$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: WFkF0El8KOgz+dja03QX8HrRAcP1F6UR6kIW1UPKGZE= Subject key identifier: C8:78:66:D4:08:3D:D3:24:0D:C0:6C:AE:4D:C0:8B:3A:54:40:A9:D4 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019D9A3EAB298AA896C5D9AFB09BACC0C619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 16BC Signing time: Fri 17 Apr 2026 07:01:31 +0000 Manifest this update: Fri 17 Apr 2026 07:01:31 +0000 Manifest next update: Sat 18 Apr 2026 07:01:31 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=) 3: DdZL2Ei2USqI1D8JQatISOxbCY0.roa (hash: A+x4OgPFDFV1yfcXqtt93yKXONOhfjjQIV2HOaMfwnQ=) 4: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=) 5: HOso74W1VokYtKvyq7cUzsjtneE.asa (hash: XkgHTIUgOHbFT9e9eq8+M1TVv1ndaqq7zAajOmv3wN8=) 6: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 7: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=) 8: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 9: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=) 10: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 11: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=) 12: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=) 13: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: KKOYw5Kunx8neVh+GlgbthhsVloO0Yvaeu7GNNPjAbw=) 15: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 16: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 17: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) 18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3e:ab:29:8a:a8:96:c5:d9:af:b0:9b:ac:c0:c6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Apr 17 07:01:31 2026 GMT Not After : Apr 18 07:01:31 2026 GMT Subject: CN=c87866d4083dd3240dc06cae4dc08b3a5440a9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:ca:1a:ca:74:e8:d4:ea:c8:ee:d6:39:5d: f8:6a:b6:d9:0d:40:d4:80:22:30:76:43:7e:2c:df: 07:5c:6b:e4:ef:05:dd:cc:14:07:15:b9:fd:cf:76: 49:75:4e:07:23:db:54:da:3f:94:b9:03:b7:25:1d: 7d:6a:df:ad:9f:49:83:fc:73:cb:db:e4:5d:48:bf: 17:75:c8:b8:85:6a:76:82:b8:16:eb:44:91:f1:d9: 8b:52:cc:9b:97:8a:3e:f4:4f:4e:cf:01:88:86:f4: 1c:3e:65:c7:b3:09:7f:66:34:04:8f:e2:45:af:df: 09:a4:64:b8:e6:4d:01:41:d3:7f:4b:e3:75:1a:1a: bb:6a:97:86:3c:45:83:3c:f0:40:39:67:9a:d6:e0: 9a:87:44:5e:5b:32:c0:2f:a3:5a:c4:ea:df:0d:dc: 89:86:bb:63:6e:a0:c8:6f:a4:e9:00:a1:d2:61:ed: 0e:ee:a2:b9:60:41:1a:40:2f:79:ed:c3:9c:e1:d8: 85:fc:1b:b1:f2:08:3c:2a:16:e6:ea:dd:5f:94:72: 90:7b:40:47:b5:c7:88:f6:56:0d:0c:8a:0c:fc:e0: d2:56:9b:fc:3b:54:d8:47:ac:db:37:ac:c4:bb:e6: fd:af:2e:d4:16:d0:29:73:b7:32:b7:16:87:31:01: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:78:66:D4:08:3D:D3:24:0D:C0:6C:AE:4D:C0:8B:3A:54:40:A9:D4 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:26:9f:5e:8e:9f:f7:44:66:95:2a:11:65:0d:8e:35:78:a6: 66:f9:03:37:50:0f:55:d8:29:53:bc:c2:0e:24:f0:75:7d:54: b8:ff:3d:51:38:13:9e:80:de:b7:29:fd:1d:a8:80:eb:68:c6: 5e:61:1e:be:f6:b6:97:40:af:5d:4e:cf:77:df:6c:0c:92:61: 5c:bb:8e:cf:ab:d6:41:94:15:ee:82:cd:8b:62:2c:b9:dd:c4: b8:20:c4:d3:17:4e:ed:a4:8c:79:d4:9a:65:28:e4:2d:d5:5f: 19:93:8b:9c:d8:f3:45:fa:48:c3:2a:8e:f8:89:29:75:b4:f5: 92:25:85:f8:f0:85:50:70:7e:51:51:c3:d1:1a:4a:fc:7e:17: 8f:cc:25:a4:3e:3f:ce:96:c3:51:a7:f4:61:07:d3:46:24:ba: 15:71:2b:a9:b5:04:7f:62:d7:03:45:5d:14:c2:7a:b0:cf:fd: 2c:7d:00:ab:b7:b5:39:3b:ba:77:b7:88:e7:af:a1:c3:23:04: 79:c1:c8:8d:f9:8c:9b:de:01:ad:7d:c8:83:33:c4:d6:8e:66: f4:b1:e6:ec:8e:f0:bc:be:ea:db:9f:a4:b1:06:2e:ca:48:86: d9:94:47:87:03:e6:36:bf:92:da:d7:12:25:87:fa:5c:79:eb: ef:bf:09:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPqspiqiWxdmvsJuswMYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwNDE3MDcwMTMxWhcNMjYwNDE4MDcwMTMxWjAzMTEwLwYDVQQD EyhjODc4NjZkNDA4M2RkMzI0MGRjMDZjYWU0ZGMwOGIzYTU0NDBhOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6LKGsp06NTqyO7WOV34arbZDUDU gCIwdkN+LN8HXGvk7wXdzBQHFbn9z3ZJdU4HI9tU2j+UuQO3JR19at+tn0mD/HPL 2+RdSL8Xdci4hWp2grgW60SR8dmLUsybl4o+9E9OzwGIhvQcPmXHswl/ZjQEj+JF r98JpGS45k0BQdN/S+N1Ghq7apeGPEWDPPBAOWea1uCah0ReWzLAL6NaxOrfDdyJ hrtjbqDIb6TpAKHSYe0O7qK5YEEaQC957cOc4diF/Bux8gg8Khbm6t1flHKQe0BH tceI9lYNDIoM/ODSVpv8O1TYR6zbN6zEu+b9ry7UFtApc7cytxaHMQF8dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh4ZtQIPdMkDcBsrk3AizpUQKnUMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSafXo6f 90RmlSoRZQ2ONXimZvkDN1APVdgpU7zCDiTwdX1UuP89UTgTnoDetyn9HaiA62jG XmEevva2l0CvXU7Pd99sDJJhXLuOz6vWQZQV7oLNi2Isud3EuCDE0xdO7aSMedSa ZSjkLdVfGZOLnNjzRfpIwyqO+IkpdbT1kiWF+PCFUHB+UVHD0RpK/H4Xj8wlpD4/ zpbDUaf0YQfTRiS6FXErqbUEf2LXA0VdFMJ6sM/9LH0Aq7e1OTu6d7eI56+hwyME ecHIjfmMm94BrX3IgzPE1o5m9LHm7I7wvL7q25+ksQYuykiG2ZRHhwPmNr+S2tcS JYf6XHnr778JnA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:36:11 2026 by rpki-client