$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: ujIPMoOcLOZI8pj0mLy6+Zqnn0OGQciTAGPqmetJVbc= Subject key identifier: 7D:28:37:9F:B3:EB:4D:BA:9C:01:2F:8C:FE:0E:41:7A:B8:07:24:7E Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019D9C2C91E6B8F14FA452EC2CFF67B15013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 1553 Signing time: Fri 17 Apr 2026 16:00:59 +0000 Manifest this update: Fri 17 Apr 2026 16:00:59 +0000 Manifest next update: Sat 18 Apr 2026 16:00:59 +0000 Files and hashes: 1: 3jDJ5a-rblvvz-j2fpP0Sarh3To.roa (hash: +EqyrRTCgEyUFu+EGwkPk5fx5YkNUQzVTN15shVfS7c=) 2: 4PEBSYBvzkCsDVUQ66hb1Kfy5X4.roa (hash: FKTV+GMV2F3rBs+0rAhquEp7r2XIbw+tGPzN2CvtSt0=) 3: 75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (hash: IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=) 4: 8MsqChfqyk1noQMRXmiLEoP7JJc.roa (hash: 5HC+gRN9Kd7T3/h7fthoFYQYhTna8IfEWC1qAEQyFlA=) 5: A-rHPJxadoP-DN7xVNjnNuVuw6A.roa (hash: 4l5BCwURt7YDV10rwuZHqQQEai25MJkXH4mq+zGFBZk=) 6: A3WTKCACeEMnsJPRt1EtZ_IOE_o.roa (hash: fTMDJzlNdc8urBX1kRcFBR3Pb++06Ji2RDkWJYrM/nE=) 7: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (hash: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=) 8: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (hash: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI=) 9: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: o5XH/Lit2jHUpcEI2SLX/TaFctV0/BALreE7OJaS/Bk=) 10: tKFH2HoWkbg9bb1yJ7KiMyAru7Q.roa (hash: Hl1JR0aJQiWIXrA53WzTjCP5mFFzxpdo6sRUi29w3iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:2c:91:e6:b8:f1:4f:a4:52:ec:2c:ff:67:b1:50:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Apr 17 16:00:59 2026 GMT Not After : Apr 18 16:00:59 2026 GMT Subject: CN=7d28379fb3eb4dba9c012f8cfe0e417ab807247e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:2a:4d:30:90:e6:21:2a:81:22:3f:d3:3d: a7:d3:f0:eb:5d:72:2a:08:32:05:32:02:8e:9a:76: 2b:eb:31:05:a3:ce:7a:92:09:c4:5f:2e:c7:a4:62: ab:d8:44:e7:64:29:96:4e:3d:a0:c2:2f:4d:cb:f2: e8:0e:9f:fc:6d:21:7f:76:c0:14:78:ff:e8:6e:c4: 12:17:45:3f:c4:62:c1:05:4b:16:f5:33:cd:73:93: 49:4b:d8:a4:13:1b:9b:2d:eb:19:f3:f7:1f:88:49: 3b:3d:77:f4:be:08:70:eb:26:86:20:49:f4:d4:7b: 95:4e:fe:d5:9a:a3:59:27:61:cf:69:3b:fa:62:74: 6a:4f:13:08:d1:6a:fd:60:95:e2:37:27:31:35:5b: b3:78:29:84:02:90:7f:3e:d1:5f:da:ba:0c:15:8d: ad:5b:ff:7b:14:d4:5f:86:c5:d5:ad:f1:c9:e4:a4: 