$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: Tj0E7ZzscTS4h1SCk4er2CxdcmeYSzbgbtu/UiW9/58= Subject key identifier: 8A:FD:84:F9:34:EA:9C:63:79:6F:61:0D:7E:55:51:BD:CD:3A:32:4E Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019D9BF55F14F4FBAD6A968B2C3C0B169D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 1128 Signing time: Fri 17 Apr 2026 15:00:42 +0000 Manifest this update: Fri 17 Apr 2026 15:00:42 +0000 Manifest next update: Sat 18 Apr 2026 15:00:42 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: hkDOVmXeFdnRkVit3F5TEGNH2bdeeoiN5QbQ5rxpDDc=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 14: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=) 15: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 16: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 17: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 18: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 19: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 20: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:f5:5f:14:f4:fb:ad:6a:96:8b:2c:3c:0b:16:9d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Apr 17 15:00:42 2026 GMT Not After : Apr 18 15:00:42 2026 GMT Subject: CN=8afd84f934ea9c63796f610d7e5551bdcd3a324e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:02:6a:84:7b:8e:be:af:68:41:21:0f:39: 04:3e:4c:bd:66:a2:42:28:b8:89:79:d9:74:b1:5d: 8b:c2:a7:d1:4c:fd:cd:3f:ea:b3:62:53:63:28:9b: 9b:a2:f4:08:59:bb:7e:1e:a8:67:e9:f9:ce:e6:dd: 57:18:96:8d:0d:e0:a9:b6:3f:a4:59:93:37:86:4f: 08:85:87:95:f2:dc:cf:8a:75:fd:c4:bf:64:6c:83: 86:23:72:0c:6b:e5:85:31:d9:e6:b8:5d:82:36:43: c7:81:f8:03:47:bc:b3:b4:39:e5:1f:2d:82:18:09: b1:d3:a9:56:bb:0d:a0:a5:02:d6:54:51:14:bf:8b: 49:24:cc:56:52:f8:29:00:34:22:90:b0:1b:df:42: b4:0f:29:aa:54:a3:b3:cb:38:ce:4c:44:e8:5e:84: da:aa:4a:f4:49:d3:b4:bf:42:20:47:e1:28:70:7b: 85:38:51:33:9d:46:20:30:cc:94:17:d3:6e:b9:eb: ee:53:39:e7:20:a3:68:9c:60:88:60:75:96:9a:7d: ac:5a:4f:90:94:03:90:06:7d:f2:98:fb:bb:2a:b7: 6f:c6:08:46:13:7f:c0:7e:cc:6a:5a:f8:e6:a0:96: 33:91:36:41:9f:a4:98:1a:ac:1c:9b:da:6f:bb:f1: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FD:84:F9:34:EA:9C:63:79:6F:61:0D:7E:55:51:BD:CD:3A:32:4E X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1f:5f:2c:1f:b4:92:07:2b:46:79:aa:22:e2:e2:c0:ed:54: b4:7a:6f:2a:48:83:22:ba:eb:7d:92:51:89:3f:54:4b:b9:64: e3:97:3e:3f:b9:f8:f7:74:9a:aa:44:5a:d5:6c:b9:a2:aa:8f: 47:2d:14:c4:df:ec:66:d2:77:24:37:c2:4c:ee:8e:56:49:ef: 1b:52:9f:2e:d1:b5:3f:d2:df:4b:16:e0:22:be:56:93:43:9a: 5d:12:d2:b4:47:5f:b8:a3:52:09:fb:c5:2e:91:8e:7e:77:98: e6:29:0f:4b:2a:89:16:f7:1f:f0:f2:ac:24:d7:9a:af:67:ec: 5c:ee:5f:9e:c8:33:67:87:5d:75:e8:12:2b:83:7c:9f:ec:d3: 40:b9:ba:a5:b1:0e:3a:d4:24:20:8f:2e:fd:dd:6a:aa:f9:29: 2e:93:d9:da:3e:04:90:60:d2:55:8e:2f:16:59:6d:96:60:3d: 99:34:1e:82:80:1c:84:af:2f:dd:d6:86:fd:f7:0d:13:4d:de: f5:5c:01:6d:ac:4c:36:82:06:1a:75:eb:45:8b:72:2f:45:f7: 8c:2e:e7:01:e1:23:bd:f5:ad:75:79:4f:92:a8:69:1f:7b:91: 18:63:ae:a9:df:7e:c1:fb:b2:89:20:b6:ad:c3:2d:43:6c:33: 41:9f:5c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2b9V8U9PutapaLLDwLFp0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwNDE3MTUwMDQyWhcNMjYwNDE4MTUwMDQyWjAzMTEwLwYDVQQD Eyg4YWZkODRmOTM0ZWE5YzYzNzk2ZjYxMGQ3ZTU1NTFiZGNkM2EzMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0ECaoR7jr6vaEEhDzkEPky9ZqJC KLiJedl0sV2LwqfRTP3NP+qzYlNjKJubovQIWbt+Hqhn6fnO5t1XGJaNDeCptj+k WZM3hk8IhYeV8tzPinX9xL9kbIOGI3IMa+WFMdnmuF2CNkPHgfgDR7yztDnlHy2C GAmx06lWuw2gpQLWVFEUv4tJJMxWUvgpADQikLAb30K0DymqVKOzyzjOTEToXoTa qkr0SdO0v0IgR+EocHuFOFEznUYgMMyUF9NuuevuUznnIKNonGCIYHWWmn2sWk+Q lAOQBn3ymPu7KrdvxghGE3/AfsxqWvjmoJYzkTZBn6SYGqwcm9pvu/F5RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr9hPk06pxjeW9hDX5VUb3NOjJOMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOR9fLB+0 kgcrRnmqIuLiwO1UtHpvKkiDIrrrfZJRiT9US7lk45c+P7n493SaqkRa1Wy5oqqP Ry0UxN/sZtJ3JDfCTO6OVknvG1KfLtG1P9LfSxbgIr5Wk0OaXRLStEdfuKNSCfvF LpGOfneY5ikPSyqJFvcf8PKsJNear2fsXO5fnsgzZ4dddegSK4N8n+zTQLm6pbEO OtQkII8u/d1qqvkpLpPZ2j4EkGDSVY4vFlltlmA9mTQegoAchK8v3daG/fcNE03e 9VwBbaxMNoIGGnXrRYtyL0X3jC7nAeEjvfWtdXlPkqhpH3uRGGOuqd9+wfuyiSC2 rcMtQ2wzQZ9cAw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:54:54 2026 by rpki-client