$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json) Hash identifier: VaugIyuc2DscDAvy0EAdCeNyV6LULg2BReF3qKy82JA= Subject key identifier: 2A:0F:C9:6B:71:D9:97:76:40:8F:94:B1:ED:9B:F3:6A:02:B2:4C:29 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 01A089B1267D45C17936883EDA2147F7094A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft Manifest number: 123D Signing time: Thu 10 Sep 2026 05:01:23 +0000 Manifest this update: Thu 10 Sep 2026 05:01:23 +0000 Manifest next update: Fri 11 Sep 2026 05:01:23 +0000 Files and hashes: 1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=) 2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=) 3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=) 4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=) 5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=) 6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=) 7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=) 8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=) 9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=) 10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=) 11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=) 12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=) 13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=) 14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=) 15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=) 16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=) 17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=) 18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=) 19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=) 20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=) 21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=) 22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=) 23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=) 24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=) 25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=) 26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=) 27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=) 28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=) 29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=) 30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: LZXqkMrnf4SkA88bt+0K4e02qiWVWnrKW8P9UJM6mLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:b1:26:7d:45:c1:79:36:88:3e:da:21:47:f7:09:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Sep 10 05:01:23 2026 GMT Not After : Sep 11 05:01:23 2026 GMT Subject: CN=2a0fc96b71d99776408f94b1ed9bf36a02b24c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:8e:b5:bd:ac:88:37:e8:ae:5c:f6:ae:51: a5:ac:7b:a2:43:34:26:3d:59:83:38:04:d1:05:79: 42:63:b3:09:7a:f4:74:16:6d:d9:ba:1a:b5:e2:0c: d5:a5:df:f0:7a:90:3e:55:a9:32:79:60:73:f7:b5: bc:cc:14:64:2a:1e:3e:f3:c6:43:c1:a8:29:1b:b1: b7:e3:0e:4e:6e:8a:0f:d1:55:ca:09:42:52:3b:b1: 05:2c:8f:d3:56:ca:51:c4:59:3b:db:6a:5a:c3:c7: a8:21:75:fe:3a:5c:fe:6e:33:55:c1:7c:07:6f:b8: 55:48:29:71:c5:8c:7c:39:5b:7c:f7:48:96:10:52: 07:cd:fe:00:86:47:17:6b:b7:d5:2d:6a:f5:5c:99: b6:3c:20:0d:4a:6f:0c:1b:d4:32:b6:ba:f2:28:2d: 04:13:da:03:ea:71:81:f1:1f:4f:5a:ce:6b:d7:dc: 56:44:39:15:1b:00:c8:67:81:ba:cc:67:0c:42:e5: ea:02:05:1a:30:70:5a:c8:52:ee:46:30:95:2d:f9: 96:05:ba:88:65:7c:ba:79:c7:e6:db:e5:61:c1:db: 79:0b:fb:be:e0:bc:28:71:fa:16:a8:25:dd:37:36: 1d:ee:54:7c:ea:39:61:f5:9b:9a:a8:07:72:40:5f: a0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0F:C9:6B:71:D9:97:76:40:8F:94:B1:ED:9B:F3:6A:02:B2:4C:29 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4e:02:fd:1d:99:3b:bd:d9:54:76:a6:39:a9:c2:2f:51:dc: 34:58:45:92:41:81:7e:6f:13:47:d9:67:c0:e8:8e:d2:de:9e: 46:cd:9b:f6:72:c6:e4:4d:0a:b1:f9:e9:e2:84:f3:30:22:66: ba:73:b2:24:b8:a8:0d:56:48:ec:91:69:7f:55:32:92:88:6a: 55:ba:ef:ec:13:d9:25:d6:5b:10:11:d7:be:f5:b9:ae:47:d0: d5:62:aa:45:0a:0c:47:77:4f:13:e3:09:a7:a8:ac:18:0c:fa: 30:86:40:d4:37:2b:8b:29:27:3b:17:50:f9:79:fc:cb:45:09: 47:fa:69:df:c3:74:27:c6:59:9d:7b:f8:62:69:00:a1:52:a3: 17:12:f9:54:93:9d:0f:82:a4:c4:5d:36:62:74:39:73:59:8e: 37:79:80:6a:09:35:e9:8e:24:9b:76:09:a9:b8:07:ec:2f:0f: a9:0b:c6:17:09:a0:94:05:4f:93:c2:b8:f9:b2:25:8c:3a:b0: 23:87:d7:7e:cd:33:fa:5a:c0:bd:4f:90:2e:6a:58:f3:b7:01: e4:9a:9b:3c:b7:ef:db:c7:af:b6:27:f2:6d:7f:a9:cd:6c:5b: 89:f8:a2:50:4d:ca:e3:b4:a3:ec:f2:1b:43:b5:40:ea:ac:24: e4:2a:ca:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJsSZ9RcF5Nog+2iFH9wlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwOTEwMDUwMTIzWhcNMjYwOTExMDUwMTIzWjAzMTEwLwYDVQQD EygyYTBmYzk2YjcxZDk5Nzc2NDA4Zjk0YjFlZDliZjM2YTAyYjI0YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt12Otb2siDforlz2rlGlrHuiQzQm PVmDOATRBXlCY7MJevR0Fm3Zuhq14gzVpd/wepA+VakyeWBz97W8zBRkKh4+88ZD wagpG7G34w5ObooP0VXKCUJSO7EFLI/TVspRxFk722paw8eoIXX+Olz+bjNVwXwH b7hVSClxxYx8OVt890iWEFIHzf4AhkcXa7fVLWr1XJm2PCANSm8MG9QytrryKC0E E9oD6nGB8R9PWs5r19xWRDkVGwDIZ4G6zGcMQuXqAgUaMHBayFLuRjCVLfmWBbqI ZXy6ecfm2+Vhwdt5C/u+4LwocfoWqCXdNzYd7lR86jlh9ZuaqAdyQF+g9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoPyWtx2Zd2QI+Use2b82oCskwpMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApk4C/R2Z O73ZVHamOanCL1HcNFhFkkGBfm8TR9lnwOiO0t6eRs2b9nLG5E0Ksfnp4oTzMCJm unOyJLioDVZI7JFpf1UykohqVbrv7BPZJdZbEBHXvvW5rkfQ1WKqRQoMR3dPE+MJ p6isGAz6MIZA1DcriyknOxdQ+Xn8y0UJR/pp38N0J8ZZnXv4YmkAoVKjFxL5VJOd D4KkxF02YnQ5c1mON3mAagk16Y4km3YJqbgH7C8PqQvGFwmglAVPk8K4+bIljDqw I4fXfs0z+lrAvU+QLmpY87cB5JqbPLfv28evtifybX+pzWxbifiiUE3K47Sj7PIb Q7VA6qwk5CrKGg== -----END CERTIFICATE-----Generated at Thu Sep 10 10:43:46 2026 by rpki-client