$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: MjbS1DHaNJepyUz6nz3oHRGZ7aaTl3Ct4ZbSkCPjoE4= Subject key identifier: EC:CB:0A:9D:F1:52:D2:84:69:A4:6E:41:5E:58:CB:B4:4E:DA:82:C8 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 01A06E396A7987CED2C8F66323E70F82FEA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0DA3 Signing time: Fri 04 Sep 2026 21:00:51 +0000 Manifest this update: Fri 04 Sep 2026 21:00:51 +0000 Manifest next update: Sat 05 Sep 2026 21:00:51 +0000 Files and hashes: 1: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=) 2: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=) 3: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=) 4: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=) 5: CSmKTNAvawh8XsEkgkrFERa_yiY.roa (hash: uAIJ9ALdwfJ9g4zl3CS6Ug1EGzr6MThwz4GVhjHfCeo=) 6: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=) 7: R2Xs7XqXEclO85JXT59oGHv2UUY.roa (hash: nIFGF9nru9tSwOgFOZOY266TEUqFgtMmSxtUiekx1us=) 8: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (hash: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ=) 9: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=) 10: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=) 11: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=) 12: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: Rq7G752CdWpTOO4kaV474fmu7+puu8BcNAcnd9Mr8XQ=) 13: _KOoXuIy-JpSDDCszJO9wC3Bn4o.roa (hash: ev27sZHARHUebbK4YGLxKKHuyDx3oCAJQZgHXUBVYKk=) 14: c7cUumgx_nzdqcQyZry7JjAxNsI.roa (hash: h+eVuTX1ch1Bym3SZz/V4dnDjWuB0LPUsUUvQv1wkkI=) 15: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=) 16: o1UYE1jV5PblyZO2iNZ4-raUgSI.roa (hash: 27dqGZSaERzz4YwOJ962/KtMY8HRkVITXFCH3q2fZyY=) 17: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=) 18: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=) 19: w4pOS00-WT8ek8G2Mdr-YEPTPPU.roa (hash: NfeOWBwkuTv2O7eYqPzr/8E7DBvsLk+YN3z1wBrs2GE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 20:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6e:39:6a:79:87:ce:d2:c8:f6:63:23:e7:0f:82:fe:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Sep 4 21:00:51 2026 GMT Not After : Sep 5 21:00:51 2026 GMT Subject: CN=eccb0a9df152d28469a46e415e58cbb44eda82c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:17:f1:04:e1:5e:16:78:53:cc:e1:03:c9: 8d:04:a0:45:87:03:f9:f0:51:8d:41:09:7a:b4:e1: 18:0c:0a:77:ef:41:2e:38:31:fe:53:69:48:e9:bc: f6:be:18:b7:37:8a:2d:eb:c1:04:d7:24:9c:ce:69: ae:f6:70:17:ed:88:1f:4e:2c:76:03:f4:c5:7c:3d: a2:31:7b:00:f4:f2:9b:0e:ea:6d:62:f1:1c:c1:bc: a1:cb:68:3e:b7:fd:66:63:40:e3:9b:f5:74:e8:0d: