$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: IJNNToQdbnEx54AunU0fiKvvclRrpAzWww9lXEVmtd4= Subject key identifier: 71:81:59:16:6F:3C:0A:9D:12:B6:79:3E:B8:2B:58:C2:F8:3D:96:4C Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019D9B51205894CB42A8B62C545BC9751977 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 12AA Signing time: Fri 17 Apr 2026 12:01:18 +0000 Manifest this update: Fri 17 Apr 2026 12:01:18 +0000 Manifest next update: Sat 18 Apr 2026 12:01:18 +0000 Files and hashes: 1: 0Mybj4rFQlGdxvZ7NznWNMzZNF4.roa (hash: izLvly3jkC64Eb5EtBveae4jjwGSamPNz65JeNhANXc=) 2: 0T_njveGDBox8dRnm6ptBU24SOE.roa (hash: MTvLZVcAf3FK4lXDgQihNVIFOil0UjLczM3XYj+vPwc=) 3: BWSIfeORL3ZaF98YJdEW_lwKSoo.roa (hash: O2KdoHsDXYMUXXkiHb3Ti5/HWYkXf5itDU8BQXurMDo=) 4: HfFxGJLVfgStnjkbuHPm0NlbD20.roa (hash: OTTBrtAbVcSgQpN0MQDDsHGVJuiE+QV/cGYKWbjIEu4=) 5: LYPFsLg-HHk-AH0q_znuAsebvZs.roa (hash: LQwpVZiG9LTd+JsGkTPK0EuyocYLkODDaDYcgGaoYoA=) 6: YHr6sMN1EVbEwUde6FetuHcueOA.roa (hash: 0BAOQ2lWNPhsH0gX4p/TlQYVZnjFg2uh0FOWf3CJEt0=) 7: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: bBN63ilYbaDZMjEc7aL1e9tdDYURmDUIMEtLfQ7V0Ko=) 8: cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa (hash: eKAgKSzUAMEtrHDrT7mnQsSII8a/h3K+YCAIf+FAWy8=) 9: d00ZvtrFum9P2Yp0ubsN6hUhmyM.roa (hash: 2Me5/G1Q2JvdBpJ4pZYv7LNj99NEpOku37A513+s49s=) 10: d50ryNf7AouleyVkV0KoPCj3Vbs.roa (hash: 8cb301Zu+uM5+wsIG5dakaifCIJcNQE2p9LiFv/55dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:51:20:58:94:cb:42:a8:b6:2c:54:5b:c9:75:19:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Apr 17 12:01:18 2026 GMT Not After : Apr 18 12:01:18 2026 GMT Subject: CN=718159166f3c0a9d12b6793eb82b58c2f83d964c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:9a:22:f5:1b:dd:cf:68:d5:48:9c:53:91: 4c:ad:89:d3:bf:56:49:31:88:ee:e4:13:77:61:db: 8d:30:c2:46:eb:32:35:29:94:e1:5e:4b:3a:dd:13: ac:07:cf:5e:bd:dc:49:72:83:9d:54:f7:98:e5:f9: f8:3f:dd:f4:61:ba:64:e2:a1:5c:98:7d:54:c4:43: b4:c0:eb:7c:51:1c:57:de:63:0c:d8:1e:95:1b:45: 1a:b3:e2:43:2a:5e:69:fd:2a:9c:e4:94:47:9d:11: 02:e8:e9:80:a9:dc:b1:c3:8b:91:ac:7d:43:66:e7: 8d:b5:2a:47:5a:ca:c7:19:f0:4b:7f:ea:dd:a0:f7: 08:1c:1d:0c:0c:7e:74:0b:56:c7:8e:95:63:71:d2: 40:7a:1c:ca:b5:fe:dc:45:8c:41:d5:09:70:8e:be: 26:ef:37:32:c6:f3:dc:d5:b8:9d:3f:b9:0a:bd:a7: 20:7d:60:a8:cb:e9:ad:fb:dd:f2:c1:a6:03:0a:26: 