$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft File: zRMnjr9PSbQk-9SpxwB9J0du0wc.mft (raw, json) Hash identifier: E/jpJy6QGC0b/nPYLHXkqb/4Q4xiG+uI/CL9d00TqNs= Subject key identifier: E7:D3:FD:08:A0:7B:16:11:33:2A:46:CB:68:6D:04:9B:2D:1B:D2:70 Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Certificate serial: 01A1637C51338CCE61502F9034005FE6990C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft Manifest number: 0138 Signing time: Thu 22 Oct 2026 12:00:53 +0000 Manifest this update: Thu 22 Oct 2026 12:00:53 +0000 Manifest next update: Fri 23 Oct 2026 12:00:53 +0000 Files and hashes: 1: 04r64BSfgd-5PgS5nj1HGaTj520.roa (hash: 9SQdIG786baBma7juCvYz1sYWzVfuKVeNspaB2HD5EY=) 2: 15fjy2AkOpBg_9vyM78z1akZIPk.roa (hash: bIlJ1psO6s3xZ1h3VhKbLXUCKK0nIMnTG5BVdZTHZv0=) 3: 1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa (hash: ZakCFcLNqaNCY/gWYoldNivincMH7px+JGQWSfeB/TQ=) 4: EDXcPCi28Qle9HGNvN1QUdaHRvk.roa (hash: DveWNs2wF7FORVxq4TmksxbQzy1QmZcV0OFUQhAfNgk=) 5: GKB85GPBgD-2MlTvgGjUv7EIbUk.roa (hash: VMrA8eDYAWNTxMbY1rr+ihclQ5tn+WDeUXRU1m94GC0=) 6: GoLAkvzsvB7zQDm_UIY2Yd-30Ck.roa (hash: bHM9/hEE2Yt9AtCFKUObnNhRfqUs2TKz2K8Vkkf2E90=) 7: P_bdTkV7IZuzOClv_6ZvyP43Uho.roa (hash: lNcsKv1+gV/lLgtE9ucNZ9+OmqR8K2Sir1xcm0vQFHw=) 8: SuMlhQ-HB-UaOsy8czwHQqmRnqU.roa (hash: vr52aTXoFenQGQFoUChoI3VkTqBxutI1h8R96i3qxIo=) 9: dI4l3rVA1R2d9GEeOfxuH0__cjM.roa (hash: e/9rIsyNOvq2ikL7IWZjBodce5+tbnftj5+dpPekOpI=) 10: dQdXBh5qhRJrah76vMAURqhRRLA.roa (hash: u4zDNbiSFsql+JVohw4Hy2g3ZEQiG+Bl7RoGzgjhNiM=) 11: iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa (hash: aUgkab/Sy+ZB9wWqa8R/ZDM6rtQ1FrjWvsIE5FIMj3E=) 12: yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa (hash: Nm0h82jqL4Nvgoi4mPrldwTgDk33jTBjxspRQ87cyk0=) 13: zRMnjr9PSbQk-9SpxwB9J0du0wc.crl (hash: zvS3USSQBpvwhUaESl/fJoiXcMZGTMfZ7+oWjpbaR0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:63:7c:51:33:8c:ce:61:50:2f:90:34:00:5f:e6:99:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Validity Not Before: Oct 22 12:00:53 2026 GMT Not After : Oct 23 12:00:53 2026 GMT Subject: CN=e7d3fd08a07b1611332a46cb686d049b2d1bd270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:fd:cc:fa:da:d2:af:e3:9c:5c:e6:66:53: c3:1b:e9:50:b6:ec:8c:45:84:65:c1:9d:05:4d:1c: 50:b2:cb:3c:97:68:ea:01:0b:04:bc:43:8e:27:7a: 82:38:cb:6c:04:5b:57:bb:a8:cc:d9:e2:95:41:0c: fe:c2:91:26:2a:0e:f7:b3:20:f2:78:a0:ad:c0:be: c7:67:ea:7b:7d:22:f4:69:d6:d5:50:2d:11:b8:d8: a2:22:38:6a:4f:2d:9a:f4:fb:92:2d:0c:80:eb:13: b9:f6:e4:64:b3:36:67:5e:c9:27:b9:f2:19:63:36: 44:6e:d9:20:e9:af:cb:47:94:18:d2:44:66:91:55: 53:f1:01:91:86:ac:25:06:76:2b:f2:9a:56:30:cb: 