$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: eaP/gVpJygF8HJ4teK5sUbVHXtop9sbTAXDoSlNe//o= Subject key identifier: D4:AB:4F:61:5E:81:61:65:18:D2:5C:BC:5E:B9:67:27:DC:F5:B9:21 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019DF9F22905C4787274B37466CBBCFAF99F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 18FE Signing time: Tue 05 May 2026 21:01:30 +0000 Manifest this update: Tue 05 May 2026 21:01:30 +0000 Manifest next update: Wed 06 May 2026 21:01:30 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: ZeYeF88pdwGWeuyF/K1tlZZCtGg5Um7aS/5Acax8qWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 18:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f9:f2:29:05:c4:78:72:74:b3:74:66:cb:bc:fa:f9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: May 5 21:01:30 2026 GMT Not After : May 6 21:01:30 2026 GMT Subject: CN=d4ab4f615e81616518d25cbc5eb96727dcf5b921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:b0:1f:b6:4f:68:7f:ad:44:64:b0:34:8f: d0:f6:f8:51:35:05:cf:65:fa:e9:b1:ba:43:39:95: 32:d0:3d:34:0d:2a:aa:4b:ff:45:5b:26:29:f9:7c: f9:5a:4b:00:70:18:8e:b4:5a:ed:37:ed:29:23:9b: 8c:57:3b:51:89:4c:c6:41:f0:79:f2:bc:61:22:02: e6:ba:e2:69:82:40:7a:70:02:12:f4:12:7e:1d:9e: c0:d9:a3:1e:8c:9d:20:1b:f0:83:08:29:e1:d3:8f: 79:7a:00:31:d6:3d:3d:ed:ee:c1:4b:2f:0b:6e:77: dd:68:d7:a9:c5:1f:ed:e2:43:6e:e6:b4:b6:c4:8c: db:70:0f:3a:d2:88:5b:41:e5:22:89:a4:62:b6:0e: bd:11:28:fb:71:e4:38:6f:35:51:12:56:19:e6:4b: 90:2a:65:8a:8b:b3:37:b3:b5:1a:54:2e:de:8c:08: 0d:cf:df:e4:b0:08:ad:7f:ee:1c:fa:5a:44:eb:00: 57:e2:b5:f5:c8:67:d2:09:0c:5a:56:dd:56:4f:ef: c1:44:39:b2:0c:a3:fd:7a:d7:0f:bd:dd:5b:99:f2: b8:93:3c:75:83:e6:eb:82:0c:7f:d5:c2:eb:34:c1: a5:ee:3d:77:89:db:de:1c:62:c9:a2:ef:4e:3c:ed: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AB:4F:61:5E:81:61:65:18:D2:5C:BC:5E:B9:67:27:DC:F5:B9:21 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6d:e0:35:32:ad:4d:ee:37:e9:d5:1a:86:2b:7b:d0:d4:68: 79:db:cf:4d:4d:a7:83:e6:97:6e:a4:b8:7a:97:15:2c:c5:79: 27:cf:52:19:3e:8e:cc:4c:cd:af:96:bf:2e:9b:37:e5:c0:62: 37:f1:42:42:cd:e7:fa:7e:43:5d:ef:8c:37:fe:2a:7a:4f:ae: f3:fa:09:84:6f:a4:47:27:bb:5b:e7:67:a6:49:9a:87:81:02: ae:eb:7a:0f:93:33:59:a9:eb:bf:26:1b:dd:5d:a7:a8:3f:d7: 10:74:d5:ef:ef:eb:e8:28:7b:21:db:9f:fa:fe:b1:07:e4:1c: 3c:4a:22:2b:9f:92:d6:af:4d:d7:e4:6c:6e:a7:4e:aa:71:2f: 21:2b:06:4d:63:9a:ad:7f:f2:ca:e0:ad:b4:51:ac:3d:9e:9a: b1:5b:6e:75:c7:2a:c5:2a:41:1e:5d:45:c4:78:84:83:2f:15: 8f:b4:e7:fb:65:8b:41:3a:15:a3:27:6d:27:5c:f7:c1:ff:06: 8c:df:05:ab:fc:15:e8:b2:f1:c7:b4:20:1d:88:5a:0c:79:b3: 9a:2e:83:71:c6:ce:6e:e0:fe:67:00:c2:61:b1:19:44:4c:7b: df:5c:70:71:8f:ac:6a:35:7f:fc:51:ee:b5:d4:57:74:96:d5: 04:50:58:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ358ikFxHhydLN0Zsu8+vmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwNTA1MjEwMTMwWhcNMjYwNTA2MjEwMTMwWjAzMTEwLwYDVQQD EyhkNGFiNGY2MTVlODE2MTY1MThkMjVjYmM1ZWI5NjcyN2RjZjViOTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2iwH7ZPaH+tRGSwNI/Q9vhRNQXP ZfrpsbpDOZUy0D00DSqqS/9FWyYp+Xz5WksAcBiOtFrtN+0pI5uMVztRiUzGQfB5 8rxhIgLmuuJpgkB6cAIS9BJ+HZ7A2aMejJ0gG/CDCCnh0495egAx1j097e7BSy8L bnfdaNepxR/t4kNu5rS2xIzbcA860ohbQeUiiaRitg69ESj7ceQ4bzVRElYZ5kuQ KmWKi7M3s7UaVC7ejAgNz9/ksAitf+4c+lpE6wBX4rX1yGfSCQxaVt1WT+/BRDmy DKP9etcPvd1bmfK4kzx1g+brggx/1cLrNMGl7j13idveHGLJou9OPO1gBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSrT2FegWFlGNJcvF65Zyfc9bkhMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOW3gNTKt Te436dUahit70NRoedvPTU2ng+aXbqS4epcVLMV5J89SGT6OzEzNr5a/Lps35cBi N/FCQs3n+n5DXe+MN/4qek+u8/oJhG+kRye7W+dnpkmah4ECrut6D5MzWanrvyYb 3V2nqD/XEHTV7+/r6Ch7Iduf+v6xB+QcPEoiK5+S1q9N1+RsbqdOqnEvISsGTWOa rX/yyuCttFGsPZ6asVtudccqxSpBHl1FxHiEgy8Vj7Tn+2WLQToVoydtJ1z3wf8G jN8Fq/wV6LLxx7QgHYhaDHmzmi6DccbObuD+ZwDCYbEZREx731xwcY+sajV//FHu tdRXdJbVBFBYWQ== -----END CERTIFICATE-----Generated at Wed May 6 03:27:55 2026 by rpki-client