$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: umR290c7TCBRFZRRFSPHp0f68Hp0+LjQRSf9cQdLHUg= Subject key identifier: C7:19:FC:B6:63:79:2F:21:F1:44:12:BC:34:B0:D7:D4:21:37:54:F8 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019DA3790421CDF4BCD76A0A47A168E2CF3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 147B Signing time: Sun 19 Apr 2026 02:01:50 +0000 Manifest this update: Sun 19 Apr 2026 02:01:50 +0000 Manifest next update: Mon 20 Apr 2026 02:01:50 +0000 Files and hashes: 1: 0ZP8S6iuoWh8xgt74BfX9FsiWUE.roa (hash: 3Aof+qdhL+cCGNe+hdtvcBXfSgz4KVlL9GS8+nK3Uo0=) 2: 1-zo-vu3H5BPZZ7kya3z7KQG-O8M.roa (hash: wO9W+0kJ3rqdKQX4KDV5BoK4htjNlrERtnZ8OUi4AyI=) 3: 3ln1x2g8OU-tXC-DrXz9jW0X1gU.roa (hash: 2zWvHVgpKzwH8CHKZuYT/C7gjaJxfSRA4wNx6aFsjNQ=) 4: 6WfI7AreDwm37Fgy62Hm_HjVPIM.roa (hash: G4TpNMLm1OunCQZoJ8h7rE+E9esfv1Zs5yi2Rv7QUx0=) 5: 7wD1oRCmZXrFXjZnMMZWrRNlm6Y.roa (hash: YZBs16iKlLfkU00p98dwcKgUDfk2zmtTaKgJhdaLtt0=) 6: B4wYxFww_X_iDCxVsYXjZhIjnK4.roa (hash: zX0gMbFt42KJdtED5J978ZIE/4qbULnV//fheUtafIs=) 7: E4moO9CLoHXgoV6vrJXJQ_jxi14.roa (hash: FEDRVix5XZV3UfT/XzbBUvsMscccpO5HTNPW06itXAo=) 8: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: X37JQDMqxzX1aqqYeo/c12vDMrTaRsEpFxnUHOrE2qg=) 9: Gyy1MCCByROZBRXIY7QoJ1Lfx2Y.roa (hash: AjP6dUUnXVUHe2mbkVU2A0GKTeThVmR/SN82MGw/Wog=) 10: IazmGoMrfFtTUWHrMtD4VT_a5xM.roa (hash: mmhAv5nf447caUzE6DBRCP1tjF3/Qt3PMJlp3sCBJV0=) 11: SmOl0GvV5DsT7QCJ4G9S0D2y9JI.roa (hash: wO3PQDBi84MCPWOqSTZR9XqT3nmvEoAZ3UZDvn9zyIY=) 12: Zn2F_GITaJUFXYczVsLI2VOyKdU.roa (hash: CEg2vq6S7OzyDS7MVIrVNzF15tpZ2z6WrwU8c/VyAWA=) 13: aojI_JsDEIxXnOz4PZxsAnlJa3o.roa (hash: PJic4it1tGPs9tX49/CnUprlHognZespLJ+dZ7W4/TY=) 14: bCOP39p472Lk-lkmW7HPI2seXtc.roa (hash: LFvAsIyeBJmUq7QEzxWZPznh8Eot8p72RV5zfPuvMYU=) 15: dPcC6P2Ub94KhMYnU4O-c5682vk.roa (hash: g/ztEAIPkKUjRwwmBVeCjJEZxo+DRe9x5QOVITmEu/0=) 16: kWyXBWjveVIBD274IP6i2S9A5WM.roa (hash: UoPeRMZqRLh+CIxXNiVoDISvNXjjlQGF+QNTNPN07As=) 17: mpo6uqeFJcVEymYhbokwncZAxQ0.roa (hash: xDX+hEEq/OpgZ8TV5s5BRRtgICwL0x2s9KNTGmjZNUA=) 18: vrcNcGLKzc4126aByqCn10xR7hw.roa (hash: BJLHLu3Ei5L0mbo/lskPrmlmi+TRNkPtsukA9ptks7A=) 19: wLYTFgarc0-ql_9yDw0jet-6cdU.roa (hash: p6vpMWbNqzC01Ai5TEGReU7vIhGcrJ1tvziK4csCWpE=) 20: zh_Jy2MqKKarC-MDKrza1hiz6Ck.roa (hash: YXMs2R7ig2C7zGo2CvCc44PcqUIofxwBlRKFLyt5A3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:79:04:21:cd:f4:bc:d7:6a:0a:47:a1:68:e2:cf:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Apr 19 02:01:50 2026 GMT Not After : Apr 20 02:01:50 2026 GMT Subject: CN=c719fcb663792f21f14412bc34b0d7d4213754f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:ba:e3:00:b4:3d:33:15:1a:23:16:33:23: 8a:ad:72:a8:2f:05:e3:6e:18:32:42:ab:23:cf:04: 82:fc:5b:b2:7f:58:50:47:08:52:9a:67:89:4f:4d: 