$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: egqvOd6WoReCSvY7fN3oaMw4LHJeAKNBctEqrSrHn4U= Subject key identifier: A5:95:70:33:F6:0D:11:9F:3A:CD:08:84:4F:E2:7F:00:AE:80:3D:D7 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019D9A74F3ED5CB235FE3C4A70D5DE38F7EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 18C9 Signing time: Fri 17 Apr 2026 08:00:48 +0000 Manifest this update: Fri 17 Apr 2026 08:00:48 +0000 Manifest next update: Sat 18 Apr 2026 08:00:48 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: e4Rk3oCta8PK7WC2+xZWQQAyUFuo64oex4bZHJwORZI=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:74:f3:ed:5c:b2:35:fe:3c:4a:70:d5:de:38:f7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Apr 17 08:00:48 2026 GMT Not After : Apr 18 08:00:48 2026 GMT Subject: CN=a5957033f60d119f3acd08844fe27f00ae803dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:e0:10:7d:e1:f6:9e:3e:18:98:76:7e:55: 3e:cd:91:da:df:4e:3e:5f:b4:9c:12:78:ba:4f:56: 0f:dc:10:cb:ee:be:e6:0a:b7:d3:4e:4c:95:75:8e: 6f:d1:53:37:86:07:36:9f:9e:e4:e1:a4:b6:5f:60: 95:24:09:7c:29:96:aa:95:55:b6:10:30:ba:c1:23: ce:68:51:5f:ae:cf:68:0b:e0:98:b3:4d:35:52:08: 54:e7:a9:9f:2d:58:89:a0:75:da:5e:46:57:bc:89: 00:b8:85:7c:7a:e2:6a:5d:f1:21:a2:d0:2f:fa:2b: e9:de:72:c6:b6:5f:15:aa:ae:07:26:b7:60:05:7c: dc:32:6a:e4:b0:a8:e3:b8:7a:08:c4:2f:e2:3a:7d: de:77:83:d4:ff:82:80:71:38:89:5f:aa:39:2f:27: bd:8e:9f:23:ba:85:d2:a5:f1:d7:a3:14:29:05:4f: 0b:8e:3a:61:d0:de:ce:0f:2b:2c:62:ca:41:3f:ce: 32:e9:2f:87:60:43:3b:86:df:df:da:f9:61:9f:cd: 53:92:00:98:3f:71:29:fd:4b:41:a1:7a:0a:b3:ab: 47:75:50:7a:4a:7a:79:a7:6c:70:09:e2:e8:b4:fb: 5f:8a:b2:79:38:3f:f1:08:0f:fd:d9:16:82:bd:43: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:95:70:33:F6:0D:11:9F:3A:CD:08:84:4F:E2:7F:00:AE:80:3D:D7 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:72:60:fe:bd:4f:fc:df:33:d6:15:1d:fc:6a:8b:83:4f:ef: 16:b9:56:51:25:e9:03:cc:7b:97:4f:45:67:eb:4d:94:3e:34: 17:7d:b8:77:3f:e8:e6:60:0d:00:b5:ae:a8:a8:ff:f9:db:36: 09:9c:88:fc:3b:60:8f:3e:ce:1e:96:ac:3d:0c:8b:1b:27:c2: ae:be:fb:42:f6:ef:de:48:c6:81:89:16:87:fb:a9:ee:d7:d2: 9f:f4:6d:64:da:16:87:a6:63:d8:48:c8:dd:ba:f9:f4:60:b0: 39:7d:87:55:af:9d:c0:68:07:1d:21:9a:25:8a:a8:c6:56:af: d6:5b:d6:33:d4:d7:f0:28:d7:40:26:c8:f5:eb:aa:92:e5:5e: a8:ac:18:46:24:4a:d6:4a:52:9e:33:8e:85:f8:ed:af:b7:1e: 9b:62:6c:07:50:31:6c:f4:77:e9:60:3e:d1:cb:2e:76:a5:de: 87:21:3d:c2:ea:6c:b2:4a:e0:5c:24:45:0d:f5:96:64:5f:0c: f1:8a:84:d9:f8:99:26:71:18:1c:0b:f8:55:5c:2d:8a:da:68: 95:14:3d:5f:a5:ea:b5:3f:43:7c:c9:26:a6:45:a0:92:71:d9: 33:af:52:2b:eb:a1:ba:ee:97:85:db:cd:52:ee:12:6f:a7:48: 9e:de:41:d9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ2adPPtXLI1/jxKcNXeOPfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwNDE3MDgwMDQ4WhcNMjYwNDE4MDgwMDQ4WjAzMTEwLwYDVQQD EyhhNTk1NzAzM2Y2MGQxMTlmM2FjZDA4ODQ0ZmUyN2YwMGFlODAzZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEPgEH3h9p4+GJh2flU+zZHa304+ X7ScEni6T1YP3BDL7r7mCrfTTkyVdY5v0VM3hgc2n57k4aS2X2CVJAl8KZaqlVW2 EDC6wSPOaFFfrs9oC+CYs001UghU56mfLViJoHXaXkZXvIkAuIV8euJqXfEhotAv +ivp3nLGtl8Vqq4HJrdgBXzcMmrksKjjuHoIxC/iOn3ed4PU/4KAcTiJX6o5Lye9 jp8juoXSpfHXoxQpBU8Ljjph0N7ODyssYspBP84y6S+HYEM7ht/f2vlhn81TkgCY P3Ep/UtBoXoKs6tHdVB6Snp5p2xwCeLotPtfirJ5OD/xCA/92RaCvUP/kQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKWVcDP2DRGfOs0IhE/ifwCugD3XMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHJg /r1P/N8z1hUd/GqLg0/vFrlWUSXpA8x7l09FZ+tNlD40F324dz/o5mANALWuqKj/ +ds2CZyI/Dtgjz7OHpasPQyLGyfCrr77Qvbv3kjGgYkWh/up7tfSn/RtZNoWh6Zj 2EjI3br59GCwOX2HVa+dwGgHHSGaJYqoxlav1lvWM9TX8CjXQCbI9euqkuVeqKwY RiRK1kpSnjOOhfjtr7cem2JsB1AxbPR36WA+0csudqXehyE9wupsskrgXCRFDfWW ZF8M8YqE2fiZJnEYHAv4VVwtitpolRQ9X6XqtT9DfMkmpkWgknHZM69SK+uhuu6X hdvNUu4Sb6dInt5B2Q== -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:57 2026 by rpki-client