$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: ic/asaUwnyrsnxReNZUaq2rahC2U+Vi0NQMEL7jJhXU= Subject key identifier: C4:A8:32:A0:0D:CA:40:58:4A:6B:22:D0:25:99:01:47:24:E1:9A:A3 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019D9D07F9D256EBBE8A2DE15F0FA99E98CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 18D2 Signing time: Fri 17 Apr 2026 20:00:38 +0000 Manifest this update: Fri 17 Apr 2026 20:00:38 +0000 Manifest next update: Sat 18 Apr 2026 20:00:38 +0000 Files and hashes: 1: 5iygaSWZF0yjUJ8jGYfCtVGM300.roa (hash: ET/P3Mdg0xkHqABx2gsgHyGvGIp2jJSSoXAlISRhnZ4=) 2: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 3: IauAxs74tysYNqUuPq3mwgGVBQY.roa (hash: I4y1ed39yJsl3DkGtY/KgIMLvKWqfNhrhjl/qeS45rw=) 4: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 5: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 6: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 7: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 8: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: cMkeNrsdQv/PfOxkrCw6m95qa/tJfsC+RWt+L7ezSg4=) 9: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 10: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 11: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9d:07:f9:d2:56:eb:be:8a:2d:e1:5f:0f:a9:9e:98:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Apr 17 20:00:38 2026 GMT Not After : Apr 18 20:00:38 2026 GMT Subject: CN=c4a832a00dca40584a6b22d02599014724e19aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:96:ee:37:ca:3c:c6:c7:69:7e:1d:ee:89: 3c:6a:e0:79:40:6d:65:d3:84:fa:f2:ef:41:f4:bf: ce:13:a2:4b:93:29:9b:6e:88:d6:d3:45:ac:68:c7: 32:b2:de:59:64:f2:7c:c3:dd:32:95:ad:1a:05:69: e5:6a:e7:d3:22:88:7d:6b:ac:33:6d:19:8d:74:07: 92:30:94:d1:41:56:5c:36:71:83:0a:41:6c:a8:97: 2d:5f:10:0b:34:a7:bf:04:07:e1:05:71:8f:1a:04: 83:dd:5b:1c:a2:90:d8:ca:d0:e4:a6:c9:91:28:ce: d3:54:02:29:ca:58:34:71:f4:44:3c:e5:26:c0:3d: 5f:33:a4:3c:34:15:fe:75:62:73:80:ee:6c:8f:ba: 3c:0d:47:52:ba:0f:d5:27:a2:08:ed:d1:5c:34:77: 22:b4:a5:94:aa:36:3c:35:2c:b2:75:5f:47:b1:d7: 3f:50:f5:37:4b:f5:d8:c7:66:2c:d6:8d:82:bc:6c: 5f:e6:20:96:e5:96:bb:9c:d2:2e:97:c1:e5:a9:da: 87:39:e4:c7:8d:66:62:30:85:61:d0:24:3e:56:43: 4b:37:f7:f6:02:b8:8c:56:ce:0b:03:80:9f:35:81: 79:58:cd:f3:21:63:a3:3d:1a:67:f9:61:ba:72:5d: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A8:32:A0:0D:CA:40:58:4A:6B:22:D0:25:99:01:47:24:E1:9A:A3 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:75:f4:18:8a:14:da:d9:f0:97:9e:53:45:3b:0d:cb:55:f8: bb:c1:cb:2f:4a:9a:99:0b:10:ec:85:d3:26:eb:55:40:f8:94: 60:67:00:44:ae:40:97:a1:10:69:af:8c:70:04:4f:6b:20:88: 58:f0:55:17:5a:e4:f7:82:17:90:39:97:3a:7b:a2:9b:9f:69: 96:19:4b:50:23:d0:54:79:39:60:e4:4e:54:05:78:4a:67:4a: 42:79:94:ac:3c:b8:a4:36:83:d1:94:8e:78:a9:6c:8e:94:a7: a7:72:6a:02:c6:a4:3c:9a:26:7c:c0:cc:4f:76:d4:ea:e7:ef: 4c:0e:d9:0e:1b:1b:2a:7d:8a:cd:62:fa:54:f8:ad:d8:cd:dc: d9:5a:b5:85:60:93:25:27:b0:c2:91:55:a2:4d:89:58:b0:e0: 75:ad:31:5d:0d:a8:7e:90:40:0b:a6:84:e2:bc:de:e3:b8:42: 49:bc:14:64:8c:50:25:6a:a8:f6:88:06:0f:e6:9b:a8:a3:d4: 83:84:fa:3a:7b:f3:37:43:e4:82:fa:c7:bd:2b:0d:7a:3d:53: 09:f9:8b:c8:6e:de:a4:54:6b:b8:01:bd:9e:a0:70:aa:26:c0: 9f:d0:bb:27:2a:37:60:f2:f8:16:5e:f7:15:1c:c8:ec:36:3c: 93:1d:a5:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2dB/nSVuu+ii3hXw+pnpjNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwNDE3MjAwMDM4WhcNMjYwNDE4MjAwMDM4WjAzMTEwLwYDVQQD EyhjNGE4MzJhMDBkY2E0MDU4NGE2YjIyZDAyNTk5MDE0NzI0ZTE5YWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+eW7jfKPMbHaX4d7ok8auB5QG1l 04T68u9B9L/OE6JLkymbbojW00WsaMcyst5ZZPJ8w90yla0aBWnlaufTIoh9a6wz bRmNdAeSMJTRQVZcNnGDCkFsqJctXxALNKe/BAfhBXGPGgSD3VscopDYytDkpsmR KM7TVAIpylg0cfREPOUmwD1fM6Q8NBX+dWJzgO5sj7o8DUdSug/VJ6II7dFcNHci tKWUqjY8NSyydV9Hsdc/UPU3S/XYx2Ys1o2CvGxf5iCW5Za7nNIul8HlqdqHOeTH jWZiMIVh0CQ+VkNLN/f2AriMVs4LA4CfNYF5WM3zIWOjPRpn+WG6cl0L+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSoMqANykBYSmsi0CWZAUck4ZqjMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3X0GIoU 2tnwl55TRTsNy1X4u8HLL0qamQsQ7IXTJutVQPiUYGcARK5Al6EQaa+McARPayCI WPBVF1rk94IXkDmXOnuim59plhlLUCPQVHk5YOROVAV4SmdKQnmUrDy4pDaD0ZSO eKlsjpSnp3JqAsakPJomfMDMT3bU6ufvTA7ZDhsbKn2KzWL6VPit2M3c2Vq1hWCT JSewwpFVok2JWLDgda0xXQ2ofpBAC6aE4rze47hCSbwUZIxQJWqo9ogGD+abqKPU g4T6OnvzN0PkgvrHvSsNej1TCfmLyG7epFRruAG9nqBwqibAn9C7Jyo3YPL4Fl73 FRzI7DY8kx2lIA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:18:12 2026 by rpki-client