$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json) Hash identifier: E41PyGr6OXidnIFuT87H840boiE8F4Xv79W/zv8sTdo= Subject key identifier: 2F:2C:B9:A0:5D:E6:35:64:49:2A:ED:B2:33:14:A9:1B:42:6C:8B:91 Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019FED43BC169EBEEC6062DA38CDB09E76F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft Manifest number: 0EBA Signing time: Mon 10 Aug 2026 20:01:06 +0000 Manifest this update: Mon 10 Aug 2026 20:01:06 +0000 Manifest next update: Tue 11 Aug 2026 20:01:06 +0000 Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=) 2: A1CXr4dOt7xuCmQiPBtgt3iWtAo.roa (hash: GtPqaBuYk/tZ5YQVdapU19lv8Ijc7CBMwLU16C7BxnM=) 3: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=) 4: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=) 5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: m4gJ9/83bzdNRmYrxjnmc8OCp1Ysm8D4PDtaUvLw/lc=) 6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=) 7: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=) 8: eqKnQgR3Z3QzGQfveZTC-r9HgHg.asa (hash: zwc2/cXGVh90A6S8KR+/k+8p7KQXn9Hn6gTyZ7Bdy4M=) 9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=) 10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Aug 2026 14:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ed:43:bc:16:9e:be:ec:60:62:da:38:cd:b0:9e:76:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Aug 10 20:01:06 2026 GMT Not After : Aug 11 20:01:06 2026 GMT Subject: CN=2f2cb9a05de63564492aedb23314a91b426c8b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:60:d5:57:97:9e:83:f8:c6:d7:a6:89:34: 9d:41:27:a8:83:9e:69:d7:dd:81:78:d2:06:43:24: 59:4e:85:61:5c:62:72:ce:f4:ec:d4:9d:fd:60:ad: 5d:ca:67:8d:ef:2d:46:0e:cd:91:93:bb:eb:2d:85: dd:c9:08:5f:4d:1a:e5:56:e9:7a:82:71:02:46:56: dc:9a:72:be:2e:57:dd:15:0c:e6:53:29:f8:67:4b: 29:d6:f1:85:02:ca:1b:e6:36:2d:93:6c:b4:0f:b4: 1a:eb:b8:fe:b4:2e:8a:79:80:ea:b5:77:e0:9f:47: 3c:ed:a3:80:f0:6d:c3:3a:24:e4:1b:86:b8:91:c3: 58:7d:9d:cf:ad:e1:d4:59:74:72:4d:9a:9d:70:6c: 79:e7:39:86:b3:b2:5d:ab:3a:46:6b:53:39:09:e3: 08:c9:49:06:1a:34:a5:b0:6a:2a:9d:61:87:83:38: db:0b:d8:00:d3:27:41:25:59:72:37:90:ff:d9:c0: cf:d1:54:12:42:76:e8:66:61:e0:26:9e:8d:62:8f: 4e:5b:4b:99:bf:e3:44:47:88:74:71:9a:0c:65:9f: 64:ae:51:31:35:fb:f3:24:e9:88:f1:29:b0:11:5b: 8a:cd:34:5f:72:3f:e5:6c:74:0d:7f:96:37:08:50: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2C:B9:A0:5D:E6:35:64:49:2A:ED:B2:33:14:A9:1B:42:6C:8B:91 X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5c:85:e6:19:db:a4:8b:ad:30:0d:33:2d:06:99:33:48:7f: 0d:73:e1:09:0a:37:87:3a:e0:5b:6b:6f:50:b3:d9:f1:0a:b7: 29:73:75:bc:a9:ef:8e:b0:5c:29:f3:02:1b:db:f2:ba:4f:07: c0:0f:e4:c2:6f:33:7b:94:47:2c:cb:65:70:28:ab:f2:f6:aa: 96:3e:fd:a3:d2:07:70:b7:6e:31:eb:3d:f6:e5:c8:94:b7:cf: ad:c1:9e:2f:b0:39:c0:f7:d5:07:69:57:8c:26:20:50:a6:04: 53:d5:6e:d6:3f:6f:ae:c6:26:87:69:18:ac:86:a7:08:95:c3: 1b:36:4b:c1:33:64:63:c5:a9:30:9f:63:af:d1:fd:35:dd:ce: 16:76:1e:90:de:5b:1f:c3:cc:69:a9:db:cf:87:9c:29:15:02: 50:03:e3:81:f8:dd:88:d3:ac:cb:88:ce:3c:7e:c4:91:4d:be: ec:d9:59:27:f2:e9:8c:a6:1d:4d:31:a5:13:5c:6f:fb:ac:50: d0:40:23:82:5f:d7:72:41:4e:64:69:ba:4e:ca:fb:a1:a2:02: 02:6b:0f:d6:8d:b1:f0:de:ec:21:ca:b4:76:7b:c6:96:3d:fd: 5a:73:90:2d:e8:9a:e5:62:68:35:72:b3:db:28:07:8d:b5:f0: ca:92:6e:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/tQ7wWnr7sYGLaOM2wnnb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwODEwMjAwMTA2WhcNMjYwODExMjAwMTA2WjAzMTEwLwYDVQQD EygyZjJjYjlhMDVkZTYzNTY0NDkyYWVkYjIzMzE0YTkxYjQyNmM4YjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Rg1VeXnoP4xtemiTSdQSeog55p 192BeNIGQyRZToVhXGJyzvTs1J39YK1dymeN7y1GDs2Rk7vrLYXdyQhfTRrlVul6 gnECRlbcmnK+LlfdFQzmUyn4Z0sp1vGFAsob5jYtk2y0D7Qa67j+tC6KeYDqtXfg n0c87aOA8G3DOiTkG4a4kcNYfZ3PreHUWXRyTZqdcGx55zmGs7JdqzpGa1M5CeMI yUkGGjSlsGoqnWGHgzjbC9gA0ydBJVlyN5D/2cDP0VQSQnboZmHgJp6NYo9OW0uZ v+NER4h0cZoMZZ9krlExNfvzJOmI8SmwEVuKzTRfcj/lbHQNf5Y3CFDGkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8suaBd5jVkSSrtsjMUqRtCbIuRMB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlyF5hnb pIutMA0zLQaZM0h/DXPhCQo3hzrgW2tvULPZ8Qq3KXN1vKnvjrBcKfMCG9vyuk8H wA/kwm8ze5RHLMtlcCir8vaqlj79o9IHcLduMes99uXIlLfPrcGeL7A5wPfVB2lX jCYgUKYEU9Vu1j9vrsYmh2kYrIanCJXDGzZLwTNkY8WpMJ9jr9H9Nd3OFnYekN5b H8PMaanbz4ecKRUCUAPjgfjdiNOsy4jOPH7EkU2+7NlZJ/LpjKYdTTGlE1xv+6xQ 0EAjgl/XckFOZGm6Tsr7oaICAmsP1o2x8N7sIcq0dnvGlj39WnOQLeia5WJoNXKz 2ygHjbXwypJusw== -----END CERTIFICATE-----Generated at Mon Aug 10 23:44:17 2026 by rpki-client