$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft File: rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft (raw, json) Hash identifier: 5UrNmVtsoT66Q5uIPZA81kD9ed/kVRcRTpN7HLpnabs= Subject key identifier: 44:38:78:3A:99:84:85:A0:8A:68:98:FD:69:C1:76:64:92:78:ED:6B Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019DA378E54E35613FB98C976FD82444A322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft Manifest number: 18F2 Signing time: Sun 19 Apr 2026 02:01:42 +0000 Manifest this update: Sun 19 Apr 2026 02:01:42 +0000 Manifest next update: Mon 20 Apr 2026 02:01:42 +0000 Files and hashes: 1: 3a7_WjUjHvmaDKMR_0n-V2J4S48.roa (hash: HAXb7MwMLIlHkvY0JciFwEcWW+cBxNegwhoL5MEj+Y4=) 2: 4GnNaMU7ozZwZhW2J2112doh_tw.roa (hash: WMA3aYgk7G+X7flrtEOgH24fD1TLzYLGipLG5KR0H5o=) 3: 5a_1BXh6OJ5EsqB5H5lDXNwNoec.roa (hash: RJ3VX8HghkzCma3QJ9QJO8+1DyrcpupoHfpYlwCMq0M=) 4: 7zF9eGGNAAfvZXhKrfV2IrWDGzM.roa (hash: 7ShADED+6ABWdUZq+N0c2d9qFBvXvIfuwCNn0VPe6D8=) 5: 93sTot__pOvELS3ZJJ_0IKYI80A.roa (hash: cd3DiMi4zFZH02Z5vN9iUfleyfgwEhyhgnSYBKXSIqA=) 6: AVErlpP2VhysTwGtrB64czf3NqI.roa (hash: UMyN7o51qi8PMB0e1ciRLYkKAE3KUtpoBs5v/wpa8yo=) 7: CILl_zyXusNg3CeT5TPh9rVx7SE.roa (hash: FdMkKAGOUUSgyKvsP1F6/x5+Yu144fskvlYf4TyAXN0=) 8: G_n5RA6W3ZkloaFthEn-Fh-sCzM.roa (hash: c9qFmEiCdxto7E6131yKqNFNOUJFon6l2MhL2xlVtPs=) 9: IPJjNe_cB3zjIZyONYjGoBmmxrw.roa (hash: g27Ahx8NQ/P8ycHloD1dj7SU+EOwFLKNLXOaBXz5Lxw=) 10: JowNFbKi_vYoTRs26ptdtrIOuaM.roa (hash: TJWkhhs28sV5YlSQhf17WgqKXSfgnNIE8e2Aaqdz+vY=) 11: L5CGhyyEcuDPtwlMoB7T0ykBOW0.roa (hash: KmUkqVbBWAmW4Wsgbx+66HRsHh83JXR5eCNYk4qTJ3c=) 12: MInmjTvW1jbn8HVs4d7pziBXvog.roa (hash: sqeC1+d5oRvHYURRaJApXOy7p3KmwZMMfOX3s+0N5no=) 13: NE2GOUp8VIyuS7uEVlhZkJthz3Q.roa (hash: cCvYyHI6VXA2SHqtxY6FdqOa8OINU3B57RbzyCoIYmY=) 14: UAqIdWPIqmUVSwMzA6hXTX0Ailo.roa (hash: C2S4KpTLma+Nr0C/LgZeLhVTXWrhyD4esp1prszfICc=) 15: UQs_v6zqbOmXSl8dyqIq5u6i-_o.roa (hash: 4jx6EXQhbefzVsskhUYOXoXxrxUb8CxFEYfTlZeZuSU=) 16: YnRIz2LAVm6T1ngHwYknchOMZ5g.roa (hash: O08Dnht2tycilQ0sCxxQOH4+isy3TkZ0CpI/HxIUNRM=) 17: c7D8z87seThahzJGV1xxzUC68yM.roa (hash: lEtNJalbVark+w9kQtFPEtaaKlnnHtxsb3MXywog3UE=) 18: cMVqOn9_O511UMJeh_8L-Q0ryD4.roa (hash: GPsJ34P/KBtvf2V8PpxfXTPLlIXgJHes62O2Gn8/mMM=) 