$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: NVph+g2luD3ChDzuVWn4U4FuaEkRnHHGtN5PjhrhXR8= Subject key identifier: 61:0E:32:CD:B6:77:77:D3:94:AF:85:A6:41:AC:68:23:DF:C4:74:56 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019DA41CE04088962EA2525E2A1E3CE3B534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1965 Signing time: Sun 19 Apr 2026 05:00:48 +0000 Manifest this update: Sun 19 Apr 2026 05:00:48 +0000 Manifest next update: Mon 20 Apr 2026 05:00:48 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: GS4Ra2vPk+fTy8kVhQTP/qBrDqt0MsoyLKMYa+WSYII=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 6: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 7: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 8: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 9: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 10: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 11: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 12: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 13: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 14: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 15: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 16: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 17: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 18: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 19: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 20: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 21: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 22: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 23: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 24: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 25: c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa (hash: Q4DNvIlUJ8XVj3rmssf9V95x20ibWTrUMeHs2DCLCj8=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:1c:e0:40:88:96:2e:a2:52:5e:2a:1e:3c:e3:b5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Apr 19 05:00:48 2026 GMT Not After : Apr 20 05:00:48 2026 GMT Subject: CN=610e32cdb67777d394af85a641ac6823dfc47456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:af:f1:74:02:06:87:35:d8:45:f3:a1:db: 79:55:ec:47:1e:91:c3:dd:26:92:db:04:b2:cf:a2: 70:5a:79:6a:f6:ae:2c:80:16:3d:47:15:ba:e2:0a: 85:f1:82:c3:8e:42:3b:22:5f:a7:91:06:ca:2f:3e: b2:3a:49:18:cc:18:c0:c3:31:34:36:4a:69:12:26: 43:8c:da:ba:be:33:a3:6b:2b:b8:f9:a8:7b:fb:8e: 8e:a4:42:c8:3b:75:80:e7:19:48:4e:7d:73:49:f8: 1a:f4:f4:6b:7c:31:da:a1:ce:47:5b:ef:71:71:2a: 61:80:c1:0c:7e:dd:5d:10:ed:5c:00:84:2e:79:1c: dd:e7:f2:bf:80:06:57:8f:bd:38:27:18:8a:61:10: 11:d5:01:90:13:f8:61:6b:85:fc:24:f5:3c:21:ff: 2d:ec:ed:7b:56:48:18:60:05:0a:ec:20:92:c3:da: 37:c4:25:2c:58:8a:35:bf:61:34:20:d2:3b:a4:94: 11:98:01:cc:75:25:15:6a:ee:3d:4a:68:f9:5e:27: c2:fc:db:7b:8e:50:aa:f3:78:63:b3:43:fa:93:11: 42:fd:36:87:8d:05:fd:41:a7:bd:ae:96:67:f2:dd: 2e:93:9b:52:85:ba:fa:83:ab:91:28:64:56:57:f0: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0E:32:CD:B6:77:77:D3:94:AF:85:A6:41:AC:68:23:DF:C4:74:56 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:15:a6:f8:24:86:c5:0e:20:0f:87:a9:b0:e7:1d:69:65:44: 5a:30:00:66:d6:e6:08:45:64:ff:c8:53:29:67:35:99:8f:eb: e3:fc:9a:0a:98:ac:5b:f8:67:86:a8:ac:e5:a5:58:84:c5:92: 55:d9:75:eb:dd:62:64:e4:2e:c0:f8:de:2f:5c:e8:3d:a2:1a: 7f:df:9d:c3:b6:d8:3a:8a:4d:82:94:c2:79:23:89:f5:ea:48: 2a:e6:97:84:09:03:4f:62:1c:cc:40:79:f5:0e:a1:50:00:05: 48:36:6c:16:4c:56:00:3d:ba:30:a6:07:46:9a:f2:a7:77:54: 4c:b8:7a:48:03:81:fe:64:b4:f1:84:a2:7d:d9:a3:79:01:47: 0f:28:ee:20:60:c9:f3:c7:cb:8d:34:29:7f:55:22:c1:40:4e: a1:99:21:b3:e3:8b:57:2f:6d:7a:f6:99:bd:fd:f6:ff:4f:b2: d7:b6:3f:24:a6:f1:bc:ee:03:d6:5e:68:7c:9c:18:39:c4:58: 98:06:e3:d2:da:35:bb:0a:68:85:e1:1c:39:58:35:c3:56:af: fb:41:aa:60:17:c8:c4:02:25:c6:53:9a:0b:68:7b:f5:4d:43: 73:c5:bf:a2:8e:80:c8:88:e6:a4:27:5c:09:23:d5:3e:e3:f7: bf:32:69:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kHOBAiJYuolJeKh4847U0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNDE5MDUwMDQ4WhcNMjYwNDIwMDUwMDQ4WjAzMTEwLwYDVQQD Eyg2MTBlMzJjZGI2Nzc3N2QzOTRhZjg1YTY0MWFjNjgyM2RmYzQ3NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqev8XQCBoc12EXzodt5VexHHpHD 3SaS2wSyz6JwWnlq9q4sgBY9RxW64gqF8YLDjkI7Il+nkQbKLz6yOkkYzBjAwzE0 NkppEiZDjNq6vjOjayu4+ah7+46OpELIO3WA5xlITn1zSfga9PRrfDHaoc5HW+9x cSphgMEMft1dEO1cAIQueRzd5/K/gAZXj704JxiKYRAR1QGQE/hha4X8JPU8If8t 7O17VkgYYAUK7CCSw9o3xCUsWIo1v2E0INI7pJQRmAHMdSUVau49Smj5XifC/Nt7 jlCq83hjs0P6kxFC/TaHjQX9Qae9rpZn8t0uk5tShbr6g6uRKGRWV/CCqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEOMs22d3fTlK+FpkGsaCPfxHRWMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRWm+CSG xQ4gD4epsOcdaWVEWjAAZtbmCEVk/8hTKWc1mY/r4/yaCpisW/hnhqis5aVYhMWS Vdl1691iZOQuwPjeL1zoPaIaf9+dw7bYOopNgpTCeSOJ9epIKuaXhAkDT2IczEB5 9Q6hUAAFSDZsFkxWAD26MKYHRpryp3dUTLh6SAOB/mS08YSifdmjeQFHDyjuIGDJ 88fLjTQpf1UiwUBOoZkhs+OLVy9tevaZvf32/0+y17Y/JKbxvO4D1l5ofJwYOcRY mAbj0to1uwpoheEcOVg1w1av+0GqYBfIxAIlxlOaC2h79U1Dc8W/oo6AyIjmpCdc CSPVPuP3vzJpEQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:28:58 2026 by rpki-client