$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: 3bUotUIZzZEAnbA424+AKdH0eT5Qj83EyK3E/9KnIh0= Subject key identifier: E9:25:4D:F1:1B:0D:88:30:DC:ED:BE:B3:95:BE:D2:54:95:18:D3:C3 Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019D9B50F1EED31E70C61B0222666DBAA004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 18C6 Signing time: Fri 17 Apr 2026 12:01:06 +0000 Manifest this update: Fri 17 Apr 2026 12:01:06 +0000 Manifest next update: Sat 18 Apr 2026 12:01:06 +0000 Files and hashes: 1: 1-Pe2TnywVmfaP-WemWu9F6D1uY.roa (hash: TO2cGriDwgxNlyLdj4bg8MbV1G1jK45ogoJF4793fSo=) 2: 1cuv-12cm2QhTHJFihj8rVlWS38.roa (hash: bcoEGOaQcgkLD12rX+LR5QgbfI3SBiV6QabZt9HzI0k=) 3: 2V5uX7zz8rLZM3EIe_aMe1EFHf4.roa (hash: L4MUyeDgRyRa1SAE3WijwMUBcPHzc9BZm/cEJ6tCJQ0=) 4: 60RghjJR7fbMZmTjDd1goDTxFO4.roa (hash: FTGk3AHz/GL0pHnXXED/nhsF8Ezap2Jkso8Zx9XbdsY=) 5: 7v01OOv6lsa5SDVTbq2sDUyqghU.roa (hash: 674pqR/ZC6RweHjRad+sALRIi4soda9NrCU2Y8CRUAk=) 6: VeUDemYMUkamvLNvu71jm8kXCWQ.roa (hash: sDlj2eIeTmzMHoHM8lIyD6YCl1o4NeFPnKRaymevkd8=) 7: ZMcpzSwF8sfXNSwmkOe8TDMBSJw.roa (hash: +y1O8tgMcUGxxeeg9mLZswZb6MR8jtPoqrvAjwcYJzU=) 8: bcQk1dNiHStablJSpfOMgKvzyB4.roa (hash: vRaLHdtxEoTI3K0Ud0h8BsRxBaZPY4lVipsFC/qsS/8=) 9: eEv6Dzp18N3mnwft_tpFzD3jA9s.roa (hash: Bu5vlAgH4Sy8ybAbPwvMy42MlBplqri0XGE/ouWApbI=) 10: exX8D204pUSMlQDRe6-0vKudRw8.roa (hash: hw0brhXYOTSxVJVmx1MBXDRVxmLR1RsTQRFAr9ka18U=) 11: jCzBcgQ2ecHLxm36fGHNj6MQZAY.roa (hash: pXkAi/m1GNEU9RCztBpU/RufugyhkhNnDbgVYNdhfJo=) 12: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: 3jXOUaUBdI0f1riKDaUnQoBY/shAjDRn+I8J5w+fE1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:50:f1:ee:d3:1e:70:c6:1b:02:22:66:6d:ba:a0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Apr 17 12:01:06 2026 GMT Not After : Apr 18 12:01:06 2026 GMT Subject: CN=e9254df11b0d8830dcedbeb395bed2549518d3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:27:9d:17:6b:de:89:12:eb:4b:1e:fa:b1: d8:2a:dc:d0:36:00:c1:c9:55:be:ec:2b:a3:fe:2d: 62:b6:37:f6:da:e1:fb:6c:24:ba:66:b7:48:86:8a: 68:01:c5:66:70:eb:e7:70:2e:8c:1c:00:f8:db:2b: 2d:4a:d4:04:af:98:03:f8:2a:de:d7:d3:2c:7e:5d: 9a:dc:c3:fb:2c:3b:b0:84:93:31:ff:f2:4c:b9:0f: c4:e0:e0:b4:34:c9:bd:d6:5e:2e:07:13:b1:9c:4d: c5:5c:1e:97:16:8d:df:66:99:53:2b:d8:8e:eb:af: c2:8a:7d:74:26:37:18:f8:ad:1b:ab:ef:d4:4a:fa: 61:85:7a:42:7d:bd:d1:ef:4a:8e:aa:0a:3d:08:3b: 2f:a3:75:99:73:d5:5e:fc:b5:d2:79:1c:af:47:ce: 