$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: jUjLg/Nj6O5TEAkchpmKYHxbqPoSxzCr5CsiN5i8OKw= Subject key identifier: 6D:4E:FC:56:CB:6E:D2:4E:3D:85:89:B8:83:E5:D4:81:14:E9:AF:DA Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019DCE2B7C057F362E669D75E478935681C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 113C Signing time: Mon 27 Apr 2026 09:00:49 +0000 Manifest this update: Mon 27 Apr 2026 09:00:49 +0000 Manifest next update: Tue 28 Apr 2026 09:00:49 +0000 Files and hashes: 1: 1nfCihSTwlJIQ4nvsiCslekY7NM.roa (hash: 4kEXXYbaPTR9rMQ4lw9zYV/v1K+AlDu09MYuRsUIkjU=) 2: 1rQSpSq9n0go-1sqt7J-jro-onw.roa (hash: A170zOdDKUFR8OjpxSyTeADzDSsnK0kS+5cwO4467+4=) 3: 4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa (hash: 5OBBvoknKe7BIhAFNY6E/EsSly4AA69+3FRzkxou83M=) 4: JWbtobpI47VXCFWlAi9tqrIVRvw.roa (hash: ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=) 5: Md6a-KQcbUfuxvWxKDr3cty5184.roa (hash: 0QYUuqR4NLEQ4pSl7SpM+UKRlpQJFGB4BeS1z7xH1dA=) 6: O-Lc9p7lKgu4RG8qbZStlySnjJw.roa (hash: VJbi6pgA5J9qOWeC5+ilPMjxUhX49jVlWxhniX3lMX8=) 7: RnEHdu41-R4PcF7uA7NCq1ymq-o.roa (hash: 1QIkC6nLYEKLiQP1dxQtxmlssoU62izuT6vjCEpQfEc=) 8: UFF8sc1cAlxiuca1UYpBZJuyruI.roa (hash: VvoB5niTEUFcEUXrlM/+U17VoiABVzzIIDopu2PtroE=) 9: euynJTb4DQRxhsqGUuIVKvMePvE.roa (hash: ApLmaeR70nQaei0kFKLHQPB8kjQglplGX2OnJJHWzlA=) 10: kjMi6obHpt9UHAnYG2JDcUbRz4I.roa (hash: eeNQkVMpQhVfJx2+o+C0G3gVG9NOsH6OImPcge0a9H8=) 11: ogYawkz_gBDjl6zl_q1fMXZNBvo.roa (hash: x588DAczbjPIl3pK5n5K7VZpFPPA1ral0L6/o6+ORO8=) 12: qBZkx98C2FyrYyHkdEdcNmhea-k.roa (hash: sIVCOdJ2FafZ1gXZEe6wh1i0aQqPT1MJAdBuWY+Cbzc=) 13: xbsOLy08hDmqcrHsStCHW6gzcKY.roa (hash: U+nyPksaAcVlKKdUnyPWFx4E2iIYZFylZhL+wDWilqE=) 14: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: W9eTrJ8xFUhLQ6i1AjkV68vV4Jndbm9tECytzNgItTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:2b:7c:05:7f:36:2e:66:9d:75:e4:78:93:56:81:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Apr 27 09:00:49 2026 GMT Not After : Apr 28 09:00:49 2026 GMT Subject: CN=6d4efc56cb6ed24e3d8589b883e5d48114e9afda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:39:40:34:3b:7b:83:93:3f:db:2e:a4:c3:c5: fe:9e:78:71:55:5e:57:95:94:5e:ed:49:8c:2b:fe: 1c:95:99:bf:fb:5d:26:64:25:f8:cb:21:5f:5c:2e: 86:20:96:7a:e2:d1:a9:d3:e3:dd:32:33:1f:63:e1: 02:fb:97:c7:33:74:b5:10:75:9d:cf:4e:35:8a:68: ff:b5:ae:fa:dd:4f:9a:c7:e4:f3:0c:61:a6:a3:22: 96:f0:c7:c2:5d:4a:5a:97:ed:39:c4:a2:ce:29:37: 47:68:18:ce:a9:7c:50:06:f1:99:c8:19:a6:57:a3: c2:98:95:2a:4e:ce:2f:02:d4:2f:7b:3b:c9:07:a9: