$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: b6w++1koCiHpcZtAv5Ha+VVq1lsPSewp5YHW+pwPr4U= Subject key identifier: 77:43:09:96:E5:A1:46:63:80:78:A3:FD:09:71:6B:E2:3B:D5:7F:45 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019D98BD2E953FCB02A70B81A1AD32588087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 19C5 Signing time: Fri 17 Apr 2026 00:00:28 +0000 Manifest this update: Fri 17 Apr 2026 00:00:28 +0000 Manifest next update: Sat 18 Apr 2026 00:00:28 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: hgl6qG47Acg8gnAaIeZtDy+YUSFNJ0AdAn6INUqduVY=) 3: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 4: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 5: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 6: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 7: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 8: EQGugxJGZZhy7ULlXu2xf-8SXLU.roa (hash: UznnK9y+/YnAzmFCMUsWlBbf7xpLU6GolAvI0bvVwdE=) 9: FKKjc28_cZwUJO1xCAUbMduAXKU.roa (hash: 9j1ZvxIboMGFHG2XPsMZZrpotaMyXcob7hVQ+vW8T/E=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 15: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 16: wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (hash: 7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:2e:95:3f:cb:02:a7:0b:81:a1:ad:32:58:80:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Apr 17 00:00:28 2026 GMT Not After : Apr 18 00:00:28 2026 GMT Subject: CN=77430996e5a146638078a3fd09716be23bd57f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:5d:4b:24:12:5f:01:d3:93:1a:80:cd:0e: 0d:e5:22:cb:73:3d:94:40:b5:dc:be:34:80:8e:c4: d8:f6:65:1a:54:51:4e:5b:3b:57:29:26:05:52:44: 9b:a5:db:d6:1c:19:a7:ba:62:4a:04:8d:04:a4:a0: 8b:72:61:f8:c2:3f:33:f1:63:89:e3:63:43:66:64: 0e:11:6f:f2:e3:ae:ab:78:58:5b:fd:49:25:17:72: 6a:c7:09:ba:db:71:db:74:31:22:1c:69:8f:9f:28: c8:e9:c9:04:8e:16:7e:87:7e:a3:b2:7b:78:55:ba: a2:3b:03:39:07:8f:92:4b:13:da:c4:44:05:6b:c5: 46:19:9e:a1:db:a5:48:fb:38:0f:e3:ad:45:d3:fb: b4:a0:5f:c6:77:bc:eb:5f:b8:af:50:8c:ff:29:98: 5a:3f:47:7d:27:78:cb:bc:02:4d:8c:ab:e1:12:3d: d1:a3:8f:4f:87:80:86:ac:e9:0d:7f:d7:71:34:27: 03:f4:e7:b9:27:36:de:fb:93:55:14:47:b2:f1:3a: c3:ee:a8:78:6c:95:b2:be:7b:33:e0:62:3d:7c:85: 17:1c:2f:0e:bf:7b:9b:47:28:81:cf:7e:31:97:9a: 3d:e2:cf:3b:c8:b5:40:59:0c:b4:8b:5e:b4:4b:c1: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:43:09:96:E5:A1:46:63:80:78:A3:FD:09:71:6B:E2:3B:D5:7F:45 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:22:af:24:91:c3:b5:a5:78:65:4e:ec:fe:fe:23:e2:83:09: db:e0:52:26:c5:d8:c8:49:02:c8:cb:2e:fe:9f:16:9e:30:6f: c8:ea:4e:9c:89:35:a5:58:66:b4:f7:a5:d3:ce:00:f6:f3:30: 16:fe:1f:48:7c:72:fe:01:9b:48:4a:47:46:df:13:44:e5:f1: fc:68:88:4f:0b:10:d0:28:7c:f8:bf:43:69:ab:96:53:b4:d4: 96:b2:33:0b:f0:d1:c3:07:db:63:11:71:66:29:7c:1a:76:b1: c6:f1:82:2c:50:33:72:5a:18:3e:e5:22:22:ea:46:07:29:5e: 55:b9:98:33:83:a5:46:17:04:8a:1a:59:f0:95:44:b4:4a:79: e3:f3:1e:05:71:3e:9b:e8:7b:80:f6:9a:44:5f:64:04:58:b0: 71:83:b9:42:fd:ed:fe:2f:ec:f1:5f:2c:93:50:de:00:40:02: c2:c4:a4:ad:9c:1d:68:05:81:0b:3a:48:bd:7e:ef:e7:65:29: 46:9d:30:d7:88:e4:f4:e3:99:12:86:3a:88:2f:26:94:b2:d8: 0c:ae:a1:95:c9:db:84:fd:8e:83:44:a1:2f:7c:8f:20:6f:e9: b3:f9:db:23:76:cf:f8:cf:39:63:40:a7:a6:41:90:c5:8a:59: 77:6a:25:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YvS6VP8sCpwuBoa0yWICHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwNDE3MDAwMDI4WhcNMjYwNDE4MDAwMDI4WjAzMTEwLwYDVQQD Eyg3NzQzMDk5NmU1YTE0NjYzODA3OGEzZmQwOTcxNmJlMjNiZDU3ZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPxdSyQSXwHTkxqAzQ4N5SLLcz2U QLXcvjSAjsTY9mUaVFFOWztXKSYFUkSbpdvWHBmnumJKBI0EpKCLcmH4wj8z8WOJ 42NDZmQOEW/y466reFhb/UklF3Jqxwm623HbdDEiHGmPnyjI6ckEjhZ+h36jsnt4 VbqiOwM5B4+SSxPaxEQFa8VGGZ6h26VI+zgP461F0/u0oF/Gd7zrX7ivUIz/KZha P0d9J3jLvAJNjKvhEj3Ro49Ph4CGrOkNf9dxNCcD9Oe5Jzbe+5NVFEey8TrD7qh4 bJWyvnsz4GI9fIUXHC8Ov3ubRyiBz34xl5o94s87yLVAWQy0i160S8Gf3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdDCZbloUZjgHij/Qlxa+I71X9FMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiKvJJHD taV4ZU7s/v4j4oMJ2+BSJsXYyEkCyMsu/p8WnjBvyOpOnIk1pVhmtPel084A9vMw Fv4fSHxy/gGbSEpHRt8TROXx/GiITwsQ0Ch8+L9DaauWU7TUlrIzC/DRwwfbYxFx Zil8GnaxxvGCLFAzcloYPuUiIupGByleVbmYM4OlRhcEihpZ8JVEtEp54/MeBXE+ m+h7gPaaRF9kBFiwcYO5Qv3t/i/s8V8sk1DeAEACwsSkrZwdaAWBCzpIvX7v52Up Rp0w14jk9OOZEoY6iC8mlLLYDK6hlcnbhP2Og0ShL3yPIG/ps/nbI3bP+M85Y0Cn pkGQxYpZd2olOA== -----END CERTIFICATE-----Generated at Fri Apr 17 06:30:16 2026 by rpki-client