$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: jaOWy4H9rWFTlJkQ2OraXXHM5SR9Q3ZW+IFK7nqiZNM= Subject key identifier: 88:41:F3:4B:2A:AB:45:B5:45:02:B9:45:70:D9:06:1E:C9:E7:11:68 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019D9C632D9C524FB75EA7F0F3A27E5AA9E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0F3A Signing time: Fri 17 Apr 2026 17:00:38 +0000 Manifest this update: Fri 17 Apr 2026 17:00:38 +0000 Manifest next update: Sat 18 Apr 2026 17:00:38 +0000 Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=) 2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=) 3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=) 4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=) 5: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=) 6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=) 7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=) 8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: ZRBNQlArNyRoneZ8c4bR/hk14HAv6Iuqcl0Ajw0Mt9Y=) 9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=) 10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=) 11: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=) 12: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=) 13: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=) 14: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=) 15: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=) 16: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=) 17: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=) 18: jLLoXPBBAKOnElA5LKDjEaqmSZY.roa (hash: 9jEEX5n92TjdAyYHU+g7S5rHYFn3nyOcEUC4zcP/adY=) 19: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=) 20: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=) 21: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=) 22: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=) 23: uIV80scH6u5gHYdNO6XCbXg6J0o.roa (hash: SeBYh3gOgab2j7dPxQk9qB9Evvzqzf/WoiGkwr4d8Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:63:2d:9c:52:4f:b7:5e:a7:f0:f3:a2:7e:5a:a9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Apr 17 17:00:38 2026 GMT Not After : Apr 18 17:00:38 2026 GMT Subject: CN=8841f34b2aab45b54502b94570d9061ec9e71168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:30:18:a3:db:10:d6:ab:c5:ca:6c:42:16: d9:f2:83:7a:32:64:27:55:9c:80:3a:ff:d5:5d:24: 0e:66:aa:80:96:95:db:a7:a1:c2:cc:71:01:34:6a: 14:ee:bb:e9:af:d7:7a:ba:96:6c:2a:91:87:9f:64: 1e:76:77:9f:6e:49:69:a1:b3:ab:95:b7:79:08:0a: 76:3b:91:f1:56:53:ac:14:1b:0e:aa:7a:f1:66:05: a5:d1:2f:f9:42:8c:44:1f:24:ce:c7:53:2d:f6:9d: 9b:a8:b0:9b:77:ed:f0:89:a8:dc:55:9f:cb:62:5d: 20:4a:6e:78:47:e9:58:af:fe:b0:5c:66:9d:de:91: 61:0b:61:af:22:d8:81:90:be:2d:94:49:b9:0a:4f: 2a:40:b0:c3:d4:59:3a:6e:e7:27:97:de:6d:79:87: b1:eb:51:06:f4:11:1f:a8:32:c5:8d:e2:5a:87:5c: 79:81:cc:93:28:b9:52:49:82:f0:cf:45:c6:86:f0: 6b:42:6c:da:3a:d6:98:ad:d8:dd:de:9b:c8:05:a2: fd:00:eb:b0:61:76:ad:6f:54:ad:0a:a7:a0:ad:3d: 55:73:8e:1a:3e:19:9f:de:d4:e5:90:a3:12:19:0c: a8:7a:64:0f:c9:64:77:af:5b:6b:96:4e:36:47:5e: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:41:F3:4B:2A:AB:45:B5:45:02:B9:45:70:D9:06:1E:C9:E7:11:68 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c8:22:e9:c5:ab:23:1b:37:70:3c:e2:f8:02:bc:da:70:67: ef:28:e3:68:9e:da:78:d6:52:53:14:bc:34:1c:64:08:25:81: d8:5a:7d:01:89:b3:51:a0:b1:66:84:ac:cd:06:82:3d:88:53: ca:f5:77:6a:e0:74:ff:3b:6c:c2:fe:bb:6f:b0:03:b8:49:18: 44:c4:8d:b9:59:fd:ef:25:11:b8:a9:58:d8:d7:89:b9:14:c1: 04:7c:c7:0d:98:49:f0:be:c5:da:09:b7:7b:b8:cb:b1:5d:57: 4c:70:97:bd:00:5b:b8:37:84:80:99:67:1d:b1:a9:1b:96:27: 09:c8:c7:74:c3:5c:84:8a:25:d9:bd:4c:24:1a:e2:d3:65:ca: d5:5a:bb:c3:4e:7b:b3:79:5c:8d:6e:83:b2:71:b4:fc:83:22: ab:95:5f:d9:16:c7:54:38:33:b3:0a:2a:a1:88:3d:51:15:40: c6:82:1e:d9:6f:96:a0:61:d8:31:4b:ca:8d:32:f9:9e:56:07: c3:f8:c4:67:72:16:39:5d:69:f6:d7:b0:1e:97:55:93:1a:74: e6:ef:97:f4:d6:f5:b9:92:89:82:66:dc:73:39:17:95:18:f4: a4:1e:c7:ea:81:23:5c:91:16:48:a5:4b:40:ea:e7:51:74:10: 4c:64:52:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cYy2cUk+3Xqfw86J+WqnpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwNDE3MTcwMDM4WhcNMjYwNDE4MTcwMDM4WjAzMTEwLwYDVQQD Eyg4ODQxZjM0YjJhYWI0NWI1NDUwMmI5NDU3MGQ5MDYxZWM5ZTcxMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K8wGKPbENarxcpsQhbZ8oN6MmQn VZyAOv/VXSQOZqqAlpXbp6HCzHEBNGoU7rvpr9d6upZsKpGHn2QednefbklpobOr lbd5CAp2O5HxVlOsFBsOqnrxZgWl0S/5QoxEHyTOx1Mt9p2bqLCbd+3wiajcVZ/L Yl0gSm54R+lYr/6wXGad3pFhC2GvItiBkL4tlEm5Ck8qQLDD1Fk6bucnl95teYex 61EG9BEfqDLFjeJah1x5gcyTKLlSSYLwz0XGhvBrQmzaOtaYrdjd3pvIBaL9AOuw YXatb1StCqegrT1Vc44aPhmf3tTlkKMSGQyoemQPyWR3r1trlk42R14qgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhB80sqq0W1RQK5RXDZBh7J5xFoMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMgi6cWr Ixs3cDzi+AK82nBn7yjjaJ7aeNZSUxS8NBxkCCWB2Fp9AYmzUaCxZoSszQaCPYhT yvV3auB0/ztswv67b7ADuEkYRMSNuVn97yURuKlY2NeJuRTBBHzHDZhJ8L7F2gm3 e7jLsV1XTHCXvQBbuDeEgJlnHbGpG5YnCcjHdMNchIol2b1MJBri02XK1Vq7w057 s3lcjW6DsnG0/IMiq5Vf2RbHVDgzswoqoYg9URVAxoIe2W+WoGHYMUvKjTL5nlYH w/jEZ3IWOV1p9tewHpdVkxp05u+X9Nb1uZKJgmbcczkXlRj0pB7H6oEjXJEWSKVL QOrnUXQQTGRSXg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:43:47 2026 by rpki-client