$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json) Hash identifier: Y0PdG+qbX5UTdnakzZhhda5LwCliCTJGbK3qQsqfoQk= Subject key identifier: 17:9E:89:89:63:B1:7A:12:8A:BE:4B:B9:12:58:FD:FF:9D:C6:E2:60 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 01A1765E546C6AEAC726CE8F3BCA5C8FB7C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft Manifest number: 1B44 Signing time: Mon 26 Oct 2026 04:00:55 +0000 Manifest this update: Mon 26 Oct 2026 04:00:55 +0000 Manifest next update: Tue 27 Oct 2026 04:00:55 +0000 Files and hashes: 1: 3Cc7zYr4wdMCZUe9g6dW_2i0ML8.roa (hash: pg5Ed7h72zzvUZD3Dywps0w/tKRJFUdallc5ZvXhwdQ=) 2: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=) 3: KuQWIegYdUJMwSsw6LOJEGnWJIU.roa (hash: n1+wc9tP5UGa0heg8onORKo3M069nKjqbj355TvV57s=) 4: S97f4H7Jcp_RS4iCoVA-_mD7rh4.roa (hash: rVemoVktMuhGynI9BUyXTqgwlzxx1oDBdpcFqhQcXpo=) 5: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=) 6: WrzqxUbHWF7HcxsL8cQxuxpNdmY.roa (hash: WlfUvOzQ5YqMfbAGnnKjEm1gW/UCmNr5ct407GHIsZc=) 7: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: ucoQv3hk3d3azQLvfBsQaDMaOOtEJCMarlfm6CtHzAA=) 8: cnyVAm6n-mPk7D9NoefcfJS4h-I.roa (hash: hg++FUgze8SJYZRhrwDxmY/icpo7b2MPk9WotmoOGz0=) 9: iNpfv2H8aBWlKXZF26UnnW9pbIg.roa (hash: QvFWxjKcfe2bGZQbuqD0AHyjjwdonraBq3f/+QRF0aM=) 10: kHVx3MxOhUHnvGzMhHMTh-h0xao.roa (hash: apdMUVkUsjvxSYU4NdkC22tvpcOKIkS/iIwnp6sgj8E=) 11: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=) 12: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=) 13: tant_iw39C5s5eHSo-fWpKRJVZI.roa (hash: 3Mfj9MzM5Fq754ib0F7hoqH7ufiZ177wLskV+BMlC5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 23:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:76:5e:54:6c:6a:ea:c7:26:ce:8f:3b:ca:5c:8f:b7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Oct 26 04:00:55 2026 GMT Not After : Oct 27 04:00:55 2026 GMT Subject: CN=179e898963b17a128abe4bb91258fdff9dc6e260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a0:77:8a:e6:c4:dd:c4:fc:4c:c6:73:e9:90: ae:a0:83:15:68:4f:5c:94:03:93:41:78:80:31:17: ec:57:c0:c2:29:39:bb:b2:ae:72:aa:c6:06:4c:39: 43:6f:70:65:e1:fe:e6:df:52:22:3f:47:36:06:2e: ec:60:db:73:c9:f8:c6:7c:75:66:4b:9e:f4:02:d3: 56:a8:bc:eb:9c:44:b7:ee:13:9f:f9:34:75:61:79: 08:81:7e:4f:3d:5e:23:84:14:3a:a2:f8:d5:1d:fd: 31:6c:e0:72:92:fe:a3:44:1e:30:f0:31:d7:3e:33: c6:f6:3e:74:e6:12:c2:8e:02:d9:cb:91:eb:78:e2: ef:68:39:8f:c0:9b:90:d4:60:02:41:73:d5:d3:b9: