
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
File: CAK5XOYjnVJsNa56jizrSK64K18.mft (raw, json)
Hash identifier: zWVLlw747aOW515Czj9SVOpfj/tD4WHJRIHcDQnNns8=
Subject key identifier: CA:F2:1A:D2:F4:BD:D6:2F:3A:21:A4:42:82:B8:31:D4:A2:27:A8:45
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 019D99D06C5C141D5B1834325C67422FDCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
Manifest number: 18E4
Signing time: Fri 17 Apr 2026 05:01:05 +0000
Manifest this update: Fri 17 Apr 2026 05:01:05 +0000
Manifest next update: Sat 18 Apr 2026 05:01:05 +0000
Files and hashes: 1: 1-6AwkgX1FMK4_Ko0mKFcJ8edvm0.roa (hash: tKUozaQ39ea73+P1a3NKi94lOX/X8IQKkspnuFoW9eg=)
2: 14WoekfhkLXxAS06CnB3g-cIjMw.roa (hash: MVYZfQxMUBAoXupy2mGEC8jlMhPeLSN4boghrPq2PGY=)
3: 1We3sM1PJzJjh431T2RewyKy7qc.roa (hash: TwjuUkz+WwHOXiQ9h/horDxuIN/qowEGiYayrZl3rRs=)
4: 1elNs3CyfXMunzQLfBYP-U8K7Gk.roa (hash: w9zovo1S0ml/8Ow1nEoZv1qRbfQBxU2d93NrR4rwVxY=)
5: 1j9DJV9MjnKXa5ixkpjU4rsspH0.roa (hash: TY0mkQwq6+kCeWNBcAhfn8BLNy+gb6Rq0kdAVdbTSV8=)
6: 1mHwjPse8dBa3mTY0ngPxZy2fF4.roa (hash: 0jWnXLeeExEdfigqwPsBPDCzZxgAjAQtznk6zQvb5Zk=)
7: 1sCBBC80-b387uFvyo8gem0qgBM.roa (hash: EMdTPavEe7DHxlSw4p3yZh2opqJKAxl5uGVTTYPAb48=)
8: 1xAY6nf6bhffY1bramdmANJZguM.roa (hash: InOt9rXki+in0THMVeBakB6EoQ9+ZbMyIjr4bHquWqY=)
9: 2a-W31onNiq0P4jZYsOq6cktHKs.roa (hash: piKQ/orqtUMianHlky3opOkohv1nKhRucZj+NR8lslQ=)
10: 3PYp69Isl6VmDKrE8-_c0R_s0QY.roa (hash: 4MhpSOARWnFvB3IeWDhAMEL60atNMrQJ9zm0TOa/gKo=)
11: 3dCExH2cQ3AwBrUhpOwTQZxBr3c.roa (hash: DaT6zSsVgNzssXsoUQLL8dxsy9Ivm2hlBuq9k1+WKeY=)
12: 3lfjDZ_LyMbB8PjRnMxPCrvVikA.roa (hash: lHB/WmiejVwebpUIQdg5G2VpXchvQiJHaJHJxGNpYIs=)
13: 5L5YO6O362HNIylk8JgyA5EYFPk.roa (hash: IZuegZrgDlTtynSC78Vomk2yVDu9mi2qhjUEemSFZl4=)
14: 5bTbov2vGcJbN7vkkm8HHwB76jA.roa (hash: 5QyqxIyT6Sifuoap6r1mophGR/3BA1CE/nr94210ZVg=)
15: 7Xrwmhrg_gk1TSfb5HQWtLeYSyw.roa (hash: jnzYvaFScNPNn/hYq4GU8Vjj7fRUWEERctCQEuyXXJ8=)
16: BOEBBBh-wUY9a-sztOKP9U3lKUQ.roa (hash: itktgNiqDRBYsQDnVyPK2t6X3lC4am+OkFbJtafybJE=)
