81:bc:17:d9:7c:07:04:1d:58:c7:13: ea:0a:9e:8b:1d:8f:64:36:f6:53:23:55:d1:a3:36: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3D:2B:4D:E1:67:2A:DA:43:25:72:8E:48:4B:AB:27:E5:6C:BE:0C X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1c:c0:11:2d:dc:99:5a:13:89:6c:49:91:e6:55:12:b1:bf: d1:49:10:1a:d9:e6:8b:9c:8e:c5:57:5c:91:42:51:60:36:4e: c8:0b:c2:8b:7a:0e:6a:2e:4e:70:d6:c9:b9:f5:42:1f:5e:1d: 50:61:c0:2a:b1:dc:50:c5:20:af:45:25:79:7f:b4:a0:64:40: 36:61:a5:5c:d4:63:52:41:df:0e:df:85:36:fc:2d:45:fa:ef: 74:49:98:0d:97:fe:00:00:f0:5d:02:96:ca:5c:69:3f:f0:c5: b5:99:69:d6:e6:fc:b5:9b:1e:23:0a:59:98:5d:40:d4:96:64: 4a:ba:9a:42:30:30:e2:87:cf:d2:8e:bd:6f:0f:a0:02:1b:2f: 16:c2:40:15:f7:67:17:e9:0c:8c:15:7f:31:d7:a9:21:8e:94: 51:2f:de:8c:2a:5b:db:5a:f1:85:5d:d7:b0:7b:9c:ec:df:0e: 9c:72:7c:e3:e4:67:12:fd:57:9f:88:c6:85:de:c3:06:25:67: 54:d0:20:9d:ca:17:2e:7d:67:0c:24:18:12:94:b4:fe:ae:4b: b6:3d:aa:2b:6f:28:08:6a:0e:cd:bb:f2:a2:5e:3c:66:da:fa: 37:28:5d:a5:13:52:c5:81:9b:86:1e:5b:d7:e9:c6:6c:3e:e6: 29:b3:74:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSEF64l4xdlfUf06HPPchdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwOTI0MDYxODAzWhcNMjYwOTI1MDYxODAzWjAzMTEwLwYDVQQD EyhiMTNkMmI0ZGUxNjcyYWRhNDMyNTcyOGU0ODRiYWIyN2U1NmNiZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfzMP5LjPjS5m14kskAy1eZWXgGG Gf3Ok5pRImcEnbA1DO9OYjdMURub8Fu6kffGy/zPn1fn3o0wc0rcs+AEwxPoEenK KaqdXJXdUYns3abBioMQJwoHOMUbEeVQsHaWwteceOSBJlXKKSpHmwpQxZ7arsTO OfBBh5iT65m4g7+qqI4p10m+Hat+nke6jaxKUIvUGTCxRn5kOkX2EhITaQ83pf1b coNb39EChBTgxfItXddJCgc6coOMK1W1ZqaXvcWNKbPXx5qw6fNyLGefVdqc5IG1 fO0h7pgN2jLFEY4JtO4zgbwX2XwHBB1YxxPqCp6LHY9kNvZTI1XRozb4oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLE9K03hZyraQyVyjkhLqyflbL4MMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRzAES3c mVoTiWxJkeZVErG/0UkQGtnmi5yOxVdckUJRYDZOyAvCi3oOai5OcNbJufVCH14d UGHAKrHcUMUgr0UleX+0oGRANmGlXNRjUkHfDt+FNvwtRfrvdEmYDZf+AADwXQKW ylxpP/DFtZlp1ub8tZseIwpZmF1A1JZkSrqaQjAw4ofP0o69bw+gAhsvFsJAFfdn F+kMjBV/MdepIY6UUS/ejCpb21rxhV3XsHuc7N8OnHJ84+RnEv1Xn4jGhd7DBiVn VNAgncoXLn1nDCQYEpS0/q5Ltj2qK28oCGoOzbvyol48Ztr6NyhdpRNSxYGbhh5b 1+nGbD7mKbN0kw== -----END CERTIFICATE-----Generated at Thu Sep 24 12:07:00 2026 by rpki-client