$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: IMHqs9b1PQH9Pk4CfqwWO+y8RULJY8nNuBmMmJtzMfg= Subject key identifier: A8:E0:FA:E9:08:28:BB:DD:63:D4:3E:04:04:53:8C:00:D9:B2:2F:C4 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019F84C4090C70E7F87A3D856980A02958D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 19D4 Signing time: Tue 21 Jul 2026 13:01:07 +0000 Manifest this update: Tue 21 Jul 2026 13:01:07 +0000 Manifest next update: Wed 22 Jul 2026 13:01:07 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: AyDt19jno3m0vraLj6aQSZHeHwL0bYHmAsRB/2VjRpI=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:c4:09:0c:70:e7:f8:7a:3d:85:69:80:a0:29:58:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jul 21 13:01:07 2026 GMT Not After : Jul 22 13:01:07 2026 GMT Subject: CN=a8e0fae90828bbdd63d43e0404538c00d9b22fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:59:23:7d:1f:a1:4a:ff:2e:24:83:37:a6: c5:15:41:4f:5f:13:ac:b8:25:27:dc:84:c5:72:6a: 53:ec:51:2b:7e:08:85:05:98:d1:4f:a7:f8:3b:dd: 97:b1:68:92:0c:ee:57:6a:e7:90:77:cb:e5:7b:00: dd:9a:c7:01:9c:56:7f:90:4f:56:ce:df:99:6a:e6: 52:87:80:29:f8:d1:63:95:ae:0c:a4:22:16:09:1c: 19:34:ec:01:47:0d:ba:69:06:82:e8:b3:c7:39:e5: 24:4a:22:aa:ad:3c:3a:ef:ef:0f:3b:09:7b:bf:16: 1d:ad:14:bb:aa:70:dc:7c:f6:4a:e2:87:c6:67:2f: 70:d7:77:d9:07:a7:61:ca:9f:89:69:98:c3:b0:7b: 2d:fa:f1:2b:9f:33:3f:0d:b2:72:91:61:11:01:92: 6f:9a:85:3d:2f:94:c0:fe:72:22:70:2e:55:ba:49: c5:a4:9e:21:18:c5:d2:ae:40:f9:67:3c:bf:da:ae: 5e:80:ca:e6:57:1c:18:aa:4e:fd:30:0e:e3:6c:44: c0:dd:9d:38:5f:95:e5:30:a0:8b:ef:7d:bd:8c:1e: 38:09:89:61:59:7d:51:1a:9a:5c:98:ac:e7:0a:4f: 83:ee:b0:c1:b5:ae:96:6d:8b:11:f6:36:22:54:f5: de:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E0:FA:E9:08:28:BB:DD:63:D4:3E:04:04:53:8C:00:D9:B2:2F:C4 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6b:d3:44:8d:c6:cf:f9:2e:0b:50:73:03:a5:f5:ca:41:2d: c1:07:37:b2:a3:de:ed:90:63:d1:5f:d7:9b:5d:53:3a:fe:e3: a2:3b:c4:b5:1b:28:eb:aa:92:79:19:84:61:b7:17:56:6c:90: 6e:fd:5e:82:54:36:4e:74:70:33:f1:cc:2e:4b:5d:6e:48:cf: 09:6e:11:2f:5a:6b:a0:ca:ec:ef:26:51:8c:9e:1f:b2:45:89: 1b:25:08:93:e6:de:66:65:d1:54:92:f6:ba:b4:6e:f1:08:1e: 1f:00:08:a2:c6:e3:2a:6e:23:a8:fa:8c:96:15:f5:f0:10:fc: a5:e2:67:58:54:f5:4a:ce:de:44:9c:96:f7:80:eb:27:e3:41: e4:b3:9a:08:2e:a0:96:b7:0d:06:17:78:d6:4f:c1:75:d9:a7: cc:f5:b8:ba:8e:04:8a:14:4a:50:f6:c6:36:9d:70:4e:c9:d9: 3a:e5:fc:03:51:e9:02:ec:73:70:66:eb:fd:31:cb:63:20:aa: 21:42:5f:72:ea:dd:10:67:a4:20:e3:0a:db:5e:ab:d0:de:cb: ba:80:6a:f1:6f:47:a4:e2:bf:27:a3:56:98:31:ac:e5:cb:84: 65:85:55:62:e1:53:85:3e:6e:d8:40:12:64:85:ec:14:a8:58: 54:ec:7c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+ExAkMcOf4ej2FaYCgKVjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwNzIxMTMwMTA3WhcNMjYwNzIyMTMwMTA3WjAzMTEwLwYDVQQD EyhhOGUwZmFlOTA4MjhiYmRkNjNkNDNlMDQwNDUzOGMwMGQ5YjIyZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA9ZI30foUr/LiSDN6bFFUFPXxOs uCUn3ITFcmpT7FErfgiFBZjRT6f4O92XsWiSDO5XaueQd8vlewDdmscBnFZ/kE9W zt+ZauZSh4Ap+NFjla4MpCIWCRwZNOwBRw26aQaC6LPHOeUkSiKqrTw67+8POwl7 vxYdrRS7qnDcfPZK4ofGZy9w13fZB6dhyp+JaZjDsHst+vErnzM/DbJykWERAZJv moU9L5TA/nIicC5VuknFpJ4hGMXSrkD5Zzy/2q5egMrmVxwYqk79MA7jbETA3Z04 X5XlMKCL7329jB44CYlhWX1RGppcmKznCk+D7rDBta6WbYsR9jYiVPXebwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjg+ukIKLvdY9Q+BARTjADZsi/EMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2vTRI3G z/kuC1BzA6X1ykEtwQc3sqPe7ZBj0V/Xm11TOv7jojvEtRso66qSeRmEYbcXVmyQ bv1eglQ2TnRwM/HMLktdbkjPCW4RL1proMrs7yZRjJ4fskWJGyUIk+beZmXRVJL2 urRu8QgeHwAIosbjKm4jqPqMlhX18BD8peJnWFT1Ss7eRJyW94DrJ+NB5LOaCC6g lrcNBhd41k/BddmnzPW4uo4EihRKUPbGNp1wTsnZOuX8A1HpAuxzcGbr/THLYyCq IUJfcurdEGekIOMK216r0N7LuoBq8W9HpOK/J6NWmDGs5cuEZYVVYuFThT5u2EAS ZIXsFKhYVOx8NQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:05:20 2026 by rpki-client