$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: 0C9EfTSeyS0yHbcG+t8DOw3E7RpDRa3/2TCh8ALihsg= Subject key identifier: 2C:88:E0:A5:89:22:9C:70:44:47:43:B1:FD:F8:0B:9A:29:1F:2A:C0 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 01A133A315D30D1D15BD5C63928D76525723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 1A68 Signing time: Tue 13 Oct 2026 05:01:28 +0000 Manifest this update: Tue 13 Oct 2026 05:01:28 +0000 Manifest next update: Wed 14 Oct 2026 05:01:28 +0000 Files and hashes: 1: 0Co-4aPRt1mKhrjgNM3WUZdgXoI.asa (hash: OeNQYBhoPfaKZ8nvkbEq0E8aoRp5VdVHMz/gxZSMaaM=) 2: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 3: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: 3rP78sfoUhkR50qjGeAp8JCYu2qTfcxDr9BbCboKsTM=) 11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) 12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:33:a3:15:d3:0d:1d:15:bd:5c:63:92:8d:76:52:57:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Oct 13 05:01:28 2026 GMT Not After : Oct 14 05:01:28 2026 GMT Subject: CN=2c88e0a589229c70444743b1fdf80b9a291f2ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:2a:21:f4:8b:85:6c:14:6a:21:f6:bd:3a: 5b:a5:62:6c:ea:76:9a:4c:0d:fd:0a:59:29:02:d5: e3:de:8e:ee:97:cb:09:58:dd:e3:c8:a3:c9:1c:1b: 95:e5:e4:48:d1:1d:b2:7d:79:12:7f:e5:ad:05:64: 37:bd:bf:d5:c2:26:98:6e:b9:6d:be:13:23:d9:01: 4d:bd:b6:8a:86:4a:c6:87:3f:7c:1f:c8:19:a7:b6: 79:60:6c:09:e2:d4:93:ab:46:8f:64:e6:52:e5:e0: 46:45:60:ce:ee:5b:a6:30:93:71:ae:0a:32:b5:2c: 7c:d6:f3:4b:09:b1:8d:2f:36:78:b5:27:ef:bb:5f: 2b:7b:7e:7d:8a:5b:b6:e1:88:6f:7a:31:7f:64:40: 6c:1d:b2:e5:58:c0:8c:32:cc:18:07:7c:d8:00:c6: f0:8c:62:bf:c0:41:b2:aa:62:d2:38:e9:7c:3a:71: 0e:22:7d:b6:0c:95:76:c5:92:aa:db:18:70:ee:e0: 58:81:11:6d:fe:78:00:10:09:c9:c6:ea:37:54:ca: 0a:fd:d2:81:a4:3a:5f:a1:35:a7:54:d0:c7:f9:e2: ef:2e:3f:eb:27:4f:89:54:d8:99:ce:14:0d:37:fb: fc:d1:12:6e:a4:80:81:ce:da:66:3b:61:c8:c8:43: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:E0:A5:89:22:9C:70:44:47:43:B1:FD:F8:0B:9A:29:1F:2A:C0 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:aa:b5:14:4d:64:41:7c:89:d1:dc:21:56:82:b1:37:36:38: 5a:48:ba:5d:a1:46:9f:e4:e7:12:8f:1b:77:0c:25:64:d8:e5: 05:7e:f2:a6:2a:b1:75:40:d1:4e:e7:7f:44:38:ee:1b:ab:aa: 78:49:e0:9e:89:2e:c3:d2:c6:6b:19:9d:7d:89:cc:34:7a:36: 55:30:01:02:a8:e8:f3:5e:fe:ac:97:57:fe:03:c9:57:76:47: 2f:d9:b1:3e:09:c2:48:d5:a3:83:a6:42:3f:cb:5e:ad:d3:e0: e7:18:5a:a2:25:fe:f1:f0:a7:66:78:a1:13:3c:50:12:9b:29: b7:a3:68:65:32:94:a4:84:2d:8c:ae:75:81:e4:ae:f8:da:35: 6f:00:30:94:c5:6d:fa:0e:e2:30:da:9e:b7:c4:45:c2:9f:a5: 55:35:95:fb:a2:3b:ff:25:15:ed:31:7d:aa:27:27:6d:91:bf: eb:5b:b1:72:cb:19:44:fb:bc:7f:a0:84:35:11:4d:9b:ba:e5: e6:22:14:8e:26:2e:b8:d9:db:d5:7a:4a:ff:4f:a3:b5:ab:20: 7a:c4:2e:4b:c8:d4:b0:fb:22:d7:7e:a2:c6:39:78:7c:5e:76: 71:df:f7:86:5a:e0:fa:06:6e:de:fa:7a:0a:8e:7e:e2:df:2e: 49:65:e4:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEzoxXTDR0VvVxjko12UlcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYxMDEzMDUwMTI4WhcNMjYxMDE0MDUwMTI4WjAzMTEwLwYDVQQD EygyYzg4ZTBhNTg5MjI5YzcwNDQ0NzQzYjFmZGY4MGI5YTI5MWYyYWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0YqIfSLhWwUaiH2vTpbpWJs6naa TA39ClkpAtXj3o7ul8sJWN3jyKPJHBuV5eRI0R2yfXkSf+WtBWQ3vb/VwiaYbrlt vhMj2QFNvbaKhkrGhz98H8gZp7Z5YGwJ4tSTq0aPZOZS5eBGRWDO7lumMJNxrgoy tSx81vNLCbGNLzZ4tSfvu18re359ilu24YhvejF/ZEBsHbLlWMCMMswYB3zYAMbw jGK/wEGyqmLSOOl8OnEOIn22DJV2xZKq2xhw7uBYgRFt/ngAEAnJxuo3VMoK/dKB pDpfoTWnVNDH+eLvLj/rJ0+JVNiZzhQNN/v80RJupICBztpmO2HIyEMF+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyI4KWJIpxwREdDsf34C5opHyrAMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6q1FE1k QXyJ0dwhVoKxNzY4Wki6XaFGn+TnEo8bdwwlZNjlBX7ypiqxdUDRTud/RDjuG6uq eEngnokuw9LGaxmdfYnMNHo2VTABAqjo817+rJdX/gPJV3ZHL9mxPgnCSNWjg6ZC P8terdPg5xhaoiX+8fCnZnihEzxQEpspt6NoZTKUpIQtjK51geSu+No1bwAwlMVt +g7iMNqet8RFwp+lVTWV+6I7/yUV7TF9qicnbZG/61uxcssZRPu8f6CENRFNm7rl 5iIUjiYuuNnb1XpK/0+jtasgesQuS8jUsPsi136ixjl4fF52cd/3hlrg+gZu3vp6 Co5+4t8uSWXkyw== -----END CERTIFICATE-----Generated at Tue Oct 13 09:13:16 2026 by rpki-client