$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: HsWYBIg5t+vDWcu2TX26CwIWoGkiSSnKeL21fiQpq7E= Subject key identifier: D7:E8:84:61:8A:B9:5A:E2:BA:CA:EF:7E:3A:EE:8F:4F:88:1D:2C:8F Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019D98BDB83FC9CC9D2B823DDF46293735AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 18C5 Signing time: Fri 17 Apr 2026 00:01:03 +0000 Manifest this update: Fri 17 Apr 2026 00:01:03 +0000 Manifest next update: Sat 18 Apr 2026 00:01:03 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: BIkN0cI5LmAfRXLAur7WDiDf5Xsqr7HjNcS+Yj8WsVY=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:b8:3f:c9:cc:9d:2b:82:3d:df:46:29:37:35:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Apr 17 00:01:03 2026 GMT Not After : Apr 18 00:01:03 2026 GMT Subject: CN=d7e884618ab95ae2bacaef7e3aee8f4f881d2c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:f8:93:56:5b:78:04:d1:de:7a:49:1c:4f: 8d:5a:7a:15:ac:0a:e7:b9:5d:53:db:a1:eb:d4:8e: 66:e4:be:28:6c:cc:92:5b:fd:13:04:30:44:31:b9: 26:64:2a:c4:93:93:3d:32:55:e8:68:1a:eb:a0:0e: 78:6b:3d:fc:46:a2:88:4a:14:c5:13:68:e7:7f:e7: e2:ac:50:3e:33:5f:95:e2:54:41:f0:07:76:2d:a1: f7:5f:c1:e0:80:10:2f:35:0b:fc:37:c5:c8:87:39: f3:6e:89:1c:08:d4:48:1b:22:50:ae:21:1f:9a:37: cf:5d:ab:d6:6f:e8:83:ec:84:a2:2c:20:90:42:44: 9e:6e:da:4c:ad:06:ec:19:e8:c0:53:81:0f:cb:44: 39:0b:33:46:32:ca:70:2a:f0:99:98:63:ea:d9:dd: 57:0e:99:b9:ba:1f:e3:23:ec:70:6b:06:d6:6c:2a: 8c:f0:7e:6e:37:e7:40:d3:40:8d:fd:08:24:1f:89: 03:eb:a4:8b:dc:49:f1:58:96:a0:95:10:f1:0c:66: 38:5b:61:6c:8a:f5:3f:52:d6:20:a6:93:3b:63:fa: cc:b6:75:83:e2:be:be:64:d7:22:be:16:56:75:01: dc:a4:23:03:ea:23:17:16:2c:8d:bd:37:72:80:c7: bb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E8:84:61:8A:B9:5A:E2:BA:CA:EF:7E:3A:EE:8F:4F:88:1D:2C:8F X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7c:65:ba:ce:ab:d0:b8:9b:b9:77:71:19:3b:60:e7:21:51: 61:2e:78:02:03:25:db:0a:39:e7:70:12:82:09:f7:2d:9e:11: 33:f4:7e:08:0f:9a:67:06:06:c3:79:20:21:91:54:3e:b0:5b: 72:d5:62:d0:02:cb:dd:6a:4f:5d:2b:f2:f5:7a:a1:7f:2f:8d: a9:00:83:ce:03:a5:de:bc:9c:ee:09:8b:b2:23:43:22:d0:f0: 17:59:ff:32:ed:d7:14:3a:41:2d:c0:7f:94:d5:ea:b5:a9:ca: ab:7d:b2:04:70:d8:21:6d:ec:06:3c:47:bf:0f:51:c1:59:ec: 99:6f:fa:b2:2f:60:d5:34:bb:03:67:75:80:49:e9:5f:45:16: 86:a5:52:f6:f9:f2:fd:fe:61:37:99:42:04:b7:12:66:26:24: 16:11:d9:bd:f5:38:46:42:e2:e2:eb:98:81:63:11:41:ca:b3: 51:11:7c:b3:40:a7:0a:00:2d:a2:e7:2a:12:e3:d5:8a:ae:4a: 1d:ff:40:ba:a7:66:3c:0e:e8:aa:de:15:57:90:e7:5a:16:96: 62:f4:89:ab:15:a3:8e:ba:7c:a2:37:b6:87:e3:62:a9:36:69: 3b:3d:42:41:26:56:ed:47:f1:9e:45:98:1c:2e:d7:40:be:a8: ce:fc:a1:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Yvbg/ycydK4I930YpNzWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwNDE3MDAwMTAzWhcNMjYwNDE4MDAwMTAzWjAzMTEwLwYDVQQD EyhkN2U4ODQ2MThhYjk1YWUyYmFjYWVmN2UzYWVlOGY0Zjg4MWQyYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHL4k1ZbeATR3npJHE+NWnoVrArn uV1T26Hr1I5m5L4obMySW/0TBDBEMbkmZCrEk5M9MlXoaBrroA54az38RqKIShTF E2jnf+firFA+M1+V4lRB8Ad2LaH3X8HggBAvNQv8N8XIhznzbokcCNRIGyJQriEf mjfPXavWb+iD7ISiLCCQQkSebtpMrQbsGejAU4EPy0Q5CzNGMspwKvCZmGPq2d1X Dpm5uh/jI+xwawbWbCqM8H5uN+dA00CN/QgkH4kD66SL3EnxWJaglRDxDGY4W2Fs ivU/UtYgppM7Y/rMtnWD4r6+ZNcivhZWdQHcpCMD6iMXFiyNvTdygMe7GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfohGGKuVriusrvfjruj0+IHSyPMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXxlus6r 0LibuXdxGTtg5yFRYS54AgMl2wo553ASggn3LZ4RM/R+CA+aZwYGw3kgIZFUPrBb ctVi0ALL3WpPXSvy9Xqhfy+NqQCDzgOl3ryc7gmLsiNDItDwF1n/Mu3XFDpBLcB/ lNXqtanKq32yBHDYIW3sBjxHvw9RwVnsmW/6si9g1TS7A2d1gEnpX0UWhqVS9vny /f5hN5lCBLcSZiYkFhHZvfU4RkLi4uuYgWMRQcqzURF8s0CnCgAtoucqEuPViq5K Hf9AuqdmPA7oqt4VV5DnWhaWYvSJqxWjjrp8oje2h+NiqTZpOz1CQSZW7UfxnkWY HC7XQL6ozvyhWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:55 2026 by rpki-client