$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: U+7VAb+q6nJ9Py1czkFHAFeztDlpwLNTItgeEDG/2Cg= Subject key identifier: 09:FE:0A:A8:F7:15:F9:6F:CE:14:B5:65:F8:E0:25:12:C8:B8:02:E7 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019D2F98E7D665114584ADB2962A630286A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 189D Signing time: Fri 27 Mar 2026 14:00:43 +0000 Manifest this update: Fri 27 Mar 2026 14:00:43 +0000 Manifest next update: Sat 28 Mar 2026 14:00:43 +0000 Files and hashes: 1: 1-A-7q5MSfEASgOSJsLHqRfzUioE.roa (hash: Za0B6sbWjI78oQmGRktphtY5YZXqOifBcaQfnD50Rt0=) 2: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=) 3: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=) 4: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=) 5: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=) 6: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=) 7: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=) 8: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=) 9: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=) 10: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=) 11: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=) 12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: UNv8vkXMSmWWo330SmqkJ564Qmn7MPMwUEHP/c+mhb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2f:98:e7:d6:65:11:45:84:ad:b2:96:2a:63:02:86:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Mar 27 14:00:43 2026 GMT Not After : Mar 28 14:00:43 2026 GMT Subject: CN=09fe0aa8f715f96fce14b565f8e02512c8b802e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:89:f8:32:6f:d1:4b:f4:3c:63:b0:7c:ca: 2a:1e:0a:01:75:a6:38:17:a6:7e:c0:c7:24:51:27: ff:29:8d:15:c1:7a:38:10:17:8a:32:f8:ae:57:a0: d8:1b:f4:df:10:ef:21:4d:4e:d3:10:19:95:57:99: e2:a5:03:a3:69:31:56:e6:cf:bf:e8:eb:ac:7e:23: 25:c2:e3:1a:1c:9d:69:41:ef:cb:71:30:61:1f:db: 44:7d:16:10:7b:4d:a8:75:fd:86:a2:b0:a2:2e:55: 0e:97:f6:cc:51:60:0e:9d:92:98:bf:4b:69:4c:3e: 76:a8:07:ff:74:1c:74:5b:a9:6c:e8:3c:e7:f8:eb: 49:3b:2a:82:16:7b:83:3f:98:d8:e5:50:a5:50:21: 6b:05:ab:f8:2e:c1:b8:04:34:48:85:48:9a:25:9e: 6d:43:c3:cf:33:00:00:df:93:8d:13:29:40:68:7f: 1d:97:83:ab:07:c9:e4:69:de:3c:67:ce:69:79:ec: f5:fb:47:58:74:1f:f0:f3:80:2c:3e:ac:0a:99:ba: 04:be:d5:04:df:db:40:19:3f:2f:09:dc:9f:86:e4: 3c:ce:22:93:fa:c6:d4:8a:e0:6a:92:93:09:a7:71: 56:17:c5:dc:86:5e:71:72:36:4c:43:2b:62:ab:56: 30:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FE:0A:A8:F7:15:F9:6F:CE:14:B5:65:F8:E0:25:12:C8:B8:02:E7 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9f:9b:b8:f5:61:ae:9a:48:46:93:20:5d:71:85:be:4b:b6: 27:fd:3c:01:55:1f:80:4a:c1:21:da:81:7d:1f:a1:9d:de:05: e1:aa:c4:c6:40:06:32:9e:f8:0c:fa:44:34:e1:bf:3a:93:13: 1e:12:a8:40:64:a0:a8:93:b3:49:94:03:39:fa:fa:12:90:d0: 71:67:df:dc:b5:43:16:c8:4b:8c:06:e7:18:71:3e:af:3a:8c: e6:8b:ae:d9:2f:85:28:a7:25:4d:93:c8:a4:26:88:7d:7e:26: e9:e3:22:fb:da:37:4d:00:a8:42:2b:d0:df:fe:8a:20:70:9a: a5:76:3e:3a:94:24:81:c6:74:17:d8:b5:e0:ad:61:e9:a1:2d: 8d:e6:17:89:3f:02:b1:e4:66:69:6c:79:27:bc:76:34:77:96: 80:e6:0b:dd:70:cf:07:18:48:15:10:8f:a1:c8:b6:12:c6:46: 6e:67:5f:03:36:30:2b:83:95:0a:a3:0f:e8:c6:ee:be:7c:d4: a0:b2:b5:b9:6c:0f:8f:ce:03:21:d9:3d:e9:72:b2:5c:5a:55: 45:c3:7e:ee:0f:85:ce:75:2a:76:47:45:2f:d0:f0:32:61:34: a7:73:43:9d:3a:f8:59:af:b3:71:39:fe:c4:01:59:17:78:21: 41:07:6e:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0vmOfWZRFFhK2ylipjAoamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYwMzI3MTQwMDQzWhcNMjYwMzI4MTQwMDQzWjAzMTEwLwYDVQQD EygwOWZlMGFhOGY3MTVmOTZmY2UxNGI1NjVmOGUwMjUxMmM4YjgwMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R6J+DJv0Uv0PGOwfMoqHgoBdaY4 F6Z+wMckUSf/KY0VwXo4EBeKMviuV6DYG/TfEO8hTU7TEBmVV5nipQOjaTFW5s+/ 6OusfiMlwuMaHJ1pQe/LcTBhH9tEfRYQe02odf2GorCiLlUOl/bMUWAOnZKYv0tp TD52qAf/dBx0W6ls6Dzn+OtJOyqCFnuDP5jY5VClUCFrBav4LsG4BDRIhUiaJZ5t Q8PPMwAA35ONEylAaH8dl4OrB8nkad48Z85peez1+0dYdB/w84AsPqwKmboEvtUE 39tAGT8vCdyfhuQ8ziKT+sbUiuBqkpMJp3FWF8Xchl5xcjZMQytiq1Yw4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAn+Cqj3FflvzhS1ZfjgJRLIuALnMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJ+buPVh rppIRpMgXXGFvku2J/08AVUfgErBIdqBfR+hnd4F4arExkAGMp74DPpENOG/OpMT HhKoQGSgqJOzSZQDOfr6EpDQcWff3LVDFshLjAbnGHE+rzqM5ouu2S+FKKclTZPI pCaIfX4m6eMi+9o3TQCoQivQ3/6KIHCapXY+OpQkgcZ0F9i14K1h6aEtjeYXiT8C seRmaWx5J7x2NHeWgOYL3XDPBxhIFRCPoci2EsZGbmdfAzYwK4OVCqMP6MbuvnzU oLK1uWwPj84DIdk96XKyXFpVRcN+7g+FznUqdkdFL9DwMmE0p3NDnTr4Wa+zcTn+ xAFZF3ghQQduZQ== -----END CERTIFICATE-----Generated at Fri Mar 27 22:27:18 2026 by rpki-client