$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: qzCiIzOUw/tBY8u2HZweRdQuucGC4Sf5LotwWLqNlFI= Subject key identifier: A7:36:F6:F0:E2:48:9D:49:C5:A7:53:28:14:5D:E3:68:C8:B2:1A:1B Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019D9B19F8F068EF1D39F7047937D8C51326 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 18D2 Signing time: Fri 17 Apr 2026 11:01:03 +0000 Manifest this update: Fri 17 Apr 2026 11:01:03 +0000 Manifest next update: Sat 18 Apr 2026 11:01:03 +0000 Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=) 2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=) 3: 4QIM1Fqn4hNEy9kn8eJKI1AXM2Y.roa (hash: 8GhUo4SPnyakq3CpcXOgLhb5ZUAB3EKXaLNGW0+jsu8=) 4: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=) 5: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=) 6: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=) 7: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=) 8: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=) 9: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=) 10: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=) 11: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=) 12: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=) 13: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=) 14: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=) 15: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=) 16: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=) 17: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=) 18: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=) 19: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=) 20: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=) 21: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=) 22: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=) 23: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: O4ktVba2cbwYOZWaZBQSyIy/66dLzN8BE201Vqr+GUA=) 25: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=) 26: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:19:f8:f0:68:ef:1d:39:f7:04:79:37:d8:c5:13:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Apr 17 11:01:03 2026 GMT Not After : Apr 18 11:01:03 2026 GMT Subject: CN=a736f6f0e2489d49c5a75328145de368c8b21a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:21:66:01:05:78:ea:6d:2f:fe:8c:21:db: 1a:96:2f:fa:a9:72:be:65:97:d0:2e:09:6d:d7:65: 34:b9:46:be:f6:13:6c:a8:11:26:1b:aa:9e:5a:1d: e3:75:67:22:f4:34:8c:4b:a5:ca:6d:6c:69:3b:ce: 77:66:d7:91:3b:4d:1d:96:b7:5f:4f:e0:59:91:49: b3:e2:5d:a8:fd:d2:c2:22:0e:fa:b7:00:f3:8d:93: fe:39:9f:ed:44:8c:3c:f5:76:c1:c6:f1:b1:a6:6a: 86:09:9d:90:db:a9:a7:63:e8:db:58:b8:f9:5d:4e: 60:04:dd:28:7b:3b:38:6a:af:4b:e3:41:c8:96:11: d4:72:b7:fe:00:50:85:50:9b:87:68:ce:66:90:62: 5d:d6:7a:9d:94:d8:6d:9c:de:58:99:28:3e:05:c4: 45:d9:9b:12:09:03:3e:49:de:03:d6:c0:75:d9:95: 03:06:68:f8:4d:67:83:5e:9f:64:45:a4:5f:0b:0e: 61:11:01:b9:e4:2c:07:3b:18:7a:f7:5f:63:02:59: 07:98:3a:12:b6:c8:bf:d7:72:4a:73:e8:35:4a:ea: 3e:ef:50:ac:db:b5:02:30:ef:76:5b:f0:3b:68:9c: f5:d8:96:f8:e6:16:70:85:79:6f:4b:ed:92:94:5d: 5a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:36:F6:F0:E2:48:9D:49:C5:A7:53:28:14:5D:E3:68:C8:B2:1A:1B X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4d:4e:79:e3:75:18:a5:da:20:c0:35:f6:90:8d:c1:df:7b: 10:05:0b:ef:cd:cb:7e:14:75:a8:ee:c8:6c:41:18:76:ab:57: 8d:f2:1c:95:21:ac:c8:3c:f1:86:3e:6d:f3:b2:a8:27:d0:e7: e0:15:31:40:99:09:d0:43:9f:ab:be:ae:07:2b:ce:81:86:41: ea:81:4c:26:d3:f1:f9:e3:9d:e2:2e:be:4c:0c:38:a6:79:64: f4:48:12:a9:d8:e0:3d:8d:2c:3e:a6:1d:f6:15:b6:86:b2:25: 92:e2:71:0a:66:4c:0b:d2:19:69:91:f4:54:58:ca:02:c2:8f: 7f:bd:99:e9:8c:2d:35:44:15:d8:fe:d3:81:88:2d:a6:ba:f8: 67:fe:c3:28:ee:fd:36:ea:65:37:bd:35:4e:e0:7b:f9:d8:d2: a8:d4:a7:ec:07:c9:5e:e6:bd:3e:37:b8:e9:20:db:cc:f7:99: 41:9f:14:f0:b9:d4:69:f5:16:ee:3b:48:1d:aa:f3:d4:00:88: 46:05:86:75:6c:a6:32:51:f1:4d:3f:d9:13:ea:4c:67:cd:5e: 5f:73:af:f8:8a:4b:ba:16:c2:33:fc:9c:cb:4b:39:2b:2f:4b: c9:de:19:68:b5:85:26:55:21:06:59:1c:67:bd:d4:d8:6c:c5: 8b:7e:fe:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bGfjwaO8dOfcEeTfYxRMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwNDE3MTEwMTAzWhcNMjYwNDE4MTEwMTAzWjAzMTEwLwYDVQQD EyhhNzM2ZjZmMGUyNDg5ZDQ5YzVhNzUzMjgxNDVkZTM2OGM4YjIxYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspshZgEFeOptL/6MIdsali/6qXK+ ZZfQLglt12U0uUa+9hNsqBEmG6qeWh3jdWci9DSMS6XKbWxpO853ZteRO00dlrdf T+BZkUmz4l2o/dLCIg76twDzjZP+OZ/tRIw89XbBxvGxpmqGCZ2Q26mnY+jbWLj5 XU5gBN0oezs4aq9L40HIlhHUcrf+AFCFUJuHaM5mkGJd1nqdlNhtnN5YmSg+BcRF 2ZsSCQM+Sd4D1sB12ZUDBmj4TWeDXp9kRaRfCw5hEQG55CwHOxh6919jAlkHmDoS tsi/13JKc+g1Suo+71Cs27UCMO92W/A7aJz12Jb45hZwhXlvS+2SlF1awwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc29vDiSJ1JxadTKBRd42jIshobMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC01OeeN1 GKXaIMA19pCNwd97EAUL783LfhR1qO7IbEEYdqtXjfIclSGsyDzxhj5t87KoJ9Dn 4BUxQJkJ0EOfq76uByvOgYZB6oFMJtPx+eOd4i6+TAw4pnlk9EgSqdjgPY0sPqYd 9hW2hrIlkuJxCmZMC9IZaZH0VFjKAsKPf72Z6YwtNUQV2P7TgYgtprr4Z/7DKO79 NuplN701TuB7+djSqNSn7AfJXua9Pje46SDbzPeZQZ8U8LnUafUW7jtIHarz1ACI RgWGdWymMlHxTT/ZE+pMZ81eX3Ov+IpLuhbCM/ycy0s5Ky9Lyd4ZaLWFJlUhBlkc Z73U2GzFi37+Wg== -----END CERTIFICATE-----Generated at Fri Apr 17 16:18:03 2026 by rpki-client