$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: 3xgMlCYRe6aoahNzgblBUWDRDihgPWZfY+NVloNp1+c= Subject key identifier: 03:71:84:E6:0E:37:FD:C6:4F:DE:12:C4:58:99:85:D5:3E:61:76:B6 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019EB7D7E6C0DC4B31E988E0366E4397D2E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 11B5 Signing time: Thu 11 Jun 2026 18:00:40 +0000 Manifest this update: Thu 11 Jun 2026 18:00:40 +0000 Manifest next update: Fri 12 Jun 2026 18:00:40 +0000 Files and hashes: 1: 1nfCihSTwlJIQ4nvsiCslekY7NM.roa (hash: 4kEXXYbaPTR9rMQ4lw9zYV/v1K+AlDu09MYuRsUIkjU=) 2: 1rQSpSq9n0go-1sqt7J-jro-onw.roa (hash: A170zOdDKUFR8OjpxSyTeADzDSsnK0kS+5cwO4467+4=) 3: 4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa (hash: 5OBBvoknKe7BIhAFNY6E/EsSly4AA69+3FRzkxou83M=) 4: JWbtobpI47VXCFWlAi9tqrIVRvw.roa (hash: ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=) 5: Md6a-KQcbUfuxvWxKDr3cty5184.roa (hash: 0QYUuqR4NLEQ4pSl7SpM+UKRlpQJFGB4BeS1z7xH1dA=) 6: O-Lc9p7lKgu4RG8qbZStlySnjJw.roa (hash: VJbi6pgA5J9qOWeC5+ilPMjxUhX49jVlWxhniX3lMX8=) 7: RnEHdu41-R4PcF7uA7NCq1ymq-o.roa (hash: 1QIkC6nLYEKLiQP1dxQtxmlssoU62izuT6vjCEpQfEc=) 8: UFF8sc1cAlxiuca1UYpBZJuyruI.roa (hash: VvoB5niTEUFcEUXrlM/+U17VoiABVzzIIDopu2PtroE=) 9: euynJTb4DQRxhsqGUuIVKvMePvE.roa (hash: ApLmaeR70nQaei0kFKLHQPB8kjQglplGX2OnJJHWzlA=) 10: kjMi6obHpt9UHAnYG2JDcUbRz4I.roa (hash: eeNQkVMpQhVfJx2+o+C0G3gVG9NOsH6OImPcge0a9H8=) 11: ogYawkz_gBDjl6zl_q1fMXZNBvo.roa (hash: x588DAczbjPIl3pK5n5K7VZpFPPA1ral0L6/o6+ORO8=) 12: qBZkx98C2FyrYyHkdEdcNmhea-k.roa (hash: sIVCOdJ2FafZ1gXZEe6wh1i0aQqPT1MJAdBuWY+Cbzc=) 13: xbsOLy08hDmqcrHsStCHW6gzcKY.roa (hash: U+nyPksaAcVlKKdUnyPWFx4E2iIYZFylZhL+wDWilqE=) 14: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: vxmbZrOC//D3FNkDfEyThl623RaRJ0u0FAVkVuu8ZmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:d7:e6:c0:dc:4b:31:e9:88:e0:36:6e:43:97:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jun 11 18:00:40 2026 GMT Not After : Jun 12 18:00:40 2026 GMT Subject: CN=037184e60e37fdc64fde12c4589985d53e6176b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:83:58:3c:46:33:10:08:e5:8f:c6:fe:92:18: ca:4a:a3:83:5c:29:67:9f:c8:76:74:f3:30:29:3d: 4a:09:cf:c5:91:ef:5c:73:12:ef:cf:78:bc:a5:5d: d9:29:62:ed:bd:2d:44:e9:db:43:1c:ac:79:c7:6f: 11:33:77:b2:93:0f:1a:93:4a:8d:e7:61:7b:46:0c: 7c:f2:5c:f6:c6:d3:ba:e9:ea:1f:ee:a7:63:55:b8: c8:ac:26:0d:6f:18:f5:18:80:6d:5d:cb:01:e8:48: f8:ef:41:53:ad:84:56:9d:40:28:e3:a3:72:db:e9: 4c:a4:c8:03:91:a5:7c:32:a4:4a:d3:81:e2:57:7c: 