4f:7b:ff:63:a5:f6:40:f8:b8:3e:14:7e:88:27:2c: 27:16:4b:0c:c8:1c:d0:c2:c0:69:78:6f:80:a4:28: 15:7f:50:58:a1:11:ce:d8:62:4a:e5:6d:53:80:db: 88:31:0b:66:5e:20:f3:79:7f:dc:d3:1b:78:9a:c7: e9:8a:55:3c:4d:3f:02:71:e9:2a:6d:aa:95:ec:bd: 05:c5:3c:c1:9d:61:67:11:a9:6c:f0:f9:6b:21:47: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:25:4D:F1:1B:0D:88:30:DC:ED:BE:B3:95:BE:D2:54:95:18:D3:C3 X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:01:49:6b:8b:d0:99:ac:04:f4:c9:71:49:0d:55:ac:fd:05: 32:52:4f:5b:52:1e:55:57:2b:c6:49:a4:9e:2f:f8:62:12:70: 1e:0d:0e:8a:f2:a2:9e:0e:90:09:b0:be:0e:3a:9d:09:12:0d: e7:67:31:cf:82:da:21:65:a0:91:8f:b2:67:34:4c:cd:f4:08: 18:a2:b2:e9:6b:8a:41:10:d9:c9:a3:3b:2f:50:56:34:00:db: 9b:38:27:f4:4f:6c:88:50:8e:9b:9f:f0:b4:ea:aa:b6:e1:c0: 77:1e:c7:31:c3:da:b7:c2:15:c2:34:1c:aa:68:ea:ff:90:40: 8c:47:47:f0:3c:33:c3:cf:f0:64:4c:1a:97:17:65:e7:10:ac: 9f:32:9f:ae:c0:a0:d3:65:3d:be:f0:d8:c0:f0:db:44:c4:8e: 5c:44:40:d9:27:6d:f4:09:19:09:b8:7f:48:fb:5a:45:99:cb: b2:a9:a6:db:68:47:13:2d:9b:9b:c7:96:d3:cd:89:53:c4:df: 94:0c:4d:38:d0:3c:57:bc:be:e8:0e:4f:32:da:ea:43:35:30: 1a:94:9a:05:01:50:2c:3f:ce:2c:20:85:d2:46:8c:cb:cb:0c: 90:a0:e0:27:77:d4:14:0a:14:4f:82:e6:4a:ef:84:6e:37:e6: 0d:6b:7a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bUPHu0x5wxhsCImZtuqAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjYwNDE3MTIwMTA2WhcNMjYwNDE4MTIwMTA2WjAzMTEwLwYDVQQD EyhlOTI1NGRmMTFiMGQ4ODMwZGNlZGJlYjM5NWJlZDI1NDk1MThkM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltonnRdr3okS60se+rHYKtzQNgDB yVW+7Cuj/i1itjf22uH7bCS6ZrdIhopoAcVmcOvncC6MHAD42ystStQEr5gD+Cre 19Msfl2a3MP7LDuwhJMx//JMuQ/E4OC0NMm91l4uBxOxnE3FXB6XFo3fZplTK9iO 66/Cin10JjcY+K0bq+/USvphhXpCfb3R70qOqgo9CDsvo3WZc9Ve/LXSeRyvR85P e/9jpfZA+Lg+FH6IJywnFksMyBzQwsBpeG+ApCgVf1BYoRHO2GJK5W1TgNuIMQtm XiDzeX/c0xt4msfpilU8TT8CcekqbaqV7L0FxTzBnWFnEals8PlrIUeJYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOklTfEbDYgw3O2+s5W+0lSVGNPDMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQFJa4vQ mawE9MlxSQ1VrP0FMlJPW1IeVVcrxkmkni/4YhJwHg0OivKing6QCbC+DjqdCRIN 52cxz4LaIWWgkY+yZzRMzfQIGKKy6WuKQRDZyaM7L1BWNADbmzgn9E9siFCOm5/w tOqqtuHAdx7HMcPat8IVwjQcqmjq/5BAjEdH8Dwzw8/wZEwalxdl5xCsnzKfrsCg 02U9vvDYwPDbRMSOXERA2Sdt9AkZCbh/SPtaRZnLsqmm22hHEy2bm8eW082JU8Tf lAxNONA8V7y+6A5PMtrqQzUwGpSaBQFQLD/OLCCF0kaMy8sMkKDgJ3fUFAoUT4Lm Su+EbjfmDWt6iw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:32:22 2026 by rpki-client