$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: 1FlRu4iuHFZQtcL971JnhfB5EZlNUrXTdcVXvKowCQg= Subject key identifier: E7:BC:40:D5:62:7D:79:8A:5C:E7:68:E2:F3:F7:6D:BB:15:04:D8:0A Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019D9961F0E379DA75C6061FD65D73510DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 18CB Signing time: Fri 17 Apr 2026 03:00:25 +0000 Manifest this update: Fri 17 Apr 2026 03:00:25 +0000 Manifest next update: Sat 18 Apr 2026 03:00:25 +0000 Files and hashes: 1: 5MRnKdBJRz0nCym_u2J_XuhbJV0.roa (hash: 0w7W5Douk0FpMsX6Dhx/ZXXVXbqTlMMWFq9w+rROgSg=) 2: 6wLIKXqWkIZfhRRk9XXeBi03C40.roa (hash: dTfBM2hThonCwsn0Yjcz8KywlhEyF9fTyiLtOV+LUAA=) 3: BXXFKI13QIjnmOfPn-DjAJ-A154.roa (hash: urOCs6K6oSn1logMMcL9PFqOpqILrWbLQHv74ICPatk=) 4: CSF1WcnLJogzmtvTW4zbdxH149I.roa (hash: /BQ3atXgmkXNs08xQyzVGIUYihhzzloVi9gnBQ4fEf8=) 5: DBQk2xkzH8LUMKGSPsE6YRZwNgg.roa (hash: Ez/l5IHOm/GxqrY07w6s3W0W8MrW87S3E+gbSURGU2Y=) 6: GdXlIc5BP-3XOg-aqWkP_a52ndk.roa (hash: G0Pn5eObq0FpgcplWCouXfdtlhgx0MPfgPeSIk/PGOo=) 7: LfyLZbGl7b5gzJ9zSZ07MTcwQGc.roa (hash: JcRj9d8ulbmAc0W06IEWNBloWUue3HKweCBhCEYuEvs=) 8: Q8i1GCNM8MeAVWMzMN-VkOcL5cc.roa (hash: /F4wQ4+WNm083+DT8dsb+mkUzic0vz1naKYXmlneu4s=) 9: QFuike-stdBR2Qti952hl6TV8BU.roa (hash: 07OxG0G/dsZ56bfjY4mosLLZF6mhYFWxF2zJxp/iqzM=) 10: QMhXPeEiGbtOYJL0N3f4IXIT6ng.roa (hash: 0HWPj54I4hc1a9Dl1XhfG4dlUuFqco3Us2UXObXNoFY=) 11: SaP1nBFhXOE6FH3RW0G8tA8VQjM.roa (hash: cTn11+h/p3mDsKapImFbB/2zblLfIwW6K3OdsJp73RA=) 12: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: unNUa5eb/6SlZcUn/xi0zgKt2J4gXvW/iYWjohFBKro=) 13: Z-ylfmdqBOcYXZY9cKfT5J6Cmxs.roa (hash: NFvDwf6pF5zNtBQi76+Pv7ngK7erBN5TLVUe5AzopaQ=) 14: ZXr4IBxINp27c2uA9OArj4h7ywI.roa (hash: JD+M7Jzo6o0FuV4VqJtxKp+DhghFCIqIjWgxW5/ca+s=) 15: _3eACqWgcDV77Z5GJVk82wrfcAQ.roa (hash: zugyJ9au3EVgX9ZrQItHOQ/dgQnBWoZfW27IbF2rS7o=) 16: cgJUrA7zUIWAeZrM-A-gevZWhKE.roa (hash: E3FKka6J+aK+1x7zSPpnK2SU6NFTg+dv8eZSvTw7VeI=) 17: gJMtWq8wsHqrA-aMuJa4zlTGmHQ.roa (hash: ph6so/OLFpZPFLkaG9kVD8yzMdOCcTKa12b2RAynICM=) 18: j3C7XhWqPqZZHvZkHu3yiqeeCcc.roa (hash: ZjpdDLmy3vgdZP6r/TUUOLjLthI6Y2QCHmwsaun5n3I=) 19: jH_DOyq4ZJejSSLKVID21lO__BA.roa (hash: kR/erK7JPMRLB0nP2bCrqOwwEEt7e8QRyTqOJC2JhM8=) 20: qFB2EJT-dRDHAj_TTnZeCHZ9Gcw.roa (hash: sFTYpyONZM4849OiQuWMraeanFpbFNLi3ztibzARdQc=) 21: tBlYFSzWvbFvxf9f-MzOzaib52c.roa (hash: +QoYpfs3CrNYgE/1grCeAjj1v6GUGqrmR7t3xV7iiic=) 22: ubRPeeTkxSUpNxitZEengxfbjho.roa (hash: fMSmAi5k6+uYv96mJ7QxgFHbu3bUfoKt8MD+l7YHLTM=) 23: xONZTPQjTNAnpv3LpXFk-hZHq58.roa (hash: fMb3Xyl3Jh1WZeQDP8MvYVbT2cKVoCMH4bX5aAbt1YQ=) 24: xxGXfRcmkhBAjROUfzE7wrifgME.roa (hash: TUwE+CjLZWVNW/bdlU4DKJBAW1GHbsJsmhsw/0YlJn0=) 25: yoQlk7EPLkqco8JH4jKypU6v23g.roa (hash: 621ThCmwWv6CPqAuQxvYAjiamlbk6ns+2i1sDVoPtJM=) 26: zjEP4Jlf2NPIUmce29FPyO-6Luo.roa (hash: STXLo8QB1Iuve+MzXt6e+SM6A4TtepvV7fG8YNcWSNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:61:f0:e3:79:da:75:c6:06:1f:d6:5d:73:51:0d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Apr 17 03:00:25 2026 GMT Not After : Apr 18 03:00:25 