$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: oqiv+KBHyG9BPbBT3cCmfOv2uHWZiFVqgddJTe8e2s4= Subject key identifier: D0:CB:B1:33:1F:CD:AB:07:FC:F0:C5:6B:02:A2:E3:46:E7:E4:57:3D Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019D9B50F278511718306D6E66B610317596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 15F3 Signing time: Fri 17 Apr 2026 12:01:06 +0000 Manifest this update: Fri 17 Apr 2026 12:01:06 +0000 Manifest next update: Sat 18 Apr 2026 12:01:06 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 2zIgCHVsuwyzUlczHTmtHzKbcqo.roa (hash: XtTVvuJ7wJ6AMvDlLc/Z9ph2kaE/WMDOHDw0P5r/pfY=) 3: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 4: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 5: DnToB2fcBGWxAKcfq3WaZ_D6K3A.roa (hash: FlkECwDyQ/oLu1bWPPOyfLJjCJIMSr6+ELw6r9iCwbg=) 6: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: h1eMMbqQJxggTfnGXA7Q85meY1WDnu0n+FEG3ANSZNM=) 7: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 8: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 9: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 10: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 11: j_Se_UUpvXzgFBHV0DKpPTUboes.roa (hash: NyS6Ky7kfRsPmVEkp6PDfLDSTRMbr7bwze8MtEAMXCc=) 12: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 13: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) 14: zVLW9HFt-3z2M7Ja19rIMJwG2_Y.roa (hash: /CaIYvptsHDUu9JqgaUmQ5T95opFTVpgVggOdpKaM0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:50:f2:78:51:17:18:30:6d:6e:66:b6:10:31:75:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Apr 17 12:01:06 2026 GMT Not After : Apr 18 12:01:06 2026 GMT Subject: CN=d0cbb1331fcdab07fcf0c56b02a2e346e7e4573d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:e1:42:ff:03:90:dc:10:81:2f:0c:04:81: 04:bf:f4:be:f2:bb:24:18:e3:ab:1a:f3:b9:fb:eb: b5:16:b6:23:07:b5:50:94:e2:68:bf:b0:64:6c:bf: 9e:34:4a:7d:ed:29:cf:54:ce:58:9a:c0:1d:c6:e8: 18:f9:96:f9:82:2a:26:bc:f0:18:2f:f1:1e:ec:00: 6c:c4:79:87:b0:27:f9:a4:12:15:8b:af:90:ee:cd: 4a:6e:20:32:9a:3c:80:89:88:d4:ac:27:e9:21:56: 83:7e:61:f8:2d:ca:58:67:78:96:4d:fc:56:f1:92: 70:fd:14:99:c7:a8:21:d4:07:d5:78:26:3e:e7:f7: cd:8b:46:13:7c:48:08:90:30:f1:33:f2:69:62:44: aa:68:f6:56:d5:ab:bc:0f:b2:2d:71:b9:6f:5d:b1: 81:4f:06:ce:b4:5d:ce:c0:f3:19:e7:a0:96:57:d3: 61:fc:7c:6f:1b:89:bb:17:7d:af:a8:38:cb:ea:6b: ec:08:d5:7d:1a:93:38:8b:24:c0:dd:38:0e:eb:7a: 10:a6:e9:9d:7e:a2:3c:17:c1:3a:cd:e7:3e:52:50: 6b:ef:8e:06:91:40:23:6e:5e:3b:0d:db:6c:62:38: 82:72:71:87:4f:95:8b:2b:80:f2:0a:55:91:48:17: af:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CB:B1:33:1F:CD:AB:07:FC:F0:C5:6B:02:A2:E3:46:E7:E4:57:3D X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:04:6d:75:88:04:1b:22:0b:eb:bf:1e:79:9e:5b:e9:9e:86: 5e:bd:42:87:3a:23:d2:5a:00:83:ad:8f:3a:49:ea:3b:fc:03: 8f:83:42:73:10:04:0f:81:f1:b5:69:b5:76:9d:de:ec:7e:b2: a3:6c:f1:bb:39:be:7d:89:45:9a:63:33:52:64:1f:3b:e8:23: d1:cb:32:7e:5e:10:77:14:4c:31:c0:f1:48:c7:9d:93:31:19: ce:67:0c:67:9e:41:35:59:db:54:a8:52:7f:7f:f8:a7:d6:0b: 5d:83:18:d9:27:3e:9b:32:b7:90:f1:68:9c:e6:57:1b:bf:36: d2:49:6a:3b:29:bf:d0:68:40:10:fd:c7:b4:b3:28:68:c1:41: 08:29:ad:c1:b8:e6:a8:89:72:52:ff:24:86:57:cd:f1:f1:c2: 5b:f9:f8:d7:80:5b:c5:9b:a1:5b:46:c7:bc:5d:8f:0b:99:46: 33:0c:77:15:c7:22:11:f3:57:e4:93:f9:f4:7f:51:a6:be:7b: a2:30:07:88:e8:a3:9f:eb:20:fa:79:a1:05:82:5f:79:1a:b3: 84:76:99:e0:b8:37:73:e5:95:c4:59:63:f7:5e:d9:a2:7c:d9: 03:bb:08:aa:f6:87:66:cf:32:8d:07:85:72:eb:18:60:70:ab: 80:9f:09:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bUPJ4URcYMG1uZrYQMXWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwNDE3MTIwMTA2WhcNMjYwNDE4MTIwMTA2WjAzMTEwLwYDVQQD EyhkMGNiYjEzMzFmY2RhYjA3ZmNmMGM1NmIwMmEyZTM0NmU3ZTQ1NzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxHhQv8DkNwQgS8MBIEEv/S+8rsk GOOrGvO5++u1FrYjB7VQlOJov7BkbL+eNEp97SnPVM5YmsAdxugY+Zb5giomvPAY L/Ee7ABsxHmHsCf5pBIVi6+Q7s1KbiAymjyAiYjUrCfpIVaDfmH4LcpYZ3iWTfxW 8ZJw/RSZx6gh1AfVeCY+5/fNi0YTfEgIkDDxM/JpYkSqaPZW1au8D7ItcblvXbGB TwbOtF3OwPMZ56CWV9Nh/HxvG4m7F32vqDjL6mvsCNV9GpM4iyTA3TgO63oQpumd fqI8F8E6zec+UlBr744GkUAjbl47DdtsYjiCcnGHT5WLK4DyClWRSBevWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDLsTMfzasH/PDFawKi40bn5Fc9MB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwRtdYgE GyIL678eeZ5b6Z6GXr1Chzoj0loAg62POknqO/wDj4NCcxAED4HxtWm1dp3e7H6y o2zxuzm+fYlFmmMzUmQfO+gj0csyfl4QdxRMMcDxSMedkzEZzmcMZ55BNVnbVKhS f3/4p9YLXYMY2Sc+mzK3kPFonOZXG7820klqOym/0GhAEP3HtLMoaMFBCCmtwbjm qIlyUv8khlfN8fHCW/n414BbxZuhW0bHvF2PC5lGMwx3FcciEfNX5JP59H9Rpr57 ojAHiOijn+sg+nmhBYJfeRqzhHaZ4Lg3c+WVxFlj917ZonzZA7sIqvaHZs8yjQeF cusYYHCrgJ8JNA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:02 2026 by rpki-client