$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: bY/sUz6J/B+PzILrYEeGP3mVr0lWDNDgObsoPF6swQ0= Subject key identifier: C7:31:F0:82:15:89:11:56:3C:E5:F6:EC:2B:5B:08:F0:D0:8F:B5:AE Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019D9B50C65DB049B6E580690AB1E36E4509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 11BE Signing time: Fri 17 Apr 2026 12:00:55 +0000 Manifest this update: Fri 17 Apr 2026 12:00:55 +0000 Manifest next update: Sat 18 Apr 2026 12:00:55 +0000 Files and hashes: 1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=) 2: AHDv73qMQL9wbDKFTRsjL6r00oQ.roa (hash: AVkBVXP0K0ecnq2H74GPC3d5N3jhZ95iI/h0cjx0eMI=) 3: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: iE//lySXx2o+/vQq6gkDIaquWaqs4oXDRKem41Pod8s=) 4: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=) 5: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=) 6: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=) 7: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=) 8: KLI9lQwUC5VTV4Cut0plGC56kr4.roa (hash: rUAMk0OUXXf0cF+q5isqU/kNi2S0D4fL5AOOV6b9LlQ=) 9: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=) 10: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=) 11: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=) 12: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=) 13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=) 14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=) 15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=) 16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=) 17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=) 18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=) 19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=) 20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=) 21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=) 22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=) 23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=) 24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=) 25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=) 26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:50:c6:5d:b0:49:b6:e5:80:69:0a:b1:e3:6e:45:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Apr 17 12:00:55 2026 GMT Not After : Apr 18 12:00:55 2026 GMT Subject: CN=c731f082158911563ce5f6ec2b5b08f0d08fb5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:06:e5:4f:c3:44:aa:07:61:e9:38:2a:ab: 3a:4e:fc:48:c2:0a:21:88:c7:96:39:ca:a8:70:12: c1:fd:70:c1:82:56:07:41:ad:15:5a:59:18:82:86: 89:d6:b1:8c:84:04:18:1b:bb:6e:aa:72:db:1c:44: 3e:11:9f:b2:17:e2:7b:37:cf:bf:48:bc:62:f3:d4: 13:7d:49:01:5f:dd:ff:b5:99:52:94:77:11:96:8a: 04:63:01:20:cf:df:f6:ef:b2:42:79:b3:3e:0b:43: 76:03:04:80:42:85:dd:88:ae:97:5d:50:70:2f:34: 45:48:49:10:77:c6:f5:3e:6d:37:e6:df:7c:93:10: 35:61:72:74:56:da:20:9b:1a:67:d0:fc:f9:f0:60: e6:f9:ae:38:18:e7:6d:64:f4:09:f4:59:1f:c1:a0: e7:fc:f0:08:4a:a5:8d:e0:d8:3d:9a:b9:23:b1:f3: 08:2a:65:29:0e:b5:c8:08:a3:c6:3b:79:d3:ea:80: ec:11:f5:3d:d7:a9:4f:d3:b7:10:87:c1:14:d8:d0: 09:cd:62:c1:a2:3f:84:41:39:bd:b7:01:d2:06:fc: f9:e8:9a:2a:da:53:13:d0:1a:b1:f0:3a:ce:dc:3f: 25:e7:9b:1b:ac:8f:73:fa:86:dd:67:f1:41:f3:76: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:31:F0:82:15:89:11:56:3C:E5:F6:EC:2B:5B:08:F0:D0:8F:B5:AE X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a3:b0:f0:3a:0a:79:c4:71:2c:b2:df:23:d9:fb:48:ca:53: 2e:13:83:aa:5d:d9:20:fe:18:b4:7c:6a:21:06:b1:3f:87:3b: ee:0f:e0:4a:56:56:0c:d6:b7:a3:fe:10:44:b0:d5:b7:42:d2: 3b:a3:1a:98:92:b5:5f:4a:81:a5:58:76:88:ee:36:10:c1:28: 4f:6b:60:8b:30:40:db:cc:01:af:34:18:d6:09:57:53:ab:2d: d0:09:24:48:f9:fd:fd:65:e6:e8:c4:e3:74:72:14:8e:10:95: 5a:d5:3f:8a:aa:c0:d6:95:d3:40:9d:70:eb:d8:f3:9f:cb:d5: 3d:6b:cc:a2:4c:ed:b5:ec:27:8b:05:38:c7:b0:ee:76:6b:ab: 13:e5:cd:e4:2b:a1:a9:5f:be:c3:90:db:36:d9:66:45:0a:82: 31:92:c9:70:f2:8c:97:d7:99:c7:43:38:52:a7:4a:14:c6:b9: cd:d9:1a:5b:49:3e:32:f3:2b:1c:4d:e7:ee:2b:7f:ba:bf:72: 07:46:a7:eb:c9:eb:4a:8b:53:31:39:d0:77:97:bf:17:4f:b5: bd:6f:0a:67:de:fd:85:34:aa:1d:8f:ad:eb:ec:68:6d:1e:3b: 5d:bb:58:99:e6:19:66:b5:54:06:0e:7b:36:6b:56:ff:14:2c: 86:29:b4:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bUMZdsEm25YBpCrHjbkUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwNDE3MTIwMDU1WhcNMjYwNDE4MTIwMDU1WjAzMTEwLwYDVQQD EyhjNzMxZjA4MjE1ODkxMTU2M2NlNWY2ZWMyYjViMDhmMGQwOGZiNWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdMG5U/DRKoHYek4Kqs6TvxIwgoh iMeWOcqocBLB/XDBglYHQa0VWlkYgoaJ1rGMhAQYG7tuqnLbHEQ+EZ+yF+J7N8+/ SLxi89QTfUkBX93/tZlSlHcRlooEYwEgz9/277JCebM+C0N2AwSAQoXdiK6XXVBw LzRFSEkQd8b1Pm035t98kxA1YXJ0Vtogmxpn0Pz58GDm+a44GOdtZPQJ9FkfwaDn /PAISqWN4Ng9mrkjsfMIKmUpDrXICKPGO3nT6oDsEfU916lP07cQh8EU2NAJzWLB oj+EQTm9twHSBvz56Joq2lMT0Bqx8DrO3D8l55sbrI9z+obdZ/FB83aSxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcx8IIViRFWPOX27CtbCPDQj7WuMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6Ow8DoK ecRxLLLfI9n7SMpTLhODql3ZIP4YtHxqIQaxP4c77g/gSlZWDNa3o/4QRLDVt0LS O6MamJK1X0qBpVh2iO42EMEoT2tgizBA28wBrzQY1glXU6st0AkkSPn9/WXm6MTj dHIUjhCVWtU/iqrA1pXTQJ1w69jzn8vVPWvMokzttewniwU4x7DudmurE+XN5Cuh qV++w5DbNtlmRQqCMZLJcPKMl9eZx0M4UqdKFMa5zdkaW0k+MvMrHE3n7it/ur9y B0an68nrSotTMTnQd5e/F0+1vW8KZ979hTSqHY+t6+xobR47XbtYmeYZZrVUBg57 NmtW/xQshim0kw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:22:38 2026 by rpki-client