$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: RRR5Ly9jQxXcn44d62fV2EucSNMjPaU1oWVSB7QMKJ4= Subject key identifier: 2B:24:B1:5D:4C:27:C8:25:93:A3:91:9A:AF:89:D7:1F:9D:B9:C2:D7 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019DB359B46ACFEB624539A9C7BA04C6877C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 18E3 Signing time: Wed 22 Apr 2026 04:01:33 +0000 Manifest this update: Wed 22 Apr 2026 04:01:33 +0000 Manifest next update: Thu 23 Apr 2026 04:01:33 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: hqfLptIAEOJjXEEmpF9maI4i2eOAq61MKw1Vhccsb5o=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b3:59:b4:6a:cf:eb:62:45:39:a9:c7:ba:04:c6:87:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Apr 22 04:01:33 2026 GMT Not After : Apr 23 04:01:33 2026 GMT Subject: CN=2b24b15d4c27c82593a3919aaf89d71f9db9c2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:ec:55:33:b8:a8:a1:ad:9b:2d:2f:1e:96: f0:ea:e8:4e:c4:ba:fc:66:0b:d0:df:6b:08:22:39: e9:70:7e:00:62:32:36:3a:fb:4e:83:ba:14:10:ef: 8b:2d:01:c2:bd:bf:7d:1a:0e:35:71:c5:c4:e6:fb: 23:2c:49:c5:bc:b6:3f:03:97:58:db:22:48:56:de: ec:ba:bf:19:cf:28:9f:fd:d8:e5:5e:df:bd:14:11: 24:e7:7d:92:e9:e5:80:43:68:cf:01:35:af:50:ad: 7e:32:36:0f:f3:6f:10:2b:9d:25:f1:69:e2:b6:6a: ec:83:dc:ac:de:88:02:5f:5c:5a:36:cc:62:88:a9: 59:20:1e:b6:49:a2:00:85:d1:82:ca:d3:43:89:47: f6:31:ce:5b:a7:50:89:5a:14:6c:be:f2:4a:7e:70: 0c:60:19:c8:cc:49:39:44:57:cf:dc:15:e3:f9:5e: 35:1b:42:2b:15:36:d1:9d:2c:2a:07:66:9d:9f:33: 52:2b:f6:f1:b0:c0:18:d5:45:da:7d:83:f4:e1:7b: 5c:84:eb:c1:67:de:b7:8f:ea:98:80:13:f0:6b:0d: 72:b5:e5:51:a7:e5:3a:cc:e6:44:b4:f8:b7:7f:b2: 10:ee:1b:e2:da:ce:84:22:e2:f2:bd:26:5e:1e:f9: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:24:B1:5D:4C:27:C8:25:93:A3:91:9A:AF:89:D7:1F:9D:B9:C2:D7 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:02:32:54:d4:1f:81:0d:a8:01:d5:6c:ce:ab:fe:ef:1f:fb: c3:d4:90:9a:55:8d:51:f0:80:6b:ce:75:77:1d:d1:66:41:79: f7:09:8e:f6:9c:79:f0:9f:c8:58:e5:d9:02:29:77:2b:b1:4d: 92:7a:e0:29:ce:18:c9:9d:bd:ea:91:1f:46:ce:52:9e:49:68: 7f:1a:f5:94:27:e9:1b:24:f6:a9:ce:f3:31:ee:91:f4:59:d9: 6b:1c:71:34:05:49:3a:a9:80:a7:7b:08:42:1f:e4:55:d0:e1: 54:98:82:5d:87:8e:73:22:d5:25:b2:c2:41:aa:aa:96:70:5d: ca:8d:3d:dd:5d:64:58:97:9d:7a:2d:dc:02:ef:ec:f7:4f:43: 45:eb:9d:6c:ab:19:a9:d4:38:70:a0:86:8f:fa:9e:a1:1a:a7: 3a:a9:97:7b:3f:79:91:11:41:17:26:28:f6:80:46:9b:6f:54: b5:8f:9f:9c:eb:a7:6c:04:96:21:6f:c6:06:05:a2:a4:0b:71: 8b:4b:81:aa:a9:39:d6:4b:1a:79:b6:92:d0:2d:4a:6c:23:09: 05:c0:04:b1:52:77:b7:83:14:65:51:a5:48:4d:44:34:7c:87: 44:26:9b:5f:6c:fe:48:c7:3e:12:2f:50:f5:e8:9b:8f:8b:22: 09:ac:8c:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2zWbRqz+tiRTmpx7oExod8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwNDIyMDQwMTMzWhcNMjYwNDIzMDQwMTMzWjAzMTEwLwYDVQQD EygyYjI0YjE1ZDRjMjdjODI1OTNhMzkxOWFhZjg5ZDcxZjlkYjljMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqXsVTO4qKGtmy0vHpbw6uhOxLr8 ZgvQ32sIIjnpcH4AYjI2OvtOg7oUEO+LLQHCvb99Gg41ccXE5vsjLEnFvLY/A5dY 2yJIVt7sur8Zzyif/djlXt+9FBEk532S6eWAQ2jPATWvUK1+MjYP828QK50l8Wni tmrsg9ys3ogCX1xaNsxiiKlZIB62SaIAhdGCytNDiUf2Mc5bp1CJWhRsvvJKfnAM YBnIzEk5RFfP3BXj+V41G0IrFTbRnSwqB2adnzNSK/bxsMAY1UXafYP04XtchOvB Z963j+qYgBPwaw1yteVRp+U6zOZEtPi3f7IQ7hvi2s6EIuLyvSZeHvlrmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsksV1MJ8glk6ORmq+J1x+ducLXMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwIyVNQf gQ2oAdVszqv+7x/7w9SQmlWNUfCAa851dx3RZkF59wmO9px58J/IWOXZAil3K7FN knrgKc4YyZ296pEfRs5Snklofxr1lCfpGyT2qc7zMe6R9FnZaxxxNAVJOqmAp3sI Qh/kVdDhVJiCXYeOcyLVJbLCQaqqlnBdyo093V1kWJedei3cAu/s909DReudbKsZ qdQ4cKCGj/qeoRqnOqmXez95kRFBFyYo9oBGm29UtY+fnOunbASWIW/GBgWipAtx i0uBqqk51ksaebaS0C1KbCMJBcAEsVJ3t4MUZVGlSE1ENHyHRCabX2z+SMc+Ei9Q 9eibj4siCayM5Q== -----END CERTIFICATE-----Generated at Wed Apr 22 09:44:04 2026 by rpki-client