$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: B877SOGP/IjPORE94xE2BmFkIZrKo7mpaJy7XSUE2Iw= Subject key identifier: 3F:2D:F4:71:41:DA:16:9A:C7:D8:FB:6F:49:15:54:2F:51:3C:B9:F5 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019D9B199A255BEC1D1711F51975A70564EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 18D1 Signing time: Fri 17 Apr 2026 11:00:39 +0000 Manifest this update: Fri 17 Apr 2026 11:00:39 +0000 Manifest next update: Sat 18 Apr 2026 11:00:39 +0000 Files and hashes: 1: 5iygaSWZF0yjUJ8jGYfCtVGM300.roa (hash: ET/P3Mdg0xkHqABx2gsgHyGvGIp2jJSSoXAlISRhnZ4=) 2: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 3: IauAxs74tysYNqUuPq3mwgGVBQY.roa (hash: I4y1ed39yJsl3DkGtY/KgIMLvKWqfNhrhjl/qeS45rw=) 4: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 5: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 6: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 7: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 8: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: AvKVKv/ovVDMf95VAjkqNohB5NXikHQ0RpqUlmvjZ+s=) 9: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 10: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 11: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:19:9a:25:5b:ec:1d:17:11:f5:19:75:a7:05:64:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Apr 17 11:00:39 2026 GMT Not After : Apr 18 11:00:39 2026 GMT Subject: CN=3f2df47141da169ac7d8fb6f4915542f513cb9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:79:c1:cc:f3:97:9e:86:99:7c:61:24:6f:6f: ad:f0:98:8b:e8:13:fc:b6:40:b6:1a:3a:e2:00:27: 71:38:a0:91:9e:df:91:a8:0a:a5:6a:02:2c:4d:29: 5c:dd:ad:38:30:49:79:75:e7:f3:3f:f2:d5:5d:43: 6f:a2:e5:4d:fa:8f:c3:a4:fd:f0:ed:79:b9:ea:74: ef:cf:81:0f:f5:5e:70:e6:58:3f:63:35:c3:c3:04: 1f:5b:1a:6d:18:73:3d:4b:e2:f1:8d:69:40:bb:e1: 58:b3:d7:7e:94:d3:50:a0:a5:80:a0:b6:d0:6b:d5: cc:5f:56:28:ec:80:36:84:c4:e5:a2:de:bb:d9:67: 99:c5:b3:76:8b:28:3d:f9:46:63:f1:d7:fb:1a:54: b1:fb:61:41:7f:8f:f6:ee:e6:31:c6:5f:9e:62:4d: 17:0a:3b:2a:22:26:5d:71:8e:ff:f3:3e:51:6a:02: 01:3f:1c:42:20:19:70:c6:39:62:18:78:5a:ca:d5: 80:7c:6d:a5:95:9e:d0:8a:b4:73:02:24:e6:8a:c0: 47:ca:f7:fa:36:22:92:c4:9c:84:bb:df:fd:21:ab: 13:51:c1:f4:b5:f4:3c:0d:e6:6c:9c:c7:f2:d0:4a: d9:4f:f2:1d:e2:48:07:e7:9a:c3:3c:ab:20:a0:af: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2D:F4:71:41:DA:16:9A:C7:D8:FB:6F:49:15:54:2F:51:3C:B9:F5 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:47:a4:5e:0f:54:a4:e1:25:c2:7a:e4:bd:fe:90:a3:03:af: 8e:8a:a4:f0:c4:6d:cb:3f:1d:8e:42:9b:ce:ac:f9:8c:dc:e6: 18:d6:55:80:3e:93:54:7e:87:ea:f0:6a:43:a9:56:84:b0:0b: ed:11:e9:dc:13:b2:7e:82:9c:93:6a:22:8a:ce:0a:0f:2f:c2: b0:9e:2d:0c:9d:b7:ce:4c:d2:f8:4a:71:8f:14:88:91:a0:90: 4d:a7:45:a8:df:3d:9b:e3:54:3a:8f:b3:59:de:69:e8:5b:ca: 08:b0:31:4c:11:c8:0b:e0:d4:73:f6:b8:a3:64:6c:54:49:b2: 10:54:27:78:79:9b:40:c7:73:50:8f:fe:dd:5a:a5:c5:33:9c: 7d:1b:73:30:e8:cb:27:47:55:ec:22:cf:7e:53:7e:d3:7c:a3: 46:b5:f8:bd:ca:e5:1a:67:6a:6a:fc:ca:1e:f1:d0:48:9e:13: de:cd:c4:69:93:32:d2:c5:05:a1:d3:fb:bd:93:b7:62:77:78: 16:20:4e:de:5a:38:04:bb:e5:e7:73:cd:c3:b4:b2:cc:8c:cd: 28:65:28:fd:5e:7e:71:1f:82:40:c7:f3:7b:5d:38:a6:98:ea: 89:43:b4:19:62:88:88:82:0b:68:ec:54:c2:fc:1a:66:29:21: e6:35:eb:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bGZolW+wdFxH1GXWnBWTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwNDE3MTEwMDM5WhcNMjYwNDE4MTEwMDM5WjAzMTEwLwYDVQQD EygzZjJkZjQ3MTQxZGExNjlhYzdkOGZiNmY0OTE1NTQyZjUxM2NiOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HnBzPOXnoaZfGEkb2+t8JiL6BP8 tkC2GjriACdxOKCRnt+RqAqlagIsTSlc3a04MEl5defzP/LVXUNvouVN+o/DpP3w 7Xm56nTvz4EP9V5w5lg/YzXDwwQfWxptGHM9S+LxjWlAu+FYs9d+lNNQoKWAoLbQ a9XMX1Yo7IA2hMTlot672WeZxbN2iyg9+UZj8df7GlSx+2FBf4/27uYxxl+eYk0X CjsqIiZdcY7/8z5RagIBPxxCIBlwxjliGHhaytWAfG2llZ7QirRzAiTmisBHyvf6 NiKSxJyEu9/9IasTUcH0tfQ8DeZsnMfy0ErZT/Id4kgH55rDPKsgoK/xuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8t9HFB2haax9j7b0kVVC9RPLn1MB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUekXg9U pOElwnrkvf6QowOvjoqk8MRtyz8djkKbzqz5jNzmGNZVgD6TVH6H6vBqQ6lWhLAL 7RHp3BOyfoKck2oiis4KDy/CsJ4tDJ23zkzS+EpxjxSIkaCQTadFqN89m+NUOo+z Wd5p6FvKCLAxTBHIC+DUc/a4o2RsVEmyEFQneHmbQMdzUI/+3VqlxTOcfRtzMOjL J0dV7CLPflN+03yjRrX4vcrlGmdqavzKHvHQSJ4T3s3EaZMy0sUFodP7vZO3Ynd4 FiBO3lo4BLvl53PNw7SyzIzNKGUo/V5+cR+CQMfze104ppjqiUO0GWKIiIILaOxU wvwaZikh5jXrfA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:51:57 2026 by rpki-client