$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: 1xjuNLwUqTVB1tj4NsGfKF2T11GwMSZsBaaHaftJuGo= Subject key identifier: 65:55:A6:CE:56:98:71:C8:92:FE:F3:5F:62:38:9A:25:3A:B6:9C:E0 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019D9D3F09AA66121E8686A21E59507B7BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 12D1 Signing time: Fri 17 Apr 2026 21:00:47 +0000 Manifest this update: Fri 17 Apr 2026 21:00:47 +0000 Manifest next update: Sat 18 Apr 2026 21:00:47 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: BVMP4RW9UxqTvkysl1G0zQ/FAHfKYmDsbK9vmP8N0HM=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 10: dTBGT4Dz5-wcMADCAN8Dzj6ZXv8.roa (hash: rcN80U9U7QHYeIDWjMRA3gFyjUfMjCbe/cw0PAtszSs=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9d:3f:09:aa:66:12:1e:86:86:a2:1e:59:50:7b:7b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Apr 17 21:00:47 2026 GMT Not After : Apr 18 21:00:47 2026 GMT Subject: CN=6555a6ce569871c892fef35f62389a253ab69ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:63:04:0d:5a:88:78:fa:87:50:53:55:b9: 97:07:e1:82:4a:81:6a:25:b5:51:fc:5a:c2:c6:b5: b3:71:91:09:f7:2f:21:28:ad:b6:65:d8:e4:f3:96: a9:21:fd:ab:6e:31:68:ce:18:1c:85:9f:ac:db:a5: b1:49:46:c0:92:62:46:c5:3f:9e:ff:64:1f:c8:e9: 2c:2f:db:ae:63:4c:c8:63:2a:a9:e3:3e:d8:6c:38: b2:0f:5d:95:12:5a:8f:c9:09:87:01:79:04:3b:f1: 6a:3c:3b:59:ee:ec:3f:4f:98:1c:a6:52:9a:d7:39: 1e:42:cd:bd:ee:91:37:e1:17:7a:bf:a1:df:c8:5f: c7:30:be:69:78:cd:8f:b1:59:06:56:43:f4:06:bb: 1b:aa:6c:2f:94:7d:92:2b:fe:ca:80:03:27:7c:fa: 44:18:2c:b3:e3:d4:0e:7c:5d:cd:74:e8:e1:6a:ec: 5a:bf:4d:3e:07:7a:31:4f:2c:37:d8:cf:43:3e:be: 16:61:68:91:ae:9d:b3:28:b9:7c:55:12:aa:36:0f: 9f:b6:fe:95:9e:d4:74:8b:51:c4:17:ad:45:d8:f0: c8:62:e5:45:2f:1f:35:97:1b:b8:61:3e:11:89:13: af:27:58:1a:8d:28:7d:c9:b3:c8:48:b1:ab:2f:30: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:55:A6:CE:56:98:71:C8:92:FE:F3:5F:62:38:9A:25:3A:B6:9C:E0 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ec:61:af:3e:18:17:47:0a:63:36:5f:12:d3:50:ca:60:3c: ab:ce:f2:85:e5:b8:71:9f:35:8c:43:e3:c5:41:cb:c9:17:58: d4:b4:74:c6:6f:84:90:b5:e8:97:7c:f0:ac:e5:fb:48:9a:4e: b6:06:e2:2c:10:c9:e5:0a:34:ea:9e:ec:89:2c:56:7f:73:71: 7f:a3:56:8f:e9:b4:c2:6b:a5:ca:71:c6:9a:81:7e:3e:bd:cf: f7:50:ff:74:1f:b2:9d:5a:37:38:32:c5:82:b2:ff:d5:57:8b: e9:69:54:55:ed:46:01:66:78:ea:1d:7c:0b:18:20:06:d0:e9: 98:91:68:ef:de:8c:9d:de:2b:9b:fc:48:c4:6c:60:80:aa:e1: 2c:dd:fb:e9:c6:65:67:b3:c2:5d:16:1e:bf:96:76:3d:d7:a5: 08:85:6a:13:08:11:7b:59:0d:62:03:d9:c3:cb:89:fc:74:b4: 45:f5:b7:c0:2e:e6:f6:8e:b0:cc:6a:d1:51:43:3d:4c:14:d6: c9:17:a2:09:c0:92:da:65:58:64:4c:c2:d7:d6:0b:a6:4b:fe: 40:6a:97:ff:fe:c8:c6:54:3f:b6:7d:87:78:ca:8a:5a:15:b5: 9b:ed:a2:b2:c1:7a:be:22:cd:4d:20:7b:73:0c:65:36:50:5e: 43:e9:ea:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2dPwmqZhIehoaiHllQe3vEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwNDE3MjEwMDQ3WhcNMjYwNDE4MjEwMDQ3WjAzMTEwLwYDVQQD Eyg2NTU1YTZjZTU2OTg3MWM4OTJmZWYzNWY2MjM4OWEyNTNhYjY5Y2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo75jBA1aiHj6h1BTVbmXB+GCSoFq JbVR/FrCxrWzcZEJ9y8hKK22Zdjk85apIf2rbjFozhgchZ+s26WxSUbAkmJGxT+e /2QfyOksL9uuY0zIYyqp4z7YbDiyD12VElqPyQmHAXkEO/FqPDtZ7uw/T5gcplKa 1zkeQs297pE34Rd6v6HfyF/HML5peM2PsVkGVkP0BrsbqmwvlH2SK/7KgAMnfPpE GCyz49QOfF3NdOjhauxav00+B3oxTyw32M9DPr4WYWiRrp2zKLl8VRKqNg+ftv6V ntR0i1HEF61F2PDIYuVFLx81lxu4YT4RiROvJ1gajSh9ybPISLGrLzBAQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVVps5WmHHIkv7zX2I4miU6tpzgMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuxhrz4Y F0cKYzZfEtNQymA8q87yheW4cZ81jEPjxUHLyRdY1LR0xm+EkLXol3zwrOX7SJpO tgbiLBDJ5Qo06p7siSxWf3Nxf6NWj+m0wmulynHGmoF+Pr3P91D/dB+ynVo3ODLF grL/1VeL6WlUVe1GAWZ46h18CxggBtDpmJFo796Mnd4rm/xIxGxggKrhLN376cZl Z7PCXRYev5Z2PdelCIVqEwgRe1kNYgPZw8uJ/HS0RfW3wC7m9o6wzGrRUUM9TBTW yReiCcCS2mVYZEzC19YLpkv+QGqX//7IxlQ/tn2HeMqKWhW1m+2issF6viLNTSB7 cwxlNlBeQ+nqig== -----END CERTIFICATE-----Generated at Sat Apr 18 01:43:49 2026 by rpki-client