$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: 0/BvuAsKAEILYPWyiSyWKhYshuSLXiFf2nRZVPyxoTk= Subject key identifier: D8:0E:DB:5C:B3:EA:5C:34:0C:5E:2A:B5:E4:ED:3D:4C:76:E3:07:0B Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 01A160E99B97DCF6CDE297CD6F514B41E34E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 17EF Signing time: Thu 22 Oct 2026 00:01:24 +0000 Manifest this update: Thu 22 Oct 2026 00:01:24 +0000 Manifest next update: Fri 23 Oct 2026 00:01:24 +0000 Files and hashes: 1: 0BfNXiDldo_liimaTypuMTcMOSA.roa (hash: qvgGIW8CiOWBIcpNa0moqJ+GSYLQ2vJbJF4fgORjC18=) 2: 0vetEjyw1WQWmCXUTx8290wF-5A.roa (hash: MRRpw2B7+36LyQgMqkGBs8Q1n0WozbWhLmzocDU6qn0=) 3: 1-DJULH3ZwYfARcWJFOAy7L08L0o.roa (hash: uzSvKMA/ek9jjzwiFTQKtBUiZnp+CdlB8u/4bLmjAWk=) 4: 2aBOuFf59wEBwbLziedpbp6FKYk.roa (hash: ZSpI5dlzWjQXy3Cna9NEiVVPFJtukMRorD24Z+VlJdk=) 5: 5ThevNNgZHzDF50h6krEfv1b2To.roa (hash: CbU07lcvi4HJ1brlMc0otrEIMctgZ4JB+I2bCfPEqZk=) 6: MqZHWBmMNelEjKHD9rL777ZFFPQ.roa (hash: JT8l5waJdgBD+v5IZbCIxziinVIIlhSs3+boP+bJ1mw=) 7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: 6gEAqWYdyOxq1KZ5dVmAWVfuh5J+PXLUmwscop10x/4=) 8: aL6bUGTHkpcHHWs-Po3_bkcw8N0.roa (hash: ri9rtr5v6mxkEnUcDShGl6eVFOsXr78RXTrqI9KwgSM=) 9: jVIXwWQgWKZwGuSur5EA3NGOqW0.roa (hash: TF50UjRhC15wTuIUutY/LAyF28bPXMS3BlWJSGn8Kts=) 10: qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa (hash: ohCD8OmMg+2pYrzqMLQR/f066MDBc9Qpw07iNGnx7cY=) 11: uTfCplkKF4NNKr9z0oAQOp5Z6bQ.roa (hash: lIrYsFTfLPn7qzWjWmqg9roRmjTFishbKowqgCzglJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:60:e9:9b:97:dc:f6:cd:e2:97:cd:6f:51:4b:41:e3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Oct 22 00:01:24 2026 GMT Not After : Oct 23 00:01:24 2026 GMT Subject: CN=d80edb5cb3ea5c340c5e2ab5e4ed3d4c76e3070b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:33:94:24:6e:9b:5d:2f:39:01:16:16:a8: 12:a1:9b:c6:97:1d:9d:03:17:47:1f:8a:b6:93:98: 7a:49:a1:c7:12:fd:a1:a8:92:c9:8e:22:b4:0a:63: 92:98:c0:72:60:b9:52:ea:03:b6:78:25:b0:4a:00: da:d2:70:00:8c:c8:a5:64:c5:51:b0:73:91:d8:25: 68:91:01:8b:1c:b2:c0:dd:66:36:e9:34:e8:7e:97: 51:75:a1:a4:7b:cb:dd:99:9c:17:c8:c3:d8:0a:a7: 7d:af:f4:f5:4a:e2:fa:6d:cf:de:04:3f:1a:6d:31: 36:40:35:9e:19:07:51:42:28:96:72:59:db:aa:4f: 5f:7f:75:1d:aa:2a:c3:50:34:ee:0b:0e:3d:9d:49: 49:4e:88:8a:6b:3b:33:f7:50:f8:9a:b9:83:84:be: 73:3e:08:e5:9b:be:cb:bf:0e:f2:74:b8:bc:3e:f4: