$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: 8fvlcCioArHuMZ44Cv54U+a6kAYWAT8U8Hd8vWI6wD4= Subject key identifier: 25:2C:CB:68:7F:3F:8F:80:87:1F:15:C0:AA:76:84:B6:AB:01:17:B2 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019D31F573C15CE45A4A62EBA84C482F02BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 18A0 Signing time: Sat 28 Mar 2026 01:01:02 +0000 Manifest this update: Sat 28 Mar 2026 01:01:02 +0000 Manifest next update: Sun 29 Mar 2026 01:01:02 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: tqe2pNOexjunGnRsu5lFHqHxnsLgSsNhYQfsZV1EHIQ=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:f5:73:c1:5c:e4:5a:4a:62:eb:a8:4c:48:2f:02:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Mar 28 01:01:02 2026 GMT Not After : Mar 29 01:01:02 2026 GMT Subject: CN=252ccb687f3f8f80871f15c0aa7684b6ab0117b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:dc:b2:be:df:d8:e0:8a:74:0e:cb:e2:ae: b3:d6:89:51:1e:4f:18:bc:0c:12:5b:bf:3d:7f:07: 42:20:fb:0d:12:8f:21:55:be:3b:72:2b:d6:c4:13: c9:a0:e5:e6:6b:8a:47:b3:e6:1c:42:dc:64:8b:58: 33:df:d3:77:07:06:f5:e4:b5:f1:83:b2:18:93:c3: 0b:e7:c3:c7:41:d1:43:34:cd:a6:1a:c2:84:92:ae: dc:ca:aa:b7:86:cd:f3:d4:88:d9:bb:84:92:cc:30: 5c:66:5c:3f:5e:49:09:58:30:8a:69:25:15:ef:68: 73:32:55:09:e8:f8:3c:4f:fa:d6:9b:f6:0e:d2:40: c8:51:0a:a9:f5:fa:2e:1f:6a:82:25:aa:89:5a:cb: 6a:1a:08:45:79:7c:da:17:48:64:33:cd:29:5f:75: c8:41:15:bc:25:56:2f:cc:ac:99:59:ab:1a:ed:c4: 6f:81:ec:27:9a:25:94:2e:2e:72:4d:57:c6:9d:a4: c7:be:39:81:81:53:04:2d:19:c6:0d:28:a3:49:95: 58:17:f2:9c:9d:39:88:46:8c:10:88:49:35:6c:10: ab:5e:37:a5:4b:99:8f:7f:eb:dd:96:28:23:90:2b: 44:e5:28:07:be:39:1f:8b:a9:77:60:5f:be:e6:91: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2C:CB:68:7F:3F:8F:80:87:1F:15:C0:AA:76:84:B6:AB:01:17:B2 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:58:35:bd:44:38:51:b5:ad:ed:c0:d4:64:e8:d9:55:ca:37: 42:e5:24:44:c7:a9:5f:be:d5:7e:42:d7:e8:f0:71:c9:52:fe: 7d:64:30:72:5e:5e:1f:4a:e6:17:24:9a:7a:b9:cd:5e:6c:19: 4c:24:e9:33:47:4d:60:95:35:7f:4f:f7:1f:53:67:1e:32:97: 4d:a4:ac:f6:12:e0:8a:45:28:5b:51:36:a4:d2:52:41:0d:3e: 89:cc:33:bf:56:12:c1:cd:45:ce:fd:ef:dd:e1:10:dc:4e:7f: b9:38:8a:23:90:5b:6a:7f:4b:a3:a7:08:85:59:b9:a9:c5:e9: 5d:16:63:e5:60:ff:99:db:2f:a1:40:0f:31:c6:33:1c:f4:57: 8c:6a:64:f3:63:a3:65:07:08:cf:30:1f:d2:bb:73:31:d3:6a: 53:46:18:c8:82:15:2c:a3:53:60:b5:7f:73:7c:41:ff:37:93: 7e:e8:fc:52:8c:01:f9:bc:28:2c:6a:c4:37:cb:25:1f:92:5d: cd:0b:5f:51:bd:a6:7c:dd:cf:62:ce:4e:0d:bc:e7:ea:de:8d: 5e:9f:40:68:4b:77:76:4e:64:33:14:ce:75:cd:48:a0:96:ba: 35:3f:11:d3:f2:cc:3b:cc:89:7f:b8:b5:86:20:79:c6:13:4d: a3:83:70:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0x9XPBXORaSmLrqExILwK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwMzI4MDEwMTAyWhcNMjYwMzI5MDEwMTAyWjAzMTEwLwYDVQQD EygyNTJjY2I2ODdmM2Y4ZjgwODcxZjE1YzBhYTc2ODRiNmFiMDExN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldzcsr7f2OCKdA7L4q6z1olRHk8Y vAwSW789fwdCIPsNEo8hVb47civWxBPJoOXma4pHs+YcQtxki1gz39N3Bwb15LXx g7IYk8ML58PHQdFDNM2mGsKEkq7cyqq3hs3z1IjZu4SSzDBcZlw/XkkJWDCKaSUV 72hzMlUJ6Pg8T/rWm/YO0kDIUQqp9fouH2qCJaqJWstqGghFeXzaF0hkM80pX3XI QRW8JVYvzKyZWasa7cRvgewnmiWULi5yTVfGnaTHvjmBgVMELRnGDSijSZVYF/Kc nTmIRowQiEk1bBCrXjelS5mPf+vdligjkCtE5SgHvjkfi6l3YF++5pG02QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUsy2h/P4+Ahx8VwKp2hLarAReyMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFg1vUQ4 UbWt7cDUZOjZVco3QuUkRMepX77VfkLX6PBxyVL+fWQwcl5eH0rmFySaernNXmwZ TCTpM0dNYJU1f0/3H1NnHjKXTaSs9hLgikUoW1E2pNJSQQ0+icwzv1YSwc1Fzv3v 3eEQ3E5/uTiKI5Bban9Lo6cIhVm5qcXpXRZj5WD/mdsvoUAPMcYzHPRXjGpk82Oj ZQcIzzAf0rtzMdNqU0YYyIIVLKNTYLV/c3xB/zeTfuj8UowB+bwoLGrEN8slH5Jd zQtfUb2mfN3PYs5ODbzn6t6NXp9AaEt3dk5kMxTOdc1IoJa6NT8R0/LMO8yJf7i1 hiB5xhNNo4NwKg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:39:05 2026 by rpki-client