bc:b6:e8:43:91:9b:ef:10:67:88:1e:25:a6:0c:ad: 48:3f:41:63:e7:e6:60:a0:71:a8:6b:b9:be:e1:34: 50:2a:11:17:fd:1c:c3:98:79:e2:5f:3f:1e:34:c8: ab:4d:3f:61:35:b7:71:88:26:54:f2:09:86:35:1b: bf:4f:52:a1:15:d1:e6:11:28:cb:a8:29:b1:75:af: 55:2c:45:75:9b:80:ad:3a:5b:0d:eb:70:73:fe:77: 09:62:47:8a:66:1d:42:c3:ae:bd:bc:ba:93:1d:d1: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9E:89:89:63:B1:7A:12:8A:BE:4B:B9:12:58:FD:FF:9D:C6:E2:60 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:12:4d:5c:6f:09:14:b0:18:63:85:c3:2a:bb:0f:02:63:be: 69:cf:99:3b:74:61:e1:f7:19:0a:1c:4f:7c:f2:3c:e8:3d:dc: c4:db:d8:ab:15:34:e1:31:32:87:a2:2f:36:ec:91:00:92:9f: d4:7b:fa:08:19:60:53:7c:e5:e6:d1:73:0b:f4:a0:30:63:76: c9:77:d7:27:a2:42:65:5f:71:38:43:15:1e:a9:ca:3e:f6:a8: 9d:59:1f:91:f3:46:b5:36:ed:40:97:29:e9:72:f2:3f:d3:bc: 3e:51:f3:b9:72:9b:87:07:4f:74:ad:bc:c6:da:10:1f:23:37: 67:0f:81:d6:93:23:75:dd:5c:aa:a2:1f:b3:e3:01:71:3f:88: 0c:80:5e:3d:e6:86:dd:51:89:e5:08:87:36:04:15:75:5b:ca: c4:31:3c:ba:9c:ee:bc:75:25:72:11:30:c4:81:9a:ad:b9:04: ae:a5:cd:19:37:ae:1a:ef:20:25:1a:1d:1a:ed:51:23:2d:5e: a1:0c:03:79:c1:3f:70:ea:89:c0:c7:98:e6:e9:9e:e5:32:fb: c7:67:32:d1:19:5c:a7:ee:a6:52:b7:e9:7b:dc:17:17:d5:b4: d0:ee:60:c6:a1:a0:dc:94:6f:9b:c7:ba:6e:d2:6d:f7:0a:f2: 6b:2f:96:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF2XlRsaurHJs6PO8pcj7fBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYxMDI2MDQwMDU1WhcNMjYxMDI3MDQwMDU1WjAzMTEwLwYDVQQD EygxNzllODk4OTYzYjE3YTEyOGFiZTRiYjkxMjU4ZmRmZjlkYzZlMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+KB3iubE3cT8TMZz6ZCuoIMVaE9c lAOTQXiAMRfsV8DCKTm7sq5yqsYGTDlDb3Bl4f7m31IiP0c2Bi7sYNtzyfjGfHVm S570AtNWqLzrnES37hOf+TR1YXkIgX5PPV4jhBQ6ovjVHf0xbOBykv6jRB4w8DHX PjPG9j505hLCjgLZy5HreOLvaDmPwJuQ1GACQXPV07m8tuhDkZvvEGeIHiWmDK1I P0Fj5+ZgoHGoa7m+4TRQKhEX/RzDmHniXz8eNMirTT9hNbdxiCZU8gmGNRu/T1Kh FdHmESjLqCmxda9VLEV1m4CtOlsN63Bz/ncJYkeKZh1Cw669vLqTHdGWCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeeiYljsXoSir5LuRJY/f+dxuJgMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxJNXG8J FLAYY4XDKrsPAmO+ac+ZO3Rh4fcZChxPfPI86D3cxNvYqxU04TEyh6IvNuyRAJKf 1Hv6CBlgU3zl5tFzC/SgMGN2yXfXJ6JCZV9xOEMVHqnKPvaonVkfkfNGtTbtQJcp 6XLyP9O8PlHzuXKbhwdPdK28xtoQHyM3Zw+B1pMjdd1cqqIfs+MBcT+IDIBePeaG 3VGJ5QiHNgQVdVvKxDE8upzuvHUlchEwxIGarbkErqXNGTeuGu8gJRodGu1RIy1e oQwDecE/cOqJwMeY5ume5TL7x2cy0Rlcp+6mUrfpe9wXF9W00O5gxqGg3JRvm8e6 btJt9wryay+WCg== -----END CERTIFICATE-----Generated at Mon Oct 26 08:57:16 2026 by rpki-client