$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: ACDxrVzFeR7qSeAq0vKe7zmCzDMc6HwqXoiElmHgC7w= Subject key identifier: 99:92:A0:C8:EB:50:D7:4E:4F:F8:C6:20:49:D5:01:4A:3B:2B:6B:5D Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019D996213F1DFC1391731F7D8E1E5BD4251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0C27 Signing time: Fri 17 Apr 2026 03:00:34 +0000 Manifest this update: Fri 17 Apr 2026 03:00:34 +0000 Manifest next update: Sat 18 Apr 2026 03:00:34 +0000 Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=) 2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=) 3: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=) 4: BM_HgvB1ieY5WUpFTxU63_9kGNo.roa (hash: iddaFlVd9smwAlHjBr7dZr+J/UTaU0dMdguVDg9n9Xg=) 5: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=) 6: ONqPurqrHVMfwrJOahm-hLa_T5g.roa (hash: ZlEZvfK7OYrNuzavDM8lorWGQ5ktu+dv/s2X755rVok=) 7: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=) 8: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=) 9: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=) 10: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: iAgG9OSFQijG8pQO6ZzAWG33fJ+Fcheb9gT5s5F+S+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:13:f1:df:c1:39:17:31:f7:d8:e1:e5:bd:42:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Apr 17 03:00:34 2026 GMT Not After : Apr 18 03:00:34 2026 GMT Subject: CN=9992a0c8eb50d74e4ff8c62049d5014a3b2b6b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:a4:55:46:3f:66:18:6b:d0:58:a8:cc:19: ca:29:2f:ef:d0:8c:42:5c:58:69:cf:c8:32:a6:94: ff:82:cc:08:d4:f8:95:98:08:98:cc:7d:99:1a:b2: 20:ec:51:31:05:65:da:a2:aa:ec:54:7a:7f:5b:24: 16:db:1b:32:5d:be:32:11:fa:d1:c9:3b:bf:56:59: 84:41:73:98:a0:43:be:45:9d:a6:6b:f7:39:0c:3e: b5:7e:ae:1e:2f:d7:5b:62:9c:97:94:f8:4c:1c:b0: 2d:d8:42:cd:85:01:b6:fb:33:3a:3a:c9:7b:1a:49: b0:9e:e1:b2:db:11:4b:bb:4b:ca:49:07:5c:46:2f: dd:ba:7d:08:d4:f1:5e:8b:88:ec:b9:46:06:be:6b: 7c:68:c7:17:f2:5a:a8:c1:1e:44:0a:eb:46:b2:bc: f5:5f:f0:14:43:5f:50:e4:92:c2:a2:53:a3:16:27: f9:5d:55:10:7d:ef:48:5c:cb:24:62:94:42:51:87: 11:e3:d6:eb:34:dd:c8:ca:ce:94:d5:a1:53:9d:d1: 5c:6e:bb:5b:fa:62:f5:ab:bc:3d:a7:95:55:12:6a: dc:a4:bb:5c:61:a3:35:93:d1:31:b5:80:26:15:51: e8:88:a2:e6:8a:38:76:a2:ed:a4:c9:76:4c:23:8d: 62:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:92:A0:C8:EB:50:D7:4E:4F:F8:C6:20:49:D5:01:4A:3B:2B:6B:5D X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:78:81:72:fe:60:3b:02:b3:6b:15:d3:8c:95:01:cd:52:ab: 92:91:99:7f:2e:57:cb:3e:46:90:5c:2b:da:37:25:b1:cf:f1: 2f:90:2f:15:69:a2:08:50:3b:44:87:b8:d2:78:c0:e7:d8:9c: 1f:63:d5:e3:89:a2:00:d6:d7:16:e4:44:55:9a:b0:c6:08:c4: b4:97:33:dc:a8:24:54:72:72:4e:8d:64:95:e0:71:55:e5:df: 5a:e0:e4:ec:4e:d2:4d:db:c4:4b:d9:ac:03:4c:80:b5:b7:94: e4:0c:c1:f4:f6:a3:08:72:85:13:23:aa:44:7e:ba:89:8c:35: a8:9c:69:71:c0:6c:c8:e2:ec:2d:92:36:e0:5f:32:e7:19:32: 7f:d5:a9:76:64:4c:4c:ef:ce:ad:2d:62:b0:ca:e0:64:9c:0d: 68:43:cd:b8:98:51:a7:f2:c7:a9:91:3e:04:ab:b4:d9:06:df: 76:84:6d:4b:8b:2d:a2:c2:a8:84:1e:51:e3:12:da:8f:7b:40: ae:ff:4b:b7:ac:f4:a2:b8:d0:54:59:41:23:08:30:77:00:7f: 9e:48:76:14:29:9b:ed:a0:cc:5d:fa:f8:98:47:c0:85:ca:40: d6:b6:96:a4:84:61:18:5a:31:36:0d:67:b6:c7:30:09:70:fe: 05:84:e5:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYhPx38E5FzH32OHlvUJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwNDE3MDMwMDM0WhcNMjYwNDE4MDMwMDM0WjAzMTEwLwYDVQQD Eyg5OTkyYTBjOGViNTBkNzRlNGZmOGM2MjA0OWQ1MDE0YTNiMmI2YjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuWkVUY/Zhhr0FiozBnKKS/v0IxC XFhpz8gyppT/gswI1PiVmAiYzH2ZGrIg7FExBWXaoqrsVHp/WyQW2xsyXb4yEfrR yTu/VlmEQXOYoEO+RZ2ma/c5DD61fq4eL9dbYpyXlPhMHLAt2ELNhQG2+zM6Osl7 GkmwnuGy2xFLu0vKSQdcRi/dun0I1PFei4jsuUYGvmt8aMcX8lqowR5ECutGsrz1 X/AUQ19Q5JLColOjFif5XVUQfe9IXMskYpRCUYcR49brNN3Iys6U1aFTndFcbrtb +mL1q7w9p5VVEmrcpLtcYaM1k9ExtYAmFVHoiKLmijh2ou2kyXZMI41iOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmSoMjrUNdOT/jGIEnVAUo7K2tdMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3iBcv5g OwKzaxXTjJUBzVKrkpGZfy5Xyz5GkFwr2jclsc/xL5AvFWmiCFA7RIe40njA59ic H2PV44miANbXFuREVZqwxgjEtJcz3KgkVHJyTo1kleBxVeXfWuDk7E7STdvES9ms A0yAtbeU5AzB9PajCHKFEyOqRH66iYw1qJxpccBsyOLsLZI24F8y5xkyf9WpdmRM TO/OrS1isMrgZJwNaEPNuJhRp/LHqZE+BKu02QbfdoRtS4stosKohB5R4xLaj3tA rv9Lt6z0orjQVFlBIwgwdwB/nkh2FCmb7aDMXfr4mEfAhcpA1raWpIRhGFoxNg1n tscwCXD+BYTlng== -----END CERTIFICATE-----Generated at Fri Apr 17 06:45:08 2026 by rpki-client