$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: DZTfHFw8wcW09vUyRP2XS4qZE+ifhfz+52i+a//9iw0= Subject key identifier: EA:47:4B:51:4E:1F:05:29:64:FF:1C:4B:C4:98:6B:BD:F1:83:5B:FA Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019D9A072B5C49A83898B8E340D646CCF5E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 18E9 Signing time: Fri 17 Apr 2026 06:00:54 +0000 Manifest this update: Fri 17 Apr 2026 06:00:54 +0000 Manifest next update: Sat 18 Apr 2026 06:00:54 +0000 Files and hashes: 1: 82H1zOCTQDypvCqoPuf64HIGCNs.roa (hash: OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=) 2: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=) 3: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=) 4: PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa (hash: tkN/efywA+5kpM31KV+mqm28OwLiTj+XO+01vH0nfrA=) 5: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=) 6: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=) 7: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: oQfv6I3+nN5AAo5VZ+5ek+Z/FjaEKpS6ld83+glGBJw=) 8: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=) 9: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=) 10: ty8paLCk4TaEs9kfb6irUZZ4p-g.roa (hash: E3jPnIGaX9YCeoKgK4OtXqPGRq5byhzJcS6QFpLOQV8=) 11: w54MSAoYkvWAhyocjd5urm0fs-o.roa (hash: Fxvw/XX9z5X/yBtzMmWjgC1aQmrGLx6Nw2e1Qr38xVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:07:2b:5c:49:a8:38:98:b8:e3:40:d6:46:cc:f5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Apr 17 06:00:54 2026 GMT Not After : Apr 18 06:00:54 2026 GMT Subject: CN=ea474b514e1f052964ff1c4bc4986bbdf1835bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0e:07:43:8b:67:a3:c6:31:b8:7a:c4:cb:8e: c9:95:55:bd:0d:25:07:a1:74:8f:88:7d:d2:32:5e: fb:d3:40:c9:31:60:99:5a:6e:d7:00:af:8a:2a:a6: fd:57:28:bb:b6:ea:85:09:a2:3c:72:2d:59:21:5e: f0:78:bf:15:00:75:4f:75:e3:1f:30:c9:73:fe:b1: 07:b7:c7:6d:44:49:a6:b7:1d:91:b4:26:2c:2b:98: 73:7e:3e:8c:56:99:96:bb:1c:d0:db:e9:29:0a:f3: ac:4d:46:8f:9f:16:e0:a8:eb:18:22:02:ad:91:18: 47:60:68:24:8f:70:6a:c0:b4:b5:52:c0:07:51:9b: 11:7b:6f:c2:2c:41:ea:5c:d7:13:ce:dd:4b:ff:31: 6f:ea:cf:3f:0b:5b:99:2d:85:75:5a:70:79:5b:8e: 02:82:71:0d:7c:d8:48:7b:eb:b8:a3:f5:22:b2:ba: 67:06:35:d2:da:37:d4:ed:c6:7e:df:39:a8:a3:4f: 13:98:e0:a0:20:91:40:3f:a9:cc:7a:1d:8a:37:44: 49:fb:dd:22:81:22:b7:7d:87:d7:d0:18:bc:dc:10: df:a5:ee:da:a4:dc:f3:24:92:32:dd:8a:12:34:4f: 20:93:05:71:9c:1c:aa:67:fd:ae:7f:78:75:02:14: 60:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:47:4B:51:4E:1F:05:29:64:FF:1C:4B:C4:98:6B:BD:F1:83:5B:FA X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ba:40:35:70:ac:ed:9b:d0:37:1c:f1:4d:9e:4b:1a:a1:87: 28:ac:23:0e:a7:01:c8:75:ae:c3:64:51:4e:2f:8a:b9:57:95: c5:4e:4b:9a:78:5f:e5:03:38:0b:f7:71:67:8b:d7:f6:d5:7c: 0e:f5:85:89:09:2c:ac:c5:4b:36:07:94:67:77:d9:f6:c6:37: 65:13:56:12:a6:55:92:e2:5f:47:cf:a1:ea:9f:61:96:79:5c: 8e:3d:4e:79:62:bc:ba:de:1d:3b:5d:42:0e:52:8b:9f:ee:b6: 3a:7a:b7:61:fa:1b:4e:f9:dc:40:9e:7f:03:88:1b:99:d3:bd: 43:31:f8:1a:fe:cb:50:02:d2:08:df:c0:dc:37:dd:70:5f:86: 6c:45:8c:04:88:f6:7a:04:88:43:64:ae:40:9a:0e:b4:fb:6f: 1b:4b:5d:cf:06:02:0b:b5:39:5f:e7:4e:47:0b:e0:b1:a9:80: 10:bf:10:81:17:d7:45:85:07:fb:9b:63:f8:01:cf:72:42:a9: 1e:25:c1:68:26:ca:59:5c:28:75:f2:6e:f4:98:6d:47:3f:29: c2:13:84:5c:eb:50:6d:8d:6f:fc:f7:fb:19:a0:78:c6:e2:39: 74:5a:a3:62:28:a5:fd:6d:3d:9d:14:a1:d0:c3:3d:00:77:66: f4:fd:bf:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBytcSag4mLjjQNZGzPXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwNDE3MDYwMDU0WhcNMjYwNDE4MDYwMDU0WjAzMTEwLwYDVQQD EyhlYTQ3NGI1MTRlMWYwNTI5NjRmZjFjNGJjNDk4NmJiZGYxODM1YmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q4HQ4tno8YxuHrEy47JlVW9DSUH oXSPiH3SMl7700DJMWCZWm7XAK+KKqb9Vyi7tuqFCaI8ci1ZIV7weL8VAHVPdeMf MMlz/rEHt8dtREmmtx2RtCYsK5hzfj6MVpmWuxzQ2+kpCvOsTUaPnxbgqOsYIgKt kRhHYGgkj3BqwLS1UsAHUZsRe2/CLEHqXNcTzt1L/zFv6s8/C1uZLYV1WnB5W44C gnENfNhIe+u4o/UisrpnBjXS2jfU7cZ+3zmoo08TmOCgIJFAP6nMeh2KN0RJ+90i gSK3fYfX0Bi83BDfpe7apNzzJJIy3YoSNE8gkwVxnByqZ/2uf3h1AhRgCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpHS1FOHwUpZP8cS8SYa73xg1v6MB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrpANXCs 7ZvQNxzxTZ5LGqGHKKwjDqcByHWuw2RRTi+KuVeVxU5Lmnhf5QM4C/dxZ4vX9tV8 DvWFiQksrMVLNgeUZ3fZ9sY3ZRNWEqZVkuJfR8+h6p9hlnlcjj1OeWK8ut4dO11C DlKLn+62Onq3YfobTvncQJ5/A4gbmdO9QzH4Gv7LUALSCN/A3DfdcF+GbEWMBIj2 egSIQ2SuQJoOtPtvG0tdzwYCC7U5X+dORwvgsamAEL8QgRfXRYUH+5tj+AHPckKp HiXBaCbKWVwodfJu9JhtRz8pwhOEXOtQbY1v/Pf7GaB4xuI5dFqjYiil/W09nRSh 0MM9AHdm9P2/0g== -----END CERTIFICATE-----Generated at Fri Apr 17 11:45:11 2026 by rpki-client