19: eFpBdg6bsZMOceMMDBSJPbKerRQ.roa (hash: 0CNpt//WjjkQ9s80RqkgFSsUKxYW7IA+iSGJkuAzflc=) 20: gfHF0_9tC_g86XlB0EGuBJeEcF4.roa (hash: dW+/GSUe21Y9vzGs6gA/zL83gMId3e6+CsIQ8ML4Lxk=) 21: kHyeVvn4JoARm1ZgfSsn_4sjUK0.roa (hash: kI7ZNlTpRra3MpODVxn5O1XIoHdEb9TeHKIqmZcOjSw=) 22: oV0JLOMHWgEPodfJD7fettcMDKo.roa (hash: 8byXH6iwa9ptsygTXF7KrIJlXXNBNYRMHn/3mZG+lWQ=) 23: pKdyppPaHYtR-oyAX_dINAizQCw.roa (hash: 0aaYkpeViKdlLjKyoydpc47P1Ji22FZ3Tvk3MaL7ELU=) 24: qv25HuVkGD25YIg_oR2WSTGPtS8.roa (hash: AhkATBPCei80O9bXQPoD49GvTRXEmbOiuSx3aLVtzx4=) 25: rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl (hash: h99X16h5vhk+jPq6FXOP83dFOCJda+bl9Bvvi+oLe/Q=) 26: uLFuSxmniVdOOB-xJoPZwASxLt4.roa (hash: FLb2IX6npCXvVAUlOdGVEYczSWz0bZw/0vsaAGxi3UI=) 27: v4E8ct6NaQaC0zYbzvukfpVoFlQ.roa (hash: gmtuefqcnpBpqJUGEwxDDhZb8NTc6oQgtAx5ttlsZSs=) 28: xjnYzgBcenqcxEq_xCvUmgvi1LI.roa (hash: Z9ZiuEMfsOlYoKUCQ/ZjnzpK4neZkRT5jBddWL6d7fM=) 29: yLV7lfd30bAjDnQWLnJQ_McSKtA.roa (hash: LMA6JBfDwM4DNAaRQWUraFrUGqg8Vgx8QA0i7GxUahs=) 30: z8jkcsVGt66_sClw6OoCA4fxiD0.roa (hash: O/OxXPCdKehv6qCJUwydClm29EJLOL6Thakr4fdICZo=) 31: zJiOXGbGwUWAQNdVo8W0kNXtTvY.roa (hash: C+8e5I+GbSwAG5M+lCl7ucBJaBL9QyOfEWbG2V8egMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:78:e5:4e:35:61:3f:b9:8c:97:6f:d8:24:44:a3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Apr 19 02:01:42 2026 GMT Not After : Apr 20 02:01:42 2026 GMT Subject: CN=4438783a998485a08a6898fd69c176649278ed6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:07:06:bd:8c:4e:aa:0b:47:79:e2:fb:be: 65:4e:63:a9:83:c2:ea:a4:52:cc:b5:62:4a:30:13: 7e:23:d6:2e:81:60:dc:2a:97:fd:64:6e:1d:fc:17: 29:ad:53:1b:fe:ef:0a:97:26:fa:cb:07:c7:c6:a9: 18:29:15:91:41:66:c7:b0:fc:4d:73:55:34:a5:7d: 81:04:a0:03:33:ab:f9:af:94:05:55:a8:8b:49:ad: 22:56:38:95:b9:6e:ec:55:9e:ec:55:1b:aa:47:ea: 6b:f1:b3:72:9e:62:f6:08:8f:00:d1:0e:b4:40:46: d4:97:51:33:79:13:62:4b:e8:bf:83:88:28:b8:ed: 7c:a7:8c:a1:23:cc:84:14:03:85:dc:91:00:1a:90: d8:30:98:8e:e9:3d:fc:7c:38:ac:61:df:85:d8:9e: fa:f0:b7:c0:e9:e1:f9:4b:35:9d:15:de:ad:a4:a6: 13:d6:5c:6f:03:81:d1:08:7d:19:f8:41:0f:99:bd: 4c:f7:ad:b6:b4:64:e0:22:06:10:83:f4:39:7d:2b: 49:ed:95:43:dc:48:1c:5c:5a:21:4c:22:6b:20:c2: 