06:3f:b2:5d:17:d5:ba:1f:43:75:02:98:a4:93:4a: 59:ec:cd:bf:84:57:54:db:0e:d3:30:70:23:06:d6: 41:20:4c:15:f4:fa:03:24:ec:17:47:5b:fe:ce:e4: 65:ee:94:b1:ef:8e:43:c5:fc:54:ad:46:af:1e:ee: d8:0c:4e:9e:b0:c1:44:c2:63:04:92:34:d5:94:bb: aa:50:28:c0:ab:1b:6b:b5:54:77:f1:ea:1f:a0:42: 14:3d:1b:83:a4:4a:42:4f:d3:61:b7:1f:42:ad:10: 83:f3:15:82:52:4e:57:20:80:47:c6:52:c3:04:94: f4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:71:84:E6:0E:37:FD:C6:4F:DE:12:C4:58:99:85:D5:3E:61:76:B6 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e8:83:00:45:f3:13:3d:1f:cc:e6:ad:36:36:e0:a0:b3:e6: bf:78:a8:2f:c0:fb:3c:9c:2a:80:80:5f:21:38:14:f1:22:72: 89:4b:37:80:92:81:15:f0:a2:58:1c:ab:2c:5b:c3:c8:8f:47: 8f:1b:74:0f:da:c5:e1:0c:08:e3:79:83:f3:cf:74:0e:3c:68: 19:47:62:64:9c:14:6a:f9:33:91:40:29:fc:9f:9c:88:0f:89: dc:3c:0d:82:40:06:54:4b:5c:77:8f:7f:dc:13:78:aa:4d:26: 41:2f:1c:93:4b:11:71:3e:48:e2:44:3a:ba:98:ac:e7:ce:c6: eb:e3:5f:d8:6c:82:91:68:e6:f1:f6:32:e0:58:62:fe:91:10: fb:2d:39:73:f8:e4:5c:3f:ae:3f:df:56:b7:b8:0f:c6:e6:86: 9a:8c:bb:4c:4d:c3:b7:d0:4b:08:10:69:b0:94:1a:e0:0e:9f: 7f:20:80:ff:31:b2:c9:70:bb:28:1a:39:e4:07:49:65:fb:8a: 2e:ed:6d:69:77:d5:e3:7d:50:76:3f:08:e1:06:d8:09:50:79: f0:98:71:5d:1d:f2:6c:23:e0:24:b4:67:2d:d4:57:14:46:5b: 3d:45:07:80:5c:41:3c:f1:ce:17:30:8f:eb:4c:e7:4d:59:6f: ed:cd:32:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ631+bA3Esx6YjgNm5Dl9LgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwNjExMTgwMDQwWhcNMjYwNjEyMTgwMDQwWjAzMTEwLwYDVQQD EygwMzcxODRlNjBlMzdmZGM2NGZkZTEyYzQ1ODk5ODVkNTNlNjE3NmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0INYPEYzEAjlj8b+khjKSqODXCln n8h2dPMwKT1KCc/Fke9ccxLvz3i8pV3ZKWLtvS1E6dtDHKx5x28RM3eykw8ak0qN 52F7Rgx88lz2xtO66eof7qdjVbjIrCYNbxj1GIBtXcsB6Ej470FTrYRWnUAo46Ny 2+lMpMgDkaV8MqRK04HiV3wGP7JdF9W6H0N1Apikk0pZ7M2/hFdU2w7TMHAjBtZB IEwV9PoDJOwXR1v+zuRl7pSx745DxfxUrUavHu7YDE6esMFEwmMEkjTVlLuqUCjA qxtrtVR38eofoEIUPRuDpEpCT9Nhtx9CrRCD8xWCUk5XIIBHxlLDBJT0+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANxhOYON/3GT94SxFiZhdU+YXa2MB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOiDAEXz Ez0fzOatNjbgoLPmv3ioL8D7PJwqgIBfITgU8SJyiUs3gJKBFfCiWByrLFvDyI9H jxt0D9rF4QwI43mD8890DjxoGUdiZJwUavkzkUAp/J+ciA+J3DwNgkAGVEtcd49/ 3BN4qk0mQS8ck0sRcT5I4kQ6upis587G6+Nf2GyCkWjm8fYy4Fhi/pEQ+y05c/jk XD+uP99Wt7gPxuaGmoy7TE3Dt9BLCBBpsJQa4A6ffyCA/zGyyXC7KBo55AdJZfuK Lu1taXfV431Qdj8I4QbYCVB58JhxXR3ybCPgJLRnLdRXFEZbPUUHgFxBPPHOFzCP 60znTVlv7c0yaQ== -----END CERTIFICATE-----Generated at Fri Jun 12 03:54:15 2026 by rpki-client