$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: uFCDlet/PCyXPgv63WEwN/s+APulnUSmhr7PKIVU1A8= Subject key identifier: 83:F3:1E:36:9C:F8:70:19:8B:37:21:58:70:53:31:FF:97:1E:6E:EC Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019D98BD8386E34B237AC7F7BB4BC526CDD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0F06 Signing time: Fri 17 Apr 2026 00:00:49 +0000 Manifest this update: Fri 17 Apr 2026 00:00:49 +0000 Manifest next update: Sat 18 Apr 2026 00:00:49 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: E+NY+bdvrZvXTlgFdNk+0Pw7GcQguLm2yKz2BoGM5BA=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=) 12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:83:86:e3:4b:23:7a:c7:f7:bb:4b:c5:26:cd:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Apr 17 00:00:49 2026 GMT Not After : Apr 18 00:00:49 2026 GMT Subject: CN=83f31e369cf870198b372158705331ff971e6eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:52:c4:6f:4b:82:d4:d2:89:37:a2:4c:29: 23:c7:5c:44:cc:7d:c2:70:d4:19:1d:0c:2b:4a:c5: cb:2f:1b:00:94:21:c3:8e:cd:3b:69:3c:df:64:a1: c8:5c:c3:c1:21:70:62:20:ff:ed:21:8a:ae:f7:d9: 40:1b:fd:dc:c7:9b:9a:da:86:b0:be:dc:82:f3:46: 43:62:58:99:f4:e5:48:62:50:bf:19:86:4c:e3:b4: ac:26:18:ea:c9:18:d2:96:d3:29:13:bd:0c:b1:77: 9a:c2:09:6b:a0:23:33:c3:10:fb:1a:f9:11:2a:9f: 4e:7f:76:41:1c:42:ca:93:21:58:a9:fa:45:2f:67: 01:c2:b4:ec:7d:ce:80:77:e9:64:bf:b0:cc:39:29: c9:88:70:08:80:5e:79:b5:4f:66:f0:65:c1:b9:95: 43:ee:bc:af:a5:2e:ea:4a:d4:a4:5a:d6:da:38:9f: f8:b5:78:7b:12:a0:06:29:36:bd:df:af:52:13:12: 2d:f0:f0:35:b1:d1:a9:06:09:30:16:33:f6:90:33: 49:39:c2:c7:55:4f:7c:17:07:6c:ca:2b:fc:56:f0: 42:ac:1d:ea:a4:8e:fe:c8:23:1b:fb:40:9d:15:ac: 1b:46:57:07:1a:dc:fb:04:f3:d3:12:ad:b0:75:8e: d6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F3:1E:36:9C:F8:70:19:8B:37:21:58:70:53:31:FF:97:1E:6E:EC X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:87:03:76:8f:3c:11:b1:27:f0:0c:f9:49:95:88:bc:a1:31: b2:83:91:70:8c:be:29:7b:c5:28:f4:be:20:56:bd:30:09:44: 69:30:09:cb:29:78:be:7c:ea:28:ce:37:a7:a2:73:eb:fb:7f: aa:da:e1:8c:3f:13:bc:71:51:68:66:e9:e1:dc:a1:07:a7:63: 74:ca:d5:bf:55:c8:dc:c0:31:58:5c:1e:f4:76:8e:f7:bc:5d: dd:44:49:2d:53:5d:b0:25:f9:ea:17:0b:72:2f:f3:a0:0e:6a: 2b:fb:67:07:c4:63:14:92:1b:3e:f6:4a:71:3e:12:55:03:38: a0:bf:d6:7f:0e:81:35:80:e2:60:fb:2a:96:52:ea:61:f6:3b: 49:f5:b3:a3:de:a2:12:98:01:7f:cf:ca:75:96:62:b1:8d:be: 12:7a:d9:91:a0:16:9d:52:15:78:75:a0:e1:29:23:7f:dc:6d: 9c:13:4a:fa:0a:46:7a:ac:b6:44:10:1f:83:91:8d:8e:c6:eb: f5:7e:3e:66:97:dc:b2:19:f2:ed:56:51:d4:5e:1e:95:6e:d8: 57:74:d7:1a:01:3b:fb:87:77:b6:30:69:d6:27:94:5f:49:ff: 4f:9c:e5:4b:7f:3f:e0:54:12:96:c7:e9:be:1f:17:9c:f8:98: e1:c0:00:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YvYOG40sjesf3u0vFJs3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwNDE3MDAwMDQ5WhcNMjYwNDE4MDAwMDQ5WjAzMTEwLwYDVQQD Eyg4M2YzMWUzNjljZjg3MDE5OGIzNzIxNTg3MDUzMzFmZjk3MWU2ZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWZSxG9LgtTSiTeiTCkjx1xEzH3C cNQZHQwrSsXLLxsAlCHDjs07aTzfZKHIXMPBIXBiIP/tIYqu99lAG/3cx5ua2oaw vtyC80ZDYliZ9OVIYlC/GYZM47SsJhjqyRjSltMpE70MsXeawglroCMzwxD7GvkR Kp9Of3ZBHELKkyFYqfpFL2cBwrTsfc6Ad+lkv7DMOSnJiHAIgF55tU9m8GXBuZVD 7ryvpS7qStSkWtbaOJ/4tXh7EqAGKTa9369SExIt8PA1sdGpBgkwFjP2kDNJOcLH VU98Fwdsyiv8VvBCrB3qpI7+yCMb+0CdFawbRlcHGtz7BPPTEq2wdY7WlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPzHjac+HAZizchWHBTMf+XHm7sMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYcDdo88 EbEn8Az5SZWIvKExsoORcIy+KXvFKPS+IFa9MAlEaTAJyyl4vnzqKM43p6Jz6/t/ qtrhjD8TvHFRaGbp4dyhB6djdMrVv1XI3MAxWFwe9HaO97xd3URJLVNdsCX56hcL ci/zoA5qK/tnB8RjFJIbPvZKcT4SVQM4oL/Wfw6BNYDiYPsqllLqYfY7SfWzo96i EpgBf8/KdZZisY2+EnrZkaAWnVIVeHWg4Skjf9xtnBNK+gpGeqy2RBAfg5GNjsbr 9X4+Zpfcshny7VZR1F4elW7YV3TXGgE7+4d3tjBp1ieUX0n/T5zlS38/4FQSlsfp vh8XnPiY4cAA7w== -----END CERTIFICATE-----Generated at Fri Apr 17 10:45:58 2026 by rpki-client