$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json) Hash identifier: 2gYlD9k3G7gZFjNAmQuv4vk5mqulVRfbl41fIi617S4= Subject key identifier: A2:C7:12:4B:B0:B6:07:FC:08:04:B4:1C:0B:7E:F6:67:6A:01:20:8C Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019D97AB079BA5C8CFD2330CD6DCDE940224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft Manifest number: 18D3 Signing time: Thu 16 Apr 2026 19:01:01 +0000 Manifest this update: Thu 16 Apr 2026 19:01:01 +0000 Manifest next update: Fri 17 Apr 2026 19:01:01 +0000 Files and hashes: 1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=) 2: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=) 3: HhO3fYlasNlXuWCWma8olPA14I8.roa (hash: an4Zb60vA9s3r5vXjNARMkYhW6HY9Hr3vQtUZ9SJwt4=) 4: J4wT63yaYO7wgyldprevYAD_G8Q.roa (hash: luK/5QL+n08Nr/n8y3PbejLi734kK+KYrvBoL1sEL4s=) 5: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: cpxnZiULddNjQqhA5956ZLqBdYaNsFB4vDwvnoulPuQ=) 6: Nn3zUJ51MvljRGZUCANsuFxobLs.roa (hash: LQQy9c9P03J1Z8RS2F5VsLFEyXdHr1CahLP2RpLISRc=) 7: PCnYDFn0k2F6lGuZ21llekgxV8k.roa (hash: fJn0EssGBGoeosMUZyS2a8EsGxua3RdLQsjTU4b7/0M=) 8: SELAkj7y_jr_HiZRyQnazDtoXIs.roa (hash: YIble+z1sK0lKNMgOA3cU9xF8L12qHo0kNEA6b7HNQc=) 9: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=) 10: cpNYdUNR0qVX_yJDLOulGuucF4w.roa (hash: bcKFmyBamxX/ja1miOQmH2gNmDaABRTlmdDj6Yrj/nU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:ab:07:9b:a5:c8:cf:d2:33:0c:d6:dc:de:94:02:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Apr 16 19:01:01 2026 GMT Not After : Apr 17 19:01:01 2026 GMT Subject: CN=a2c7124bb0b607fc0804b41c0b7ef6676a01208c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:d5:e3:49:c9:be:fa:4c:5a:8c:ad:d3:a8: 48:d3:c7:59:0a:b1:ad:85:e7:c3:0d:ba:8f:20:e2: 1e:98:ef:07:f2:d7:a6:28:80:b0:3d:3e:47:35:db: e3:a8:62:dc:6b:70:3a:b1:1a:3b:c3:90:0a:28:0f: a0:7d:ed:31:c8:74:a2:8b:ef:a6:15:01:d7:1b:64: a2:c6:e9:ab:57:33:71:2a:9f:62:54:3a:2e:91:f4: 05:b6:01:54:6e:8d:7c:40:6e:c9:07:64:c2:07:2c: 91:02:22:b7:73:75:d7:3a:56:b7:14:01:07:fe:87: 44:08:d6:c7:ce:d0:90:f5:25:87:f1:d7:5c:8f:c0: e5:ab:cf:7b:66:ea:81:5a:aa:a9:05:d0:7b:68:9a: 36:b6:49:d6:95:f1:d9:94:ba:8c:46:6b:62:ee:2d: 63:c9:23:3b:f1:e7:69:21:74:a8:2b:8c:61:eb:9f: bc:d2:e7:96:5c:5b:09:f5:e5:c8:99:2e:0d:68:05: 90:cb:43:09:d6:b1:0c:eb:2f:2a:f9:d7:9b:6c:e1: