$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: xAWBcvHIzmerCOnLJr+KR+73XTw1Q4rAiC+xTyJo/UU= Subject key identifier: 3B:63:45:F1:5F:C0:90:72:60:14:96:37:44:86:EE:2D:A3:34:10:78 Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019D9A06CE823EAED84EA1EC9A3C8DA015D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 18E1 Signing time: Fri 17 Apr 2026 06:00:30 +0000 Manifest this update: Fri 17 Apr 2026 06:00:30 +0000 Manifest next update: Sat 18 Apr 2026 06:00:30 +0000 Files and hashes: 1: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (hash: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8=) 2: 4KJ_GXRCZJ3i3re64jPbmY6CJmw.roa (hash: 6+nSknm5d3GJFxravLBFWrmCmG8ueiV1lwzdyLMLzvU=) 3: 4lIeViGYyAArH6xFgAXuF1KY8oo.roa (hash: 3sNxRj68ViMu808j4OAwb7vp2hEV9aYGZZ0Iae+xOYY=) 4: 6B2lYvT2dR81hzkQQELDn_duJcs.roa (hash: iYcBuEVmeXmfUIJkWbTRCIrfpwO2+UiKD6lHoQfEoI8=) 5: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (hash: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o=) 6: AxjWYbGGpT5pCJ414siHagIrYv0.roa (hash: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck=) 7: P7tnseevFfgmSuKuIWR7T1-giX0.roa (hash: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA=) 8: WlvzyTdODs1w5g16wAD9se0N5yc.roa (hash: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4=) 9: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (hash: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY=) 10: ZYdv2S3m7eXPESVok8yxYTapz-4.roa (hash: hWVgkj4Hxb1fm9VqiSs0akAtvRlafZPuNGm7c0XMuPM=) 11: c4gKUGJIMgEyuId7ul08tWyPN-I.roa (hash: chucr3d4TvCMayMn3vPGpeF00MZgFV7fyC/x5QhhCZQ=) 12: mlVDqzsr0onFPunz8cRb0CxctTw.roa (hash: FmoWfiTgv6hVPqkJlMC8O0NyKtvBDx0DatsEpxV/8NY=) 13: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: E8vOYT7FXRwuO/HtVmTsUFPUDQ2mTbEISD6gzU2x9M0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:06:ce:82:3e:ae:d8:4e:a1:ec:9a:3c:8d:a0:15:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Apr 17 06:00:30 2026 GMT Not After : Apr 18 06:00:30 2026 GMT Subject: CN=3b6345f15fc09072601496374486ee2da3341078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:71:6a:e1:e4:12:53:aa:7d:c3:8d:ca:19:9c: 54:01:aa:2e:38:eb:e7:4a:bb:70:f3:2b:70:fb:53: 58:7d:85:ea:bf:f7:7d:f4:dc:39:5c:b3:b3:1a:23: 48:3d:7a:3f:19:21:50:0b:3f:cc:87:da:2a:47:2a: 38:86:ce:e9:a1:bd:a0:4a:c8:1c:76:17:f2:0a:ac: 9d:9e:a7:75:d3:99:bc:cd:99:cf:96:4e:53:68:78: 64:3f:c4:4d:7d:0b:82:6f:1c:07:05:db:0d:61:52: f6:a7:9b:c6:52:a2:62:07:17:dc:98:f4:e1:21:3a: b6:49:b4:35:cb:dc:3e:a3:bc:7c:8b:69:e5:2e:d5: