$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: ScP3Aq6I9FEWon7pR8m25wjoeTyC6WnAli6T+4d5ftg= Subject key identifier: A9:F5:F9:E4:6C:AC:16:BD:4F:FA:7E:D8:81:E4:65:6B:BF:D8:31:C4 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 01A06E709B84ADF162C81A670587BE387232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1A4D Signing time: Fri 04 Sep 2026 22:01:08 +0000 Manifest this update: Fri 04 Sep 2026 22:01:08 +0000 Manifest next update: Sat 05 Sep 2026 22:01:08 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: HvuFKeEBJevLYnkgZG6aXYnb8rVg2s/IzU/Ne78ZBZY=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6e:70:9b:84:ad:f1:62:c8:1a:67:05:87:be:38:72:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Sep 4 22:01:08 2026 GMT Not After : Sep 5 22:01:08 2026 GMT Subject: CN=a9f5f9e46cac16bd4ffa7ed881e4656bbfd831c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:34:8a:55:ce:13:1a:d3:e1:ec:71:27:ba: 51:9c:60:e2:b6:b7:bb:0f:35:38:81:55:43:15:6f: 25:3b:2a:8b:dc:d4:99:83:24:a9:7a:d7:bd:4a:a9: 4a:22:8c:4d:a0:77:56:21:0e:b0:f4:86:72:7b:06: 05:5e:bf:c2:56:81:5d:35:65:7d:75:75:9b:5b:35: b3:3b:30:29:c7:62:5b:5a:28:4f:e0:f1:22:d7:e0: c9:1a:9f:a4:4e:f9:09:a8:e7:c3:2f:9e:62:34:38: 2c:20:f0:28:86:8c:a3:42:45:e5:33:4d:60:3e:3e: d2:68:8a:48:46:18:f6:ff:77:62:67:ef:24:f9:fc: 18:a2:c8:f3:f2:9d:b7:e3:d4:0e:85:6a:89:79:c6: 1f:57:8f:be:32:8d:64:ed:3f:c9:e2:00:16:f1:c6: 95:f8:dc:f3:db:5a:f4:dd:b3:79:81:e4:b0:83:9d: ae:0b:57:f6:49:49:18:a6:ae:b8:c8:13:d4:45:96: d3:76:52:26:75:bf:98:97:69:02:e1:61:ee:cd:93: ad:9b:22:3c:fe:d1:db:b8:2a:10:d5:cb:51:a5:f2: 81:5e:e7:e2:e4:70:7d:22:b9:8d:10:08:00:03:23: 70:cc:51:77:77:f4:f0:a6:b4:a8:c7:c3:1a:98:49: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F5:F9:E4:6C:AC:16:BD:4F:FA:7E:D8:81:E4:65:6B:BF:D8:31:C4 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:7b:38:af:f8:da:3a:1e:82:9b:9d:3b:11:27:33:c7:6b:33: b1:31:97:7c:62:24:4f:2b:fa:9c:87:6d:cd:83:88:ec:53:95: 68:67:18:ca:10:85:1f:af:01:33:2e:93:31:98:4a:60:41:40: 3f:8b:86:97:ba:08:20:a4:9b:42:c1:c1:50:75:7b:ae:7c:a1: a5:aa:28:ef:a1:78:fa:85:5a:25:5d:2b:d9:cb:5d:eb:ff:fb: 73:95:d5:ac:ee:07:79:e6:d7:58:dc:2d:6b:41:f9:cf:53:4a: 35:ea:33:75:a2:dc:48:77:91:06:32:b1:22:22:eb:f5:18:c1: d2:97:fb:1d:d3:44:1c:17:f6:0d:ab:99:0e:00:2c:cc:85:70: 61:40:6b:c8:b2:8b:86:e1:6b:7e:87:c5:51:46:ef:b2:93:8c: b4:56:8c:3e:85:ed:e4:a3:4e:c9:88:a7:57:d5:30:b4:4a:31: 0a:e2:c0:59:28:b6:32:f2:9b:57:26:f5:16:05:38:65:29:b1: 2d:4d:e7:84:ed:dc:0a:83:c1:59:26:ea:8c:46:c5:ce:2c:54: 96:f2:cf:23:82:43:45:2e:72:93:33:7f:31:c3:7a:1c:c9:71: 62:fe:70:95:d9:d1:60:ef:f4:a5:a3:05:d6:a5:b6:89:be:20: 3e:3c:a5:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBucJuErfFiyBpnBYe+OHIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwOTA0MjIwMTA4WhcNMjYwOTA1MjIwMTA4WjAzMTEwLwYDVQQD EyhhOWY1ZjllNDZjYWMxNmJkNGZmYTdlZDg4MWU0NjU2YmJmZDgzMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU80ilXOExrT4exxJ7pRnGDitre7 DzU4gVVDFW8lOyqL3NSZgySpete9SqlKIoxNoHdWIQ6w9IZyewYFXr/CVoFdNWV9 dXWbWzWzOzApx2JbWihP4PEi1+DJGp+kTvkJqOfDL55iNDgsIPAohoyjQkXlM01g Pj7SaIpIRhj2/3diZ+8k+fwYosjz8p2349QOhWqJecYfV4++Mo1k7T/J4gAW8caV +Nzz21r03bN5geSwg52uC1f2SUkYpq64yBPURZbTdlImdb+Yl2kC4WHuzZOtmyI8 /tHbuCoQ1ctRpfKBXufi5HB9IrmNEAgAAyNwzFF3d/TwprSox8MamEncTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKn1+eRsrBa9T/p+2IHkZWu/2DHEMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHs4r/ja Oh6Cm507ESczx2szsTGXfGIkTyv6nIdtzYOI7FOVaGcYyhCFH68BMy6TMZhKYEFA P4uGl7oIIKSbQsHBUHV7rnyhpaoo76F4+oVaJV0r2ctd6//7c5XVrO4HeebXWNwt a0H5z1NKNeozdaLcSHeRBjKxIiLr9RjB0pf7HdNEHBf2DauZDgAszIVwYUBryLKL huFrfofFUUbvspOMtFaMPoXt5KNOyYinV9UwtEoxCuLAWSi2MvKbVyb1FgU4ZSmx LU3nhO3cCoPBWSbqjEbFzixUlvLPI4JDRS5ykzN/McN6HMlxYv5wldnRYO/0paMF 1qW2ib4gPjylRQ== -----END CERTIFICATE-----Generated at Sat Sep 5 01:00:04 2026 by rpki-client