$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json) Hash identifier: Cg5SsrXoZ3Fz0vMd8RVJju2jh5eLYEVOUS+R3SLrBwQ= Subject key identifier: 39:18:BF:98:B6:FA:07:AB:F4:3D:1D:14:1E:AB:F8:15:83:DA:2B:8D Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 01A0EE1DBD8BEC9397AB7EBD0CFD141B4593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft Manifest number: 1271 Signing time: Tue 29 Sep 2026 17:02:01 +0000 Manifest this update: Tue 29 Sep 2026 17:02:01 +0000 Manifest next update: Wed 30 Sep 2026 17:02:01 +0000 Files and hashes: 1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=) 2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=) 3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=) 4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=) 5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=) 6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=) 7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=) 8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=) 9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=) 10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=) 11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=) 12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=) 13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=) 14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=) 15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=) 16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=) 17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=) 18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=) 19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=) 20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=) 21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=) 22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=) 23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=) 24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=) 25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=) 26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=) 27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=) 28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=) 29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=) 30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: wBXrw14kY00caueR6KFS6onW2ALwUA1q+vHY4Q5CQzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 15:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ee:1d:bd:8b:ec:93:97:ab:7e:bd:0c:fd:14:1b:45:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Sep 29 17:02:01 2026 GMT Not After : Sep 30 17:02:01 2026 GMT Subject: CN=3918bf98b6fa07abf43d1d141eabf81583da2b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:26:2c:ca:04:63:d8:ee:12:ed:22:be:9d: 65:c8:ab:1e:7b:7d:05:aa:88:55:2b:47:6a:e3:cc: 90:1a:89:73:0e:6b:4c:ec:c8:a9:dd:6b:c3:8f:d3: 28:60:db:03:cd:22:fb:20:03:68:55:3a:c4:0f:c8: d9:e3:69:39:86:f3:94:30:04:75:dd:84:4a:9c:13: a4:67:fd:66:9b:83:8e:d9:d0:2e:8c:68:c6:b6:a0: ce:ea:78:34:77:cc:2e:e1:24:28:27:02:b7:19:a8: a5:9f:e5:1d:56:ba:5b:0b:ff:34:55:fa:a1:81:09: d3:b8:7b:ee:ec:42:a0:6a:60:36:4f:ce:82:b0:df: 81:12:5e:d2:27:35:5c:4e:de:af:c9:b5:69:28:cf: 08:23:d1:5f:e1:b3:34:7c:b2:3f:d2:6c:7a:38:a0: 6e:41:64:06:87:3a:ff:bc:ed:65:6d:69:27:d0:a3: 55:a3:b5:35:36:db:50:2e:0b:65:ae:63:7f:eb:df: 88:9f:8d:ca:bb:a3:04:30:e3:18:9a:ba:5d:0f:2d: eb:87:96:12:69:bc:72:51:c2:87:3c:44:b9:19:89: 97:7d:b5:5f:56:94:9e:ef:7e:18:9d:bd:f7:38:ea: 73:7a:e7:48:3c:7f:98:66:72:28:b6:20:0d:78:d4: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:18:BF:98:B6:FA:07:AB:F4:3D:1D:14:1E:AB:F8:15:83:DA:2B:8D X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:de:56:63:73:94:b2:b9:39:57:31:1e:fc:69:67:29:24:32: 42:08:94:8c:09:44:1c:5d:ed:bb:c5:19:44:c4:a6:53:a3:23: 5e:37:43:27:4b:c8:47:28:99:7b:78:8b:1c:e4:5b:bd:bc:05: 42:b7:b2:b5:21:ad:bc:28:cc:d0:d1:67:72:95:ca:90:c3:4a: 90:8e:8a:4c:09:35:4d:56:af:ac:75:4b:4b:6a:72:1d:83:07: c9:73:dd:97:b5:af:16:9f:b0:70:3d:ba:b3:23:c4:74:d4:32: e4:17:ae:a8:45:65:4c:9c:40:1c:10:95:f2:7c:fd:29:b8:e4: e8:52:13:0a:e7:fb:55:c3:26:92:9b:0d:03:b4:c8:bb:5d:19: 0e:ad:f8:34:ad:80:d8:d7:1f:6c:ac:0d:5b:2d:02:06:a6:b3: 9c:af:ae:d5:bf:fa:52:b7:a9:e4:ee:7b:05:90:e9:62:b6:0b: 0c:a0:88:d3:5c:38:b7:e8:40:14:99:0d:55:25:27:c2:34:7c: c6:b4:42:f1:a0:4a:e3:9f:8f:4e:c5:fd:ac:52:14:e1:60:dd: 64:4a:8e:d3:48:9d:41:50:c6:a5:6f:2a:7e:92:84:84:51:d8: 9a:12:27:4f:f9:ba:39:ad:fb:cf:d9:09:39:63:89:37:c5:e0: cd:45:c2:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDuHb2L7JOXq369DP0UG0WTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwOTI5MTcwMjAxWhcNMjYwOTMwMTcwMjAxWjAzMTEwLwYDVQQD EygzOTE4YmY5OGI2ZmEwN2FiZjQzZDFkMTQxZWFiZjgxNTgzZGEyYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGkmLMoEY9juEu0ivp1lyKsee30F qohVK0dq48yQGolzDmtM7Mip3WvDj9MoYNsDzSL7IANoVTrED8jZ42k5hvOUMAR1 3YRKnBOkZ/1mm4OO2dAujGjGtqDO6ng0d8wu4SQoJwK3Gailn+UdVrpbC/80Vfqh gQnTuHvu7EKgamA2T86CsN+BEl7SJzVcTt6vybVpKM8II9Ff4bM0fLI/0mx6OKBu QWQGhzr/vO1lbWkn0KNVo7U1NttQLgtlrmN/69+In43Ku6MEMOMYmrpdDy3rh5YS abxyUcKHPES5GYmXfbVfVpSe734Ynb33OOpzeudIPH+YZnIotiANeNSrvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkYv5i2+ger9D0dFB6r+BWD2iuNMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUN5WY3OU srk5VzEe/GlnKSQyQgiUjAlEHF3tu8UZRMSmU6MjXjdDJ0vIRyiZe3iLHORbvbwF QreytSGtvCjM0NFncpXKkMNKkI6KTAk1TVavrHVLS2pyHYMHyXPdl7WvFp+wcD26 syPEdNQy5BeuqEVlTJxAHBCV8nz9Kbjk6FITCuf7VcMmkpsNA7TIu10ZDq34NK2A 2NcfbKwNWy0CBqaznK+u1b/6Urep5O57BZDpYrYLDKCI01w4t+hAFJkNVSUnwjR8 xrRC8aBK45+PTsX9rFIU4WDdZEqO00idQVDGpW8qfpKEhFHYmhInT/m6Oa37z9kJ OWOJN8XgzUXCEg== -----END CERTIFICATE-----Generated at Tue Sep 29 20:20:55 2026 by rpki-client