$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: oatBsAvzBiCMWNch/JZ53Kgv8RvkNs7ODpK0M0rUGCY= Subject key identifier: B2:06:4F:C1:B7:54:71:13:EA:F0:E0:E2:13:60:91:44:74:24:BF:88 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 01A16D5BA9CE0BE2E125D3657DC9FF725A29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1AD1 Signing time: Sat 24 Oct 2026 10:01:26 +0000 Manifest this update: Sat 24 Oct 2026 10:01:26 +0000 Manifest next update: Sun 25 Oct 2026 10:01:26 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: /rd7gHVe1xnvz6nnrRkv96a5qCU5J/VewpBTcXAGbsc=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 05:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:6d:5b:a9:ce:0b:e2:e1:25:d3:65:7d:c9:ff:72:5a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Oct 24 10:01:26 2026 GMT Not After : Oct 25 10:01:26 2026 GMT Subject: CN=b2064fc1b7547113eaf0e0e2136091447424bf88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:0a:4f:fc:0d:5d:62:e5:9c:cc:18:a6:53: 23:cd:8a:e2:71:f1:0b:9d:16:27:86:03:94:6c:3a: a0:2b:dd:5f:95:68:55:25:db:b0:4c:fc:86:05:3f: f3:18:85:4b:35:48:81:87:00:7c:8c:65:da:f1:9f: fe:d4:68:21:cf:bb:52:8d:50:3f:a0:01:ef:08:20: 84:6e:14:15:55:f4:89:d3:1a:17:8a:d3:4f:b7:25: d4:48:3a:d1:02:51:8b:59:c5:f6:ac:4c:54:e0:56: d0:ce:a2:8c:37:92:be:0a:1d:b0:d4:26:6e:52:67: e4:7c:2c:e5:67:90:3e:47:2f:f2:f7:c2:55:e7:ef: 24:30:b6:2c:31:a0:ab:73:a3:94:96:28:ac:ba:7d: 23:57:8a:f1:78:55:b7:7c:77:9b:38:9a:1e:65:d9: 81:41:08:d3:cb:23:9d:f8:81:28:75:8a:0a:70:d2: 02:7c:2f:54:6c:0e:88:5b:c4:31:09:c6:ba:a6:99: 3d:77:57:c0:56:6d:06:b3:2d:af:ef:b4:57:27:c9: a1:a0:ee:92:fb:90:b6:7a:87:2e:7b:d9:b2:ed:c4: 46:f5:01:ca:13:3c:a3:e9:de:9b:eb:d5:3c:28:39: c4:6a:3d:c8:e5:df:e5:18:0b:97:0b:ef:64:73:2c: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:06:4F:C1:B7:54:71:13:EA:F0:E0:E2:13:60:91:44:74:24:BF:88 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:49:e8:68:fa:3e:2c:63:c6:1a:a0:ae:32:57:0f:64:3e:24: 20:d5:39:1d:6e:12:5c:38:e0:c7:6a:19:aa:2d:67:12:ec:bb: 72:86:3a:cb:5d:4e:f5:9d:e5:86:e3:0a:96:23:a2:ff:b1:ae: 94:21:eb:1e:8e:95:d2:dd:65:c9:e2:3d:e6:1e:17:38:ea:3e: fd:3e:30:ab:34:f2:7d:3c:8f:6f:59:d0:ee:70:88:c1:ab:eb: b7:41:e9:1e:7c:49:50:3b:1d:8f:45:3e:d4:0c:61:a5:a9:1e: a0:26:9a:26:de:bb:7c:33:e1:ee:8c:0e:99:04:ee:22:e6:80: fd:5d:0a:a1:a9:8c:2e:94:39:99:47:a5:5a:f4:d3:eb:7b:e4: c9:68:cd:0f:b9:3b:29:50:e2:7c:49:0f:87:9f:0b:97:4a:7b: 6d:3d:94:aa:f6:d8:a3:83:c0:50:d9:19:fd:ce:09:d2:17:17: b6:f1:9e:40:4a:8d:77:b9:0d:13:79:82:29:df:1d:6c:9c:61: 99:9a:23:a7:13:3f:ed:c7:3c:8a:5f:5f:1d:a9:43:af:af:fd: 06:b7:c0:3b:74:19:8b:8d:77:14:ed:39:65:8d:aa:54:eb:5d: 34:99:87:b8:5e:97:86:63:94:ca:b7:e8:76:02:23:d6:74:ea: a8:24:f1:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFtW6nOC+LhJdNlfcn/clopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYxMDI0MTAwMTI2WhcNMjYxMDI1MTAwMTI2WjAzMTEwLwYDVQQD EyhiMjA2NGZjMWI3NTQ3MTEzZWFmMGUwZTIxMzYwOTE0NDc0MjRiZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAungKT/wNXWLlnMwYplMjzYricfEL nRYnhgOUbDqgK91flWhVJduwTPyGBT/zGIVLNUiBhwB8jGXa8Z/+1Gghz7tSjVA/ oAHvCCCEbhQVVfSJ0xoXitNPtyXUSDrRAlGLWcX2rExU4FbQzqKMN5K+Ch2w1CZu UmfkfCzlZ5A+Ry/y98JV5+8kMLYsMaCrc6OUliisun0jV4rxeFW3fHebOJoeZdmB QQjTyyOd+IEodYoKcNICfC9UbA6IW8QxCca6ppk9d1fAVm0Gsy2v77RXJ8mhoO6S +5C2eocue9my7cRG9QHKEzyj6d6b69U8KDnEaj3I5d/lGAuXC+9kcyzOVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIGT8G3VHET6vDg4hNgkUR0JL+IMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEnoaPo+ LGPGGqCuMlcPZD4kINU5HW4SXDjgx2oZqi1nEuy7coY6y11O9Z3lhuMKliOi/7Gu lCHrHo6V0t1lyeI95h4XOOo+/T4wqzTyfTyPb1nQ7nCIwavrt0HpHnxJUDsdj0U+ 1AxhpakeoCaaJt67fDPh7owOmQTuIuaA/V0KoamMLpQ5mUelWvTT63vkyWjND7k7 KVDifEkPh58Ll0p7bT2UqvbYo4PAUNkZ/c4J0hcXtvGeQEqNd7kNE3mCKd8dbJxh mZojpxM/7cc8il9fHalDr6/9BrfAO3QZi413FO05ZY2qVOtdNJmHuF6XhmOUyrfo dgIj1nTqqCTxPw== -----END CERTIFICATE-----Generated at Sat Oct 24 13:32:13 2026 by rpki-client