$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: nahtWqMTHX0It0m5w5Lmio31d1XTTS5zFH6PXTF2U/M= Subject key identifier: A1:33:D5:06:9C:9F:91:C0:EE:CE:91:47:70:33:1C:D5:D5:31:80:23 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019D992B9B7C1ED08386A4B7F9A9C5CD6AF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 18D7 Signing time: Fri 17 Apr 2026 02:01:04 +0000 Manifest this update: Fri 17 Apr 2026 02:01:04 +0000 Manifest next update: Sat 18 Apr 2026 02:01:04 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: QwgFoCh++Xki9jpLOyImK+luzLq9eo26erXQcgQY7PU=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:9b:7c:1e:d0:83:86:a4:b7:f9:a9:c5:cd:6a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Apr 17 02:01:04 2026 GMT Not After : Apr 18 02:01:04 2026 GMT Subject: CN=a133d5069c9f91c0eece914770331cd5d5318023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:1f:e6:ff:d5:34:25:d5:61:49:9e:35:90: fe:c4:3b:2f:4e:e3:76:2c:1a:7c:01:b6:35:93:e5: 79:19:53:29:07:1e:e9:24:a9:c4:e6:c9:08:ee:eb: c5:83:f2:ca:28:1a:80:31:73:fa:9f:60:ad:d3:64: 37:65:ea:b8:fc:1e:97:fc:ae:84:9a:21:b5:f0:cf: 1e:d4:c8:52:6f:cf:6f:8f:f4:03:ba:34:1f:1e:f3: 0f:9f:39:aa:3a:6e:8c:df:c9:33:4b:88:ca:f9:7f: 1f:36:62:0b:3a:c3:e5:0a:80:60:b6:1a:7b:85:08: cc:bd:d3:18:c3:b8:75:2a:3e:8c:6d:e5:44:2f:1c: 17:f5:d1:d5:b8:62:d6:66:5f:6c:2d:d5:16:40:f0: e3:eb:35:81:86:3f:eb:c8:50:4b:73:d0:cf:96:c3: df:4c:85:ef:e9:b3:81:49:09:24:56:4b:db:2b:5c: 91:02:78:b9:ae:e8:f5:10:b7:1c:50:02:4b:f2:3b: f5:57:31:eb:7d:f9:bd:87:94:c5:d9:d8:ce:74:81: 09:74:aa:73:77:f0:a1:bb:db:a2:7d:1a:f0:9b:1c: 7c:10:ac:3a:9d:59:fe:3c:36:17:5e:cc:09:e3:5c: 61:f7:8e:a8:d5:30:9e:46:7f:8c:7c:e5:e6:33:a6: 17:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:33:D5:06:9C:9F:91:C0:EE:CE:91:47:70:33:1C:D5:D5:31:80:23 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:02:f7:85:07:7b:f5:5f:f3:9a:cd:a7:8c:6d:64:5f:17:c8: 5d:f7:ac:5c:7a:dc:27:2c:3b:6e:de:a3:93:f8:d2:32:c5:3d: ea:e8:73:b1:a3:b8:be:0e:0d:ae:61:6b:da:83:58:7d:47:f5: a3:5a:3f:b2:0c:5a:70:40:bf:5a:af:73:ed:e6:05:5e:c4:dd: ef:e3:0f:f1:b6:fb:fa:7d:fe:d5:2e:14:32:69:e6:c2:a2:1c: 01:b9:2c:9e:b5:9e:36:4c:62:30:54:09:01:57:91:a6:02:d0: 46:68:a1:f8:11:7e:e8:bc:7c:14:a7:d5:1d:0b:36:5e:4f:66: af:05:62:e4:a4:c6:67:9d:80:a1:9e:80:ec:66:49:20:b5:1b: d8:b0:93:9f:ed:cc:66:1e:8c:7c:da:56:8e:d9:4a:d1:02:df: 47:bc:c4:91:26:9e:85:7d:e1:7f:3a:55:46:8e:c3:9e:38:0f: f3:46:01:d7:89:da:ca:3b:33:4f:46:2b:ae:e1:d5:a0:39:f1: a9:e0:05:ef:8d:74:75:0c:9b:ec:6b:2c:79:92:14:36:ea:66: 5a:6f:50:2b:72:f3:27:5b:9d:09:1a:06:4e:3e:fe:bb:13:f2: 64:5f:64:bb:07:11:2e:cd:9b:af:07:e4:af:35:a6:02:38:b3: 7d:d0:1d:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZK5t8HtCDhqS3+anFzWr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwNDE3MDIwMTA0WhcNMjYwNDE4MDIwMTA0WjAzMTEwLwYDVQQD EyhhMTMzZDUwNjljOWY5MWMwZWVjZTkxNDc3MDMzMWNkNWQ1MzE4MDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngIf5v/VNCXVYUmeNZD+xDsvTuN2 LBp8AbY1k+V5GVMpBx7pJKnE5skI7uvFg/LKKBqAMXP6n2Ct02Q3Zeq4/B6X/K6E miG18M8e1MhSb89vj/QDujQfHvMPnzmqOm6M38kzS4jK+X8fNmILOsPlCoBgthp7 hQjMvdMYw7h1Kj6MbeVELxwX9dHVuGLWZl9sLdUWQPDj6zWBhj/ryFBLc9DPlsPf TIXv6bOBSQkkVkvbK1yRAni5ruj1ELccUAJL8jv1VzHrffm9h5TF2djOdIEJdKpz d/Chu9uifRrwmxx8EKw6nVn+PDYXXswJ41xh946o1TCeRn+MfOXmM6YXxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEz1Qacn5HA7s6RR3AzHNXVMYAjMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgL3hQd7 9V/zms2njG1kXxfIXfesXHrcJyw7bt6jk/jSMsU96uhzsaO4vg4NrmFr2oNYfUf1 o1o/sgxacEC/Wq9z7eYFXsTd7+MP8bb7+n3+1S4UMmnmwqIcAbksnrWeNkxiMFQJ AVeRpgLQRmih+BF+6Lx8FKfVHQs2Xk9mrwVi5KTGZ52AoZ6A7GZJILUb2LCTn+3M Zh6MfNpWjtlK0QLfR7zEkSaehX3hfzpVRo7DnjgP80YB14nayjszT0YrruHVoDnx qeAF7410dQyb7GsseZIUNupmWm9QK3LzJ1udCRoGTj7+uxPyZF9kuwcRLs2brwfk rzWmAjizfdAdpw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:45 2026 by rpki-client