2026 GMT Subject: CN=e7bc40d5627d798a5ce768e2f3f76dbb1504d80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:dc:dc:3c:2c:18:d6:f7:b7:8d:7b:da:f5: cd:91:7a:37:bc:04:a6:8e:89:0c:89:09:83:b3:cb: d6:f3:5b:4d:be:14:5e:d8:1e:1a:b8:f4:a2:64:b9: d9:db:8f:4c:76:66:b7:67:07:0f:bf:f8:17:d4:fb: 42:be:7c:59:c5:71:99:54:56:d1:0a:84:0e:59:26: 88:4f:83:09:b3:b0:41:e4:26:d1:48:4c:02:1c:41: 75:61:42:d0:f1:e7:a0:15:97:f7:c2:fe:00:b4:8e: 85:88:f9:e0:d9:cb:f2:df:2b:30:41:a8:2d:24:ee: 7b:b2:e2:d6:7c:7c:f9:98:45:68:f0:45:43:cb:6e: ff:3d:d6:58:29:db:fd:5c:a4:24:9c:fb:27:2d:a2: 64:61:a8:13:6d:da:ef:bf:99:5d:2c:de:68:38:b7: 1c:ad:02:6f:80:86:bd:7e:e7:be:aa:3a:30:97:6f: 2b:a7:e5:87:da:a3:4f:29:0c:33:f8:69:25:7a:91: 13:41:07:f7:b7:cf:17:92:cc:9e:69:a4:c5:5c:48: 6b:41:54:36:fe:3c:76:41:22:e4:2b:3d:28:45:c5: 94:57:b6:5b:49:ff:bf:52:d0:b5:66:05:c6:98:9d: f7:53:84:3d:18:db:2e:a2:6a:4a:62:1a:d0:75:38: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BC:40:D5:62:7D:79:8A:5C:E7:68:E2:F3:F7:6D:BB:15:04:D8:0A X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:84:13:56:2f:ae:fc:71:b6:87:b1:0b:2d:08:f2:97:43:dd: 32:42:68:53:f4:04:62:83:62:33:de:05:8e:53:f0:f5:82:2a: 14:88:94:e2:9d:02:5d:4a:00:b9:ac:79:94:a7:a6:11:90:d7: 48:4c:63:b1:ef:da:a0:69:cb:1a:69:da:eb:dc:b5:0c:f1:10: e7:dd:cf:04:73:85:25:a5:d6:7f:a6:5f:fc:18:d8:70:34:f2: 2e:c0:36:b7:fa:46:f8:fc:6e:17:d8:4d:ea:3c:53:90:89:03: 4c:9f:f8:da:34:69:1b:37:d6:4a:73:9f:7b:f0:20:eb:90:f9: 8c:00:55:01:3c:d1:1a:ef:b5:c5:4c:b3:be:dd:aa:77:4b:35: e1:b8:0b:cb:bb:2e:8d:bc:6f:f6:f8:15:d7:3b:d8:f6:5a:67: bf:0b:83:61:6d:e6:f7:e1:bd:c4:48:7a:40:a0:c4:56:6b:4f: b8:b0:26:b8:12:24:64:e2:88:94:df:07:ce:db:ed:b0:f7:db: 49:34:d0:f6:bc:2e:62:c8:ed:c9:6e:b1:38:ed:d2:94:2c:90: 69:e0:60:42:a3:55:1f:a8:08:64:7e:bb:15:3a:ab:b8:59:35: 6d:63:9c:13:78:0a:5f:e6:26:27:72:36:2f:b5:31:70:09:45: dd:26:7a:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYfDjedp1xgYf1l1zUQ3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwNDE3MDMwMDI1WhcNMjYwNDE4MDMwMDI1WjAzMTEwLwYDVQQD EyhlN2JjNDBkNTYyN2Q3OThhNWNlNzY4ZTJmM2Y3NmRiYjE1MDRkODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRvc3DwsGNb3t4172vXNkXo3vASm jokMiQmDs8vW81tNvhRe2B4auPSiZLnZ249Mdma3ZwcPv/gX1PtCvnxZxXGZVFbR CoQOWSaIT4MJs7BB5CbRSEwCHEF1YULQ8eegFZf3wv4AtI6FiPng2cvy3yswQagt JO57suLWfHz5mEVo8EVDy27/PdZYKdv9XKQknPsnLaJkYagTbdrvv5ldLN5oOLcc rQJvgIa9fue+qjowl28rp+WH2qNPKQwz+GklepETQQf3t88XksyeaaTFXEhrQVQ2 /jx2QSLkKz0oRcWUV7ZbSf+/UtC1ZgXGmJ33U4Q9GNsuompKYhrQdThXvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOe8QNVifXmKXOdo4vP3bbsVBNgKMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4QTVi+u /HG2h7ELLQjyl0PdMkJoU/QEYoNiM94FjlPw9YIqFIiU4p0CXUoAuax5lKemEZDX SExjse/aoGnLGmna69y1DPEQ593PBHOFJaXWf6Zf/BjYcDTyLsA2t/pG+PxuF9hN 6jxTkIkDTJ/42jRpGzfWSnOfe/Ag65D5jABVATzRGu+1xUyzvt2qd0s14bgLy7su jbxv9vgV1zvY9lpnvwuDYW3m9+G9xEh6QKDEVmtPuLAmuBIkZOKIlN8HztvtsPfb STTQ9rwuYsjtyW6xOO3SlCyQaeBgQqNVH6gIZH67FTqruFk1bWOcE3gKX+YmJ3I2 L7UxcAlF3SZ6GQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:11:00 2026 by rpki-client