$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: zyksngX/Ly6tYQJr0D2ILlk3dTwNx03od6Qm0hSileE= Subject key identifier: 80:DF:3C:76:A1:92:72:4B:3C:B5:7B:13:A1:15:D5:8D:FF:1E:8F:4C Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019D99D0D585D4EF8E6D538C28CC95F29C0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 090D Signing time: Fri 17 Apr 2026 05:01:33 +0000 Manifest this update: Fri 17 Apr 2026 05:01:33 +0000 Manifest next update: Sat 18 Apr 2026 05:01:33 +0000 Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=) 2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=) 3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: nXb/z1qiHTZVQk7GFLcbnyF9ivsE9v3OzczMthwrf1Y=) 4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=) 5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=) 6: DC-2va12O2p4wJaztsxQYqxlteI.roa (hash: 8DuSeuFCejqmMZ/sp4dL3rLoQsC1vmmd0qUYceaaN1Y=) 7: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=) 8: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=) 9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=) 10: QxRT0q4FzTnTcacN8tWvzsCAarc.roa (hash: XiEdwKLVvGeQdfVFaF47mebbaJXtp25EOB5RwY48keA=) 11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=) 12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=) 13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=) 14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=) 15: _Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa (hash: bu/cyj5EwB3TDiwyIVSQeElzT+joOr0r21e4GEpp8jI=) 16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=) 17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=) 18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=) 19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:d0:d5:85:d4:ef:8e:6d:53:8c:28:cc:95:f2:9c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Apr 17 05:01:33 2026 GMT Not After : Apr 18 05:01:33 2026 GMT Subject: CN=80df3c76a192724b3cb57b13a115d58dff1e8f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:ef:e6:fe:2f:10:b9:d2:dd:c3:20:ee:5c: 9e:73:9d:93:22:fe:58:48:e8:a7:86:8f:c2:72:ca: d7:38:9a:ae:47:87:02:8c:33:d7:42:79:de:e9:9f: e6:ca:68:a2:f1:63:20:f1:ec:f0:51:2e:8d:06:4e: 7e:c2:d6:6c:7b:13:88:e1:6a:6a:29:55:99:11:9d: c7:44:8d:56:5f:d5:58:8c:54:4e:50:a6:a2:34:6e: 94:8d:4b:4e:f2:ff:89:4f:ba:2b:fb:e7:c0:0e:de: 67:23:d0:f0:41:36:70:53:5a:5d:ed:df:ca:e0:12: 6d:e3:14:d9:88:c1:04:b2:99:7b:dd:41:13:ed:31: 4f:36:68:78:85:45:48:ea:09:8b:18:13:40:7c:94: ae:77:44:38:30:60:58:eb:51:15:21:2d:a9:ba:c4: a9:3c:b2:d4:f0:27:52:75:7d:3b:09:6e:22:d1:33: 1e:65:26:64:91:0c:9f:a8:62:8d:f5:eb:8b:f6:87: 53:72:fc:51:7a:2e:0a:ea:1d:5d:1d:a2:c6:69:7d: e6:0c:63:51:ca:d6:24:7c:1e:31:9f:86:e3:6f:64: ae:76:3c:86:20:0d:d7:9e:6d:41:ae:87:d1:77:e6: bb:ef:bc:a3:4b:83:e1:79:1c:78:1b:98:3f:54:d1: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DF:3C:76:A1:92:72:4B:3C:B5:7B:13:A1:15:D5:8D:FF:1E:8F:4C X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:da:6c:b4:0c:17:70:8f:fc:44:36:fb:03:a8:5d:85:98:7e: bf:13:95:ae:f6:74:aa:b9:56:b6:a2:51:44:fe:56:d8:e6:2f: 40:38:86:30:c5:a8:5b:8c:f2:a7:e1:74:47:46:63:2d:d1:f2: c9:56:ca:cd:02:a2:d8:bd:bb:12:f0:47:25:ba:0d:f5:b3:fa: ed:f2:27:c9:f5:98:dc:4a:a0:3c:36:57:51:48:f7:1f:71:a2: 5d:65:a6:02:1c:17:09:b1:2a:49:15:89:a3:77:61:b0:6e:51: cd:7d:6e:cb:ab:46:67:d9:d4:9b:cf:9e:8d:f8:c8:99:9d:68: 9e:84:c9:b2:b7:c7:9b:94:bc:d1:a1:ad:52:c0:18:97:22:cb: 65:f5:53:59:d2:fe:72:65:bc:05:5f:b3:02:17:26:08:d4:eb: 10:9d:4f:71:0b:40:51:ec:c7:3a:27:5a:59:82:75:69:65:f0: a0:6a:4f:00:54:a3:57:b0:f7:8c:de:2e:77:2c:ed:fc:a4:33: a9:8c:ca:f2:37:99:77:3c:8b:c2:d0:53:0b:d4:f5:7d:17:21: cc:b4:8c:74:58:a3:df:27:98:d1:3b:56:cc:d4:f4:4e:48:40: 55:3a:79:0a:ac:87:a0:ef:da:46:c6:7c:3d:3e:5f:23:38:db: a2:3e:0f:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Z0NWF1O+ObVOMKMyV8pwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwNDE3MDUwMTMzWhcNMjYwNDE4MDUwMTMzWjAzMTEwLwYDVQQD Eyg4MGRmM2M3NmExOTI3MjRiM2NiNTdiMTNhMTE1ZDU4ZGZmMWU4ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnzv5v4vELnS3cMg7lyec52TIv5Y SOinho/CcsrXOJquR4cCjDPXQnne6Z/mymii8WMg8ezwUS6NBk5+wtZsexOI4Wpq KVWZEZ3HRI1WX9VYjFROUKaiNG6UjUtO8v+JT7or++fADt5nI9DwQTZwU1pd7d/K 4BJt4xTZiMEEspl73UET7TFPNmh4hUVI6gmLGBNAfJSud0Q4MGBY61EVIS2pusSp PLLU8CdSdX07CW4i0TMeZSZkkQyfqGKN9euL9odTcvxRei4K6h1dHaLGaX3mDGNR ytYkfB4xn4bjb2SudjyGIA3Xnm1BrofRd+a777yjS4PheRx4G5g/VNHWQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDfPHahknJLPLV7E6EV1Y3/Ho9MMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdpstAwX cI/8RDb7A6hdhZh+vxOVrvZ0qrlWtqJRRP5W2OYvQDiGMMWoW4zyp+F0R0ZjLdHy yVbKzQKi2L27EvBHJboN9bP67fInyfWY3EqgPDZXUUj3H3GiXWWmAhwXCbEqSRWJ o3dhsG5RzX1uy6tGZ9nUm8+ejfjImZ1onoTJsrfHm5S80aGtUsAYlyLLZfVTWdL+ cmW8BV+zAhcmCNTrEJ1PcQtAUezHOidaWYJ1aWXwoGpPAFSjV7D3jN4udyzt/KQz qYzK8jeZdzyLwtBTC9T1fRchzLSMdFij3yeY0TtWzNT0TkhAVTp5CqyHoO/aRsZ8 PT5fIzjboj4PEg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:09:53 2026 by rpki-client