$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json) Hash identifier: dDddnVc6+Mz7wbb2khadq2YA9wKCesaJTb+4G1baPb4= Subject key identifier: FE:21:95:0B:43:23:EB:EE:2C:AA:4E:F3:04:B9:7C:5A:09:C3:15:AA Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019DA4F8739F2C5643371670CECDF4FE47E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft Manifest number: 12CF Signing time: Sun 19 Apr 2026 09:00:38 +0000 Manifest this update: Sun 19 Apr 2026 09:00:38 +0000 Manifest next update: Mon 20 Apr 2026 09:00:38 +0000 Files and hashes: 1: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=) 2: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=) 3: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=) 4: RKC_1mqLXMIDbGkqZMEJrCSWeCo.roa (hash: PPGCCrSEwXx1Rr+8w142QOXo4ncdDGVM4h0k0e7qrm8=) 5: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=) 6: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=) 7: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=) 8: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=) 9: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=) 10: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=) 11: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=) 12: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: +MELSLnwNTjV0neQUiVKHMafTUUFTb8f/rtWiKOGP1E=) 13: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=) 14: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=) 15: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:f8:73:9f:2c:56:43:37:16:70:ce:cd:f4:fe:47:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Apr 19 09:00:38 2026 GMT Not After : Apr 20 09:00:38 2026 GMT Subject: CN=fe21950b4323ebee2caa4ef304b97c5a09c315aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f7:eb:8a:5f:88:8d:8e:59:9c:f7:d5:f4:59: b0:21:ba:04:42:83:af:2f:1a:50:ea:ac:9f:43:7c: 81:5c:49:0c:45:06:09:0e:92:d0:21:a1:e0:bf:bd: 3b:b2:f8:b8:8e:1c:0d:ec:95:c0:ad:e8:04:61:75: b2:e4:60:38:f3:f1:c4:ea:c4:af:7c:f0:6f:51:6e: 7f:1b:8a:a5:ea:05:60:a4:47:75:41:50:6a:85:b0: 3d:be:ea:64:f8:09:10:a7:d9:21:39:9f:9c:9f:11: 75:c8:62:1e:87:a8:ef:be:42:c2:4a:8f:9c:08:ef: 3c:a4:fa:4c:c1:64:b4:25:8a:12:f7:f6:dd:f6:73: e1:e2:26:9c:81:94:4c:da:5e:bb:80:c9:1a:54:38: f9:b1:11:ca:b3:1b:61:24:f3:26:db:cb:82:53:d1: a0:86:18:58:5a:ca:1e:b2:f8:a4:d6:bb:9e:ef:7f: 95:29:35:f0:cd:6e:10:9d:64:95:7a:fc:20:43:55: d4:2f:42:42:9d:f3:ab:50:6b:21:e5:3b:7e:aa:26: 9a:80:43:ea:08:4b:ee:ed:e3:a0:4e:cc:83:68:e5: d8:63:3a:43:98:44:68:27:ef:62:c1:c0:82:d2:05: e1:53:0c:85:e5:68:8d:b4:d9:aa:13:cf:2a:91:77: 44:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:21:95:0B:43:23:EB:EE:2C:AA:4E:F3:04:B9:7C:5A:09:C3:15:AA X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:69:41:25:84:ed:c0:92:f4:7b:b5:e9:b3:f5:45:10:a8:e2: 36:eb:69:9c:16:02:fa:34:0f:09:9c:f8:32:2e:a2:fa:84:4c: 3a:59:97:c2:ac:c4:40:bb:97:f3:52:18:7c:f7:1b:93:2e:ad: 6f:f1:13:2b:04:5f:c7:4a:71:7b:dd:d4:55:32:25:f0:e0:10: 23:1d:ab:25:b1:fb:ec:55:98:06:6b:5b:85:3c:82:29:19:9e: 2f:94:46:0e:96:cc:aa:a9:01:34:64:a5:58:d0:2d:f7:dd:ef: d4:1b:b1:41:84:93:f0:a6:62:f3:f6:fc:5e:7e:db:3b:07:f7: 2a:7f:3f:04:30:01:13:29:f2:b1:8d:a5:75:cc:0d:1b:2a:71: 46:5e:dc:70:77:7b:8a:5c:a2:8b:b6:a5:3f:11:65:5d:43:be: b8:c2:0c:39:ff:a6:74:04:ae:0f:d0:b4:15:b3:91:d6:68:b0: 62:0a:27:a6:12:3f:6f:54:87:66:39:fd:b8:a7:0f:ff:49:13: bc:52:2f:24:fd:71:46:43:b9:01:0c:a1:4d:be:b5:56:95:85: 76:a3:2e:e8:6e:e3:dc:4b:41:69:38:4b:3c:d5:01:be:bb:33: 23:9a:a9:1b:2a:55:a9:4d:04:44:a6:81:d6:ca:96:4e:25:1f: e4:f2:d4:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2k+HOfLFZDNxZwzs30/kfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwNDE5MDkwMDM4WhcNMjYwNDIwMDkwMDM4WjAzMTEwLwYDVQQD EyhmZTIxOTUwYjQzMjNlYmVlMmNhYTRlZjMwNGI5N2M1YTA5YzMxNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvfril+IjY5ZnPfV9FmwIboEQoOv LxpQ6qyfQ3yBXEkMRQYJDpLQIaHgv707svi4jhwN7JXAregEYXWy5GA48/HE6sSv fPBvUW5/G4ql6gVgpEd1QVBqhbA9vupk+AkQp9khOZ+cnxF1yGIeh6jvvkLCSo+c CO88pPpMwWS0JYoS9/bd9nPh4iacgZRM2l67gMkaVDj5sRHKsxthJPMm28uCU9Gg hhhYWsoesvik1rue73+VKTXwzW4QnWSVevwgQ1XUL0JCnfOrUGsh5Tt+qiaagEPq CEvu7eOgTsyDaOXYYzpDmERoJ+9iwcCC0gXhUwyF5WiNtNmqE88qkXdE7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4hlQtDI+vuLKpO8wS5fFoJwxWqMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxGlBJYTt wJL0e7Xps/VFEKjiNutpnBYC+jQPCZz4Mi6i+oRMOlmXwqzEQLuX81IYfPcbky6t b/ETKwRfx0pxe93UVTIl8OAQIx2rJbH77FWYBmtbhTyCKRmeL5RGDpbMqqkBNGSl WNAt993v1BuxQYST8KZi8/b8Xn7bOwf3Kn8/BDABEynysY2ldcwNGypxRl7ccHd7 ilyii7alPxFlXUO+uMIMOf+mdASuD9C0FbOR1miwYgonphI/b1SHZjn9uKcP/0kT vFIvJP1xRkO5AQyhTb61VpWFdqMu6G7j3EtBaThLPNUBvrszI5qpGypVqU0ERKaB 1sqWTiUf5PLUgg== -----END CERTIFICATE-----Generated at Sun Apr 19 12:54:07 2026 by rpki-client