09:55:8a:3a:63:48:65:2b:92:d8:fb:2e:0f:27:9d: 8d:79:5d:e7:c3:e5:9c:66:9a:ea:9a:88:85:2b:b2: d5:64:e6:a9:0b:eb:79:30:8f:75:79:81:3a:18:4d: da:81:14:6f:2a:5c:49:fe:d5:d2:47:90:a7:e9:1d: 22:10:cf:d7:d7:41:ce:72:74:6a:6b:d7:8a:90:0f: 19:cd:1c:97:7b:fa:03:08:9a:10:0d:d1:70:d9:ba: 1d:bd:a4:a7:12:8d:84:8b:a9:b7:2f:21:8a:fd:4e: b4:19:cb:9b:9b:83:db:0e:03:de:0d:0d:c3:aa:08: 6e:89:9d:0f:09:e9:3e:22:c1:5c:24:4b:27:b7:1d: 13:59:08:f3:5c:25:e2:f9:af:67:b3:91:f0:5f:d6: ea:15:8a:17:fe:d4:a2:72:84:f5:7f:03:89:16:dd: 79:e9:2c:8a:c5:f4:2b:f8:3d:bf:b7:b9:14:20:eb: 0e:fb:7e:29:6d:bd:1a:22:75:32:f3:36:a6:b5:db: 35:63:d7:cc:e1:1a:5b:1d:c7:93:1d:df:90:ec:a1: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:19:FC:B6:63:79:2F:21:F1:44:12:BC:34:B0:D7:D4:21:37:54:F8 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0d:0c:da:74:79:05:08:47:9b:21:6c:57:6f:8b:13:88:53: 4b:ba:db:23:1d:a6:6c:40:2d:98:39:31:99:77:f9:5f:ec:25: fc:f8:0b:9a:31:e6:46:06:d4:78:16:1c:df:c8:6f:d4:21:17: 45:d4:6e:dd:ef:fe:44:1e:e0:1b:8d:3e:66:5a:6c:74:b0:b8: 04:54:f9:54:2c:eb:ea:ac:83:8b:69:17:b3:c2:01:55:dc:7f: e3:2f:49:bc:ef:b6:8d:b1:6d:1a:aa:f8:5c:53:30:7f:cf:10: 44:06:e4:4d:53:86:18:c1:b1:e8:b0:eb:0a:ca:6a:9b:b3:23: 19:d6:42:10:c4:7a:33:9f:e2:f6:47:83:d8:2c:bd:3f:ed:a6: c8:ed:9d:32:c6:1f:3e:f8:a5:af:d1:1e:3f:3c:9d:f9:16:37: 5a:1d:97:17:26:e1:83:3c:49:26:2a:e1:29:76:05:6d:ed:31: 9f:69:06:57:28:ea:d3:dc:97:be:d1:46:e5:19:f1:70:df:0d: 5f:be:64:d4:3b:3a:ba:99:0c:f0:60:49:ee:c5:c5:b2:95:c7: 2c:69:b1:0d:ee:8d:82:c5:79:ae:e5:70:14:59:ee:7e:d5:bc: 14:d8:72:d5:7a:98:d1:45:62:1d:0c:ff:a7:c1:1a:77:c7:c0: 9d:25:a0:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jeQQhzfS812oKR6Fo4s8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwNDE5MDIwMTUwWhcNMjYwNDIwMDIwMTUwWjAzMTEwLwYDVQQD EyhjNzE5ZmNiNjYzNzkyZjIxZjE0NDEyYmMzNGIwZDdkNDIxMzc1NGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt264wC0PTMVGiMWMyOKrXKoLwXj bhgyQqsjzwSC/Fuyf1hQRwhSmmeJT00JVYo6Y0hlK5LY+y4PJ52NeV3nw+WcZprq moiFK7LVZOapC+t5MI91eYE6GE3agRRvKlxJ/tXSR5Cn6R0iEM/X10HOcnRqa9eK kA8ZzRyXe/oDCJoQDdFw2bodvaSnEo2Ei6m3LyGK/U60Gcubm4PbDgPeDQ3Dqghu iZ0PCek+IsFcJEsntx0TWQjzXCXi+a9ns5HwX9bqFYoX/tSicoT1fwOJFt156SyK xfQr+D2/t7kUIOsO+34pbb0aInUy8zamtds1Y9fM4RpbHceTHd+Q7KE/0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcZ/LZjeS8h8UQSvDSw19QhN1T4MB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw0M2nR5 BQhHmyFsV2+LE4hTS7rbIx2mbEAtmDkxmXf5X+wl/PgLmjHmRgbUeBYc38hv1CEX RdRu3e/+RB7gG40+ZlpsdLC4BFT5VCzr6qyDi2kXs8IBVdx/4y9JvO+2jbFtGqr4 XFMwf88QRAbkTVOGGMGx6LDrCspqm7MjGdZCEMR6M5/i9keD2Cy9P+2myO2dMsYf Pvilr9EePzyd+RY3Wh2XFybhgzxJJirhKXYFbe0xn2kGVyjq09yXvtFG5RnxcN8N X75k1Ds6upkM8GBJ7sXFspXHLGmxDe6NgsV5ruVwFFnuftW8FNhy1XqY0UViHQz/ p8Ead8fAnSWgXg== -----END CERTIFICATE-----Generated at Sun Apr 19 08:48:33 2026 by rpki-client