$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json) Hash identifier: nGl8bL9+1d6777KidQzQ2EPDKEv2830dxUyLAvWFIkM= Subject key identifier: 06:03:B4:7E:5B:B7:F1:E6:A9:C1:46:4E:54:EA:1F:B7:96:42:CF:87 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019E1FB5536D08413647ED4CC360E7B816EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft Manifest number: 10FD Signing time: Wed 13 May 2026 05:00:37 +0000 Manifest this update: Wed 13 May 2026 05:00:37 +0000 Manifest next update: Thu 14 May 2026 05:00:37 +0000 Files and hashes: 1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=) 2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=) 3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=) 4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=) 5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=) 6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=) 7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=) 8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=) 9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=) 10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=) 11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=) 12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=) 13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=) 14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=) 15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=) 16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=) 17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=) 18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=) 19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=) 20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=) 21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=) 22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=) 23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=) 24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=) 25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=) 26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=) 27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=) 28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=) 29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=) 30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: c7XDJwY/6vxoDhf+CTRsnAoq+GS3eEQjBBRnD7rxc6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:b5:53:6d:08:41:36:47:ed:4c:c3:60:e7:b8:16:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: May 13 05:00:37 2026 GMT Not After : May 14 05:00:37 2026 GMT Subject: CN=0603b47e5bb7f1e6a9c1464e54ea1fb79642cf87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:ed:e2:10:87:ab:7d:04:3f:ac:1b:e6:ba: ea:e3:f9:4d:2d:90:b6:27:4b:30:0d:97:a6:f3:81: 8b:18:bc:b1:8d:2a:bb:33:69:56:24:c1:ef:39:e3: 85:8e:57:d1:75:8d:a8:b5:ac:d6:47:60:fa:98:9a: db:82:4a:85:41:ce:30:17:7e:7b:f1:40:fc:f5:b5: ce:e8:0b:1e:2f:a2:70:c1:69:89:5f:ca:98:1b:ea: fd:2d:ed:c2:e7:57:19:5f:19:24:3c:7a:9f:c2:7e: 57:c0:a2:e1:80:56:6a:d5:a6:a2:8a:b7:4e:b9:68: 36:a7:7c:d0:ff:51:75:3c:7e:03:2b:be:ae:15:8c: 0e:c9:dc:8d:03:59:cf:92:15:67:e3:ee:96:3a:10: 9c:cd:3a:37:b3:93:01:79:da:69:25:d2:3e:28:0b: 36:df:1c:76:b6:1c:3e:96:29:54:32:db:6c:1c:70: db:7d:99:44:5b:12:98:fb:9b:eb:37:12:d8:97:8f: a1:bb:5f:87:37:28:cb:6a:04:7a:d5:00:63:63:d4: 26:91:68:90:21:4e:e5:d3:ce:0b:b2:d4:6f:52:2d: 35:62:16:8f:91:a7:ab:3f:4c:86:7e:17:0a:a9:3d: 6e:a4:32:c8:51:ec:27:eb:6b:45:e4:26:04:cb:65: 75:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:03:B4:7E:5B:B7:F1:E6:A9:C1:46:4E:54:EA:1F:B7:96:42:CF:87 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f4:9c:f2:ba:15:2e:87:e2:2f:1d:93:67:94:08:4f:18:fb: 5c:9a:98:88:36:38:bf:9b:a5:25:e2:cf:a4:f3:11:46:e6:9b: e0:f0:db:ce:f5:b2:62:c8:36:08:7f:2b:52:c5:1a:63:9d:a9: 63:4a:fe:f0:8b:b1:88:30:8d:de:eb:83:ce:35:e4:a5:95:79: 37:d7:44:f1:98:24:d9:72:9e:8c:b7:50:41:73:c7:20:5e:db: 79:b8:f2:63:da:33:04:0e:ef:88:3e:75:fe:cf:17:9b:50:85: ba:2e:4d:ec:22:ed:c3:cf:3c:c0:4d:f3:9f:37:ba:62:a6:e3: c7:87:19:f0:64:df:a9:49:ea:85:ad:02:4f:df:2f:76:dc:d5: 4e:99:2d:75:98:30:ca:d9:24:6e:e0:fb:23:93:c7:14:8a:63: e3:34:38:49:ac:d8:38:2f:ee:a1:64:6a:93:a4:cd:51:61:97: 94:66:11:c7:8c:ce:0a:e2:15:3d:8a:77:18:e2:1c:ce:34:3c: 38:82:92:fa:20:77:e4:a5:fc:16:0f:b1:28:d2:7c:81:db:ce: 91:7d:0e:7b:38:9a:28:dd:18:b5:1c:4a:2f:3e:56:c2:a9:8a: 1e:3b:74:e5:36:60:af:a2:90:01:b3:c9:6d:e7:d6:97:ef:33: 0e:fe:a9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ftVNtCEE2R+1Mw2DnuBbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwNTEzMDUwMDM3WhcNMjYwNTE0MDUwMDM3WjAzMTEwLwYDVQQD EygwNjAzYjQ3ZTViYjdmMWU2YTljMTQ2NGU1NGVhMWZiNzk2NDJjZjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCvt4hCHq30EP6wb5rrq4/lNLZC2 J0swDZem84GLGLyxjSq7M2lWJMHvOeOFjlfRdY2otazWR2D6mJrbgkqFQc4wF357 8UD89bXO6AseL6JwwWmJX8qYG+r9Le3C51cZXxkkPHqfwn5XwKLhgFZq1aaiirdO uWg2p3zQ/1F1PH4DK76uFYwOydyNA1nPkhVn4+6WOhCczTo3s5MBedppJdI+KAs2 3xx2thw+lilUMttsHHDbfZlEWxKY+5vrNxLYl4+hu1+HNyjLagR61QBjY9QmkWiQ IU7l084LstRvUi01YhaPkaerP0yGfhcKqT1upDLIUewn62tF5CYEy2V1eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYDtH5bt/HmqcFGTlTqH7eWQs+HMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPSc8roV LofiLx2TZ5QITxj7XJqYiDY4v5ulJeLPpPMRRuab4PDbzvWyYsg2CH8rUsUaY52p Y0r+8IuxiDCN3uuDzjXkpZV5N9dE8Zgk2XKejLdQQXPHIF7bebjyY9ozBA7viD51 /s8Xm1CFui5N7CLtw888wE3znze6Yqbjx4cZ8GTfqUnqha0CT98vdtzVTpktdZgw ytkkbuD7I5PHFIpj4zQ4SazYOC/uoWRqk6TNUWGXlGYRx4zOCuIVPYp3GOIczjQ8 OIKS+iB35KX8Fg+xKNJ8gdvOkX0OeziaKN0YtRxKLz5WwqmKHjt05TZgr6KQAbPJ befWl+8zDv6pwg== -----END CERTIFICATE-----Generated at Wed May 13 12:48:17 2026 by rpki-client