17: CAK5XOYjnVJsNa56jizrSK64K18.crl (hash: zRAIY+sFN9g4AQauPA5FQkxVTNvc77q/zdnaJWA3UHA=)
18: DF4qx1DNox0FJE2H-D0ZUTMQcKQ.roa (hash: Y2WFD4vu36lVNJG1rXcR3AVi/f0D3YYRbsZI0ZVNT0A=)
19: EUbcJKYp4l2A_7ZNItE_wS9IkZs.roa (hash: /Sp8zX73TUdqSeWr9V+B4KpQknP4qFgV3pGresv3OHY=)
20: Ec6xx1LGOAqnO3xr8TXlK25WXOI.roa (hash: P5cxezkPKyfNQVX7JIKGSuvktL5d4uVzE/ictGTTWaU=)
21: F6dm6rbFCCa1zY93BjJGyeETnt0.roa (hash: rxY7ve2qQTaZM6DINcyNbHpjuzjA22sFgi08sTK9Teo=)
22: FwZwmrBonBKjGUPaxKOdW9tJPZE.roa (hash: 6AkuMHZSZQWDlZZzrArdItO9G17pQLWA8eR+XLyo3G4=)
23: GmXCp-ryty__BS-cMpg7Kzz_9zc.roa (hash: CX9a+ejz3MuUVit0PYjhdyQyZtSmsfc0Blvt0HfHTTs=)
24: H8YoN4cZRGQKS0rAWtWUFSIVNC4.roa (hash: OMznwq3IiJ/u8ws+4cjxPVNfDGqlT+0CgLV4+JO0kU0=)
25: IB4kpRXfN9uF936LivmcILxsHKY.roa (hash: 5mZKCslxXERs71x3zlgmnZzQrGQsC9EfZx9YdIERIG0=)
26: JODr69-NdaIhqMsgmSCOuYn53H8.roa (hash: +iLXG8g1PiijENvmf0d+SHQHwxyXOPIbtKP03tOoopk=)
27: KVp-X6pskFOLFA64Y6Du-D-F51M.roa (hash: HH/+DRSaTYYGlAkGSve0C9OsQuWiUipWN0YkNPz01Dc=)
28: MwGfkhoVY9yczHNnMmopKOkQDQ8.roa (hash: bMcTFE62Bn8JSiStl6gdzWQDI2iODh7ZXTG2oU+wKww=)
29: NB4xnTAn1RNn-vKgoloy8gS60eg.roa (hash: EZrWgvp/yuFOGkdGh7Bk3VNJiuUHm1vRc0weE8SV8LA=)
30: O1MPhvu4d3pHIkDu0lMOleZog6I.roa (hash: oSY03wl4A0aLdGeJ42G+K8hUDUp93yYUE1W+f4Xtqts=)
31: OuUgPMDiVgWEYNd2BtOVpNrZ6hY.roa (hash: P5f1XjiYANfvf96nSn3cE35oeXR7m62v2srju0CYx4k=)
32: QZKPOW9fdaZ6CFZZuHr5O3FdSo0.roa (hash: w3kv2Hh/xkZB3qu7NtFf6C0ytmrzwo58vPyVoDXMw14=)
33: WU6rhKIDYlOBv_KujW4inrtjlG4.roa (hash: 2rbgw8A9EQVeZV9x2K7KWn9IeU+joxL6h/Zkl0kTa98=)
34: X3OoEc4wVuVwfk_vi-BedRHiVe8.roa (hash: IkEEbLoP+8jmiN0OcnpPt7LEqVzNMYcyeFyPjMqY22I=)
35: XZTw4KFczy0Ar8IqCJPDnCcipmc.roa (hash: T2Q5bH+6BDTYW67ls/KJ2Hzqb6SSUc6QBDh+WpjZUpI=)
36: YSY_txXwMkHdM6rWqITHXWNrMx0.roa (hash: yVuL5VVBfVsU2v5lXPaJcCeDth6XQ1mjX5ArOuZxxDY=)
37: YziHvLlX14Bti0NY0Sx9Yo0T07A.roa (hash: BqFk3R+lISgdo5MfFHtGUi+lKU/wYg9RUvKXdhv9EyM=)
38: ZcIzEiJwYxPPkm7Y7dv9lgoJaO4.roa (hash: JNU/zVs/QkSh6LxJiN5Vq0jrPYqEK//Cnc3GvRNfkSI=)
39: _CFbTUX76fNe5IBcq3MPcZlEtZQ.roa (hash: h74Tfn8ZJCfINzx1IshDwodGNgfiv419Rx5j9paQnPM=)
