$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: 7rJP9ssnV53DzjGTsrWYuLve6EuTKIRwa76EkX76a6M= Subject key identifier: D0:3C:EA:BC:DC:79:52:A1:C1:02:40:FC:94:F8:4B:A1:20:37:D9:8D Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019D98BDE074213A63B73899C0C7A1DD0120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 177F Signing time: Fri 17 Apr 2026 00:01:13 +0000 Manifest this update: Fri 17 Apr 2026 00:01:13 +0000 Manifest next update: Sat 18 Apr 2026 00:01:13 +0000 Files and hashes: 1: 1-YByaiMeGaD1s6w4s77GCgHnrXY.roa (hash: S1szHNMiYggU2bXWCJ0y5Z9O0Xe6ogWq7kcI9RRHPZA=) 2: CPZG4XxfF0vIUqKLlml-DnAhI78.roa (hash: yghX+xOCfCSz2UxV0M4ErScOYQQ+0s+V03bXtP9h8Jg=) 3: ItbVNmV7D7Xz58HIXd8OUA10ZIk.roa (hash: 60qPs4eG3CJz9Jr0RllpZz1JwhEoHqZ3z8/Wkwni7OI=) 4: J0cgNdbp82xwSAhTcid--cSnvw8.roa (hash: NnNH2xB6swJJVG31LQ5vR+z5/IV/mvlmseViZQ49RZ0=) 5: N1eNUoekf98MkfeCq0d0_JdTGoc.roa (hash: nz2HilLDytUZJAVqDqHSq82uJ9Gp52F9hu+UGahbmAM=) 6: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: ux/5OUjpg9ozFbQI56IDoiMNd2R6WDG9ihka9a016Ag=) 7: WepaHCobvyfUL-s7Xvp2TdSaRCg.roa (hash: zTofr48e9nj7np9deTFY/xT9jqoaaYGmlvI2GruOzlI=) 8: YIodQuf58n6NPD3S4ZwYWU4G05Q.roa (hash: hAnlQcSr3iSrVyOVrTtnTihoMBTYOjvFhdRAdMoSe+c=) 9: fg2QbP6_NHroFLcB4VqlEsdsL78.asa (hash: c+f7ud2GD/XnZWo7d+BVUUMg4a2Tuu0iakas2CyyTF0=) 10: htEsk8is-3HwvISfO35xc7PdVM0.roa (hash: uHKztBgJ/wsTm8pbbSDKTc7meGtHJJGVbbj9VG266W0=) 11: j3hTOTMf81Nkcr0TsIH3WU1Dvd4.roa (hash: QfmXcXNN1Wd563NtKkGqTEqV9zXIuZBoL2/KRKrrmGo=) 12: r1wL1w6v-FmiJM6wTPegvCqzZVs.roa (hash: PHGHhjoRjtnu5vlNwMrqr/W1vzuZLgPWKcRcTuuiLy4=) 13: rbHMZH-yOzDb95f5uZ_DwfVDX-g.roa (hash: hyrGoGmheB3UHC4U69Q9VZBQns7Aig366oUvSyshDX8=) 14: uBecXrloW4prw2ylSn0_Ivng2VY.roa (hash: yFhPh9rE6yKyFP6xCMVODHQKX7tLrcXL5wGXXwvK1tU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:e0:74:21:3a:63:b7:38:99:c0:c7:a1:dd:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Apr 17 00:01:13 2026 GMT Not After : Apr 18 00:01:13 2026 GMT Subject: CN=d03ceabcdc7952a1c10240fc94f84ba12037d98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:8f:47:26:33:49:e6:e3:a5:d7:d4:c6:84: 52:71:94:58:75:34:0d:25:c5:9f:68:db:8f:28:60: 0c:a3:2e:cd:42:3d:78:9d:bc:43:aa:cc:29:ee:42: d0:25:c7:05:32:a3:6c:d5:36:a1:36:cd:ac:74:f5: 1b:1f:c8:95:da:23:85:48:90:08:49:01:50:b9:e3: 6d:71:86:fa:a1:7a:f9:17:57:25:e0:b3:cf:9f:ef: df:b2:9d:59:52:59:3f:d4:fc:bd:cb:07:2f:ea:ef: 18:fe:e3:b8:7a:d7:e4:46:8a:ae:da:3a:97:e1:bf: 21:56:45:9d:e3:e8:80:59:da:a7:a2:17:89:78:89: f6:4b:d3:ce:7d:a6:e7:10:49:ad:f1:d9:2c:59:b3: 1b:08:cf:a1:2b:6d:65:2d:2a:fe:17:d2:59:e8:af: 9b:e3:f5:cf:29:3c:b8:fe:d3:01:e4:1e:3f:2b:4f: ac:58:1e:1f:5c:25:6a:ce:92:c8:9d:ec:13:9b:97: 3b:71:d3:d0:5f:3c:36:56:12:44:11:e9:83:6a:10: 16:c9:8e:98:58:bc:65:2b:c5:8c:62:af:99:68:5b: 87:6e:04:86:72:b7:de:72:eb:a1:9f:58:cc:00:2a: 39:4a:d5:33:ac:01:cc:78:27:10:9f:64:c7:a8:16: 06:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3C:EA:BC:DC:79:52:A1:C1:02:40:FC:94:F8:4B:A1:20:37:D9:8D X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b4:ef:2d:50:19:74:84:08:d1:25:0d:ac:a4:d8:ce:fb:d0: 66:8c:75:a8:44:cd:30:cf:d1:36:a0:4f:1c:89:72:0c:c1:17: 5b:8b:1f:27:d8:11:7c:59:5c:1e:99:e5:45:06:4f:80:8b:2f: 95:b4:b7:34:2b:a0:2c:ff:ba:8d:9f:53:ed:a3:1c:18:cc:21: 7e:60:8d:52:ee:99:75:ae:0e:ad:06:5b:bf:b8:3c:0f:0b:be: af:2c:14:4a:ec:b5:9a:aa:b9:5d:95:a4:4e:57:85:7b:c1:dc: 4c:bf:19:0b:b1:96:8c:a8:cc:7c:ab:04:2f:c4:c9:b4:07:4f: ed:46:4f:93:2e:b0:4c:12:e8:fc:ae:9f:73:58:3b:f6:ab:11: 95:5a:53:c6:cf:41:6a:de:2b:18:4e:9c:fc:32:48:fc:bd:b2: 86:c2:e0:a7:37:b8:e9:8d:bb:b2:2d:ac:65:51:79:35:c2:24: 9b:c7:7b:ac:d5:0c:7e:f9:91:82:72:00:b2:2f:c4:29:8f:e8: a8:46:ca:b4:28:ea:ff:63:1a:fb:ba:cf:12:94:66:4c:5d:9d: ae:d6:84:87:fc:81:45:c3:b0:44:09:be:7c:4c:3b:c9:00:e4: eb:af:ed:7c:8c:b2:a3:87:f1:d7:90:11:bc:35:44:c4:a3:f4: 1b:3d:84:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YveB0ITpjtziZwMeh3QEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjYwNDE3MDAwMTEzWhcNMjYwNDE4MDAwMTEzWjAzMTEwLwYDVQQD EyhkMDNjZWFiY2RjNzk1MmExYzEwMjQwZmM5NGY4NGJhMTIwMzdkOThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvaPRyYzSebjpdfUxoRScZRYdTQN JcWfaNuPKGAMoy7NQj14nbxDqswp7kLQJccFMqNs1TahNs2sdPUbH8iV2iOFSJAI SQFQueNtcYb6oXr5F1cl4LPPn+/fsp1ZUlk/1Py9ywcv6u8Y/uO4etfkRoqu2jqX 4b8hVkWd4+iAWdqnoheJeIn2S9POfabnEEmt8dksWbMbCM+hK21lLSr+F9JZ6K+b 4/XPKTy4/tMB5B4/K0+sWB4fXCVqzpLInewTm5c7cdPQXzw2VhJEEemDahAWyY6Y WLxlK8WMYq+ZaFuHbgSGcrfecuuhn1jMACo5StUzrAHMeCcQn2THqBYG4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNA86rzceVKhwQJA/JT4S6EgN9mNMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrTvLVAZ dIQI0SUNrKTYzvvQZox1qETNMM/RNqBPHIlyDMEXW4sfJ9gRfFlcHpnlRQZPgIsv lbS3NCugLP+6jZ9T7aMcGMwhfmCNUu6Zda4OrQZbv7g8Dwu+rywUSuy1mqq5XZWk TleFe8HcTL8ZC7GWjKjMfKsEL8TJtAdP7UZPky6wTBLo/K6fc1g79qsRlVpTxs9B at4rGE6c/DJI/L2yhsLgpze46Y27si2sZVF5NcIkm8d7rNUMfvmRgnIAsi/EKY/o qEbKtCjq/2Ma+7rPEpRmTF2drtaEh/yBRcOwRAm+fEw7yQDk66/tfIyyo4fx15AR vDVExKP0Gz2Eeg== -----END CERTIFICATE-----Generated at Fri Apr 17 09:54:48 2026 by rpki-client