$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: 1uAk9ixVGPGYF+cbc+1Ht3f5doRlSRYZnxcr3VFIhjg= Subject key identifier: 92:4B:C5:14:BD:FD:12:75:05:9C:17:89:71:C0:EE:85:86:B8:18:7B Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019D9B87F83215EC7E8A3E0D9426E303C2BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0EC7 Signing time: Fri 17 Apr 2026 13:01:12 +0000 Manifest this update: Fri 17 Apr 2026 13:01:12 +0000 Manifest next update: Sat 18 Apr 2026 13:01:12 +0000 Files and hashes: 1: 3vLLEawWlFzGv5JsfUPDtZBDJGY.roa (hash: PavOw4v6+T14FuM5j33PYH4PD5HZoqWe5pgCu1sHQTM=) 2: AHtaW66JMITwcArnsmCRwFXXsoI.roa (hash: ZcCP5/OLK7h3hkYbytBpwMfpzhJ4QDRnFvoryxgp3QU=) 3: GlceivHp-TV4Q9crmL9mrMBEglg.roa (hash: fi9rQQg/AghEIXY2rzjh9Ngdd5xXBUgGLZxXNH+o2gI=) 4: LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa (hash: NF23Tpd0XzXu/8VnH1fo4lwK7GUHlQSNd4PIlBQQqXM=) 5: SqqfV0cqdsmTEBKuOvF0JJEbDoo.roa (hash: bMcPfDE84mvLVznq47OZBYkUC9R902MrAMG5aI6NhzY=) 6: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: yv5/AxO2AdHYAskOBtdJiv9iew4emt/RxKCReLxyMDQ=) 7: fLKffdmk_A9Snr8RhFbOZjjywPY.roa (hash: IiagzZLO/ENGlk4BhZMQEHdxX+qkJzXcYKWPS2YP1/k=) 8: hxoGXcKSbBJ2PWCa3J0fMHiuDsU.roa (hash: 7Q+LWc6VgpTopv5k3/peiGrLhiln8d4FJvX1XgGREac=) 9: m4ddTK804isbAZwCK7aJ6EBhPpU.roa (hash: 7StX8F57GxKb2pQJDMDon9e+sgj78negT0fCwKTunA8=) 10: yHzr1mLOyq97cMlnkU_QbvILd_k.roa (hash: A7tEKpefOfoVMYMfFB/0vDiWMTh6ZA+ebsPXTsPnyck=) 11: ziPECi56XWvOBSk7jFhCDI6bu7M.roa (hash: GtmGk+9Vj+/ONt8GKGTxXSgpLCYGnOP8KSMdgsMgpmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:87:f8:32:15:ec:7e:8a:3e:0d:94:26:e3:03:c2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Apr 17 13:01:12 2026 GMT Not After : Apr 18 13:01:12 2026 GMT Subject: CN=924bc514bdfd1275059c178971c0ee8586b8187b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:13:c8:a2:d5:be:28:8e:01:61:9f:f6:14: 48:af:56:0a:3a:be:d5:4c:ec:ed:bb:87:5b:bd:f2: d1:15:28:96:7c:f8:e5:45:3c:e7:dd:2e:15:7d:64: 50:38:d1:92:38:69:da:87:fd:1d:2b:dd:0a:62:18: 9a:f8:db:1f:b1:78:61:78:fa:18:34:7f:b3:c3:a5: ed:0a:2b:77:12:01:de:dc:8b:15:70:2c:a9:d4:16: 67:cc:71:87:96:9a:71:ce:e4:02:e2:3d:54:88:18: 79:79:6f:f0:1c:91:dd:95:97:ca:62:38:42:83:96: d2:d3:b2:0f:e5:00:84:5d:36:24:e0:9c:82:8c:e0: 33:46:55:d6:f1:19:78:a0:6c:fb:12:a7:18:11:d3: 88:42:99:eb:7a:60:85:00:36:b0:57:1f:7b:90:b1: e6:42:90:0a:e8:4b:e3:e5:fb:15:86:b2:00:61:6c: 