$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: MnCNT9YvcVyvSgQzQhZXXnMgz178v1AEB5LspXzMp+w= Subject key identifier: 8D:22:E6:11:B7:31:63:84:6D:F0:87:72:3D:03:84:76:DD:06:6C:AF Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019F12652F10EE3749F05022A6C0837F4AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 194D Signing time: Mon 29 Jun 2026 08:00:48 +0000 Manifest this update: Mon 29 Jun 2026 08:00:48 +0000 Manifest next update: Tue 30 Jun 2026 08:00:48 +0000 Files and hashes: 1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: G8JYA7L2YYOmeHW/rWOgonYwLxBUXJntxnZTbz15Itg=) 11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) 12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:12:65:2f:10:ee:37:49:f0:50:22:a6:c0:83:7f:4a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Jun 29 08:00:48 2026 GMT Not After : Jun 30 08:00:48 2026 GMT Subject: CN=8d22e611b73163846df087723d038476dd066caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:28:1b:11:7b:0e:ac:fd:81:33:cf:3f:c9: 4a:23:72:26:d0:ee:6e:09:02:1d:7c:5c:35:c3:a7: 9f:80:39:8d:56:87:77:17:af:c8:33:e4:60:50:82: df:db:f5:02:4c:ea:9f:15:cc:ed:86:b9:a1:dd:7d: 33:30:94:48:91:59:39:68:c2:ff:bd:a2:4f:9a:d9: 16:2e:ea:bc:08:63:9d:1f:95:67:3a:e2:d9:74:75: d1:d7:c0:8a:ae:4d:f5:ea:d0:02:64:4f:8d:b1:96: 82:e9:66:05:15:27:d4:3b:d3:06:f1:16:78:43:49: 19:d5:c0:ea:10:dc:14:7a:81:c8:dc:b9:f4:1f:4d: 31:21:f8:ec:cc:67:0c:ca:16:85:b5:58:de:4d:a6: 79:b3:24:a4:f0:04:31:80:3e:5a:b5:ff:15:d3:52: c7:bb:0b:29:3d:ca:70:41:fd:99:28:4f:91:65:b6: 71:75:ee:98:6e:56:09:cb:b8:f9:70:44:ce:62:05: eb:e7:a0:d6:1f:e5:75:3e:f2:40:e4:2e:54:d0:9f: 0c:d7:29:e4:a7:29:1e:4e:39:85:61:c8:27:8b:63: 9c:46:4f:5e:2f:3f:44:0b:05:73:c6:43:d4:a0:a9: 57:ab:d1:c7:90:46:d2:a0:74:fe:4f:65:e6:ba:0d: a3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:22:E6:11:B7:31:63:84:6D:F0:87:72:3D:03:84:76:DD:06:6C:AF X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7c:5e:98:b8:95:03:7a:96:1a:51:04:17:70:e4:45:04:1b: 7e:b0:af:42:9f:0b:97:84:52:e9:44:92:72:cf:84:17:12:f4: 6a:f5:7c:df:e1:4b:c9:e1:de:da:18:f4:a6:79:9e:3c:d5:50: 02:a6:bc:25:e0:10:35:03:33:68:b4:21:8d:b4:0d:22:89:de: 4c:a9:ac:45:34:51:c0:3f:fb:b1:60:3e:82:f6:42:ca:e6:70: bb:cc:d4:b0:7c:a7:a5:21:c0:24:86:e7:e7:ca:8e:9c:75:b0: e2:ab:e5:1d:cd:e1:fb:e2:5c:1b:79:81:5c:23:24:4f:f2:d1: 66:bd:9c:9e:18:42:72:2c:d5:38:da:53:ca:20:ae:84:d2:4c: e9:27:87:23:94:77:6f:85:c5:8d:e7:27:d3:cc:84:08:07:9b: ae:06:b1:4c:47:21:bd:31:69:51:04:04:79:50:36:99:99:d6: 95:9e:f0:ff:7b:f5:78:6e:2a:83:91:7a:bf:b3:51:af:4c:f1: d7:6a:cf:15:bf:3d:6f:5d:a5:ac:89:3e:d1:36:70:b7:47:81: db:56:32:e2:36:b0:c9:56:60:66:de:86:bf:fc:9c:2a:ae:63: e4:3d:a0:ef:d8:d7:31:07:79:3b:fe:ec:22:05:36:f6:60:fe: 7e:1c:98:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8SZS8Q7jdJ8FAipsCDf0qjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwNjI5MDgwMDQ4WhcNMjYwNjMwMDgwMDQ4WjAzMTEwLwYDVQQD Eyg4ZDIyZTYxMWI3MzE2Mzg0NmRmMDg3NzIzZDAzODQ3NmRkMDY2Y2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZsoGxF7Dqz9gTPPP8lKI3Im0O5u CQIdfFw1w6efgDmNVod3F6/IM+RgUILf2/UCTOqfFczthrmh3X0zMJRIkVk5aML/ vaJPmtkWLuq8CGOdH5VnOuLZdHXR18CKrk316tACZE+NsZaC6WYFFSfUO9MG8RZ4 Q0kZ1cDqENwUeoHI3Ln0H00xIfjszGcMyhaFtVjeTaZ5sySk8AQxgD5atf8V01LH uwspPcpwQf2ZKE+RZbZxde6YblYJy7j5cETOYgXr56DWH+V1PvJA5C5U0J8M1ynk pykeTjmFYcgni2OcRk9eLz9ECwVzxkPUoKlXq9HHkEbSoHT+T2Xmug2j/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0i5hG3MWOEbfCHcj0DhHbdBmyvMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3xemLiV A3qWGlEEF3DkRQQbfrCvQp8Ll4RS6USScs+EFxL0avV83+FLyeHe2hj0pnmePNVQ Aqa8JeAQNQMzaLQhjbQNIoneTKmsRTRRwD/7sWA+gvZCyuZwu8zUsHynpSHAJIbn 58qOnHWw4qvlHc3h++JcG3mBXCMkT/LRZr2cnhhCcizVONpTyiCuhNJM6SeHI5R3 b4XFjecn08yECAebrgaxTEchvTFpUQQEeVA2mZnWlZ7w/3v1eG4qg5F6v7NRr0zx 12rPFb89b12lrIk+0TZwt0eB21Yy4jawyVZgZt6Gv/ycKq5j5D2g79jXMQd5O/7s IgU29mD+fhyYDQ== -----END CERTIFICATE-----Generated at Mon Jun 29 11:38:21 2026 by rpki-client