$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: MBh3csQzZX0VdAIutZOfJ1hHCsq16egFhG0nrHcacxs= Subject key identifier: C3:27:A9:BC:65:E6:D6:A6:18:F5:71:A6:C2:D5:BC:9D:72:2D:F7:6B Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019D9A06E3565560AA502068A1909FE07B09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 05BA Signing time: Fri 17 Apr 2026 06:00:35 +0000 Manifest this update: Fri 17 Apr 2026 06:00:35 +0000 Manifest next update: Sat 18 Apr 2026 06:00:35 +0000 Files and hashes: 1: 1-hH0OdTs66ZHAoF3LxN6GzGRGLA.roa (hash: lwxtwCNle18YFsAjD50qJJ41jy6oJAGh+Vhp9fwJVGo=) 2: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: 56Jy58uu2mX1X7LSkQQMGU3L58rmzEibSPI9NMWREz8=) 3: 4FvrTlxGhcdz6JszhweukK-HXp4.roa (hash: vyQEyyYQodDDsgXdHyrJ4jLSuzaa1xOpp48GTtDNY8I=) 4: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 5: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 6: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 7: PT8f8KrDCyi-fOHRybRu5os8t7I.roa (hash: aps2zxt1lkijYJV6i+9YBPtT0emoODtU3jQBxhvYqO0=) 8: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 9: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 10: ZVUX-ukmxmMuSmBaOHN4VXarmdk.roa (hash: v4YUjhuoNj8kXmli1Rh7WdYmfXPmnvN9UdaKmw/4lRw=) 11: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 12: fro6TGls5A_k6d-cTWMJbP0QioE.roa (hash: 9eBljoV7C7Gpp7fNoutyzWwHkUabzavd+/jPQySZ6NQ=) 13: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 14: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:06:e3:56:55:60:aa:50:20:68:a1:90:9f:e0:7b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Apr 17 06:00:35 2026 GMT Not After : Apr 18 06:00:35 2026 GMT Subject: CN=c327a9bc65e6d6a618f571a6c2d5bc9d722df76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:7b:6f:7c:b3:02:78:67:ce:66:73:9e:bf: 75:bf:55:b2:f9:1b:c8:e9:ce:ff:4d:0b:d7:97:b5: 98:6d:76:17:27:4c:84:fe:f0:19:ae:3b:87:78:8f: 10:cf:50:92:27:73:18:72:7e:9e:97:57:7c:8e:40: 2b:04:c4:f2:75:d3:37:1a:2a:4e:ce:fc:07:f1:e2: 04:8c:d2:93:b6:c3:33:1b:ec:1a:df:39:59:ff:21: 45:c6:e4:1f:a7:a3:39:1b:70:84:ad:06:00:f2:4a: 01:40:3a:30:65:6d:99:a4:68:91:d6:cd:bd:c2:cb: a2:7c:20:e3:9a:66:72:16:51:f0:d2:d3:c7:b2:2a: 71:7e:f4:73:84:20:ca:ca:cc:be:c5:21:2e:b0:17: 39:16:6e:fd:8c:cf:89:6d:94:80:15:13:9c:63:0c: e6:77:9e:fc:5f:b2:92:04:cb:6f:2d:95:ad:b1:b7: 85:8a:f8:9b:9a:56:44:79:d9:fc:a1:16:60:24:1c: 3d:81:0b:41:49:87:2c:d0:a8:87:96:a8:d7:00:bb: ba:54:36:6e:56:ee:c7:5c:e1:d4:e7:0c:46:77:ad: a5:62:e0:26:dd:6b:4c:eb:9a:0d:87:7d:5a:1a:f8: 91:53:a3:08:7b:01:b6:d2:7f:6a:cb:59:1c:c0:3d: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:27:A9:BC:65:E6:D6:A6:18:F5:71:A6:C2:D5:BC:9D:72:2D:F7:6B X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:0f:86:07:32:d7:ac:06:b4:fa:e2:20:b0:11:87:3f:fb:57: fc:39:31:f5:af:54:2b:06:be:bb:0e:ad:fb:0b:76:77:6d:e0: b0:5a:65:08:04:ce:9e:d0:95:7e:86:fc:26:6a:e8:c4:86:da: 08:3f:67:ff:e5:38:11:5e:8a:19:4d:5b:8d:db:f7:f5:a2:82: 54:06:d7:4f:4a:11:dc:8a:6d:04:e3:27:d0:fa:d9:f9:38:29: 69:b7:58:03:08:99:e6:85:24:b1:ad:7c:b6:8e:ad:59:9e:f5: 1f:07:15:24:8d:dd:d5:7c:86:94:2d:99:47:98:88:77:b6:d2: 6e:bb:33:7b:07:92:ce:d4:bc:25:1a:b1:a0:3f:88:29:ab:0c: dd:83:0e:b1:c4:cd:77:9a:c6:fb:11:0d:b4:14:18:6a:f2:08: 6e:1b:39:03:30:e4:8b:69:9d:c2:92:a1:d7:6c:ff:76:8b:1d: 22:e2:03:43:63:00:ce:e9:8d:bb:15:d5:92:e8:3a:60:33:69: b5:a1:ca:8f:b6:76:35:b6:f1:93:ea:a7:a0:c2:f6:aa:33:78: dc:eb:57:fb:98:11:5d:a8:5a:04:94:7c:9c:4e:9c:59:c5:e7: c0:3f:e2:c6:98:0a:f2:3a:fe:cb:de:fe:03:d6:a8:ab:f3:5b: a4:06:90:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBuNWVWCqUCBooZCf4HsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwNDE3MDYwMDM1WhcNMjYwNDE4MDYwMDM1WjAzMTEwLwYDVQQD EyhjMzI3YTliYzY1ZTZkNmE2MThmNTcxYTZjMmQ1YmM5ZDcyMmRmNzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTV7b3yzAnhnzmZznr91v1Wy+RvI 6c7/TQvXl7WYbXYXJ0yE/vAZrjuHeI8Qz1CSJ3MYcn6el1d8jkArBMTyddM3GipO zvwH8eIEjNKTtsMzG+wa3zlZ/yFFxuQfp6M5G3CErQYA8koBQDowZW2ZpGiR1s29 wsuifCDjmmZyFlHw0tPHsipxfvRzhCDKysy+xSEusBc5Fm79jM+JbZSAFROcYwzm d578X7KSBMtvLZWtsbeFivibmlZEedn8oRZgJBw9gQtBSYcs0KiHlqjXALu6VDZu Vu7HXOHU5wxGd62lYuAm3WtM65oNh31aGviRU6MIewG20n9qy1kcwD36QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMnqbxl5tamGPVxpsLVvJ1yLfdrMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQ+GBzLX rAa0+uIgsBGHP/tX/Dkx9a9UKwa+uw6t+wt2d23gsFplCATOntCVfob8JmroxIba CD9n/+U4EV6KGU1bjdv39aKCVAbXT0oR3IptBOMn0PrZ+TgpabdYAwiZ5oUksa18 to6tWZ71HwcVJI3d1XyGlC2ZR5iId7bSbrszeweSztS8JRqxoD+IKasM3YMOscTN d5rG+xENtBQYavIIbhs5AzDki2mdwpKh12z/dosdIuIDQ2MAzumNuxXVkug6YDNp taHKj7Z2Nbbxk+qnoML2qjN43OtX+5gRXahaBJR8nE6cWcXnwD/ixpgK8jr+y97+ A9aoq/NbpAaQVw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:23:29 2026 by rpki-client