$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: shuCTMnPpEmGVdcv2d0tIm5pCyPI9P8LbuSmJtp68VE= Subject key identifier: 21:C2:AD:A5:E3:17:BC:E5:AB:9D:3D:F3:2C:0B:1B:6B:56:C8:4F:9F Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019D992B4132056D2FC35D9F15B7334AEBB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0DFA Signing time: Fri 17 Apr 2026 02:00:41 +0000 Manifest this update: Fri 17 Apr 2026 02:00:41 +0000 Manifest next update: Sat 18 Apr 2026 02:00:41 +0000 Files and hashes: 1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 3: 5vGd1hrRUgjw-VsLzTylini_B7Q.roa (hash: sg0Um8p6l1c6gl4UvV5+SwzisrScl+Xsl5xaWUIwQqQ=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (hash: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8=) 7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 8: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (hash: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: jk_vo45DTCE6Qch6NeSYYIx2UVA.roa (hash: Y3KIabgiInfNA/NNjT/XlQnKjIR2mWc9rhmGkHb5FNU=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 13: pgVasoGtiLKSu7Gip3svipxzZPk.roa (hash: 0SihNtYkT1G6gzAeawF0Zf7V1EZDtwvsDM2yXROG1dk=) 14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: 3Ar+HNgOWvlowLNgCsJPpUXAqW1pU93if6BmFhUc8mg=) 15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 02:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:41:32:05:6d:2f:c3:5d:9f:15:b7:33:4a:eb:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Apr 17 02:00:41 2026 GMT Not After : Apr 18 02:00:41 2026 GMT Subject: CN=21c2ada5e317bce5ab9d3df32c0b1b6b56c84f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a2:c5:c4:ae:7c:cd:f2:a0:0b:88:26:89:6e: 17:17:48:03:30:ba:4a:da:07:b8:7f:46:17:92:11: ac:d2:b4:8e:62:4b:ca:dc:d5:e3:1d:c0:f5:45:92: da:e1:7d:e7:a9:b9:c2:74:85:fb:4c:05:08:7b:c3: ad:aa:22:64:08:49:ee:9c:d5:1f:3e:37:12:67:07: af:1c:2b:8b:e3:af:bd:0d:1f:e4:cc:6a:63:97:83: 3b:8d:01:b0:e7:5d:e2:c3:18:41:c5:ac:be:cc:cd: 52:06:9b:39:a7:a5:47:14:15:f2:11:a7:c1:59:34: 9d:cb:81:af:f5:05:16:d8:d3:44:ec:ad:c9:88:f8: 23:d8:bc:80:3a:c8:5a:de:78:d3:74:92:59:ab:81: d1:91:00:1f:b1:59:e4:7c:34:e8:3c:ee:21:b0:cf: e5:69:76:86:18:62:d8:00:d9:db:bb:0e:75:36:d2: 17:ca:f4:9a:6b:d0:ad:48:8a:f6:cd:64:39:11:00: 56:4f:c6:62:2e:8d:62:3a:03:bd:ee:4c:f7:83:ca: 84:89:31:51:f0:f4:7f:c6:e5:f3:03:02:0a:0a:22: d3:fd:d0:dc:a4:99:a2:1e:c7:75:69:c2:f0:3e:be: 4d:b2:4a:db:dd:2d:36:9a:58:8b:64:47:b8:3e:1a: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C2:AD:A5:E3:17:BC:E5:AB:9D:3D:F3:2C:0B:1B:6B:56:C8:4F:9F X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b6:22:83:67:3c:6f:9a:aa:99:24:49:cf:14:89:5b:43:d2: 49:57:1c:88:2b:0f:47:e7:70:13:89:98:3e:f7:50:9d:55:fd: da:06:64:cf:ca:78:30:95:1e:5b:ea:2b:fd:5c:77:21:11:3c: 46:66:48:16:64:01:f4:83:35:6d:96:ae:89:d1:b5:10:55:52: aa:e2:6f:b2:7f:32:5b:67:e3:31:39:41:e4:32:44:6f:0f:10: 4f:4f:e2:b0:9b:d3:f4:e7:0f:1c:23:7b:c0:bb:6b:87:8d:90: a7:d1:11:c4:df:05:ca:8e:30:17:ca:68:5a:60:e1:57:2f:5f: dc:fb:96:01:7d:27:f4:71:15:04:1f:ca:58:99:ef:54:0c:b2: a3:84:0e:f1:99:d3:7d:49:2f:78:d3:65:d1:21:6f:c2:fb:c2: cd:d6:92:77:a0:10:d2:8c:46:7f:5b:55:ea:df:6c:f0:e8:11: d9:70:4f:6c:e0:a4:bb:44:d7:70:23:17:05:c4:86:f0:41:f5: 69:28:e0:85:ab:82:74:76:6d:cd:ae:6b:58:90:eb:3e:b8:da: 54:3a:7d:63:5c:a1:51:cb:94:80:ec:d9:8b:9c:2d:8a:82:39: 16:3b:2d:fe:f6:1b:8a:f6:e5:b7:32:70:1f:b5:d4:46:25:3f: bf:0c:c6:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZK0EyBW0vw12fFbczSuuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwNDE3MDIwMDQxWhcNMjYwNDE4MDIwMDQxWjAzMTEwLwYDVQQD EygyMWMyYWRhNWUzMTdiY2U1YWI5ZDNkZjMyYzBiMWI2YjU2Yzg0ZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aLFxK58zfKgC4gmiW4XF0gDMLpK 2ge4f0YXkhGs0rSOYkvK3NXjHcD1RZLa4X3nqbnCdIX7TAUIe8OtqiJkCEnunNUf PjcSZwevHCuL46+9DR/kzGpjl4M7jQGw513iwxhBxay+zM1SBps5p6VHFBXyEafB WTSdy4Gv9QUW2NNE7K3JiPgj2LyAOsha3njTdJJZq4HRkQAfsVnkfDToPO4hsM/l aXaGGGLYANnbuw51NtIXyvSaa9CtSIr2zWQ5EQBWT8ZiLo1iOgO97kz3g8qEiTFR 8PR/xuXzAwIKCiLT/dDcpJmiHsd1acLwPr5Nskrb3S02mliLZEe4Pho2fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHCraXjF7zlq5098ywLG2tWyE+fMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7Yig2c8 b5qqmSRJzxSJW0PSSVcciCsPR+dwE4mYPvdQnVX92gZkz8p4MJUeW+or/Vx3IRE8 RmZIFmQB9IM1bZauidG1EFVSquJvsn8yW2fjMTlB5DJEbw8QT0/isJvT9OcPHCN7 wLtrh42Qp9ERxN8Fyo4wF8poWmDhVy9f3PuWAX0n9HEVBB/KWJnvVAyyo4QO8ZnT fUkveNNl0SFvwvvCzdaSd6AQ0oxGf1tV6t9s8OgR2XBPbOCku0TXcCMXBcSG8EH1 aSjghauCdHZtza5rWJDrPrjaVDp9Y1yhUcuUgOzZi5wtioI5Fjst/vYbivbltzJw H7XURiU/vwzGYA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:37:48 2026 by rpki-client