d4:94:79:08:71:d5:9b:18:f2:ba:b8:a2:e7:0c:24: 69:f8:76:77:16:3e:62:02:37:c5:07:2f:c7:7d:88: d4:f9:4e:39:75:71:41:e7:13:6a:6f:6f:d1:53:0b: 9e:e1:77:5e:ec:c6:8a:60:3e:eb:81:ed:9d:20:f0: 30:b4:85:bc:99:0e:da:ba:ea:e5:36:a8:b9:26:78: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0E:DB:5C:B3:EA:5C:34:0C:5E:2A:B5:E4:ED:3D:4C:76:E3:07:0B X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:21:2c:d7:46:fc:3f:bf:39:0b:fd:a3:9e:97:ad:ae:da:fc: f1:a4:73:e3:23:95:78:1e:f4:52:a1:50:9c:1c:71:e6:70:02: 25:2c:38:00:d2:03:f5:79:16:ba:eb:7f:6a:5e:a7:ae:da:54: 0a:77:ef:cf:05:c4:08:a5:44:30:2f:cd:ae:6d:6d:04:30:82: 44:76:61:9b:53:8d:27:5f:08:1f:e0:52:f7:a0:49:f2:0a:bc: 28:fb:26:68:81:d0:3c:91:58:34:6a:af:48:50:18:05:74:2f: 3e:e9:1c:45:b9:1a:99:a6:e8:b8:e3:76:49:5e:aa:e8:3d:14: 61:27:b2:40:e0:5a:47:8f:d9:58:6f:f2:cb:da:3f:40:91:b4: 7b:df:ad:c7:e8:25:f1:f6:21:70:53:06:ae:27:73:88:70:af: 0c:39:6f:ab:77:bb:32:71:c8:35:bb:3a:b9:fa:ff:54:74:32: 1e:fa:bb:1a:2e:e8:aa:64:ae:d5:fb:f1:c0:9f:7c:08:a7:2e: e9:fa:a7:45:28:0d:d2:67:79:a0:09:b8:c0:1c:2a:cd:2e:15: 90:d4:04:b8:b6:14:38:a5:e7:11:94:7c:32:d5:21:08:12:92: ed:51:b9:97:2a:3d:19:7b:af:ff:ad:96:55:d8:9d:db:2b:f1: f8:a8:d1:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFg6ZuX3PbN4pfNb1FLQeNOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjYxMDIyMDAwMTI0WhcNMjYxMDIzMDAwMTI0WjAzMTEwLwYDVQQD EyhkODBlZGI1Y2IzZWE1YzM0MGM1ZTJhYjVlNGVkM2Q0Yzc2ZTMwNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv50zlCRum10vOQEWFqgSoZvGlx2d AxdHH4q2k5h6SaHHEv2hqJLJjiK0CmOSmMByYLlS6gO2eCWwSgDa0nAAjMilZMVR sHOR2CVokQGLHLLA3WY26TTofpdRdaGke8vdmZwXyMPYCqd9r/T1SuL6bc/eBD8a bTE2QDWeGQdRQiiWclnbqk9ff3UdqirDUDTuCw49nUlJToiKazsz91D4mrmDhL5z Pgjlm77Lvw7ydLi8PvTUlHkIcdWbGPK6uKLnDCRp+HZ3Fj5iAjfFBy/HfYjU+U45 dXFB5xNqb2/RUwue4Xde7MaKYD7rge2dIPAwtIW8mQ7auurlNqi5JnhRSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgO21yz6lw0DF4qteTtPUx24wcLMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyEs10b8 P785C/2jnpetrtr88aRz4yOVeB70UqFQnBxx5nACJSw4ANID9XkWuut/al6nrtpU CnfvzwXECKVEMC/Nrm1tBDCCRHZhm1ONJ18IH+BS96BJ8gq8KPsmaIHQPJFYNGqv SFAYBXQvPukcRbkamabouON2SV6q6D0UYSeyQOBaR4/ZWG/yy9o/QJG0e9+tx+gl 8fYhcFMGridziHCvDDlvq3e7MnHINbs6ufr/VHQyHvq7Gi7oqmSu1fvxwJ98CKcu 6fqnRSgN0md5oAm4wBwqzS4VkNQEuLYUOKXnEZR8MtUhCBKS7VG5lyo9GXuv/62W Vdid2yvx+KjRnw== -----END CERTIFICATE-----Generated at Thu Oct 22 05:55:44 2026 by rpki-client