df:26:15:09:cd:c5:aa:4e:ed:6b:da:fc:e0:0b:b4: 61:99:59:41:9e:bc:fe:48:bf:02:0e:31:fe:fd:62: 8a:c8:f7:c6:7a:55:f6:fc:46:93:d2:48:e4:84:51: 07:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C7:12:4B:B0:B6:07:FC:08:04:B4:1C:0B:7E:F6:67:6A:01:20:8C X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:80:57:de:75:b2:71:fb:eb:e2:c4:7b:3c:69:9e:d0:15:e9: e7:23:db:da:8d:a6:5e:01:88:85:e2:ce:c3:74:44:d4:09:6d: 9f:88:28:60:7b:7f:f6:6a:93:6b:1c:08:4e:5d:91:fc:b8:50: df:09:47:0d:97:08:df:25:a8:18:a7:30:f5:b6:4c:62:b1:e8: 83:fc:7b:1c:e5:62:cd:d5:3d:15:4e:26:da:0e:50:3c:a4:a7: bb:e5:c8:ca:68:83:84:ff:19:1b:40:28:cf:8c:ff:a4:3d:ec: a1:89:7d:e5:97:19:39:6d:2f:2e:aa:2d:cb:44:00:a5:23:b3: fd:69:ff:ae:cd:df:b8:0b:fb:29:61:35:10:a5:d6:18:8d:b8: 6d:90:f3:1f:92:89:f6:79:dc:fa:e2:a7:60:7b:39:73:57:19: a7:52:df:66:e5:06:a7:f9:18:b7:82:d4:61:2a:c6:6a:ce:ef: f7:09:2a:a3:ac:83:ea:99:59:f5:45:3e:50:90:ea:0a:29:26: f6:e6:b8:d8:16:f5:a4:5f:da:f8:af:26:6d:8a:98:ea:a8:a5: 59:eb:58:8c:8d:58:87:f6:55:96:91:5e:1f:bd:c0:a7:52:a6: 5a:ea:3c:bc:ce:e1:20:fa:08:02:12:2a:e6:e0:46:c3:19:9b: 4f:60:ad:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2XqwebpcjP0jMM1tzelAIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjYwNDE2MTkwMTAxWhcNMjYwNDE3MTkwMTAxWjAzMTEwLwYDVQQD EyhhMmM3MTI0YmIwYjYwN2ZjMDgwNGI0MWMwYjdlZjY2NzZhMDEyMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDTV40nJvvpMWoyt06hI08dZCrGt hefDDbqPIOIemO8H8temKICwPT5HNdvjqGLca3A6sRo7w5AKKA+gfe0xyHSii++m FQHXG2SixumrVzNxKp9iVDoukfQFtgFUbo18QG7JB2TCByyRAiK3c3XXOla3FAEH /odECNbHztCQ9SWH8ddcj8Dlq897ZuqBWqqpBdB7aJo2tknWlfHZlLqMRmti7i1j ySM78edpIXSoK4xh65+80ueWXFsJ9eXImS4NaAWQy0MJ1rEM6y8q+debbOHfJhUJ zcWqTu1r2vzgC7RhmVlBnrz+SL8CDjH+/WKKyPfGelX2/EaT0kjkhFEHkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLHEkuwtgf8CAS0HAt+9mdqASCMMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIBX3nWy cfvr4sR7PGme0BXp5yPb2o2mXgGIheLOw3RE1Altn4goYHt/9mqTaxwITl2R/LhQ 3wlHDZcI3yWoGKcw9bZMYrHog/x7HOVizdU9FU4m2g5QPKSnu+XIymiDhP8ZG0Ao z4z/pD3soYl95ZcZOW0vLqoty0QApSOz/Wn/rs3fuAv7KWE1EKXWGI24bZDzH5KJ 9nnc+uKnYHs5c1cZp1LfZuUGp/kYt4LUYSrGas7v9wkqo6yD6plZ9UU+UJDqCikm 9ua42Bb1pF/a+K8mbYqY6qilWetYjI1Yh/ZVlpFeH73Ap1KmWuo8vM7hIPoIAhIq 5uBGwxmbT2Ctqg== -----END CERTIFICATE-----Generated at Fri Apr 17 04:26:15 2026 by rpki-client