$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json) Hash identifier: 9rWTIUQDvcLZg57xna/TyeO5A7E/bs1hiTgAO5QH0TA= Subject key identifier: 63:38:13:43:04:60:A0:3E:25:91:AB:A0:92:22:CB:85:AB:FC:33:2F Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Certificate serial: 019DF2A70FB971BE08DE64941EF74F9635FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft Manifest number: 18F8 Signing time: Mon 04 May 2026 11:02:07 +0000 Manifest this update: Mon 04 May 2026 11:02:07 +0000 Manifest next update: Tue 05 May 2026 11:02:07 +0000 Files and hashes: 1: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=) 2: Ble-2DKUX-bI_pCO2COt4CKXa8c.roa (hash: CZIHpvsUMQoZP0t5OmkQjhg6lPLENkoG8ZqKq6OJf9Q=) 3: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=) 4: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=) 5: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=) 6: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=) 7: Owp7cvm8NDNBtb60T9My_H2PMFM.roa (hash: sBd3E4HJTZypTon5hRj/aFTgjl8M5RDWaPXG9heQFls=) 8: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=) 9: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: c/8GZj7Je0ZFwcqshdqa/vJ9Bg5YcuZUPIUy4dY5xRo=) 10: Zyrvvt-0YaM1oJVY3gEtrt1vmFI.roa (hash: bZNszqhnT3nG89SByGHQ2OOopVxYZGpnqUauM45GA3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 May 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f2:a7:0f:b9:71:be:08:de:64:94:1e:f7:4f:96:35:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Validity Not Before: May 4 11:02:07 2026 GMT Not After : May 5 11:02:07 2026 GMT Subject: CN=633813430460a03e2591aba09222cb85abfc332f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:2d:ae:30:32:2e:e5:21:1e:ac:b8:3e:09: 36:f0:22:d3:eb:0d:49:22:d6:46:e2:8e:9b:fd:f2: 07:12:f2:74:2a:d6:74:85:fe:76:47:c1:16:a1:e5: 9c:41:ab:62:a9:24:db:cf:63:61:57:c1:10:e8:dc: 0d:75:7f:a8:f8:7f:e8:52:67:93:a7:1e:9f:fc:6d: 66:6e:ed:8f:21:90:59:4e:0c:2e:c3:3a:33:e5:03: 30:21:89:35:90:e4:66:88:80:b8:c6:0a:bc:6c:2e: ce:78:13:b0:d0:ba:ba:e7:90:b4:86:cd:ed:a7:5a: f2:22:b0:ba:6b:6c:2f:b3:97:0c:65:f8:e5:58:ec: fe:67:0f:57:85:f5:c9:dd:06:f5:df:d8:3a:23:e3: 8a:16:15:de:62:7a:48:20:fa:f9:52:c8:21:3f:5c: 0a:e6:17:d8:a4:b9:bc:88:34:bc:56:5b:4b:03:d7: 64:2d:1d:51:2d:70:f3:ce:9d:02:2c:d4:77:6e:1c: 89:6b:c8:ea:81:fc:dc:38:78:1c:cc:0a:51:15:68: ad:83:7c:ec:5c:c4:4f:54:43:14:73:8b:c1:74:47: ac:34:4c:2e:3d:14:d1:c7:90:b9:df:6b:85:dc:b0: ba:00:ce:de:5d:cf:00:5c:8b:96:fa:08:35:a5:89: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:38:13:43:04:60:A0:3E:25:91:AB:A0:92:22:CB:85:AB:FC:33:2F X509v3 Authority Key Identifier: keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ba:8d:df:f5:f3:54:b9:e4:44:32:a5:ae:cc:09:5d:15:6f: 20:30:63:05:8b:54:37:5c:43:4f:fa:e6:e7:8b:87:2b:2c:8e: a7:44:44:f7:97:10:63:a5:74:88:d0:af:46:06:3e:a1:77:96: c6:23:b0:35:ba:00:d2:6b:6c:e2:77:41:c8:f0:ba:84:7d:c3: 6c:56:3d:d4:19:79:60:2d:84:f5:97:c7:03:42:4d:c5:48:df: 35:bb:39:76:fc:62:0a:3a:da:41:8c:40:af:29:30:52:c2:a8: b6:d0:b4:95:bf:b7:af:e9:53:83:15:ba:de:bc:18:49:5d:9e: a5:50:3a:52:26:73:2e:79:c6:ba:46:c4:47:5b:b7:b2:26:f7: 20:c8:dc:ab:37:d6:aa:b1:75:1d:d0:6d:78:9d:cb:d0:11:83: 7d:c6:3a:3e:b2:12:8f:e9:a7:ba:dd:fe:89:4a:d9:2b:50:7e: 09:8e:46:c9:82:ba:7f:a1:e5:d6:dc:0a:ee:3d:fd:6e:22:c8: 92:70:41:fb:40:a1:e2:5d:e7:29:ee:3a:2c:21:8b:8b:97:9f: 00:a1:82:e0:f1:7d:bb:be:67:82:7f:01:3c:13:35:96:30:a5: 78:b7:89:be:de:ed:b1:0d:c9:11:a4:f7:53:9d:4d:29:e0:b5: 57:7a:ab:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3ypw+5cb4I3mSUHvdPljX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw NjIxMGUwHhcNMjYwNTA0MTEwMjA3WhcNMjYwNTA1MTEwMjA3WjAzMTEwLwYDVQQD Eyg2MzM4MTM0MzA0NjBhMDNlMjU5MWFiYTA5MjIyY2I4NWFiZmMzMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyMtrjAyLuUhHqy4Pgk28CLT6w1J ItZG4o6b/fIHEvJ0KtZ0hf52R8EWoeWcQatiqSTbz2NhV8EQ6NwNdX+o+H/oUmeT px6f/G1mbu2PIZBZTgwuwzoz5QMwIYk1kORmiIC4xgq8bC7OeBOw0Lq655C0hs3t p1ryIrC6a2wvs5cMZfjlWOz+Zw9XhfXJ3Qb139g6I+OKFhXeYnpIIPr5UsghP1wK 5hfYpLm8iDS8VltLA9dkLR1RLXDzzp0CLNR3bhyJa8jqgfzcOHgczApRFWitg3zs XMRPVEMUc4vBdEesNEwuPRTRx5C532uF3LC6AM7eXc8AXIuW+gg1pYmPEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM4E0MEYKA+JZGroJIiy4Wr/DMvMB8GA1UdIwQY MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt NDA0Nzk4NzA5NzZlLzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrqN3/Xz VLnkRDKlrswJXRVvIDBjBYtUN1xDT/rm54uHKyyOp0RE95cQY6V0iNCvRgY+oXeW xiOwNboA0mts4ndByPC6hH3DbFY91Bl5YC2E9ZfHA0JNxUjfNbs5dvxiCjraQYxA rykwUsKottC0lb+3r+lTgxW63rwYSV2epVA6UiZzLnnGukbER1u3sib3IMjcqzfW qrF1HdBteJ3L0BGDfcY6PrISj+mnut3+iUrZK1B+CY5GyYK6f6Hl1twK7j39biLI knBB+0Ch4l3nKe46LCGLi5efAKGC4PF9u75ngn8BPBM1ljCleLeJvt7tsQ3JEaT3 U51NKeC1V3qr0Q== -----END CERTIFICATE-----Generated at Mon May 4 13:18:49 2026 by rpki-client