3d:61:05:6e:42:da:15:06:40:ea:d8:39:03:fb:fa: 64:82:02:fd:00:aa:94:47:7e:72:fc:c5:10:2f:3f: 23:be:c9:f7:6c:1d:63:4d:e6:db:43:00:59:c7:22: 70:7b:11:dd:0d:84:1a:37:15:6f:20:bb:1a:e4:2d: c8:e6:90:fa:e3:00:58:c0:19:01:41:1e:70:41:98: dc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4B:C5:14:BD:FD:12:75:05:9C:17:89:71:C0:EE:85:86:B8:18:7B X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:11:36:09:71:1d:db:2e:01:3e:9e:a3:72:b9:07:50:fa:d7: fd:90:45:88:c6:c4:5d:01:c0:17:12:37:97:7a:f2:a7:35:30: 85:01:b9:8f:31:62:22:78:7d:6c:13:81:e6:21:3f:e2:cb:3a: b8:04:1c:3e:c6:00:2d:d4:ba:6b:e7:03:62:7f:a6:4c:68:05: 0c:d0:31:34:7b:6f:84:9a:f4:19:72:4d:e3:a1:94:57:c1:d6: f3:5b:dd:2e:64:85:c3:ad:34:ff:8b:9a:ed:23:6c:8a:47:45: 56:20:66:42:9f:ae:31:5e:c8:2f:9b:94:52:97:76:8c:d4:a0: bb:d5:b9:4c:9d:82:22:06:e1:eb:7d:1c:c7:e1:67:11:22:4e: 8c:8b:e1:54:56:40:d0:09:ab:d2:88:cc:62:8e:ae:bb:79:3b: f2:ef:b5:6b:36:ad:4f:9a:68:ac:56:e2:9c:6e:be:f4:50:d0: 69:58:4f:8b:51:43:9a:d8:a6:a6:b7:ff:a3:53:2b:32:81:d4: 8d:33:65:4a:7a:f4:b8:bf:ba:3d:63:df:70:7a:b9:19:6c:e8: d2:ba:b9:bd:da:98:fd:09:26:3a:c4:40:3e:ad:65:af:3f:15: 3b:4b:f5:0d:25:44:d9:7d:1c:94:4e:44:23:da:35:b8:84:cf: ac:2e:88:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bh/gyFex+ij4NlCbjA8K7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwNDE3MTMwMTEyWhcNMjYwNDE4MTMwMTEyWjAzMTEwLwYDVQQD Eyg5MjRiYzUxNGJkZmQxMjc1MDU5YzE3ODk3MWMwZWU4NTg2YjgxODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkgTyKLVviiOAWGf9hRIr1YKOr7V TOztu4dbvfLRFSiWfPjlRTzn3S4VfWRQONGSOGnah/0dK90KYhia+NsfsXhhePoY NH+zw6XtCit3EgHe3IsVcCyp1BZnzHGHlppxzuQC4j1UiBh5eW/wHJHdlZfKYjhC g5bS07IP5QCEXTYk4JyCjOAzRlXW8Rl4oGz7EqcYEdOIQpnremCFADawVx97kLHm QpAK6Evj5fsVhrIAYWw9YQVuQtoVBkDq2DkD+/pkggL9AKqUR35y/MUQLz8jvsn3 bB1jTebbQwBZxyJwexHdDYQaNxVvILsa5C3I5pD64wBYwBkBQR5wQZjc+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJLxRS9/RJ1BZwXiXHA7oWGuBh7MB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBE2CXEd 2y4BPp6jcrkHUPrX/ZBFiMbEXQHAFxI3l3rypzUwhQG5jzFiInh9bBOB5iE/4ss6 uAQcPsYALdS6a+cDYn+mTGgFDNAxNHtvhJr0GXJN46GUV8HW81vdLmSFw600/4ua 7SNsikdFViBmQp+uMV7IL5uUUpd2jNSgu9W5TJ2CIgbh630cx+FnESJOjIvhVFZA 0Amr0ojMYo6uu3k78u+1azatT5porFbinG6+9FDQaVhPi1FDmtimprf/o1MrMoHU jTNlSnr0uL+6PWPfcHq5GWzo0rq5vdqY/QkmOsRAPq1lrz8VO0v1DSVE2X0clE5E I9o1uITPrC6IjA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:22:07 2026 by rpki-client