b5:c9:1a:31:29:a9:95:3c:09:05:08:fb:9c:9f:5b: b3:ed:80:44:af:48:13:70:0f:e3:3c:df:a5:c8:ed: 6b:9a:a0:0e:cc:de:84:0a:81:26:57:fd:b1:4d:b4: d6:cb:04:1d:49:2f:4f:63:f0:df:15:0f:32:53:5c: 4e:e7:06:d4:38:75:47:ec:78:d0:c5:06:0a:0c:a7: 97:b6:d6:14:de:28:52:66:6f:26:57:46:39:99:6d: 77:03:a9:cf:f6:ef:d9:35:cd:1f:93:82:ee:5f:0e: c0:12:1d:ed:65:87:ed:32:ed:fb:de:dc:60:24:60: c9:54:81:ed:f0:ad:25:1d:21:30:2f:bf:47:61:b1: 2b:ac:a1:7e:1f:66:45:0b:0e:89:cb:84:d9:dc:90: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CB:0A:9D:F1:52:D2:84:69:A4:6E:41:5E:58:CB:B4:4E:DA:82:C8 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d0:d0:a1:b3:48:c0:5a:73:a6:05:44:32:8b:b0:1a:ae:ef: bd:d2:c3:c1:76:78:b3:93:fa:ce:c6:f6:1e:56:8e:6d:06:35: d0:be:af:3d:ef:fe:9c:bd:fe:53:ce:f5:a2:ea:9e:44:de:09: 2d:14:39:8a:d1:bb:62:ed:d1:80:5f:ed:8e:61:3f:f0:0b:12: 82:c4:af:2f:ae:f3:db:db:56:be:f7:74:eb:b6:5c:f8:4f:e6: 37:b2:b1:4e:d4:a9:25:cf:75:af:06:b2:7e:c5:1a:de:be:37: 0f:a4:c3:f8:13:49:7e:9e:0f:28:20:28:22:78:fb:a0:51:99: e9:7d:2c:a8:65:ed:83:7a:78:e3:e0:23:b2:e2:8c:05:4d:b6: a4:ba:be:91:97:24:3c:2a:15:13:2d:82:f2:62:45:db:bf:84: b2:ae:23:34:de:75:3c:a1:f2:9e:49:91:04:6b:cd:d3:22:c7: e3:98:8f:1a:d5:ac:0d:c0:92:00:da:86:fd:dc:42:59:06:1c: 1a:55:ee:55:22:d2:75:1b:03:17:f7:f6:4a:21:de:3f:4d:26: 7a:30:89:c0:5b:82:7b:ce:e3:ca:2c:ff:ea:7e:76:14:5d:c0: 6b:11:65:09:f2:3c:c4:7d:a8:2d:3e:a2:1e:6d:f6:4a:7b:d8: cf:39:b2:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBuOWp5h87SyPZjI+cPgv6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwOTA0MjEwMDUxWhcNMjYwOTA1MjEwMDUxWjAzMTEwLwYDVQQD EyhlY2NiMGE5ZGYxNTJkMjg0NjlhNDZlNDE1ZTU4Y2JiNDRlZGE4MmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2MX8QThXhZ4U8zhA8mNBKBFhwP5 8FGNQQl6tOEYDAp370EuODH+U2lI6bz2vhi3N4ot68EE1ySczmmu9nAX7YgfTix2 A/TFfD2iMXsA9PKbDuptYvEcwbyhy2g+t/1mY0Djm/V06A21yRoxKamVPAkFCPuc n1uz7YBEr0gTcA/jPN+lyO1rmqAOzN6ECoEmV/2xTbTWywQdSS9PY/DfFQ8yU1xO 5wbUOHVH7HjQxQYKDKeXttYU3ihSZm8mV0Y5mW13A6nP9u/ZNc0fk4LuXw7AEh3t ZYftMu373txgJGDJVIHt8K0lHSEwL79HYbErrKF+H2ZFCw6Jy4TZ3JDg5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzLCp3xUtKEaaRuQV5Yy7RO2oLIMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNDQobNI wFpzpgVEMouwGq7vvdLDwXZ4s5P6zsb2HlaObQY10L6vPe/+nL3+U871ouqeRN4J LRQ5itG7Yu3RgF/tjmE/8AsSgsSvL67z29tWvvd067Zc+E/mN7KxTtSpJc91rway fsUa3r43D6TD+BNJfp4PKCAoInj7oFGZ6X0sqGXtg3p44+AjsuKMBU22pLq+kZck PCoVEy2C8mJF27+Esq4jNN51PKHynkmRBGvN0yLH45iPGtWsDcCSANqG/dxCWQYc GlXuVSLSdRsDF/f2SiHeP00mejCJwFuCe87jyiz/6n52FF3AaxFlCfI8xH2oLT6i Hm32SnvYzzmyng== -----END CERTIFICATE-----Generated at Sat Sep 5 06:52:44 2026 by rpki-client