$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: m7lHRs0zJrlVRtir66cj64KuKpTNB/UiMoNIMrYAeto= Subject key identifier: 12:91:9F:5B:74:3D:A0:85:3E:0A:1B:F0:61:CE:41:8B:0A:A6:F7:E5 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019D98F4E7BD2AF32372E0301663666A02E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 0767 Signing time: Fri 17 Apr 2026 01:01:20 +0000 Manifest this update: Fri 17 Apr 2026 01:01:20 +0000 Manifest next update: Sat 18 Apr 2026 01:01:20 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: kjYjyeuw5y5BFGDcG8cnrHH4DXTD7phHW2G69WEGSVQ=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:f4:e7:bd:2a:f3:23:72:e0:30:16:63:66:6a:02:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Apr 17 01:01:20 2026 GMT Not After : Apr 18 01:01:20 2026 GMT Subject: CN=12919f5b743da0853e0a1bf061ce418b0aa6f7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:7e:19:d0:11:91:c0:20:2d:75:05:ab:ed: b3:0f:52:4f:7d:f9:1b:95:6a:39:36:81:67:8f:a8: 3f:1f:4e:1e:5f:11:21:f6:29:96:1d:4c:4a:68:57: 41:2a:60:f2:5f:1d:6c:74:10:53:1c:35:d4:8d:82: 62:81:fb:4b:0e:77:f1:37:cb:36:c6:1b:23:e9:ff: 5b:0b:91:01:f9:c5:a2:80:e8:a9:b1:95:ef:89:6c: ac:70:6e:4e:17:22:c6:ca:fd:f7:8f:dc:8a:1e:67: 1f:e7:bf:fe:23:e8:9c:26:d3:c4:92:06:73:17:66: c5:83:6e:b9:b0:e9:31:ed:05:ec:a3:64:2e:b7:23: 93:0b:de:86:7b:24:3b:fc:80:6a:fb:69:0d:13:2f: ad:8e:b8:1f:7d:15:af:68:e5:f5:8e:a2:48:d4:7c: 3c:2c:6a:64:3c:da:ea:f4:61:c9:7b:1f:19:94:17: 8d:2b:ba:76:73:c9:de:27:25:e4:51:49:dc:95:df: 8c:d6:e2:90:c0:83:67:25:54:f8:91:8b:08:d1:40: dd:82:c7:5c:e7:db:74:3e:28:a6:e4:65:b5:e6:76: 18:15:5a:f7:eb:d7:42:22:31:2c:48:c6:6f:94:7f: ee:08:d9:1d:01:34:71:2d:03:24:a8:46:49:09:f4: c7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:91:9F:5B:74:3D:A0:85:3E:0A:1B:F0:61:CE:41:8B:0A:A6:F7:E5 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5e:d0:e4:07:6b:97:d9:b7:7c:72:c1:dc:1f:bc:35:91:f6: d4:75:69:f2:f9:1d:e1:c1:90:4e:a5:f1:8b:80:7f:e5:68:28: 65:40:1e:f2:56:97:82:2b:7b:8c:f0:8c:5c:22:2e:bd:bf:56: b5:9d:1b:70:50:11:73:a6:11:40:18:6b:f4:ab:24:37:0a:3f: 2d:28:ea:4c:23:ae:6d:a7:55:4c:b9:b9:74:5d:90:16:37:26: 46:7c:80:c5:b1:6a:f0:56:09:63:ad:77:3a:9b:60:1c:26:ad: b4:b4:e8:ec:f7:8e:7c:b2:bd:ea:14:07:b4:15:b7:54:b1:b9: 52:0a:3d:1c:5f:57:3c:ca:a7:de:f6:32:93:4c:9e:c3:6c:26: d1:b8:40:87:a6:5e:cc:30:a0:76:7b:47:95:a2:94:37:e7:96: fe:7f:94:50:7c:e5:23:15:29:96:c2:db:b2:72:8c:85:06:6b: 60:f8:ff:25:89:dd:25:b7:e6:12:e7:6e:96:3e:88:fa:18:49: 5e:34:13:d8:a6:35:ee:88:e9:1c:bb:2b:f6:c2:0f:10:91:74: 53:90:e7:fd:36:8e:65:a3:0a:46:a2:15:ff:ab:a4:49:e2:b4: 3f:eb:b0:37:83:f4:e5:ef:a4:80:d6:17:30:3b:5a:4f:58:fe: 87:3e:45:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Y9Oe9KvMjcuAwFmNmagLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwNDE3MDEwMTIwWhcNMjYwNDE4MDEwMTIwWjAzMTEwLwYDVQQD EygxMjkxOWY1Yjc0M2RhMDg1M2UwYTFiZjA2MWNlNDE4YjBhYTZmN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZx+GdARkcAgLXUFq+2zD1JPffkb lWo5NoFnj6g/H04eXxEh9imWHUxKaFdBKmDyXx1sdBBTHDXUjYJigftLDnfxN8s2 xhsj6f9bC5EB+cWigOipsZXviWyscG5OFyLGyv33j9yKHmcf57/+I+icJtPEkgZz F2bFg265sOkx7QXso2QutyOTC96GeyQ7/IBq+2kNEy+tjrgffRWvaOX1jqJI1Hw8 LGpkPNrq9GHJex8ZlBeNK7p2c8neJyXkUUncld+M1uKQwINnJVT4kYsI0UDdgsdc 59t0Piim5GW15nYYFVr369dCIjEsSMZvlH/uCNkdATRxLQMkqEZJCfTHCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKRn1t0PaCFPgob8GHOQYsKpvflMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVF7Q5Adr l9m3fHLB3B+8NZH21HVp8vkd4cGQTqXxi4B/5WgoZUAe8laXgit7jPCMXCIuvb9W tZ0bcFARc6YRQBhr9KskNwo/LSjqTCOubadVTLm5dF2QFjcmRnyAxbFq8FYJY613 OptgHCattLTo7PeOfLK96hQHtBW3VLG5Ugo9HF9XPMqn3vYyk0yew2wm0bhAh6Ze zDCgdntHlaKUN+eW/n+UUHzlIxUplsLbsnKMhQZrYPj/JYndJbfmEudulj6I+hhJ XjQT2KY17ojpHLsr9sIPEJF0U5Dn/TaOZaMKRqIV/6ukSeK0P+uwN4P05e+kgNYX MDtaT1j+hz5FUg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:28:22 2026 by rpki-client