0f:95:71:4b:c8:33:33:b9:5f:2b:f0:6a:ed:89:aa: 14:52:47:21:ae:34:57:c3:f0:a3:c4:6f:93:9f:9b: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:38:78:3A:99:84:85:A0:8A:68:98:FD:69:C1:76:64:92:78:ED:6B X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:9e:b6:1f:6d:84:35:c2:3b:7b:27:67:2b:de:7b:98:1a:3e: e8:7d:76:7c:68:1d:11:98:ec:bd:b0:a0:7e:ea:2b:74:44:a2: b0:3d:be:96:94:90:4d:f9:3b:2b:68:d0:b6:fe:6d:60:c7:7a: f1:6d:75:74:d0:16:87:1e:2a:fc:a6:78:c9:47:5b:f0:5f:48: 4d:9f:a3:5d:a7:da:79:74:a7:b4:a0:c1:b8:03:2f:27:32:bb: fc:11:a1:7a:26:c8:c6:66:27:e7:b9:a8:90:51:3d:2a:a4:89: 1a:54:00:35:70:3c:f3:d6:68:7d:95:10:10:c9:43:4d:46:fc: 74:7f:3c:19:5f:f1:43:cb:99:09:4d:11:1f:b9:8a:ce:23:44: 73:f2:18:95:c6:c6:f5:0f:d2:1b:10:98:c2:cc:f4:9c:4c:11: 46:35:07:ad:47:14:5e:89:0e:98:d3:36:eb:af:60:8e:7b:d6: 6c:92:9a:d9:54:81:2b:c9:fb:62:be:94:4a:b0:68:f4:a9:e1: c7:a9:10:47:7e:c4:ba:f1:b7:54:72:9d:be:f2:7d:82:07:2f: 3a:df:56:44:36:cb:22:09:52:30:7c:33:6b:05:1a:89:bd:66: 4e:b0:18:29:2e:c0:56:a0:6f:e2:72:f4:78:64:62:56:a8:a2: eb:54:41:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jeOVONWE/uYyXb9gkRKMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwNDE5MDIwMTQyWhcNMjYwNDIwMDIwMTQyWjAzMTEwLwYDVQQD Eyg0NDM4NzgzYTk5ODQ4NWEwOGE2ODk4ZmQ2OWMxNzY2NDkyNzhlZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiMHBr2MTqoLR3ni+75lTmOpg8Lq pFLMtWJKMBN+I9YugWDcKpf9ZG4d/BcprVMb/u8Klyb6ywfHxqkYKRWRQWbHsPxN c1U0pX2BBKADM6v5r5QFVaiLSa0iVjiVuW7sVZ7sVRuqR+pr8bNynmL2CI8A0Q60 QEbUl1EzeRNiS+i/g4gouO18p4yhI8yEFAOF3JEAGpDYMJiO6T38fDisYd+F2J76 8LfA6eH5SzWdFd6tpKYT1lxvA4HRCH0Z+EEPmb1M9622tGTgIgYQg/Q5fStJ7ZVD 3EgcXFohTCJrIMIPlXFLyDMzuV8r8GrtiaoUUkchrjRXw/CjxG+Tn5sb3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ4eDqZhIWgimiY/WnBdmSSeO1rMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg562H22E NcI7eydnK957mBo+6H12fGgdEZjsvbCgfuordESisD2+lpSQTfk7K2jQtv5tYMd6 8W11dNAWhx4q/KZ4yUdb8F9ITZ+jXafaeXSntKDBuAMvJzK7/BGheibIxmYn57mo kFE9KqSJGlQANXA889ZofZUQEMlDTUb8dH88GV/xQ8uZCU0RH7mKziNEc/IYlcbG 9Q/SGxCYwsz0nEwRRjUHrUcUXokOmNM2669gjnvWbJKa2VSBK8n7Yr6USrBo9Knh x6kQR37EuvG3VHKdvvJ9ggcvOt9WRDbLIglSMHwzawUaib1mTrAYKS7AVqBv4nL0 eGRiVqii61RBdA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:54:32 2026 by rpki-client