$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: W4JZr7FAk6LMBW0t3nrcvEpZbShNCX5X7m49XnWExcw= Subject key identifier: 70:B9:DA:68:97:23:D1:66:F4:FA:87:40:13:1C:F9:6D:DF:43:80:A5 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019D9B5083BDCA1EB3D3150638D80117F3F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 12D0 Signing time: Fri 17 Apr 2026 12:00:38 +0000 Manifest this update: Fri 17 Apr 2026 12:00:38 +0000 Manifest next update: Sat 18 Apr 2026 12:00:38 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: aJmbGB+W99PDoC9SG3vXViVEq8dxcS2btAzfcZkjMzI=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 10: dTBGT4Dz5-wcMADCAN8Dzj6ZXv8.roa (hash: rcN80U9U7QHYeIDWjMRA3gFyjUfMjCbe/cw0PAtszSs=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:50:83:bd:ca:1e:b3:d3:15:06:38:d8:01:17:f3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Apr 17 12:00:38 2026 GMT Not After : Apr 18 12:00:38 2026 GMT Subject: CN=70b9da689723d166f4fa8740131cf96ddf4380a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:fd:3d:b1:fc:09:03:a8:e8:c2:94:26:43: ea:5e:ae:c1:03:e8:cd:ba:80:6f:01:0d:84:43:d2: 5d:9b:c5:33:a5:84:be:d7:3b:90:cb:27:2c:c7:f4: 16:38:3e:8f:df:29:4b:3a:e6:b3:5e:3c:0d:2f:14: 3a:39:9f:42:3e:ce:d1:4a:a4:77:f9:a2:de:a2:ee: c0:68:fa:f5:b8:01:e6:89:55:94:d5:d1:13:65:44: 2f:6d:2f:7c:ac:82:f0:aa:5e:0b:12:d0:cc:0b:2c: 87:11:2e:78:97:31:ac:8d:50:84:d4:b2:f0:ec:19: 48:35:80:b9:f9:2c:33:33:a6:d8:c2:94:88:ae:5d: 45:d0:41:34:c3:da:04:09:f6:f3:40:2d:30:8b:c4: 77:5b:d1:58:7c:ed:68:f3:ab:5a:73:89:28:d7:43: 77:cb:cb:5a:20:78:6a:cf:d3:0c:aa:49:b4:d9:2b: 65:70:7b:3a:4e:8b:10:5f:da:bf:0f:e4:8e:42:c9: d1:4d:87:af:6f:39:9c:5a:39:48:59:a1:43:e8:eb: 65:ad:66:37:6c:bb:4c:1d:5d:d3:b8:5b:70:9b:2a: 01:e1:d3:9b:d6:f9:42:30:31:80:94:fa:aa:a6:50: eb:c3:4f:d6:46:92:a7:35:38:92:4f:69:bf:14:5a: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B9:DA:68:97:23:D1:66:F4:FA:87:40:13:1C:F9:6D:DF:43:80:A5 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d1:e8:0c:4c:a5:4a:46:4c:e8:63:0c:80:0c:4d:d3:9e:e4: ee:59:c9:6e:fe:f9:56:19:1a:50:2b:d2:a9:09:12:88:ce:a1: 88:5d:b1:40:8b:91:44:ce:01:4e:ad:65:1d:13:24:49:94:83: 97:af:ca:9c:7b:c2:df:25:07:61:e5:d9:45:57:ae:72:e2:d7: 99:cd:69:30:d8:03:b0:c6:ba:8d:fe:7d:ec:96:93:3b:b2:21: c9:82:22:3f:53:6e:f4:ec:9e:e9:81:c0:8b:4e:9a:51:fc:ee: 95:ed:50:b2:5d:c1:34:90:78:44:48:bd:74:b8:70:ee:ff:32: 95:5a:56:ae:6d:84:72:b1:62:13:d2:ff:d4:a2:b8:d0:18:80: 10:71:1d:12:88:fb:9e:09:6d:ef:76:33:c5:5b:06:e6:ea:04: 40:32:74:e1:85:c6:43:ff:65:b1:10:bc:e6:f4:13:e3:a4:13: cb:62:e7:5f:76:d4:e5:9a:16:a7:38:73:1d:4b:79:73:80:c7: dd:2e:88:34:1d:7c:94:b9:f8:1e:ec:b4:91:49:23:bb:09:e1: d4:19:db:d7:b4:33:dd:31:f7:5a:76:10:0d:7a:9f:09:10:0f: 2e:f5:e9:a7:e9:68:b0:74:fb:e1:b7:56:2f:68:c0:d4:bf:64: 58:b6:9c:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bUIO9yh6z0xUGONgBF/P1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwNDE3MTIwMDM4WhcNMjYwNDE4MTIwMDM4WjAzMTEwLwYDVQQD Eyg3MGI5ZGE2ODk3MjNkMTY2ZjRmYTg3NDAxMzFjZjk2ZGRmNDM4MGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bn9PbH8CQOo6MKUJkPqXq7BA+jN uoBvAQ2EQ9Jdm8UzpYS+1zuQyycsx/QWOD6P3ylLOuazXjwNLxQ6OZ9CPs7RSqR3 +aLeou7AaPr1uAHmiVWU1dETZUQvbS98rILwql4LEtDMCyyHES54lzGsjVCE1LLw 7BlINYC5+SwzM6bYwpSIrl1F0EE0w9oECfbzQC0wi8R3W9FYfO1o86tac4ko10N3 y8taIHhqz9MMqkm02StlcHs6TosQX9q/D+SOQsnRTYevbzmcWjlIWaFD6OtlrWY3 bLtMHV3TuFtwmyoB4dOb1vlCMDGAlPqqplDrw0/WRpKnNTiST2m/FFrDtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC52miXI9Fm9PqHQBMc+W3fQ4ClMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9HoDEyl SkZM6GMMgAxN057k7lnJbv75VhkaUCvSqQkSiM6hiF2xQIuRRM4BTq1lHRMkSZSD l6/KnHvC3yUHYeXZRVeucuLXmc1pMNgDsMa6jf597JaTO7IhyYIiP1Nu9Oye6YHA i06aUfzule1Qsl3BNJB4REi9dLhw7v8ylVpWrm2EcrFiE9L/1KK40BiAEHEdEoj7 nglt73YzxVsG5uoEQDJ04YXGQ/9lsRC85vQT46QTy2LnX3bU5ZoWpzhzHUt5c4DH 3S6INB18lLn4Huy0kUkjuwnh1Bnb17Qz3TH3WnYQDXqfCRAPLvXpp+losHT74bdW L2jA1L9kWLacCw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:18:49 2026 by rpki-client