$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: 5vCPuQaDwlRE4pKx7s03qJXQTnDTGrJTh940NIfpahw= Subject key identifier: D5:F7:0C:CD:52:43:08:55:96:B3:07:F7:A4:AB:79:5E:94:1E:93:4D Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019D0E5679C5382215AF600D6247074DCE9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1884 Signing time: Sat 21 Mar 2026 03:00:41 +0000 Manifest this update: Sat 21 Mar 2026 03:00:41 +0000 Manifest next update: Sun 22 Mar 2026 03:00:41 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: 4rPHyvPi0zbvHmXeyRk6wQCs7sMZ3OKKZ+vXL1owQVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0e:56:79:c5:38:22:15:af:60:0d:62:47:07:4d:ce:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Mar 21 03:00:41 2026 GMT Not After : Mar 22 03:00:41 2026 GMT Subject: CN=d5f70ccd5243085596b307f7a4ab795e941e934d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:08:9d:73:1a:60:87:f6:15:2a:38:56:e6: 40:01:80:3b:d1:9b:9e:49:35:2b:10:af:16:74:37: b0:e7:7f:f6:4b:96:90:71:b7:8e:27:d6:4d:1a:92: fc:47:aa:e1:b5:79:c8:b8:6b:ec:7d:57:bc:ae:3f: 5e:e2:fe:ad:67:ea:e8:a4:1f:84:c5:68:ed:69:be: 29:8f:38:73:2a:cc:c2:23:10:f4:88:bb:93:55:1d: 3e:96:83:ac:51:5f:0b:82:e1:44:78:6a:4f:12:f6: ed:d2:ea:aa:cc:34:b9:fc:ce:35:00:ec:f6:c8:de: 6f:88:d7:76:c1:0e:39:b3:81:7c:fd:b8:a4:89:a6: 97:65:5c:2f:6c:ae:31:b2:40:02:6c:17:b4:6d:8d: 47:c8:30:45:18:86:cb:8a:bc:d5:86:2e:56:1a:1f: 17:29:81:01:31:3b:81:e2:50:2f:55:2c:8b:26:52: 6d:00:5c:d8:90:90:af:f7:bd:c4:8b:2e:b9:2b:b2: ed:16:26:ee:25:d3:fb:cf:a0:50:ac:88:bb:57:7a: 5c:b5:3c:ac:77:02:83:35:70:3e:da:1e:d2:35:8a: 14:81:7d:b8:52:40:b2:93:84:39:a1:8f:c2:e0:2a: ee:bd:2a:7b:be:e3:c3:15:08:0b:80:80:ec:2f:4b: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F7:0C:CD:52:43:08:55:96:B3:07:F7:A4:AB:79:5E:94:1E:93:4D X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fe:bd:96:fb:4f:70:11:19:93:fb:9a:36:0c:fc:25:d3:7a: 8c:e3:98:8d:3a:f2:75:21:3e:a3:e2:8f:a7:e0:6f:46:e2:81: 6a:7d:b2:de:77:56:7c:d8:e4:6e:be:3c:a7:81:a3:aa:3c:6e: ec:47:51:c0:1d:20:fb:57:6e:cd:5b:30:98:13:5b:bb:a0:02: 3e:9b:84:44:de:cc:4e:80:76:46:a9:4a:5e:a5:ce:4e:ad:53: 46:3a:21:ee:5e:f9:94:8c:b0:d0:0b:31:c8:79:e4:a1:51:13: 49:0e:75:90:0d:08:87:43:fb:4f:9f:03:c1:ef:6d:66:4a:fa: 8a:21:23:13:32:d6:76:7d:54:c3:ed:c0:a0:f9:09:b5:18:83: 00:95:dc:22:b5:4c:b5:bd:73:2d:d2:e5:19:44:67:c0:cb:fe: 2a:55:fa:3c:21:c3:01:78:18:2a:f7:12:bc:0c:30:4a:0f:7a: a3:49:83:c4:92:8a:71:be:9a:30:26:3c:bb:62:38:4a:cf:d2: 89:5b:31:34:c9:b3:07:1c:7a:b8:c7:5c:1d:8c:4c:ca:8d:fd: 26:d6:1d:b9:9a:fb:e0:f4:64:8b:17:80:e0:66:87:7b:31:a7: 5c:ee:bb:30:c5:92:5a:0b:9e:69:4a:4e:7f:78:c6:d9:35:b6: e8:ce:1c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0OVnnFOCIVr2ANYkcHTc6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMzIxMDMwMDQxWhcNMjYwMzIyMDMwMDQxWjAzMTEwLwYDVQQD EyhkNWY3MGNjZDUyNDMwODU1OTZiMzA3ZjdhNGFiNzk1ZTk0MWU5MzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQwInXMaYIf2FSo4VuZAAYA70Zue STUrEK8WdDew53/2S5aQcbeOJ9ZNGpL8R6rhtXnIuGvsfVe8rj9e4v6tZ+ropB+E xWjtab4pjzhzKszCIxD0iLuTVR0+loOsUV8LguFEeGpPEvbt0uqqzDS5/M41AOz2 yN5viNd2wQ45s4F8/bikiaaXZVwvbK4xskACbBe0bY1HyDBFGIbLirzVhi5WGh8X KYEBMTuB4lAvVSyLJlJtAFzYkJCv973Eiy65K7LtFibuJdP7z6BQrIi7V3pctTys dwKDNXA+2h7SNYoUgX24UkCyk4Q5oY/C4CruvSp7vuPDFQgLgIDsL0svwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNX3DM1SQwhVlrMH96SreV6UHpNNMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnP69lvtP cBEZk/uaNgz8JdN6jOOYjTrydSE+o+KPp+BvRuKBan2y3ndWfNjkbr48p4Gjqjxu 7EdRwB0g+1duzVswmBNbu6ACPpuERN7MToB2RqlKXqXOTq1TRjoh7l75lIyw0Asx yHnkoVETSQ51kA0Ih0P7T58Dwe9tZkr6iiEjEzLWdn1Uw+3AoPkJtRiDAJXcIrVM tb1zLdLlGURnwMv+KlX6PCHDAXgYKvcSvAwwSg96o0mDxJKKcb6aMCY8u2I4Ss/S iVsxNMmzBxx6uMdcHYxMyo39JtYduZr74PRkixeA4GaHezGnXO67MMWSWgueaUpO f3jG2TW26M4cEA== -----END CERTIFICATE-----Generated at Sat Mar 21 13:37:23 2026 by rpki-client