$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: bpOzclIae1zZG4ARmUoDeU23+cobeXej6N+6GvLsE54= Subject key identifier: 1D:B7:DA:A1:13:59:62:6F:15:EF:06:F4:AC:09:41:FE:96:D7:5D:63 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019D9A74F6E7EDFEC8354FF585A5B5E021A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1960 Signing time: Fri 17 Apr 2026 08:00:49 +0000 Manifest this update: Fri 17 Apr 2026 08:00:49 +0000 Manifest next update: Sat 18 Apr 2026 08:00:49 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: IBpP6VYSeol/ja5MZJzl7RSWDfQUjbcXCOF0LT7Qnts=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 6: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 7: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 8: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 9: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 10: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 11: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 12: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 13: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 14: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 15: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 16: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 17: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 18: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 19: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 20: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 21: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 22: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 23: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 24: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 25: c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa (hash: Q4DNvIlUJ8XVj3rmssf9V95x20ibWTrUMeHs2DCLCj8=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:74:f6:e7:ed:fe:c8:35:4f:f5:85:a5:b5:e0:21:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Apr 17 08:00:49 2026 GMT Not After : Apr 18 08:00:49 2026 GMT Subject: CN=1db7daa11359626f15ef06f4ac0941fe96d75d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:10:3f:d1:7d:ed:0e:25:42:3f:ca:41:00: d0:8a:22:b5:8e:3f:87:0b:ea:1e:d6:7b:44:6a:e5: cb:20:91:19:b4:a7:e1:b7:79:01:8e:45:9c:84:59: 78:ae:e2:6d:43:2f:fd:94:72:37:2e:0e:12:30:12: 2e:e8:fe:5c:91:5e:d4:4a:6e:ac:4f:24:df:7a:d9: 30:ea:7c:a6:71:af:da:fe:6c:a0:d6:c1:33:54:fb: 04:a2:13:78:e5:c1:3b:56:5e:96:2a:4b:3f:1a:18: ac:70:80:04:b7:57:35:fa:ad:ee:45:7c:df:bf:38: aa:83:7e:97:e5:e3:f9:b4:34:bc:fd:b5:a6:f0:34: cc:e4:1c:bd:0c:29:e2:7c:bf:e5:ec:f8:90:b2:ec: c9:80:15:1c:ad:56:75:d7:8a:90:4f:0c:3a:d3:cd: b3:d9:c3:e3:aa:28:2a:11:35:d0:4f:1a:f9:6f:57: cc:d7:96:56:f4:4b:a2:c6:78:21:a2:4f:0c:47:77: fc:c6:34:59:8f:f7:c5:00:57:43:c8:a3:ee:d2:10: 41:ad:ff:76:fa:2d:84:3e:38:70:1d:85:80:27:8e: 91:71:79:bc:35:87:88:f4:cc:07:63:fa:ff:ee:4a: 48:17:4a:12:a5:b5:8d:b0:47:47:b6:3a:de:4c:98: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B7:DA:A1:13:59:62:6F:15:EF:06:F4:AC:09:41:FE:96:D7:5D:63 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2f:72:eb:f1:89:07:01:67:59:7f:68:ef:ff:36:1e:a6:f2: ab:00:27:72:57:86:c1:5a:75:96:3c:05:55:b7:b2:ed:7c:a6: d8:da:d2:7f:50:52:d2:b7:ea:54:fd:7e:a9:78:30:e1:e8:5e: d2:1d:ff:3e:2c:f9:cc:8c:0b:3d:de:b9:92:4b:ef:e9:55:09: e3:2c:2e:b6:62:35:bd:35:17:9a:69:9a:b6:10:9b:f1:bf:29: 05:31:19:76:75:b6:79:26:48:b0:bb:3d:3c:fb:ae:d5:f4:83: 0b:c3:51:3c:69:cc:ae:ac:00:b4:3e:e0:8c:b6:ec:4d:65:de: a1:db:b0:16:d0:fe:66:1d:e4:c9:51:2e:f2:6b:ea:60:70:a6: 6b:b4:9e:1d:43:24:53:45:3c:7a:79:6a:78:ca:19:4d:d2:2f: 15:cf:28:73:5f:2b:aa:8f:e3:3c:d5:7d:0f:80:ea:f9:4d:0b: 9e:6b:90:95:85:03:53:60:f3:04:5e:ed:0b:50:b7:7a:5a:9a: 98:9d:0c:4d:dc:cf:de:02:72:cc:58:72:de:19:b7:88:ed:c7: 53:d5:19:4b:ad:a9:9c:6e:11:21:31:6f:9f:75:ce:5d:71:17: 8a:76:f3:fe:bf:1b:64:a3:ba:58:c6:86:b6:ce:4b:c9:10:85: b8:d1:b6:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adPbn7f7INU/1haW14CGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNDE3MDgwMDQ5WhcNMjYwNDE4MDgwMDQ5WjAzMTEwLwYDVQQD EygxZGI3ZGFhMTEzNTk2MjZmMTVlZjA2ZjRhYzA5NDFmZTk2ZDc1ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF8QP9F97Q4lQj/KQQDQiiK1jj+H C+oe1ntEauXLIJEZtKfht3kBjkWchFl4ruJtQy/9lHI3Lg4SMBIu6P5ckV7USm6s TyTfetkw6nymca/a/myg1sEzVPsEohN45cE7Vl6WKks/GhiscIAEt1c1+q3uRXzf vziqg36X5eP5tDS8/bWm8DTM5By9DCnifL/l7PiQsuzJgBUcrVZ114qQTww6082z 2cPjqigqETXQTxr5b1fM15ZW9Euixnghok8MR3f8xjRZj/fFAFdDyKPu0hBBrf92 +i2EPjhwHYWAJ46RcXm8NYeI9MwHY/r/7kpIF0oSpbWNsEdHtjreTJjxxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB232qETWWJvFe8G9KwJQf6W111jMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgy9y6/GJ BwFnWX9o7/82HqbyqwAncleGwVp1ljwFVbey7Xym2NrSf1BS0rfqVP1+qXgw4ehe 0h3/Piz5zIwLPd65kkvv6VUJ4ywutmI1vTUXmmmathCb8b8pBTEZdnW2eSZIsLs9 PPuu1fSDC8NRPGnMrqwAtD7gjLbsTWXeoduwFtD+Zh3kyVEu8mvqYHCma7SeHUMk U0U8enlqeMoZTdIvFc8oc18rqo/jPNV9D4Dq+U0LnmuQlYUDU2DzBF7tC1C3elqa mJ0MTdzP3gJyzFhy3hm3iO3HU9UZS62pnG4RITFvn3XOXXEXinbz/r8bZKO6WMaG ts5LyRCFuNG2BQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:47:21 2026 by rpki-client