$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: zmunEFtHun1OTrFLCB+wqpxhPgrpEfniOSZCZQLkSrs= Subject key identifier: 4D:F5:2A:8F:34:ED:AF:5C:CF:0F:3D:60:D8:17:41:2C:67:86:0C:1E Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019D9A74BCACBF812739968C468FE1E14BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1B17 Signing time: Fri 17 Apr 2026 08:00:34 +0000 Manifest this update: Fri 17 Apr 2026 08:00:34 +0000 Manifest next update: Sat 18 Apr 2026 08:00:34 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 3: 3IhQ9wCG2kFgIc1sRSmFBXb-ZM8.roa (hash: EnSG/XC3DgOI7LrlldCKIVaACW2nlS27dHb6c+JrbfU=) 4: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 5: B-4Y5enlVk_Sd-7mbbGmudhFVWs.roa (hash: VrFv29MZjRI9WiKBoXLP+DEm/34C4C5KG6TpaM7VLEg=) 6: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 7: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 8: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 9: FpwdnH1vSeaA9IvOMd_9OlvXF-Q.roa (hash: dR81pd4Z3d3hQtP7AcMh1To0rqIYfbx/ZlCHk7Sp1DE=) 10: JCG4Vl3fbOa9WJMpBV3HxQY8vG8.roa (hash: DVY6txHaBjZO0JDN5lhSbMf8eYewf7vw0sSsJO7sDMA=) 11: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 12: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: 8bptZco8npcHuD+xZp0+663Poq2rJQAgbSzIq9pmdaw=) 13: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 14: QUSad9EfoyydrwUjL6UuKzZIeMg.roa (hash: VHq9puEsGA44rdNujULet4x2g3yNOAEgK6THQ2HkMZQ=) 15: UHXvtX8IMLd4zONKPe_pIM09xQ4.roa (hash: Nr/4kqhxxX7JW0R3yp+WhJP3/Vk86QSnLpWM2aR3Dgk=) 16: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 17: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 18: _Kp7PDTcmGkJiJKewtOccSGpSgs.roa (hash: WM5hEQgIwiPSrdXKA7JsjCjXu6TD5zpoJlxCQduZru4=) 19: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 20: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 21: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 22: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 23: hnEWOJCtVBC_3GGbMtE5CXewobk.roa (hash: QUJsiM22+JACCqNzl8HDOSQ5bJmxX09zfo9cXu7awUY=) 24: iVHD7VIScc_bmYavlKZJ2ezNKcw.roa (hash: yVV/qMkCECkBEz4uxAU1f+pA2VYLLRt6TM3iu0HQ6aU=) 25: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 26: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) 27: zIIfu8DaVVMD0XsvOwpHzYoyB-g.roa (hash: nAFu8qJSmPstdE0SpXNpv/f9vO79bXQFH0mxColfbbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:74:bc:ac:bf:81:27:39:96:8c:46:8f:e1:e1:4b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Apr 17 08:00:34 2026 GMT Not After : Apr 18 08:00:34 2026 GMT Subject: CN=4df52a8f34edaf5ccf0f3d60d817412c67860c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:40:4a:47:c5:ce:98:6c:30:1b:dd:ea:9b: e9:d1:7c:4e:48:50:44:5f:5f:74:38:85:22:60:5b: ef:58:d9:89:be:e8:51:ca:6c:fe:78:d7:79:b5:71: 