$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: WGh8rzZheEsNCyEoXOd4pU7/QWBzFOnd0e1gTC0c5rc= Subject key identifier: 80:E8:44:1D:A0:47:88:23:06:1F:92:71:3A:92:2B:4E:2C:2F:30:56 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019D9A07696EB3E035CC014E4BDE16C731A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1914 Signing time: Fri 17 Apr 2026 06:01:10 +0000 Manifest this update: Fri 17 Apr 2026 06:01:10 +0000 Manifest next update: Sat 18 Apr 2026 06:01:10 +0000 Files and hashes: 1: 5IhZSBiDvsOSeVhRVnHGfrZ9l5M.roa (hash: 07LF7iOUP4kz2UtFtdj1J7VVMfVv3ZHccZXokZwfZtg=) 2: 5tvSeHfT9tQJaY_leFHXuR2yBH0.roa (hash: OssF5KxzdAdA0MRGmFSLEWiP4GOcYF7Td/3FVSiYLEA=) 3: BiYRVVML9NNTA_8LHQsEIyn-udM.roa (hash: MQi6PP1rzRM1KN1VV4mGhoaMI5G3SPq1bp7SEkx+KmA=) 4: NMfbsowFqcogPMg6cAeG3w9cjq0.roa (hash: uFoj7c/4SsWRnxgjbLgJrGS7fytT/Dv79U+edW6MDx8=) 5: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 6: RiJbycN_HnEaFdxBy-0QqogHp9w.roa (hash: HrWeheuaH2PNBF70Yz5xTkWSf+oor2QnLluzhSuwnU8=) 7: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=) 8: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 9: f36wSuri4isgGvRNSVH6JQhVoXQ.roa (hash: yoPRFfkeY6wwCb2HhFYtsNc5bsYeGXcwftlwYv52l3Q=) 10: hPDJ7bwWMVeeA66R-Nm66UMAI3I.roa (hash: S6FoRCGZ+2A7ou0QqZgDgmiPo527/Z9rU6I1qlBMQXY=) 11: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (hash: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=) 12: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 13: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 14: qltZRt6yv2xmd-YFzKK4-T95t70.roa (hash: ouYg4rusjDVFIksWY2y+Jv/jtKdXu+HEE/CHgFLthz4=) 15: rGIovrXr2PenpqE83Nj9eWB1x8s.roa (hash: 34LCqWqcnvgQ4rKtRytxb38DA5KqQIpYL78rOxx5xLc=) 16: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: YubJ5+++DbU+DW36aoIqT10VZUl0R8H0Ucg0L9yADVU=) 17: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:07:69:6e:b3:e0:35:cc:01:4e:4b:de:16:c7:31:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Apr 17 06:01:10 2026 GMT Not After : Apr 18 06:01:10 2026 GMT Subject: CN=80e8441da0478823061f92713a922b4e2c2f3056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:77:68:0f:ee:64:c0:30:f8:72:33:0b:b5:7b: 53:87:57:ef:e7:b2:72:03:1e:21:1c:d2:30:05:55: 1d:d9:a3:b7:5e:ac:62:20:78:18:36:7c:63:e6:e3: a3:fd:f9:2f:7b:11:1c:19:f5:96:07:55:65:87:ae: 41:f7:86:5d:8a:d7:64:a6:14:91:83:7c:8a:c7:7b: 2e:e8:22:4b:2c:78:3e:02:49:d7:5b:fb:b8:7f:d8: 0d:a7:9c:19:ad:a6:73:da:e7:e0:e5:53:31:94:56: b3:3e:4b:11:9a:28:54:39:06:19:74:86:51:9d:ad: 11:46:9f:1d:55:5b:32:17:1d:84:4a:8f:e8:fd:6a: 