$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: yKH8g/h+2H9fsObcqJO7xfolypdv23h3Qvh/dNL6ecg= Subject key identifier: DA:A2:E6:1C:4E:06:85:AF:45:65:BA:2D:36:F1:A6:4C:86:44:E7:8F Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019D9A748B5ABBE036FD6F6EDDFDBBB47CB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 18D0 Signing time: Fri 17 Apr 2026 08:00:22 +0000 Manifest this update: Fri 17 Apr 2026 08:00:22 +0000 Manifest next update: Sat 18 Apr 2026 08:00:22 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: ZmA01Qm6vCPJok0/BPWE8wzO5fXO5jbAgBMObTjrKrg=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:74:8b:5a:bb:e0:36:fd:6f:6e:dd:fd:bb:b4:7c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Apr 17 08:00:22 2026 GMT Not After : Apr 18 08:00:22 2026 GMT Subject: CN=daa2e61c4e0685af4565ba2d36f1a64c8644e78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:4d:75:96:76:43:fd:7c:1d:f5:d0:94:bc: f7:b5:ed:78:81:76:b9:74:22:4e:4a:56:8a:73:57: e4:5d:85:a9:c5:7c:28:11:45:aa:bf:a8:8c:c0:b6: bd:4c:bb:f8:89:54:df:e9:94:70:fe:f8:2f:e5:12: 61:e9:4d:06:15:b5:63:4d:db:41:78:4e:4d:9c:70: a8:c8:32:8a:68:3b:41:06:62:be:41:18:85:41:bb: 6e:00:ff:14:a1:e0:2d:11:85:bc:d8:3f:0b:63:56: a3:f7:44:e1:06:15:b2:c8:76:a9:bb:27:7f:2a:49: 39:ac:dd:ee:02:d8:37:07:1d:13:36:31:d3:9c:69: b4:86:dd:ad:eb:f7:36:82:5f:76:9c:60:ba:50:fb: 84:65:e6:31:77:0c:59:3f:16:5b:a5:d2:3e:61:fd: d5:58:f7:a9:c9:7b:8b:2b:58:e0:5d:fc:c7:04:a2: cb:78:26:bc:4d:e4:5f:53:0c:ff:0e:f1:bc:f5:d4: b4:b5:94:8b:12:74:9e:d9:1b:23:0e:9f:58:d0:53: cd:82:ff:46:c4:7e:e8:b6:95:ac:75:38:68:a4:2f: 3c:21:54:f8:4b:4e:f2:41:23:aa:8b:52:df:68:06: 5e:d6:7c:0e:2b:30:d9:19:69:ab:62:2f:10:f3:89: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A2:E6:1C:4E:06:85:AF:45:65:BA:2D:36:F1:A6:4C:86:44:E7:8F X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:89:02:b9:ad:6b:c7:9b:56:d3:e4:19:df:16:84:17:f7:10: ce:d4:da:27:2e:99:10:85:c3:31:f8:08:e9:2e:40:01:96:53: ee:90:81:9b:db:f7:f9:b4:dd:c0:b8:83:f5:5e:96:d9:39:d9: 4f:93:8e:f0:49:54:c7:fc:9e:19:dd:98:da:a9:14:54:7b:bf: 44:a8:ed:ef:58:08:b9:bc:e8:2f:b4:98:8f:88:a4:e7:5b:48: f9:2a:0c:db:04:25:1a:e6:09:8f:6f:5c:0b:84:c5:5c:29:a2: 35:06:9e:10:44:a4:2b:1a:52:99:d1:ab:0b:7e:05:4d:d1:f1: 89:d7:6a:c3:97:4b:58:c3:38:29:bc:cd:52:a5:42:b8:18:17: 38:e3:60:e2:bb:e7:29:15:1b:5f:16:2c:e1:da:8b:8d:b6:ab: 60:45:a0:ef:c5:ad:73:48:77:44:d7:85:86:09:4a:c0:4b:69: df:6d:59:81:40:8e:4e:90:22:b1:b9:47:95:5e:ba:81:6c:25: ec:46:d3:b6:e7:b0:ef:df:60:9d:65:10:00:8c:77:4b:f8:9a: 6d:9f:ae:71:e5:f6:6c:b7:9d:73:58:54:00:4e:9a:50:e9:08: 8c:d7:c5:f9:72:65:89:35:54:2f:71:4e:f6:17:a1:67:7d:d8: 52:69:f0:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adItau+A2/W9u3f27tHy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwNDE3MDgwMDIyWhcNMjYwNDE4MDgwMDIyWjAzMTEwLwYDVQQD EyhkYWEyZTYxYzRlMDY4NWFmNDU2NWJhMmQzNmYxYTY0Yzg2NDRlNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4dNdZZ2Q/18HfXQlLz3te14gXa5 dCJOSlaKc1fkXYWpxXwoEUWqv6iMwLa9TLv4iVTf6ZRw/vgv5RJh6U0GFbVjTdtB eE5NnHCoyDKKaDtBBmK+QRiFQbtuAP8UoeAtEYW82D8LY1aj90ThBhWyyHapuyd/ Kkk5rN3uAtg3Bx0TNjHTnGm0ht2t6/c2gl92nGC6UPuEZeYxdwxZPxZbpdI+Yf3V WPepyXuLK1jgXfzHBKLLeCa8TeRfUwz/DvG89dS0tZSLEnSe2RsjDp9Y0FPNgv9G xH7otpWsdThopC88IVT4S07yQSOqi1LfaAZe1nwOKzDZGWmrYi8Q84lU9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqi5hxOBoWvRWW6LTbxpkyGROePMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIkCua1r x5tW0+QZ3xaEF/cQztTaJy6ZEIXDMfgI6S5AAZZT7pCBm9v3+bTdwLiD9V6W2TnZ T5OO8ElUx/yeGd2Y2qkUVHu/RKjt71gIubzoL7SYj4ik51tI+SoM2wQlGuYJj29c C4TFXCmiNQaeEESkKxpSmdGrC34FTdHxiddqw5dLWMM4KbzNUqVCuBgXOONg4rvn KRUbXxYs4dqLjbarYEWg78Wtc0h3RNeFhglKwEtp321ZgUCOTpAisblHlV66gWwl 7EbTtuew799gnWUQAIx3S/iabZ+uceX2bLedc1hUAE6aUOkIjNfF+XJliTVUL3FO 9hehZ33YUmnwpw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:40:12 2026 by rpki-client