66:88:d5:30:a9:07:fe:33:7c:cd:2b:b5:b3:68:fd: fd:44:f9:2c:ea:c6:41:f9:b3:52:af:a2:3d:49:83: 68:b8:d2:4a:ce:45:de:82:f2:44:46:2d:6d:38:8e: 0e:af:67:b0:90:da:c6:96:4b:88:f7:2e:29:de:c4: 50:d7:dd:a7:97:e8:51:48:9a:1f:1e:6a:a5:78:00: 7a:39:e1:cb:a8:2e:3c:40:7c:22:e0:2f:0b:1a:7f: b9:f8:2a:3a:d0:29:e2:c9:4b:01:40:94:da:cb:b2: 12:6e:f7:3f:33:73:02:9f:f9:ac:72:68:96:e4:11: 2e:67:30:1a:11:c9:38:f9:11:0d:6e:eb:21:d8:bb: 77:52:a6:2d:85:48:54:c5:ef:a4:5a:d4:a3:6a:8f: de:ac:60:2b:74:64:37:c5:71:34:0f:f1:96:80:fb: 02:a9:ad:32:ab:c2:88:8d:fc:5e:bb:c2:02:cf:88: 62:b8:6c:a6:f6:1a:72:ad:e6:b5:f6:26:36:d9:31: d5:93:11:dc:aa:78:c8:0e:7c:c3:20:65:88:d7:e8: d3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F5:2A:8F:34:ED:AF:5C:CF:0F:3D:60:D8:17:41:2C:67:86:0C:1E X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:68:05:97:dd:e1:ca:46:8c:c9:d9:89:b8:f3:b9:3d:0c:b0: 0a:25:2d:f6:d5:7f:1b:dd:40:cd:7f:43:b2:a3:14:16:59:e1: 64:96:c0:21:1d:4f:90:56:a3:b2:c2:5a:35:d4:f9:87:bf:53: ab:5a:b6:e4:56:95:7a:09:08:03:bc:e4:d6:99:2f:c2:58:0e: c3:50:f0:d1:05:fd:b7:15:a0:b4:16:81:fd:eb:b0:d7:f5:b7: 6a:cc:df:db:44:8d:a0:b6:dc:ab:fc:2a:e9:46:0c:15:e9:9f: f5:be:a8:a8:15:a5:d8:ed:ee:16:47:6a:44:d4:5c:ef:9d:03: d4:85:ec:d3:bf:67:14:1b:77:b3:84:45:c8:ca:20:1c:a2:bc: 72:fe:f1:ae:42:55:eb:ea:c5:fa:8c:b2:c2:53:53:35:ff:96: b5:b7:a2:79:fd:6c:2c:fb:21:71:d4:c9:4c:0d:ff:ab:17:73: b3:03:61:55:7e:00:20:04:3c:c1:0e:fa:ce:51:92:58:98:32: fd:d4:25:b8:79:06:40:65:db:04:d6:99:7f:e3:0a:00:39:52: ce:0b:1c:c1:f1:8f:e9:9f:3c:b9:24:a3:0b:ff:fa:f4:f5:3e: fe:28:a1:1f:a4:a1:03:fc:00:09:d3:a1:a6:4d:3d:33:7e:35: 67:a4:96:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adLysv4EnOZaMRo/h4UvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwNDE3MDgwMDM0WhcNMjYwNDE4MDgwMDM0WjAzMTEwLwYDVQQD Eyg0ZGY1MmE4ZjM0ZWRhZjVjY2YwZjNkNjBkODE3NDEyYzY3ODYwYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5tASkfFzphsMBvd6pvp0XxOSFBE X190OIUiYFvvWNmJvuhRymz+eNd5tXFmiNUwqQf+M3zNK7WzaP39RPks6sZB+bNS r6I9SYNouNJKzkXegvJERi1tOI4Or2ewkNrGlkuI9y4p3sRQ192nl+hRSJofHmql eAB6OeHLqC48QHwi4C8LGn+5+Co60CniyUsBQJTay7ISbvc/M3MCn/mscmiW5BEu ZzAaEck4+RENbush2Lt3UqYthUhUxe+kWtSjao/erGArdGQ3xXE0D/GWgPsCqa0y q8KIjfxeu8ICz4hiuGym9hpyrea19iY22THVkxHcqnjIDnzDIGWI1+jTSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE31Ko807a9czw89YNgXQSxnhgweMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWgFl93h ykaMydmJuPO5PQywCiUt9tV/G91AzX9DsqMUFlnhZJbAIR1PkFajssJaNdT5h79T q1q25FaVegkIA7zk1pkvwlgOw1Dw0QX9txWgtBaB/euw1/W3aszf20SNoLbcq/wq 6UYMFemf9b6oqBWl2O3uFkdqRNRc750D1IXs079nFBt3s4RFyMogHKK8cv7xrkJV 6+rF+oyywlNTNf+Wtbeief1sLPshcdTJTA3/qxdzswNhVX4AIAQ8wQ76zlGSWJgy /dQluHkGQGXbBNaZf+MKADlSzgscwfGP6Z88uSSjC//69PU+/iihH6ShA/wACdOh pk09M341Z6SWug== -----END CERTIFICATE-----Generated at Fri Apr 17 13:43:08 2026 by rpki-client