76:a6:03:9c:13:d0:b4:ac:da:55:49:53:9c:68:3e: c6:61:9c:3a:4e:85:0a:43:a2:2e:d6:dd:ff:52:0e: 16:9e:6c:aa:22:d3:aa:b0:9f:6b:a7:ff:35:cb:36: 8f:35:f0:0d:1f:5f:f9:0c:5c:6b:77:d7:1e:70:05: b9:d8:76:e8:0b:11:10:c7:6f:c9:b6:24:15:65:84: c2:75:6a:5b:10:f6:11:e2:fe:61:af:73:c4:56:91: 30:0d:db:f2:05:a5:5c:e7:75:0b:1b:17:cf:fd:2e: 25:bd:fe:9c:53:86:6c:06:f9:8e:95:c2:8a:8b:9a: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E8:44:1D:A0:47:88:23:06:1F:92:71:3A:92:2B:4E:2C:2F:30:56 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:60:05:91:3f:d5:6d:3c:92:41:f4:cd:a7:51:f1:48:02:35: f1:bd:56:e9:0a:87:62:cf:14:b0:fc:d2:77:2f:a0:db:7c:f7: 6e:74:54:76:0e:88:1e:88:79:77:e2:17:3a:a1:ae:fc:d8:41: f8:e1:c9:2c:79:c3:94:85:18:a2:4f:7f:53:e5:09:46:87:7f: a6:cf:2c:c4:5f:13:c5:0c:0c:22:5c:e6:e3:10:e3:7e:b7:b5: 92:ce:62:84:55:fa:10:71:18:85:29:21:b5:ee:36:92:d1:6c: 2f:28:b3:5d:8f:ad:12:24:8e:0d:00:ae:06:b0:e4:cd:df:2b: cb:2a:86:79:20:87:75:de:2a:19:2f:ef:85:40:a6:5a:72:f2: 20:b8:60:76:db:17:56:07:04:2b:e7:0c:a2:76:e0:36:d0:a0: 54:43:ed:cb:ff:32:47:5c:59:8d:55:82:57:d5:71:02:4b:12: c1:62:76:f4:5a:9d:5b:f8:7f:31:bd:3a:5c:e3:81:10:5b:4a: 9c:94:00:be:eb:e5:65:4e:62:0b:fc:bb:22:5a:42:68:ae:84: d1:17:d5:9e:24:24:00:16:eb:eb:79:87:bf:f3:9b:65:5d:5f: 75:b7:e9:c3:2e:29:0b:c7:91:86:fe:f2:ae:8a:42:bb:55:dc: 48:d3:e3:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aB2lus+A1zAFOS94WxzGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwNDE3MDYwMTEwWhcNMjYwNDE4MDYwMTEwWjAzMTEwLwYDVQQD Eyg4MGU4NDQxZGEwNDc4ODIzMDYxZjkyNzEzYTkyMmI0ZTJjMmYzMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHdoD+5kwDD4cjMLtXtTh1fv57Jy Ax4hHNIwBVUd2aO3XqxiIHgYNnxj5uOj/fkvexEcGfWWB1Vlh65B94ZditdkphSR g3yKx3su6CJLLHg+AknXW/u4f9gNp5wZraZz2ufg5VMxlFazPksRmihUOQYZdIZR na0RRp8dVVsyFx2ESo/o/Wp2pgOcE9C0rNpVSVOcaD7GYZw6ToUKQ6Iu1t3/Ug4W nmyqItOqsJ9rp/81yzaPNfANH1/5DFxrd9cecAW52HboCxEQx2/JtiQVZYTCdWpb EPYR4v5hr3PEVpEwDdvyBaVc53ULGxfP/S4lvf6cU4ZsBvmOlcKKi5p7awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDoRB2gR4gjBh+ScTqSK04sLzBWMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2AFkT/V bTySQfTNp1HxSAI18b1W6QqHYs8UsPzSdy+g23z3bnRUdg6IHoh5d+IXOqGu/NhB +OHJLHnDlIUYok9/U+UJRod/ps8sxF8TxQwMIlzm4xDjfre1ks5ihFX6EHEYhSkh te42ktFsLyizXY+tEiSODQCuBrDkzd8ryyqGeSCHdd4qGS/vhUCmWnLyILhgdtsX VgcEK+cMonbgNtCgVEPty/8yR1xZjVWCV9VxAksSwWJ29FqdW/h/Mb06XOOBEFtK nJQAvuvlZU5iC/y7IlpCaK6E0RfVniQkABbr63mHv/ObZV1fdbfpwy4pC8eRhv7y ropCu1XcSNPjlA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:58:11 2026 by rpki-client