40: a9Rpht6AbCSSrUCu5Qo0lLFufA4.roa (hash: YbTv2Sx0z5Y5mlyL06fWpp8efAU8mcnO8mEi3/k+h7g=)
41: bR6IrI6IRBWDhHioFM0omeWX7i8.roa (hash: crwSUTpmdjAStqPHzp+6HwQh32ozDg2gBGMop2ftlyM=)
42: cXX9bAZ77mllTc24Rs11ApMBOt4.roa (hash: u6kZlsRKN4vR06ERgmYB+NC0fmg6/3nuEqaSfJpiAHM=)
43: cb0EEAKvHHk6_aqJKin8YWvHIXY.roa (hash: YDpP9XOCMWs39OOIHnBxhZZcAFGUEpXeEqdMZZFTkP4=)
44: d3rejRbUmYFr35-vLeZclqKXvx8.roa (hash: d9vdGuX+pqEbHEeXPkCALX9/MW/hcSbcEnVvwtApLDQ=)
45: dDH3JtUTrsvQnVBKVO7yHBntw-w.roa (hash: mfCB3VeF+mi9XRi1tKveWq8k9D8F3zzZ0DMoRWnR5Kc=)
46: dhTd6pQkdcZtziuGC_DE5cb_F00.roa (hash: LQtyf9un2S8HccFPJLYelD7n40x7iaFSSl5U5VCqaVc=)
47: fFFAMOimUOHtZ0P2EST6cc5eFys.roa (hash: z3O1rdXJNJiP4+IK6Eicrxx0Y0tbtDOd2jjJD9KkLHk=)
48: g1QZJFDUWcI6meJLRY34DSK6DWk.roa (hash: v/SDRfu3pCuA6fUj45FL2i7iRC9I2pKDfIdXLMvFVoI=)
49: iDAdYckwJ-cMfTZQzbOAuVNBPQE.roa (hash: 1/067i3fw6b+0AnVm88M01ZfwqO6rPWe5th/RiPzphI=)
50: iWdn0SfXIARXAoGavF-tJqA__v8.roa (hash: L7H4nDBc7qcTPVHc0qlRD2IQzpDawAZ7Ei6t4itV5to=)
51: jK0B1Odx-DON8kFCWSliovgRtnw.roa (hash: CRAL0nVC/AWRKZs3Mefu2T0wlgwV3ReA6cAR1onshxY=)
52: jmgnzzXKHNWCXs1YUwHet_VC_5g.roa (hash: IuYNZZ+cdQ4E7zjrKhZDgx+d3EvESgb/tI8LTJT2/+s=)
53: kMa3jYCmN7waNwsLMbRxg8toUX4.roa (hash: 8Wv4epjiq8kJysZgLrpdXKcPBVyOj3sbTfiO2uuE99k=)
54: neTZwdUrsvjvhEOVdhB7zsbctJU.roa (hash: 63MePPCn/rJDWdkOz9zyLAtuyWHAkx1hOc5iIXs9UC8=)
55: r1jEpAmwbttHC_NlYHCGTRBo1J4.roa (hash: KNjzSwPg/5u1YZ/73y/8b7ro/20GYgw/rgE7l+oyh+0=)
56: rEm_zkT8RkXOo6rrSI9S5ochz18.roa (hash: rmCUxRvddsYBO6Xa4X/4nPN4nbj09KJMyqWyGAgYBBo=)
57: reWnB99ZgyKfDxLMYCU0eB60oMM.roa (hash: zmOzk6zG/XUr+wMEv4S5Xft1/xA0B0cNXZlAxmFFu9E=)
58: wIzlJythJ95TmQTuoVrNf4UhbHc.roa (hash: UAuTe0NrAW1OWhtqr4YDAlRDzjgT1hn90G7ZXFo9x1A=)
59: yqWqycxDvODXOPVo60dSBqjaSe8.roa (hash: EZtFEMVoeITSA0JZ/DBD86/mXpaTIrHY/lFYqHddSSQ=)
60: zPO2AAYP4fSolIgxQyCrbObDgdU.roa (hash: /PEkT2RqsPLi4LdqtolHB+s3Gvd0guochWMoJPM13nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6c:5c:14:1d:5b:18:34:32:5c:67:42:2f:dc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Apr 17 05:01:05 2026 GMT
