$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: V+H52FdIGq9gHgzhnrxj5CTlL8tUAhdGe6XXLIo5N+4= Subject key identifier: C4:32:D2:8D:18:D3:DF:8D:2F:06:3F:58:D7:34:83:47:CB:05:22:CF Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 01A00282384E5CDB1E32699AD1A20F48369A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 19CA Signing time: Fri 14 Aug 2026 23:01:23 +0000 Manifest this update: Fri 14 Aug 2026 23:01:23 +0000 Manifest next update: Sat 15 Aug 2026 23:01:23 +0000 Files and hashes: 1: 0Co-4aPRt1mKhrjgNM3WUZdgXoI.asa (hash: OeNQYBhoPfaKZ8nvkbEq0E8aoRp5VdVHMz/gxZSMaaM=) 2: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 3: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: F9SBXb3nnvjzgLL/+9W0q0DX3Gz17k73I7wKAX/BtKE=) 11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) 12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 18:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:02:82:38:4e:5c:db:1e:32:69:9a:d1:a2:0f:48:36:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Aug 14 23:01:23 2026 GMT Not After : Aug 15 23:01:23 2026 GMT Subject: CN=c432d28d18d3df8d2f063f58d7348347cb0522cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fb:a7:2b:69:23:69:dc:64:8d:77:c9:fe:4a: 25:cb:ea:ac:2c:1f:e0:58:2f:69:80:40:d9:ea:5e: 62:ee:04:d4:a5:5d:4d:0e:71:3a:d6:3e:62:b2:19: 61:90:31:eb:bb:36:a8:fb:e9:c0:1f:1e:8a:4f:d7: ec:ad:c0:1d:30:10:f3:7a:1f:25:42:03:39:5f:a5: 47:3e:6c:26:f7:1f:d6:56:6c:ba:22:87:44:98:27: e0:19:ef:8a:8e:cd:ce:6c:c7:58:58:51:88:d5:30: be:a1:fa:39:f5:28:a7:07:df:cd:82:01:e5:53:ed: 74:ee:c6:8f:37:1c:d4:39:be:b6:30:a4:2b:3e:13: 13:ce:1d:d7:51:6e:9a:13:6f:15:a5:73:c6:5b:e2: e9:77:9e:ab:18:19:a9:bb:3c:b3:61:9e:25:5b:63: f9:30:d1:04:ef:aa:d1:65:43:2b:cb:3b:20:d5:d4: 55:4c:19:b8:c3:23:2c:74:71:9b:86:d5:ac:27:c1: ac:2b:8f:85:13:f2:8e:57:3f:7a:fd:8a:1f:bd:ac: cc:e9:41:2d:48:e8:97:e7:10:cd:ab:43:df:39:21: 62:33:cf:13:ce:33:65:d0:17:ec:a0:6e:ee:ee:61: 6f:d6:f7:ff:9c:78:6f:3f:7d:f8:fd:8b:ac:56:bb: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:32:D2:8D:18:D3:DF:8D:2F:06:3F:58:D7:34:83:47:CB:05:22:CF X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:16:6a:bb:70:49:86:78:3a:9a:af:58:5b:07:86:08:9f:69: 48:13:5c:a7:99:17:cd:39:29:9b:8a:0f:5e:e3:94:43:c8:1d: 5e:bb:40:63:a2:8c:b7:2e:b3:58:71:80:23:d7:dc:16:d4:13: 3a:30:3b:47:2f:05:0d:93:64:83:f1:43:2c:60:bd:89:cf:43: 7c:74:fe:ea:4b:82:ce:1e:04:b5:d5:c6:d9:24:e1:e5:9e:e5: c9:00:dc:61:c0:45:7b:98:50:43:fb:73:e9:dd:d1:01:50:6d: 27:c7:a9:62:53:ae:43:7a:9b:35:9b:fd:a5:85:2a:76:ac:03: 30:4c:d8:45:95:d4:25:5a:fa:0d:21:d6:3b:3c:06:22:45:ea: 2e:6d:77:4e:58:dc:19:81:6e:c5:f0:ef:14:1f:b0:80:88:2a: d0:fb:52:55:12:e5:1c:1e:ee:7e:6e:f4:cd:ff:e1:48:d6:15: c5:f1:ff:28:68:21:90:d4:09:8b:1d:b9:54:21:83:ba:4a:99: 4d:c0:2b:d8:76:5f:44:1a:2c:e4:44:83:9a:ce:af:a3:35:18: 98:bf:3c:f2:5a:0b:3c:64:84:ac:f2:16:93:2f:91:99:96:d5: 2e:00:be:7d:a8:4b:be:bc:93:24:70:a2:58:27:28:65:21:9b: a8:a2:f4:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaACgjhOXNseMmma0aIPSDaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwODE0MjMwMTIzWhcNMjYwODE1MjMwMTIzWjAzMTEwLwYDVQQD EyhjNDMyZDI4ZDE4ZDNkZjhkMmYwNjNmNThkNzM0ODM0N2NiMDUyMmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vunK2kjadxkjXfJ/koly+qsLB/g WC9pgEDZ6l5i7gTUpV1NDnE61j5ishlhkDHruzao++nAHx6KT9fsrcAdMBDzeh8l QgM5X6VHPmwm9x/WVmy6IodEmCfgGe+Kjs3ObMdYWFGI1TC+ofo59SinB9/NggHl U+107saPNxzUOb62MKQrPhMTzh3XUW6aE28VpXPGW+Lpd56rGBmpuzyzYZ4lW2P5 MNEE76rRZUMryzsg1dRVTBm4wyMsdHGbhtWsJ8GsK4+FE/KOVz96/YofvazM6UEt SOiX5xDNq0PfOSFiM88TzjNl0BfsoG7u7mFv1vf/nHhvP334/YusVru6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQy0o0Y09+NLwY/WNc0g0fLBSLPMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRZqu3BJ hng6mq9YWweGCJ9pSBNcp5kXzTkpm4oPXuOUQ8gdXrtAY6KMty6zWHGAI9fcFtQT OjA7Ry8FDZNkg/FDLGC9ic9DfHT+6kuCzh4EtdXG2STh5Z7lyQDcYcBFe5hQQ/tz 6d3RAVBtJ8epYlOuQ3qbNZv9pYUqdqwDMEzYRZXUJVr6DSHWOzwGIkXqLm13Tljc GYFuxfDvFB+wgIgq0PtSVRLlHB7ufm70zf/hSNYVxfH/KGghkNQJix25VCGDukqZ TcAr2HZfRBos5ESDms6vozUYmL888loLPGSErPIWky+RmZbVLgC+fahLvryTJHCi WCcoZSGbqKL0eQ== -----END CERTIFICATE-----Generated at Sat Aug 15 04:34:34 2026 by rpki-client