94:0a:06:8b:2b:95:7e:f4:b0:f0:c1:2c:ea:c7:df: 16:74:29:37:bd:d5:33:2a:21:01:da:9c:11:1a:f3: 1c:9c:f2:76:37:d1:b0:01:7e:75:2c:bf:31:48:a9: c0:31:ab:4a:88:9e:09:d5:79:50:16:77:cc:af:4b: d0:59:72:af:db:63:bd:28:c3:f0:6e:b7:4a:80:58: 85:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:28:37:9F:B3:EB:4D:BA:9C:01:2F:8C:FE:0E:41:7A:B8:07:24:7E X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fd:95:58:5a:54:5e:cb:8c:6b:30:b7:09:da:0d:c4:ae:ea: 42:a3:08:dc:ad:d2:0d:61:1a:96:e5:a5:6e:dc:c4:7f:93:88: 80:3f:32:a0:2c:4b:90:b0:1e:ba:8c:7d:de:77:59:65:7b:d6: 3a:68:a1:38:93:fe:32:1f:9a:11:03:7d:09:32:83:d7:a6:ae: d6:4e:e0:f1:cf:c1:eb:73:17:b8:73:42:23:d0:e2:46:09:59: f2:74:e4:c0:55:4f:8d:c0:68:25:55:f5:e3:02:59:2e:2c:fb: 6c:b6:54:95:82:fa:c5:4d:b2:2b:4b:d5:d1:40:f4:d4:b7:d0: 07:52:d9:79:4c:1b:a1:2d:ad:06:71:67:6b:24:21:44:3f:16: c7:43:cb:be:5e:10:36:71:65:6e:c9:ac:11:2c:28:33:10:d2: 52:f7:aa:a4:4e:48:e7:2c:05:ef:21:b5:be:be:c7:50:80:9f: 75:7e:e4:57:50:b8:b8:43:c0:74:0a:6e:10:37:28:0e:f8:c6: e6:de:29:7f:19:ab:5a:af:e0:e7:5c:5c:ee:98:c4:81:c4:93: e4:fe:88:d3:bb:e0:5b:f0:27:1c:99:24:c9:31:6c:a2:8e:57: 9c:9d:b2:ee:55:16:66:e7:c7:3d:74:55:47:4f:aa:53:b0:37: 75:cb:cd:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cLJHmuPFPpFLsLP9nsVATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjYwNDE3MTYwMDU5WhcNMjYwNDE4MTYwMDU5WjAzMTEwLwYDVQQD Eyg3ZDI4Mzc5ZmIzZWI0ZGJhOWMwMTJmOGNmZTBlNDE3YWI4MDcyNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTIqTTCQ5iEqgSI/0z2n0/DrXXIq CDIFMgKOmnYr6zEFo856kgnEXy7HpGKr2ETnZCmWTj2gwi9Ny/LoDp/8bSF/dsAU eP/obsQSF0U/xGLBBUsW9TPNc5NJS9ikExubLesZ8/cfiEk7PXf0vghw6yaGIEn0 1HuVTv7VmqNZJ2HPaTv6YnRqTxMI0Wr9YJXiNycxNVuzeCmEApB/PtFf2roMFY2t W/97FNRfhsXVrfHJ5KSUCgaLK5V+9LDwwSzqx98WdCk3vdUzKiEB2pwRGvMcnPJ2 N9GwAX51LL8xSKnAMatKiJ4J1XlQFnfMr0vQWXKv22O9KMPwbrdKgFiFdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0oN5+z6026nAEvjP4OQXq4ByR+MB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVP2VWFpU XsuMazC3CdoNxK7qQqMI3K3SDWEaluWlbtzEf5OIgD8yoCxLkLAeuox93ndZZXvW OmihOJP+Mh+aEQN9CTKD16au1k7g8c/B63MXuHNCI9DiRglZ8nTkwFVPjcBoJVX1 4wJZLiz7bLZUlYL6xU2yK0vV0UD01LfQB1LZeUwboS2tBnFnayQhRD8Wx0PLvl4Q NnFlbsmsESwoMxDSUveqpE5I5ywF7yG1vr7HUICfdX7kV1C4uEPAdApuEDcoDvjG 5t4pfxmrWq/g51xc7pjEgcST5P6I07vgW/AnHJkkyTFsoo5XnJ2y7lUWZufHPXRV R0+qU7A3dcvN9Q== -----END CERTIFICATE-----Generated at Fri Apr 17 17:39:12 2026 by rpki-client