Not After : Apr 18 05:01:05 2026 GMT
Subject: CN=caf21ad2f4bdd62f3a21a44282b831d4a227a845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:06:2b:1d:3c:63:52:fa:70:4e:e6:4e:8c:
d1:a4:9a:03:c7:bd:4e:e8:55:08:cb:ae:ae:82:ba:
e2:dd:37:7d:e3:cd:07:8a:d0:de:62:77:1a:d4:de:
30:ef:5c:55:ee:7f:c6:79:37:d2:79:d8:31:46:9c:
6e:77:33:f1:2c:10:23:50:e5:c1:63:54:8b:6a:1f:
3c:91:e2:06:2e:47:e0:3e:a2:ca:3c:3b:10:09:a5:
44:30:2d:e9:ac:6c:08:43:dd:f2:3e:da:2c:fc:b6:
a8:0c:3b:b5:fd:1f:ba:7d:3b:85:3e:c8:f2:64:e5:
20:3e:53:ed:67:92:96:1f:37:5a:52:bb:5c:77:79:
87:8b:ef:02:ce:9b:73:0e:a4:ad:65:b9:90:6f:94:
7d:1a:ac:67:24:00:51:3c:ab:5a:f8:d7:f8:24:5c:
5c:73:aa:af:54:bb:c4:9c:a2:78:9a:3b:25:93:8c:
b4:fc:fa:f5:6e:ca:16:b1:14:89:19:a8:e9:21:9f:
26:aa:58:ab:10:42:84:30:b8:00:95:0e:2d:6f:d3:
0d:6b:d5:09:05:83:cf:ec:53:89:32:d8:2d:5f:66:
e3:33:bc:93:6b:ee:8c:a3:5f:35:7d:02:7b:91:1c:
1f:bd:2b:ae:88:77:2e:ac:c6:3f:80:05:29:6b:cd:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:1A:D2:F4:BD:D6:2F:3A:21:A4:42:82:B8:31:D4:A2:27:A8:45
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:02:21:1e:ae:95:1f:e2:d2:d6:84:47:dd:ae:92:d1:9d:9e:
a4:48:d5:c3:74:e1:a9:d5:9a:c7:a4:f9:78:16:17:2b:af:7f:
5d:80:6a:9a:69:10:b2:bd:b9:96:fb:b3:b8:a7:db:fe:ae:18:
5a:dd:29:ed:19:e8:fd:c2:e8:03:c6:5b:ac:84:f3:32:94:98:
04:82:dc:b4:dd:3b:4c:bf:5a:71:c7:d3:dc:9c:50:07:3d:25:
22:2a:d5:24:aa:64:51:16:99:30:5a:d4:7b:b0:2f:bd:eb:52:
5a:d4:05:93:58:22:00:3b:5c:cb:c8:e2:f4:98:07:24:0d:a5:
2a:26:fb:1a:49:95:37:ad:91:1b:3b:ea:31:73:4d:7a:68:7c:
94:de:db:cf:e8:2f:a6:db:70:30:ec:53:08:50:48:2f:cf:45:
f8:84:d2:0d:a1:a5:56:73:62:a5:20:25:9a:b6:71:a9:43:01:
21:90:95:e9:6d:af:68:db:cd:25:91:17:77:85:4d:3e:c8:12:
01:de:e4:4d:32:97:35:93:94:e3:85:6c:59:7a:3c:e7:6c:21:
ee:75:a8:f1:ec:45:c0:21:be:7b:2b:15:57:5c:f9:4e:68:a7:
08:5a:8e:cb:00:11:14:dc:47:de:cb:ac:06:75:5f:27:a1:c8:
c4:ac:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:57 2026 by rpki-client