35:52:cb:c0:3f:3b:35:bd:cf:9c:c9:dd:c2:0c:84: cf:c2:22:ca:12:63:76:22:9d:a1:63:87:77:0a:84: a1:bc:ef:3a:c3:19:8f:d0:a7:ee:be:14:9e:29:41: 29:94:55:f8:e5:47:45:3c:4a:e8:a8:60:ff:71:8b: 4d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:81:59:16:6F:3C:0A:9D:12:B6:79:3E:B8:2B:58:C2:F8:3D:96:4C X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2a:09:5b:5c:a4:d3:37:ea:37:b5:47:d3:13:83:f6:88:2b: a3:07:98:5d:14:94:db:b9:53:86:b0:b1:12:27:a3:de:0c:87: c7:b8:33:b7:b8:34:71:c4:96:ed:f4:a4:e4:67:47:e9:82:60: bf:fc:39:b8:88:54:d2:a4:b7:c7:56:01:ac:63:41:78:d1:48: 0a:59:5b:92:15:e0:1f:b8:86:be:fa:eb:c6:a3:45:4f:55:60: d9:57:39:e1:d3:69:b5:63:3d:14:91:27:a6:60:0a:d2:c3:28: e1:05:f2:c7:c4:53:4c:ac:56:b5:7d:18:9f:00:90:28:2e:f7: d4:56:45:5e:33:e0:ca:39:4c:dd:1b:c3:0c:43:03:c6:23:42: 70:ab:79:53:35:81:a1:0f:31:66:5b:ce:0b:1d:90:63:f8:f7: 8c:f1:ff:72:10:5d:27:bd:cf:dd:0b:90:20:22:d5:1b:1a:3c: c6:c1:f2:3a:d2:ad:24:43:94:a5:87:28:5d:4c:d4:75:d0:a6: a7:ff:8a:8f:07:b7:ae:8b:4e:2d:35:b1:3c:a8:cb:9a:ed:cf: 89:8a:cc:5d:5e:4b:54:d1:6f:55:ae:de:57:82:89:15:3e:ec: ca:23:98:1f:93:e0:fa:cb:e4:16:44:93:74:25:ea:2f:64:22: 5c:75:97:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bUSBYlMtCqLYsVFvJdRl3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjYwNDE3MTIwMTE4WhcNMjYwNDE4MTIwMTE4WjAzMTEwLwYDVQQD Eyg3MTgxNTkxNjZmM2MwYTlkMTJiNjc5M2ViODJiNThjMmY4M2Q5NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUWaIvUb3c9o1UicU5FMrYnTv1ZJ MYju5BN3YduNMMJG6zI1KZThXks63ROsB89evdxJcoOdVPeY5fn4P930Ybpk4qFc mH1UxEO0wOt8URxX3mMM2B6VG0Uas+JDKl5p/Sqc5JRHnREC6OmAqdyxw4uRrH1D ZueNtSpHWsrHGfBLf+rdoPcIHB0MDH50C1bHjpVjcdJAehzKtf7cRYxB1Qlwjr4m 7zcyxvPc1bidP7kKvacgfWCoy+mt+93ywaYDCiY1UsvAPzs1vc+cyd3CDITPwiLK EmN2Ip2hY4d3CoShvO86wxmP0KfuvhSeKUEplFX45UdFPEroqGD/cYtNQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGBWRZvPAqdErZ5PrgrWML4PZZMMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSoJW1yk 0zfqN7VH0xOD9ogroweYXRSU27lThrCxEiej3gyHx7gzt7g0ccSW7fSk5GdH6YJg v/w5uIhU0qS3x1YBrGNBeNFICllbkhXgH7iGvvrrxqNFT1Vg2Vc54dNptWM9FJEn pmAK0sMo4QXyx8RTTKxWtX0YnwCQKC731FZFXjPgyjlM3RvDDEMDxiNCcKt5UzWB oQ8xZlvOCx2QY/j3jPH/chBdJ73P3QuQICLVGxo8xsHyOtKtJEOUpYcoXUzUddCm p/+Kjwe3rotOLTWxPKjLmu3PiYrMXV5LVNFvVa7eV4KJFT7syiOYH5Pg+svkFkST dCXqL2QiXHWXJw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:44:06 2026 by rpki-client