f6:25:75:b1:e6:73:e7:46:43:ec:63:67:7a:c8:53: f7:f2:6f:80:7a:1c:ee:d4:65:42:83:ba:47:e5:05: 75:4a:ce:95:0e:e6:a4:6d:24:d3:5d:c5:d6:df:e9: 5a:cf:20:64:f5:be:31:12:bb:ae:15:0b:5b:be:12: 4a:fe:bb:a6:8d:c4:4f:c1:55:2e:f2:01:78:ba:80: f9:cb:06:a7:ed:43:44:f5:7f:a4:74:7b:7e:e0:14: 0a:c5:a0:2f:29:60:71:4e:e9:63:af:a5:d9:5d:21: 86:99:27:d8:c6:2e:1c:2b:7d:57:72:8f:9e:fd:60: ec:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4E:FC:56:CB:6E:D2:4E:3D:85:89:B8:83:E5:D4:81:14:E9:AF:DA X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e2:19:6d:7b:c7:5f:34:17:6e:8f:bb:87:68:4b:a5:6e:66: e5:cc:5e:e6:71:11:88:e7:b3:77:f5:62:a1:2f:ef:07:dd:b9: 96:be:c4:54:68:da:1d:81:78:80:dc:15:f9:d2:2c:72:b7:1b: d9:7a:06:fd:c6:f3:c5:83:45:c4:6d:8b:93:eb:46:1e:c7:0d: db:69:89:df:81:27:bc:81:80:4e:4d:ad:b2:07:33:b3:5d:b5: b8:18:6a:d7:d1:0c:9b:dd:b8:7f:77:01:b0:fc:ab:03:25:aa: a3:4e:6b:af:99:d0:ff:e9:2b:46:94:31:d2:6b:0c:8b:d0:24: 77:7b:6f:c1:df:76:77:bb:14:e8:13:8d:61:58:e4:b2:ce:2a: 0a:d6:71:08:24:82:86:0d:53:cc:29:18:6d:2b:4d:36:1c:b8: 4c:5f:2b:9f:98:37:6d:3e:b4:b5:ab:83:32:d0:24:05:c0:6d: b3:99:31:3d:54:ef:2f:a4:44:0e:fe:8d:49:2a:81:c1:e0:7e: 6b:ba:23:35:ae:2a:01:a7:ae:5c:71:06:a1:51:fc:bf:ff:94: e9:1d:8b:b6:28:9a:9b:d6:84:7f:a7:e6:48:a4:6e:09:d1:82: a4:15:48:e0:be:8c:10:bd:d5:5f:47:6c:d1:55:a1:5b:8b:a6: 65:14:df:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OK3wFfzYuZp115HiTVoHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwNDI3MDkwMDQ5WhcNMjYwNDI4MDkwMDQ5WjAzMTEwLwYDVQQD Eyg2ZDRlZmM1NmNiNmVkMjRlM2Q4NTg5Yjg4M2U1ZDQ4MTE0ZTlhZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzlANDt7g5M/2y6kw8X+nnhxVV5X lZRe7UmMK/4clZm/+10mZCX4yyFfXC6GIJZ64tGp0+PdMjMfY+EC+5fHM3S1EHWd z041imj/ta763U+ax+TzDGGmoyKW8MfCXUpal+05xKLOKTdHaBjOqXxQBvGZyBmm V6PCmJUqTs4vAtQvezvJB6n2JXWx5nPnRkPsY2d6yFP38m+Aehzu1GVCg7pH5QV1 Ss6VDuakbSTTXcXW3+lazyBk9b4xEruuFQtbvhJK/rumjcRPwVUu8gF4uoD5ywan 7UNE9X+kdHt+4BQKxaAvKWBxTuljr6XZXSGGmSfYxi4cK31Xco+e/WDslwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1O/FbLbtJOPYWJuIPl1IEU6a/aMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuIZbXvH XzQXbo+7h2hLpW5m5cxe5nERiOezd/VioS/vB925lr7EVGjaHYF4gNwV+dIscrcb 2XoG/cbzxYNFxG2Lk+tGHscN22mJ34EnvIGATk2tsgczs121uBhq19EMm924f3cB sPyrAyWqo05rr5nQ/+krRpQx0msMi9Akd3tvwd92d7sU6BONYVjkss4qCtZxCCSC hg1TzCkYbStNNhy4TF8rn5g3bT60tauDMtAkBcBts5kxPVTvL6REDv6NSSqBweB+ a7ojNa4qAaeuXHEGoVH8v/+U6R2Ltiiam9aEf6fmSKRuCdGCpBVI4L6MEL3VX0ds 0VWhW4umZRTfZw== -----END CERTIFICATE-----Generated at Mon Apr 27 14:38:47 2026 by rpki-client