$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: 97M0CPl/mYHMcvkDgDXzTZ78ZZriPpJWi5/PAwUN6vs= Subject key identifier: 8D:2D:CB:E5:29:0A:FA:1F:08:BA:D2:C8:A5:A0:3E:93:38:0B:09:30 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019D98BD66FB2C61AA2B3FBC5779950BE2D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 15E6 Signing time: Fri 17 Apr 2026 00:00:42 +0000 Manifest this update: Fri 17 Apr 2026 00:00:42 +0000 Manifest next update: Sat 18 Apr 2026 00:00:42 +0000 Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=) 2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: yicoBE0FxG657SpIyKr50bm6zjrG9B9rhDybH6UQPqA=) 10: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 11: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 12: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 13: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 14: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) 15: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:66:fb:2c:61:aa:2b:3f:bc:57:79:95:0b:e2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Apr 17 00:00:42 2026 GMT Not After : Apr 18 00:00:42 2026 GMT Subject: CN=8d2dcbe5290afa1f08bad2c8a5a03e93380b0930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:ce:b7:09:7e:46:09:db:56:f4:0b:38:6d: e7:81:93:c2:9f:f5:6f:69:7e:7d:85:20:51:95:e6: 22:4f:72:cb:1f:0d:bf:e7:26:9b:05:ea:02:27:78: 1a:d7:ce:9c:6b:ea:67:bf:57:e7:51:df:d9:b8:b8: 6a:f6:72:3b:9e:04:3b:57:e7:a9:fa:d3:b6:36:97: 01:fa:43:41:32:d1:1a:11:68:e6:da:bc:a6:9f:88: 1d:d6:45:9f:96:4f:c5:54:90:7c:b2:47:0a:21:3e: ad:61:c3:eb:38:27:75:61:5c:0a:ca:4f:72:c1:1a: 9e:9c:69:bd:80:e3:7e:80:77:23:61:41:9a:e2:35: 3d:0a:29:d6:83:0b:90:65:50:db:cb:2c:0a:d9:93: c4:e7:b3:d9:05:bc:33:46:5a:14:c7:68:13:2e:ae: 55:4e:d9:a2:a6:b3:37:2a:a1:2d:9c:6f:2a:67:78: 4a:3b:5a:05:6c:98:dc:93:fd:b3:61:61:49:b1:67: 22:fa:17:c5:af:98:46:0e:bf:30:b8:53:39:c5:0a: c0:98:54:89:66:16:4c:86:f2:73:eb:01:af:17:40: 51:ef:03:da:e9:d3:4a:67:d9:64:76:f7:4c:33:9f: 44:77:5b:55:04:d1:c9:c3:f7:48:b4:8b:75:f5:fc: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2D:CB:E5:29:0A:FA:1F:08:BA:D2:C8:A5:A0:3E:93:38:0B:09:30 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:be:c8:32:82:1d:2e:44:c4:da:bc:04:d1:86:e7:0a:a1:0d: 69:1e:fe:28:60:a3:dd:18:1a:c0:b7:b0:11:00:8a:45:79:06: 6d:46:3b:cc:d7:e4:a8:46:59:e5:46:45:2d:ee:c8:36:68:64: 7c:08:41:8c:bf:60:62:79:33:14:d9:38:89:b2:be:99:11:7a: a0:0e:19:28:d9:40:a2:03:c1:91:10:e2:7c:6b:6c:69:15:e6: a1:41:5a:65:de:86:12:63:88:3e:89:ca:aa:01:19:a0:d8:b2: 6b:06:7b:0a:d3:6d:4f:b1:3e:18:a1:df:74:cb:7a:bd:61:21: 83:63:59:ce:68:02:6c:7d:5d:70:a8:07:c7:24:3e:43:41:10: af:1b:f0:aa:21:53:03:20:17:6c:a5:23:1a:68:3c:f5:ca:05: 1b:c3:4a:eb:0e:1a:c9:2a:b0:de:a2:29:55:08:62:40:8b:3d: 26:2c:13:37:1c:04:b3:a4:6a:1a:0e:f6:a1:eb:af:dd:d7:08: 71:e6:e1:5e:94:66:f4:1f:c4:90:3f:4d:82:26:23:da:54:ac: 78:9e:a8:c5:20:d6:88:5f:09:45:1a:d9:d0:f1:1a:69:d4:49: 11:0d:b2:48:78:c9:fc:60:3c:5a:db:1d:bd:74:77:0b:32:59: f3:74:8c:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YvWb7LGGqKz+8V3mVC+LYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwNDE3MDAwMDQyWhcNMjYwNDE4MDAwMDQyWjAzMTEwLwYDVQQD Eyg4ZDJkY2JlNTI5MGFmYTFmMDhiYWQyYzhhNWEwM2U5MzM4MGIwOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR7Otwl+RgnbVvQLOG3ngZPCn/Vv aX59hSBRleYiT3LLHw2/5yabBeoCJ3ga186ca+pnv1fnUd/ZuLhq9nI7ngQ7V+ep +tO2NpcB+kNBMtEaEWjm2rymn4gd1kWflk/FVJB8skcKIT6tYcPrOCd1YVwKyk9y wRqenGm9gON+gHcjYUGa4jU9CinWgwuQZVDbyywK2ZPE57PZBbwzRloUx2gTLq5V TtmiprM3KqEtnG8qZ3hKO1oFbJjck/2zYWFJsWci+hfFr5hGDr8wuFM5xQrAmFSJ ZhZMhvJz6wGvF0BR7wPa6dNKZ9lkdvdMM59Ed1tVBNHJw/dItIt19fxxTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0ty+UpCvofCLrSyKWgPpM4CwkwMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqL7IMoId LkTE2rwE0YbnCqENaR7+KGCj3RgawLewEQCKRXkGbUY7zNfkqEZZ5UZFLe7INmhk fAhBjL9gYnkzFNk4ibK+mRF6oA4ZKNlAogPBkRDifGtsaRXmoUFaZd6GEmOIPonK qgEZoNiyawZ7CtNtT7E+GKHfdMt6vWEhg2NZzmgCbH1dcKgHxyQ+Q0EQrxvwqiFT AyAXbKUjGmg89coFG8NK6w4aySqw3qIpVQhiQIs9JiwTNxwEs6RqGg72oeuv3dcI cebhXpRm9B/EkD9NgiYj2lSseJ6oxSDWiF8JRRrZ0PEaadRJEQ2ySHjJ/GA8Wtsd vXR3CzJZ83SMIA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:27:20 2026 by rpki-client