$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: lMAgdGFHJKwUWR65JdmufaHM0nwNGYrIVGTh9D5Bes4= Subject key identifier: DA:00:50:29:C4:4C:23:B8:D0:8A:25:9E:F8:A5:A1:AD:DB:1A:02:A0 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019DA29CB7053DD5B007689BBE258910F57B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 076C Signing time: Sat 18 Apr 2026 22:01:12 +0000 Manifest this update: Sat 18 Apr 2026 22:01:12 +0000 Manifest next update: Sun 19 Apr 2026 22:01:12 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: mKEg7nG/eH2FFixElAtIPGKO9BSJL3/PihtROL9c+cA=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 22:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a2:9c:b7:05:3d:d5:b0:07:68:9b:be:25:89:10:f5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Apr 18 22:01:12 2026 GMT Not After : Apr 19 22:01:12 2026 GMT Subject: CN=da005029c44c23b8d08a259ef8a5a1addb1a02a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:d2:12:de:52:b2:29:27:bb:b4:01:63:96: be:a4:08:0d:f2:4a:c0:02:6f:cc:5d:16:80:d9:b6: 9d:1e:aa:65:b6:fa:72:40:59:33:17:53:9e:ca:15: b8:4e:08:25:ba:10:e8:fd:15:fb:b5:82:69:6b:c4: 5d:a7:e6:b9:19:a1:26:96:f7:b8:ce:5a:73:27:4f: 83:6c:41:a6:91:5a:42:a6:70:0e:32:8d:37:0f:60: 1e:18:20:e0:d3:23:53:53:7d:d6:7b:b8:16:03:e3: d7:ed:f4:5f:53:f0:01:e9:4c:cd:a9:43:00:2a:17: e6:9e:41:a1:8e:b7:bb:13:02:ef:9c:b4:68:b9:4d: 88:56:8c:3f:c5:a7:39:cd:13:87:60:59:30:fb:7c: 90:01:a9:6a:0c:3d:fc:6e:35:df:4a:65:88:e9:16: e7:22:14:6e:8d:96:b8:e7:63:67:e5:78:1f:66:d1: 20:eb:14:8d:ee:e1:dc:67:f1:64:e0:3b:e1:45:49: 1c:9c:ed:56:4c:f6:f4:b4:9c:80:f8:79:1d:48:ed: 33:6d:4a:97:90:48:88:8f:6b:1a:dd:45:de:18:19: 8d:85:54:1e:1c:de:71:80:ba:c0:fc:77:b2:5d:c3: 71:3f:72:23:d9:0c:2b:a5:7d:9c:4a:4f:f1:4b:58: ab:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:00:50:29:C4:4C:23:B8:D0:8A:25:9E:F8:A5:A1:AD:DB:1A:02:A0 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:62:87:0e:82:8c:c4:ed:ad:35:7b:39:61:dc:2b:c1:b2:81: 58:b3:c7:48:9b:6f:0b:fa:e0:c4:fd:ac:e3:58:90:11:46:5e: d3:32:15:36:7f:1e:fb:86:c9:a2:4f:aa:8a:7b:93:76:aa:19: b8:42:9d:ad:4a:9f:97:0d:17:cd:e9:f9:4f:d2:47:69:78:0c: a4:e9:cf:3c:d0:90:9f:6b:2d:30:ad:6f:d1:a1:8c:83:be:b3: 22:51:62:44:52:38:df:31:a6:5f:db:84:b0:e6:39:a2:94:03: 59:3d:d5:39:17:ee:57:30:58:67:48:ac:1d:07:3f:3c:19:f7: ae:f2:d8:34:f6:38:13:d9:7c:15:d6:65:9c:78:eb:d9:47:b9: 32:99:12:06:c2:b5:69:54:2a:ea:1a:d2:75:90:89:81:a9:c9: b7:16:d7:ac:4d:85:ce:87:ec:48:bc:bc:2a:bc:0e:e1:c2:8d: 69:ff:1d:e4:da:bf:e8:d2:b8:22:6d:d4:db:0d:85:4d:92:8c: e4:eb:b3:66:e9:dd:d0:78:62:ba:00:cb:7d:4c:7b:e7:3b:e5: e5:6a:c9:56:ce:22:19:40:21:50:69:0e:cf:e0:db:85:35:bc: 45:d3:c9:fc:1b:c5:c1:a5:55:8e:90:4d:5b:f4:68:22:62:0e: b3:87:bb:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2inLcFPdWwB2ibviWJEPV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwNDE4MjIwMTEyWhcNMjYwNDE5MjIwMTEyWjAzMTEwLwYDVQQD EyhkYTAwNTAyOWM0NGMyM2I4ZDA4YTI1OWVmOGE1YTFhZGRiMWEwMmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bfSEt5Ssiknu7QBY5a+pAgN8krA Am/MXRaA2badHqpltvpyQFkzF1OeyhW4TggluhDo/RX7tYJpa8Rdp+a5GaEmlve4 zlpzJ0+DbEGmkVpCpnAOMo03D2AeGCDg0yNTU33We7gWA+PX7fRfU/AB6UzNqUMA KhfmnkGhjre7EwLvnLRouU2IVow/xac5zROHYFkw+3yQAalqDD38bjXfSmWI6Rbn IhRujZa452Nn5XgfZtEg6xSN7uHcZ/Fk4DvhRUkcnO1WTPb0tJyA+HkdSO0zbUqX kEiIj2sa3UXeGBmNhVQeHN5xgLrA/HeyXcNxP3Ij2QwrpX2cSk/xS1ir+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoAUCnETCO40Iolnviloa3bGgKgMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWKHDoKM xO2tNXs5YdwrwbKBWLPHSJtvC/rgxP2s41iQEUZe0zIVNn8e+4bJok+qinuTdqoZ uEKdrUqflw0Xzen5T9JHaXgMpOnPPNCQn2stMK1v0aGMg76zIlFiRFI43zGmX9uE sOY5opQDWT3VORfuVzBYZ0isHQc/PBn3rvLYNPY4E9l8FdZlnHjr2Ue5MpkSBsK1 aVQq6hrSdZCJganJtxbXrE2FzofsSLy8KrwO4cKNaf8d5Nq/6NK4Im3U2w2FTZKM 5OuzZund0HhiugDLfUx75zvl5WrJVs4iGUAhUGkOz+DbhTW8RdPJ/BvFwaVVjpBN W/RoImIOs4e71A== -----END CERTIFICATE-----Generated at Sun Apr 19 08:28:02 2026 by rpki-client