$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: W63yTUe5pqM0rNqaWWvG0vCFqhbq6R5o8doSFqIvoRQ= Subject key identifier: 01:47:10:4C:67:DD:2B:05:08:66:56:2E:48:DC:79:38:BF:D5:AD:56 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019DA3AEFB34FC847C85E7E90EA30703520F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 18DC Signing time: Sun 19 Apr 2026 03:00:46 +0000 Manifest this update: Sun 19 Apr 2026 03:00:46 +0000 Manifest next update: Mon 20 Apr 2026 03:00:46 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: CmTLKG/r6EQ4yOduA1SNaT+x67+Vr8JtIdThxNeCoQg=) 10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) 11: xGGCf6Hil4Mo0C8TJDJWoZKOtQY.roa (hash: OSJabINQbvYIP/JxqMQjPh9E61hQf/o/MtFixqbU+Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:ae:fb:34:fc:84:7c:85:e7:e9:0e:a3:07:03:52:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Apr 19 03:00:46 2026 GMT Not After : Apr 20 03:00:46 2026 GMT Subject: CN=0147104c67dd2b050866562e48dc7938bfd5ad56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:4b:04:55:a8:9c:c3:8d:61:ce:db:ef:99: b7:10:54:d5:22:84:f6:d5:6c:14:cb:25:67:08:d4: 38:88:14:69:dc:31:2d:44:b2:38:d9:14:87:fc:d4: 1d:f6:1a:39:eb:5f:c9:d7:97:0f:40:47:a4:f1:0a: db:c4:70:de:ce:68:dd:51:a0:55:98:79:52:95:59: ed:44:ec:bf:b0:8b:78:3b:60:35:32:c7:c8:84:65: 7d:6d:71:86:1e:3e:52:74:6f:53:9b:a6:82:23:0b: 7c:d3:5c:5a:ac:28:da:20:42:e8:c3:9c:b6:9d:69: 9c:f2:0f:54:e6:52:63:fd:d4:31:42:c7:53:db:30: 60:49:a2:a8:97:5f:36:32:28:17:70:c0:33:16:47: 23:c2:86:4b:b3:1c:89:ab:7f:db:d0:2a:6c:ab:fd: bc:42:37:98:30:4a:e0:65:d2:4f:53:f5:3f:25:14: 17:33:4d:68:c7:4e:1c:a5:b7:be:34:02:29:88:17: b8:24:0d:82:49:79:7e:56:9d:86:91:32:0e:85:2a: 50:19:97:f9:f4:3d:ea:72:10:35:37:a0:6c:99:48: 16:dc:a1:aa:da:79:0e:8d:7f:db:5d:d3:8c:b6:b5: d4:dc:59:39:9b:09:8e:d8:81:10:f0:a5:35:46:26: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:47:10:4C:67:DD:2B:05:08:66:56:2E:48:DC:79:38:BF:D5:AD:56 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f5:49:33:b7:a2:61:d4:c9:5f:7c:d6:6e:53:53:87:d9:c5: 65:93:8a:aa:60:88:0c:1d:56:df:f2:f9:b1:ec:97:c4:8e:ec: 9b:94:b6:aa:57:bf:f1:34:da:d8:d2:d6:25:7b:58:9d:f4:ee: fb:f4:53:7e:bb:9b:12:77:3f:49:32:86:45:49:78:24:02:67: 43:00:2a:a4:3e:8e:fa:b1:16:f7:5e:57:e9:db:32:c6:be:68: 51:87:8f:44:b1:cc:09:21:6e:d7:d7:9e:17:fe:b9:30:d0:9d: a1:f4:32:6c:88:84:7d:87:7a:d3:36:6b:5f:32:24:0b:1d:4d: bd:6b:67:34:0a:85:e3:11:97:8f:d8:71:a5:19:a6:33:97:49: 84:92:ac:f0:1d:df:b1:b8:8d:f1:cf:24:34:b1:2e:e9:46:5c: 1d:a1:b0:39:0e:6f:4c:c0:c3:35:81:2b:10:de:d4:32:67:48: 18:6f:2a:37:89:48:c3:49:7c:b8:c3:a0:8c:47:6d:e4:db:82: 0c:4e:6a:4a:96:9a:92:89:9b:af:c8:03:dc:d1:f8:00:f1:50: 82:33:b0:aa:51:38:b0:54:5c:f1:34:fe:18:08:fc:2e:24:1a: df:97:38:db:81:89:48:f9:a4:ce:ba:c0:be:78:05:a2:b9:13: 60:b0:8d:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jrvs0/IR8hefpDqMHA1IPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwNDE5MDMwMDQ2WhcNMjYwNDIwMDMwMDQ2WjAzMTEwLwYDVQQD EygwMTQ3MTA0YzY3ZGQyYjA1MDg2NjU2MmU0OGRjNzkzOGJmZDVhZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk1LBFWonMONYc7b75m3EFTVIoT2 1WwUyyVnCNQ4iBRp3DEtRLI42RSH/NQd9ho561/J15cPQEek8QrbxHDezmjdUaBV mHlSlVntROy/sIt4O2A1MsfIhGV9bXGGHj5SdG9Tm6aCIwt801xarCjaIELow5y2 nWmc8g9U5lJj/dQxQsdT2zBgSaKol182MigXcMAzFkcjwoZLsxyJq3/b0Cpsq/28 QjeYMErgZdJPU/U/JRQXM01ox04cpbe+NAIpiBe4JA2CSXl+Vp2GkTIOhSpQGZf5 9D3qchA1N6BsmUgW3KGq2nkOjX/bXdOMtrXU3Fk5mwmO2IEQ8KU1RiYXOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFHEExn3SsFCGZWLkjceTi/1a1WMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPVJM7ei YdTJX3zWblNTh9nFZZOKqmCIDB1W3/L5seyXxI7sm5S2qle/8TTa2NLWJXtYnfTu +/RTfrubEnc/STKGRUl4JAJnQwAqpD6O+rEW915X6dsyxr5oUYePRLHMCSFu19ee F/65MNCdofQybIiEfYd60zZrXzIkCx1NvWtnNAqF4xGXj9hxpRmmM5dJhJKs8B3f sbiN8c8kNLEu6UZcHaGwOQ5vTMDDNYErEN7UMmdIGG8qN4lIw0l8uMOgjEdt5NuC DE5qSpaakombr8gD3NH4APFQgjOwqlE4sFRc8TT+GAj8LiQa35c424GJSPmkzrrA vngForkTYLCN8g== -----END CERTIFICATE-----Generated at Sun Apr 19 11:05:24 2026 by rpki-client