ee:b2:70:e8:1f:91:33:20:b1:8f:52:5a:18:c7:3f: b3:c2:e0:73:2d:22:17:e2:26:8f:18:fe:d9:fd:2f: 55:2a:02:d5:8d:18:3a:b2:ec:d8:80:70:30:aa:38: 9a:3e:7a:db:db:21:57:b2:93:96:02:12:3e:45:10: e5:f5:f5:2e:23:29:05:f9:13:75:ed:c3:41:0e:2f: 42:02:19:97:a8:b5:cb:f3:63:0e:0a:95:47:2a:f8: 1a:f7:18:5b:66:ef:26:36:26:ff:ef:84:f6:15:72: 6d:fb:f7:f8:a0:3e:57:91:1e:fb:0c:10:6f:d4:c9: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:63:45:F1:5F:C0:90:72:60:14:96:37:44:86:EE:2D:A3:34:10:78 X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d6:3e:e4:f7:61:30:1d:0b:b8:38:6f:3c:1b:e4:d5:bc:9b: 7b:6a:47:ac:da:01:eb:3d:22:72:d8:a6:5f:cd:9f:32:b6:04: b8:a6:99:29:a9:dd:1b:92:6b:36:28:92:c1:f1:8d:f0:1d:53: b7:3d:65:2a:42:d7:9d:03:3d:3c:19:47:24:a7:55:ae:43:40: af:6e:25:f8:45:db:1a:a1:0a:9b:0a:9f:60:ab:29:10:2b:b5: 92:fa:d4:1f:08:18:82:aa:07:e7:b7:ae:d8:ce:2c:c3:69:ca: c5:6b:77:dd:69:00:25:40:4a:c6:f6:a9:d4:66:9b:ab:7d:e3: d9:8c:e4:d4:38:dd:3e:32:2e:b9:d1:db:23:1e:56:6d:27:21: e2:e7:66:21:be:45:78:e7:8c:54:d9:12:bc:c8:16:c7:e2:1d: 57:f1:25:d3:a3:9a:37:03:6d:6b:4b:73:82:be:a9:cc:b8:c0: 79:fc:d0:87:b0:5b:17:ba:02:4e:8e:de:9a:6e:f0:06:10:3f: ef:4e:e5:18:57:ee:ed:d7:91:95:41:2f:67:3e:7c:6e:11:e2: 20:48:40:24:d1:85:b6:17:e0:6b:4c:27:1c:2f:f5:2d:20:cc: 04:b0:aa:a1:f7:b3:82:b8:8f:05:a2:10:aa:ee:38:90:23:22: 30:44:fd:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBs6CPq7YTqHsmjyNoBXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjYwNDE3MDYwMDMwWhcNMjYwNDE4MDYwMDMwWjAzMTEwLwYDVQQD EygzYjYzNDVmMTVmYzA5MDcyNjAxNDk2Mzc0NDg2ZWUyZGEzMzQxMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XFq4eQSU6p9w43KGZxUAaouOOvn Srtw8ytw+1NYfYXqv/d99Nw5XLOzGiNIPXo/GSFQCz/Mh9oqRyo4hs7pob2gSsgc dhfyCqydnqd105m8zZnPlk5TaHhkP8RNfQuCbxwHBdsNYVL2p5vGUqJiBxfcmPTh ITq2SbQ1y9w+o7x8i2nlLtXusnDoH5EzILGPUloYxz+zwuBzLSIX4iaPGP7Z/S9V KgLVjRg6suzYgHAwqjiaPnrb2yFXspOWAhI+RRDl9fUuIykF+RN17cNBDi9CAhmX qLXL82MOCpVHKvga9xhbZu8mNib/74T2FXJt+/f4oD5XkR77DBBv1MnyNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtjRfFfwJByYBSWN0SG7i2jNBB4MB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9Y+5Pdh MB0LuDhvPBvk1bybe2pHrNoB6z0ictimX82fMrYEuKaZKandG5JrNiiSwfGN8B1T tz1lKkLXnQM9PBlHJKdVrkNAr24l+EXbGqEKmwqfYKspECu1kvrUHwgYgqoH57eu 2M4sw2nKxWt33WkAJUBKxvap1Gabq33j2Yzk1DjdPjIuudHbIx5WbSch4udmIb5F eOeMVNkSvMgWx+IdV/El06OaNwNta0tzgr6pzLjAefzQh7BbF7oCTo7emm7wBhA/ 707lGFfu7deRlUEvZz58bhHiIEhAJNGFthfga0wnHC/1LSDMBLCqofezgriPBaIQ qu44kCMiMET95Q== -----END CERTIFICATE-----Generated at Fri Apr 17 09:41:17 2026 by rpki-client