$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: j1R4PRku3b0ebNGYvibw22PEfEB4TMTyPJliTenhJ7U= Subject key identifier: 9C:92:64:45:1D:EC:2E:0B:89:FD:D6:A5:D9:91:60:FE:6E:CA:4E:9E Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019D9BF51088223FA2D2BE4E1955704CE5EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 10ED Signing time: Fri 17 Apr 2026 15:00:22 +0000 Manifest this update: Fri 17 Apr 2026 15:00:22 +0000 Manifest next update: Sat 18 Apr 2026 15:00:22 +0000 Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=) 2: 8LleVlpBeH6rvTVrtdlSQo7_Krc.roa (hash: pr0ffVAFHumaLWPDJNcLOMJrBmKAb+juWG8ZwguB2Is=) 3: B3K6QLkLLN5JAQFrMvr7zHSp2iE.asa (hash: IUK/NTcpKX9eob9IkswUCrgL3y+vjVpnJDlPYvd3igU=) 4: BLxG_9aNcl61DnDRQOS-DhrV8xQ.roa (hash: LExdEQ5VC8/M9uctTrGTrEOA+lYTiyS4I7rkKa10kEA=) 5: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=) 6: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=) 7: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=) 8: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=) 9: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: d2TtcUddWipm9uRgN9aekQhY4/f5lrOn/N3oUZJgWus=) 10: jaJHGhM03pdKXU-GKkJa6RbXza8.roa (hash: Xice7TtWbhhry5l8mkNOfTIRzz6L8HFpzbJK4C0Sr3E=) 11: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:f5:10:88:22:3f:a2:d2:be:4e:19:55:70:4c:e5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Apr 17 15:00:22 2026 GMT Not After : Apr 18 15:00:22 2026 GMT Subject: CN=9c9264451dec2e0b89fdd6a5d99160fe6eca4e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:b3:7c:75:f4:53:1f:1d:fa:54:80:d2:bb: 8a:b3:78:b7:ff:bc:a1:9e:9c:26:fd:12:9a:1e:0b: f4:49:f8:6b:50:21:15:14:36:e1:85:29:8c:d9:c5: 1e:f3:3e:80:6b:f9:a4:d3:61:de:9c:e2:fb:46:bf: 21:2e:bf:82:42:7c:fe:f4:09:a7:24:ba:76:61:c5: 41:ce:3d:a7:ba:57:95:c8:ef:6f:41:83:70:bb:5e: 04:04:81:ad:e4:91:31:e0:f4:7c:eb:e9:16:99:99: b6:c5:55:59:e6:64:93:b4:28:10:23:05:01:a9:a4: a8:33:39:6a:bd:38:21:ec:cc:8d:b9:26:99:32:3d: c0:59:70:49:11:47:a1:75:b2:60:7e:2f:6b:eb:09: 73:44:3d:06:35:2d:e7:78:7e:76:ac:56:43:f3:d3: 65:9d:e7:9c:17:f3:2d:43:c9:60:1f:cf:7c:b1:af: 4a:6b:f6:f7:fa:8a:a4:7d:d5:ab:97:ab:69:91:1d: 00:e5:b9:76:70:77:21:1f:93:e0:2d:b4:9f:33:a1: 9a:3e:f4:f7:89:32:87:c9:8f:57:52:c5:d8:dc:ad: ae:13:bf:a0:5e:a1:9b:b1:68:1d:4b:c1:c6:d9:30: d5:a3:43:6b:97:06:50:ac:c3:6e:5b:0c:76:04:87: 16:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:92:64:45:1D:EC:2E:0B:89:FD:D6:A5:D9:91:60:FE:6E:CA:4E:9E X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:12:f4:d7:c3:fd:98:65:ce:ed:55:4e:ae:62:dd:c6:27:d8: 5b:15:b4:ac:2e:61:99:86:17:9a:8f:82:7f:98:33:8c:39:33: 26:7b:cf:d0:2a:2c:bd:01:81:41:33:a9:f8:e1:61:00:d5:af: 2b:1e:70:85:ff:81:01:d7:e0:fe:2a:79:42:24:3e:aa:50:e5: 04:74:c5:e0:6b:d5:34:58:ab:82:5e:b1:b8:3b:a3:8b:0a:fc: ad:e0:4e:b8:a9:da:91:a0:a2:aa:fc:60:d7:d5:3d:01:c7:a4: 58:12:f0:68:0a:66:02:da:5f:57:91:29:03:07:51:1e:39:0a: c7:e0:2b:22:a2:c3:79:2c:c2:eb:7d:00:14:f5:fa:fd:4b:17: d8:b4:36:e0:a6:7a:a6:0b:36:fc:ad:f8:69:1f:61:5a:16:69: 97:e2:c9:6a:68:f2:18:7d:e9:d5:45:6a:05:e5:09:7f:94:8e: 40:16:96:76:71:75:be:8e:c9:6d:9b:c2:52:ce:28:a6:8b:a8: 9f:8d:8a:6d:35:00:39:62:2f:a2:79:39:68:e4:ef:81:d1:2b: 0d:5a:66:38:65:45:0f:c6:61:1e:33:b6:95:05:35:32:61:4b: 98:d6:81:18:16:d1:74:8c:df:84:fd:93:a0:51:2a:fe:8a:54: 57:8c:c0:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2b9RCIIj+i0r5OGVVwTOXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwNDE3MTUwMDIyWhcNMjYwNDE4MTUwMDIyWjAzMTEwLwYDVQQD Eyg5YzkyNjQ0NTFkZWMyZTBiODlmZGQ2YTVkOTkxNjBmZTZlY2E0ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2qzfHX0Ux8d+lSA0ruKs3i3/7yh npwm/RKaHgv0SfhrUCEVFDbhhSmM2cUe8z6Aa/mk02HenOL7Rr8hLr+CQnz+9Amn JLp2YcVBzj2nuleVyO9vQYNwu14EBIGt5JEx4PR86+kWmZm2xVVZ5mSTtCgQIwUB qaSoMzlqvTgh7MyNuSaZMj3AWXBJEUehdbJgfi9r6wlzRD0GNS3neH52rFZD89Nl neecF/MtQ8lgH898sa9Ka/b3+oqkfdWrl6tpkR0A5bl2cHchH5PgLbSfM6GaPvT3 iTKHyY9XUsXY3K2uE7+gXqGbsWgdS8HG2TDVo0NrlwZQrMNuWwx2BIcWpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJySZEUd7C4Lif3WpdmRYP5uyk6eMB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhL018P9 mGXO7VVOrmLdxifYWxW0rC5hmYYXmo+Cf5gzjDkzJnvP0CosvQGBQTOp+OFhANWv Kx5whf+BAdfg/ip5QiQ+qlDlBHTF4GvVNFirgl6xuDujiwr8reBOuKnakaCiqvxg 19U9AcekWBLwaApmAtpfV5EpAwdRHjkKx+ArIqLDeSzC630AFPX6/UsX2LQ24KZ6 pgs2/K34aR9hWhZpl+LJamjyGH3p1UVqBeUJf5SOQBaWdnF1vo7JbZvCUs4opouo n42KbTUAOWIvonk5aOTvgdErDVpmOGVFD8ZhHjO2lQU1MmFLmNaBGBbRdIzfhP2T oFEq/opUV4zAKQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:04:34 2026 by rpki-client