$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: zFwLwcHgUKCgpheB6jttjVUTW25kS8otSdN3gKSHYOA= Subject key identifier: BE:DA:B7:DF:D5:76:67:81:CF:C8:83:9A:34:A2:57:47:65:99:C9:63 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019DCE99B92B4F40B3819BACD2F4C43070AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 192D Signing time: Mon 27 Apr 2026 11:01:14 +0000 Manifest this update: Mon 27 Apr 2026 11:01:14 +0000 Manifest next update: Tue 28 Apr 2026 11:01:14 +0000 Files and hashes: 1: 2X2Ba8rgbouM32gnizEyTUGgONU.roa (hash: /S0uaILIP04CzsCMDO3CxuQ/dGQk0LoPnR9uswe+Dno=) 2: BgYgNXUiTeu31n67bX2V90cAvTI.roa (hash: 0v54WM21W+/w7a0Su0L6xDmLThFZAOM3uY/lMR5ZoI4=) 3: H3tBAn476s18gPJKTSL87Rv5Hfw.roa (hash: K4eLaR9vBqA4AN5CoJGHX6K3zIZNHj23kEJNlCUBq5o=) 4: H7xAtviqUTTZ-2BturV__GojEYU.roa (hash: 7y/cFcrHkaXFHOFisDiq8TbDYWThg68s7xHeQ5K5iWc=) 5: R8F1DSddbUmoi5Lvz7GVdblbDkk.roa (hash: ti1BqLXIAMU2z5zdrrvdHJM6DJeICOfg1NjS+8ZVzTI=) 6: TRm4u9w4aHluG_xWq8D3WD9cjE0.roa (hash: t+LJY16hYEjvyFHAQ5NgBP7TAysJCOIWTLbr8ofTjqA=) 7: U8NQ-X6oXdPJtDvZC2bEGyclVuc.roa (hash: EnK49cFtZphk+Uu4vq0sYXSzWqCtB8Omy8Rc0kmt4Ts=) 8: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: eBU4NhH8+pPbgBkGbfWH/2kbkAMHbiIrXLs+pen0zXg=) 9: _0309cZ1kikOxbfzcD2XJAY-ldA.roa (hash: cZXM6KU83tIxyiRuWRs4jXSNFO8qUxYJiHjRIWvBrHc=) 10: dLSSiZeltba729G3UFGH0XwLSho.roa (hash: 4MsOLvl+y1vyg93nB2nnBksXqFnl7fNEnQs0xIF73hU=) 11: eqjRIQl2tcvdRn0WGpqecEf39BE.roa (hash: wo1ZcMLEQzOlMVuGPZQ1qvLlzhW3e3KGV8eqOLVncZU=) 12: vngvIz2KaFj8ZKtPi7_fxlNZjyQ.roa (hash: SSRAx6tIqP5pWWJsGfEi1oQj/WWXNPjtWbIrNaJW0nU=) 13: yHx7U3h6JZL7GjJtXadc-tvTWag.roa (hash: bHjlqHL1rl0Vu0vK21UaruHUNcXQbTCMAh8NovcebO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:99:b9:2b:4f:40:b3:81:9b:ac:d2:f4:c4:30:70:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Apr 27 11:01:14 2026 GMT Not After : Apr 28 11:01:14 2026 GMT Subject: CN=bedab7dfd5766781cfc8839a34a257476599c963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:3d:b4:9d:3b:c8:18:f8:45:f5:19:3d:9e: e9:f2:53:db:6f:8f:e6:07:83:7c:d3:5a:1f:be:e7: 24:f3:94:9b:0e:04:05:12:dc:9c:a8:34:d8:98:4b: be:c9:39:28:6b:96:ca:4b:74:89:ac:75:23:39:4d: 78:2e:96:86:bc:5b:ff:98:ee:32:3d:ed:93:d4:02: 98:f6:b0:ee:72:7d:2e:5b:19:4f:2c:1d:bb:d5:08: b9:9d:52:62:b6:a7:a2:19:66:8f:a2:57:ce:f2:c3: f9:d7:c4:55:51:3f:bc:d4:90:67:d0:05:df:a8:87: 3b:da:8d:e6:50:d8:ee:af:1c:12:05:6a:2b:7c:91: 7f:71:6d:b0:06:f1:61:3f:84:1e:de:9f:4d:1a:88: 