87:9c:3c:35:f7:d2:28:65:70:f9:36:4d:06:92:30: 58:4f:b8:c8:d0:14:b9:50:13:7d:0b:65:39:a1:8c: d1:cb:02:91:cb:21:14:a9:3a:54:db:d5:f0:88:2a: 98:bf:7d:e0:7b:cd:44:74:ba:69:a4:59:a6:d3:3b: 1d:d8:0f:18:03:92:91:c5:05:24:19:a1:3f:ca:58: 56:6c:18:0e:14:b9:d1:44:63:89:10:a1:b2:81:4b: 4d:5a:08:ea:62:af:b6:23:bb:43:58:44:57:60:66: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D3:FD:08:A0:7B:16:11:33:2A:46:CB:68:6D:04:9B:2D:1B:D2:70 X509v3 Authority Key Identifier: keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:13:af:ab:6d:86:ba:f9:0e:4b:cb:c1:75:95:73:1d:a9:98: 74:c2:f1:42:da:6c:d9:02:3a:01:87:71:1e:26:e7:0a:fe:c3: 8e:37:07:8d:0d:e6:0f:82:dc:9e:f8:5c:0b:74:30:8b:b0:79: 71:b5:5d:e2:64:b8:c6:f6:10:e5:2d:a7:2b:8d:33:ac:8a:e2: c6:37:af:72:f8:5e:0a:65:eb:47:83:91:68:82:c8:2b:cf:bc: 8b:ea:e0:c7:c5:30:91:f4:f0:47:e0:39:58:fa:c8:d6:44:f9: db:af:b4:92:6f:0a:de:a9:0f:0b:e9:62:26:ac:bb:4a:91:87: 73:52:b3:40:e0:96:60:5c:41:77:72:eb:75:c2:73:1c:b1:1b: fb:65:bc:56:4e:38:9a:c0:e2:c5:af:a5:69:4b:58:e7:9a:4c: a6:96:c6:ae:96:30:c0:be:af:6f:be:f2:e2:27:36:b4:d1:cc: ba:bd:4f:12:67:c9:e8:20:0e:3b:59:51:3f:b6:1d:ab:5b:d3: 18:f4:e7:82:56:b7:c7:e1:68:9c:18:46:73:2c:11:fb:7d:c2: 6a:fa:49:d3:94:c1:d6:ef:9a:d5:e1:62:f2:d4:e8:2d:f7:c6: f0:c9:f5:6a:75:3e:d2:03:88:31:9a:c8:5c:ca:9a:a7:44:e5: 62:ab:47:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFjfFEzjM5hUC+QNABf5pkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTMyNzhlYmY0ZjQ5YjQyNGZiZDRhOWM3MDA3ZDI3NDc2 ZWQzMDcwHhcNMjYxMDIyMTIwMDUzWhcNMjYxMDIzMTIwMDUzWjAzMTEwLwYDVQQD EyhlN2QzZmQwOGEwN2IxNjExMzMyYTQ2Y2I2ODZkMDQ5YjJkMWJkMjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgX9zPra0q/jnFzmZlPDG+lQtuyM RYRlwZ0FTRxQsss8l2jqAQsEvEOOJ3qCOMtsBFtXu6jM2eKVQQz+wpEmKg73syDy eKCtwL7HZ+p7fSL0adbVUC0RuNiiIjhqTy2a9PuSLQyA6xO59uRkszZnXsknufIZ YzZEbtkg6a/LR5QY0kRmkVVT8QGRhqwlBnYr8ppWMMuHnDw199IoZXD5Nk0GkjBY T7jI0BS5UBN9C2U5oYzRywKRyyEUqTpU29XwiCqYv33ge81EdLpppFmm0zsd2A8Y A5KRxQUkGaE/ylhWbBgOFLnRRGOJEKGygUtNWgjqYq+2I7tDWERXYGZxhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfT/QigexYRMypGy2htBJstG9JwMB8GA1UdIwQY MBaAFM0TJ46/T0m0JPvUqccAfSdHbtMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhOvq22G uvkOS8vBdZVzHamYdMLxQtps2QI6AYdxHibnCv7DjjcHjQ3mD4LcnvhcC3Qwi7B5 cbVd4mS4xvYQ5S2nK40zrIrixjevcvheCmXrR4ORaILIK8+8i+rgx8UwkfTwR+A5 WPrI1kT526+0km8K3qkPC+liJqy7SpGHc1KzQOCWYFxBd3LrdcJzHLEb+2W8Vk44 msDixa+laUtY55pMppbGrpYwwL6vb77y4ic2tNHMur1PEmfJ6CAOO1lRP7Ydq1vT GPTngla3x+FonBhGcywR+33CavpJ05TB1u+a1eFi8tToLffG8Mn1anU+0gOIMZrI XMqap0TlYqtHcw== -----END CERTIFICATE-----Generated at Thu Oct 22 23:03:23 2026 by rpki-client