$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: GRnMI0PmLOjIsV1o8GrWSppvCFBACkieG3Xz7TqAntU= Subject key identifier: 70:4B:68:44:E3:79:07:44:74:97:36:F8:FD:5E:B2:08:9F:3E:B1:0E Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 01A0B6F7F5442D510D46A01F5EB25E15CE73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1A69 Signing time: Sat 19 Sep 2026 00:01:38 +0000 Manifest this update: Sat 19 Sep 2026 00:01:38 +0000 Manifest next update: Sun 20 Sep 2026 00:01:38 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: DlErgNwLhRCV4cgwMAJmFMBQdq9kG6zaISOgJxQGRgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b6:f7:f5:44:2d:51:0d:46:a0:1f:5e:b2:5e:15:ce:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Sep 19 00:01:38 2026 GMT Not After : Sep 20 00:01:38 2026 GMT Subject: CN=704b6844e3790744749736f8fd5eb2089f3eb10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:72:ba:88:33:c4:47:ac:f2:a8:3b:96:75: 9f:c2:3f:84:c4:79:6d:00:d4:3e:8f:b9:9b:aa:a9: 30:cd:f4:54:f4:95:a0:f7:67:51:fa:23:7c:58:b9: 6b:67:3c:e8:d6:cb:cf:d7:42:ee:00:90:d2:97:3e: 28:e3:cc:40:0d:48:6c:43:cc:b1:d1:a2:27:cf:8f: 93:54:95:ce:91:ea:61:3a:2d:6f:76:fb:88:8b:f1: e3:24:18:b4:df:36:b0:b6:70:33:01:8a:9a:90:80: c1:06:07:be:c2:e8:31:b0:3a:d6:d2:9f:08:15:dc: e1:73:ce:3d:50:a7:bd:22:5f:ab:80:c2:c6:1a:f8: da:36:29:21:65:b3:bd:60:33:4e:11:ce:be:fe:2b: 44:24:c2:7f:55:f3:c3:26:2c:da:ed:26:74:7a:62: 45:ff:ea:7e:a0:1f:50:8a:1f:e2:e6:c1:72:41:26: 3c:a1:af:1a:4c:63:df:b1:b7:9a:25:a1:aa:5a:0f: 6b:0e:fb:87:9f:62:b1:0f:40:99:9d:20:3e:77:aa: 24:54:81:af:71:2e:6f:94:d4:db:36:a9:d0:e6:ef: e9:f4:24:22:45:c6:0c:37:e1:91:69:7c:86:fb:41: c3:10:30:f2:a2:e9:bd:02:0b:38:29:82:e6:f6:f1: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4B:68:44:E3:79:07:44:74:97:36:F8:FD:5E:B2:08:9F:3E:B1:0E X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:01:7f:96:8c:53:cb:9f:4e:be:ed:1b:1c:40:16:a8:60:6e: 71:57:4d:e2:bd:ab:f1:ba:6f:5b:4f:03:cc:06:51:f5:ed:bd: 85:52:ed:43:d4:65:5d:4b:37:25:29:5b:59:11:34:3c:e7:53: 11:18:09:90:72:d9:ac:df:dd:11:11:c1:aa:fa:6f:84:ca:af: 52:23:e1:07:92:60:03:6b:86:b5:ad:42:c1:ad:d6:a6:d1:c7: c8:af:1c:33:4e:57:95:f0:92:9d:c2:0b:6f:c4:f9:3e:b6:f4: df:cd:29:be:99:83:cf:e4:1a:4c:9b:3d:e7:2e:d0:e2:53:bd: 47:ca:95:07:29:e1:be:50:91:7a:69:68:b0:75:4b:b2:bf:6f: 08:f7:4a:7f:66:e0:85:a1:cb:d8:5f:12:80:69:4f:d2:a5:12: 30:6c:d2:aa:b9:55:88:9e:34:39:0d:74:a4:6f:3a:3a:1b:62: 75:5b:fe:bf:66:61:a2:c2:2c:33:b9:ab:24:ac:43:4e:5f:16: 5d:ec:2b:95:38:86:60:31:9f:44:ab:be:d6:bd:0a:cb:3b:8f: fa:7c:82:fd:95:74:7b:24:e1:c8:5c:3c:f4:f9:5d:a8:ed:4e: fd:01:84:4c:0c:2f:b2:47:da:a3:d4:f8:72:86:37:46:1a:2a: e1:68:70:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC29/VELVENRqAfXrJeFc5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwOTE5MDAwMTM4WhcNMjYwOTIwMDAwMTM4WjAzMTEwLwYDVQQD Eyg3MDRiNjg0NGUzNzkwNzQ0NzQ5NzM2ZjhmZDVlYjIwODlmM2ViMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZFyuogzxEes8qg7lnWfwj+ExHlt ANQ+j7mbqqkwzfRU9JWg92dR+iN8WLlrZzzo1svP10LuAJDSlz4o48xADUhsQ8yx 0aInz4+TVJXOkephOi1vdvuIi/HjJBi03zawtnAzAYqakIDBBge+wugxsDrW0p8I Fdzhc849UKe9Il+rgMLGGvjaNikhZbO9YDNOEc6+/itEJMJ/VfPDJiza7SZ0emJF /+p+oB9Qih/i5sFyQSY8oa8aTGPfsbeaJaGqWg9rDvuHn2KxD0CZnSA+d6okVIGv cS5vlNTbNqnQ5u/p9CQiRcYMN+GRaXyG+0HDEDDyoum9Ags4KYLm9vEEfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBLaETjeQdEdJc2+P1esgifPrEOMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAF/loxT y59Ovu0bHEAWqGBucVdN4r2r8bpvW08DzAZR9e29hVLtQ9RlXUs3JSlbWRE0POdT ERgJkHLZrN/dERHBqvpvhMqvUiPhB5JgA2uGta1Cwa3WptHHyK8cM05XlfCSncIL b8T5Prb0380pvpmDz+QaTJs95y7Q4lO9R8qVBynhvlCRemlosHVLsr9vCPdKf2bg haHL2F8SgGlP0qUSMGzSqrlViJ40OQ10pG86OhtidVv+v2ZhosIsM7mrJKxDTl8W XewrlTiGYDGfRKu+1r0KyzuP+nyC/ZV0eyThyFw89PldqO1O/QGETAwvskfao9T4 coY3Rhoq4WhwWQ== -----END CERTIFICATE-----Generated at Sat Sep 19 03:41:41 2026 by rpki-client