22:fd:36:a9:19:fe:e2:d1:36:71:5e:ff:44:62:6e: e6:77:9f:6a:cb:ee:b3:21:8d:c3:34:54:63:d3:77: cc:08:5e:44:e4:84:2d:b7:96:5d:20:46:7c:dc:bf: 49:1f:57:2f:6a:65:d0:68:7a:f6:33:22:47:06:1c: 32:2a:85:8d:98:18:96:80:fa:2c:64:54:e9:55:7a: a6:d1:52:d5:07:fc:3c:23:5b:94:c4:df:04:46:02: cc:b7:92:7b:4c:d8:56:d2:61:0c:7e:e3:f7:bf:d2: b9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DA:B7:DF:D5:76:67:81:CF:C8:83:9A:34:A2:57:47:65:99:C9:63 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:66:a2:1d:1e:a2:cb:74:48:0e:cc:84:f9:c0:c7:3d:d4:9e: 40:42:ca:d6:4d:77:04:5c:92:cb:e1:ef:33:3d:0e:42:07:7b: 0e:4f:f0:6a:8f:10:d1:0a:24:1a:ec:22:76:07:5e:a5:4c:38: c9:e7:e0:c6:72:84:89:50:c7:6d:0c:fa:91:4f:e4:0a:9a:a1: 05:f3:35:ac:91:05:42:08:7e:0e:ad:da:1e:07:0e:ba:46:6e: d0:66:ce:78:e5:e9:b4:9d:7c:37:d9:e5:25:74:fb:9c:5f:64: 06:0e:47:01:e6:ed:20:a0:d8:ef:6d:ad:46:fe:04:3f:89:99: 9c:a5:27:f8:3f:33:0e:23:3c:9b:d0:80:f0:ee:7c:8c:2f:9b: 23:4a:c3:28:21:ee:6b:82:e0:6c:d0:c3:72:d1:3b:3f:1a:ce: d2:03:52:32:21:09:df:35:5d:90:23:35:eb:74:ad:f7:bb:84: e7:c7:a2:65:f7:a4:0e:38:2f:6a:97:7c:00:aa:57:8a:aa:2b: f0:47:91:f1:26:dd:e2:74:ab:1b:f4:b0:fc:fe:30:1c:33:5b: a3:98:19:50:0c:07:73:9d:e7:1b:92:4e:4b:30:81:d3:fa:39: e9:2a:c4:45:8b:b7:28:0b:b7:4f:ce:51:41:a3:78:0b:fa:7d: 59:6a:31:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OmbkrT0CzgZus0vTEMHCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwNDI3MTEwMTE0WhcNMjYwNDI4MTEwMTE0WjAzMTEwLwYDVQQD EyhiZWRhYjdkZmQ1NzY2NzgxY2ZjODgzOWEzNGEyNTc0NzY1OTljOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZo9tJ07yBj4RfUZPZ7p8lPbb4/m B4N801ofvuck85SbDgQFEtycqDTYmEu+yTkoa5bKS3SJrHUjOU14LpaGvFv/mO4y Pe2T1AKY9rDucn0uWxlPLB271Qi5nVJitqeiGWaPolfO8sP518RVUT+81JBn0AXf qIc72o3mUNjurxwSBWorfJF/cW2wBvFhP4Qe3p9NGogi/TapGf7i0TZxXv9EYm7m d59qy+6zIY3DNFRj03fMCF5E5IQtt5ZdIEZ83L9JH1cvamXQaHr2MyJHBhwyKoWN mBiWgPosZFTpVXqm0VLVB/w8I1uUxN8ERgLMt5J7TNhW0mEMfuP3v9K5KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7at9/VdmeBz8iDmjSiV0dlmcljMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGaiHR6i y3RIDsyE+cDHPdSeQELK1k13BFySy+HvMz0OQgd7Dk/wao8Q0QokGuwidgdepUw4 yefgxnKEiVDHbQz6kU/kCpqhBfM1rJEFQgh+Dq3aHgcOukZu0GbOeOXptJ18N9nl JXT7nF9kBg5HAebtIKDY722tRv4EP4mZnKUn+D8zDiM8m9CA8O58jC+bI0rDKCHu a4LgbNDDctE7PxrO0gNSMiEJ3zVdkCM163St97uE58eiZfekDjgvapd8AKpXiqor 8EeR8Sbd4nSrG/Sw/P4wHDNbo5gZUAwHc53nG5JOSzCB0/o56SrERYu3KAu3T85R QaN4C/p9WWoxzg== -----END CERTIFICATE-----Generated at Mon Apr 27 14:29:49 2026 by rpki-client