$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: lBIPTuGyHa9ryBWeLhFqJuvDnrN71R5Qs9eSXILxwhE= Subject key identifier: 27:70:FF:D9:59:52:93:6E:DE:9F:31:AD:C6:53:98:BF:74:5D:BC:DB Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019DA453EDA38321E2A3C7E9E511F9438037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 16B9 Signing time: Sun 19 Apr 2026 06:00:56 +0000 Manifest this update: Sun 19 Apr 2026 06:00:56 +0000 Manifest next update: Mon 20 Apr 2026 06:00:56 +0000 Files and hashes: 1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=) 2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: 9ByCfKRRn39Ijd/97Re+ugC1J9OldfmaXzpyBqsVbqs=) 4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=) 5: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=) 6: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=) 7: WkDZDOXBWr9x5TExAfjLxWKxbkU.roa (hash: YkRBfAeJDTqNqtEqsLxdtIzJ8woFGgTRSv1hmR+uNQ4=) 8: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=) 9: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=) 10: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (hash: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk=) 11: wlkqPCWXMJsz1R99hgzE3_VYv5c.roa (hash: KrKqWLoyfi0cuRqfEdDLZj1DmY6m+y1d1kGaimNA4oE=) 12: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:53:ed:a3:83:21:e2:a3:c7:e9:e5:11:f9:43:80:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Apr 19 06:00:56 2026 GMT Not After : Apr 20 06:00:56 2026 GMT Subject: CN=2770ffd95952936ede9f31adc65398bf745dbcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1c:08:b3:a0:11:2d:9a:8c:eb:2d:b7:f9:35: dc:f6:03:d9:54:01:0b:e7:19:98:9c:ae:ed:43:d7: 47:f0:9d:bc:99:9d:14:be:01:02:b6:06:cd:62:96: 80:5d:71:bf:e7:b2:04:5b:9f:4c:c0:50:8e:c6:f0: ea:ac:bb:ca:96:29:a6:b4:c0:ba:d4:ce:fc:a6:63: c5:66:c7:d6:e2:f8:da:95:8e:0a:c7:d4:6b:3e:ad: 4a:fb:1f:1d:de:c2:d1:c2:9d:0e:55:88:24:de:bb: fd:b9:b5:e3:2b:6a:a0:f5:a4:7f:9f:d2:14:97:75: 64:2f:9b:9c:52:5e:ca:c9:1c:78:25:65:82:82:b2: 2b:9b:28:a1:7c:d2:ca:ac:ee:0f:cd:b3:8d:66:eb: f5:39:12:81:42:5c:9f:a5:b5:67:ca:ce:8a:2a:4c: 7d:58:94:e4:c8:45:95:a7:e7:2b:83:33:f9:5e:26: 74:07:42:0d:00:f0:d6:ab:f4:2e:df:65:32:9c:6f: 4c:29:9d:c4:43:c2:46:4b:f4:85:8d:46:e9:41:e6: 9c:87:02:e9:6d:a9:58:b8:d5:d6:ed:71:99:bf:b2: a1:67:6c:48:b3:62:70:8e:35:89:3a:7e:64:1a:32: 86:af:c7:2d:62:85:18:cd:69:57:a4:5e:46:ba:17: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:FF:D9:59:52:93:6E:DE:9F:31:AD:C6:53:98:BF:74:5D:BC:DB X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8d:d8:02:d6:49:70:99:de:50:63:47:72:da:e3:7c:0b:ac: 00:f9:ff:e9:41:19:59:a4:ef:58:3e:43:15:cd:18:a9:14:5f: 4e:1c:0a:89:eb:39:0b:2d:72:3f:f6:e7:3d:a6:5b:50:b0:3e: e6:88:0f:35:79:ec:20:fa:ad:5f:ef:05:b9:3a:bc:7c:17:84: f8:2b:6c:b5:db:ae:d1:d7:7d:7d:28:25:1e:3e:19:63:90:5d: 65:73:56:e5:74:35:96:6f:96:d2:6f:04:85:a1:da:00:2f:d2: f1:a5:38:a2:ee:7c:ec:c2:89:ad:89:e8:65:4f:0e:02:2d:8e: 07:4a:0d:93:c3:9e:34:87:e6:1c:3f:ab:3a:fd:46:cc:56:29: 7a:8e:d3:0a:7c:69:5f:0c:e6:a2:9e:c1:e7:f4:83:10:95:38: c6:f9:ad:94:0a:10:59:14:43:e4:4f:21:9d:b3:7c:4e:6c:0d: 1e:05:72:21:fc:6a:66:06:3f:e7:47:a8:3a:65:95:b2:1c:4a: 24:5c:e8:e4:6d:d8:1c:12:fa:ca:3d:3d:e4:cc:01:6f:06:fc: 0a:de:b3:e7:44:7a:29:07:ba:65:d3:00:9f:cd:61:d8:09:7c: bb:f8:93:a2:3d:09:78:51:5d:3c:d9:46:02:9b:82:b7:ce:ae: 6c:d1:0a:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kU+2jgyHio8fp5RH5Q4A3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwNDE5MDYwMDU2WhcNMjYwNDIwMDYwMDU2WjAzMTEwLwYDVQQD EygyNzcwZmZkOTU5NTI5MzZlZGU5ZjMxYWRjNjUzOThiZjc0NWRiY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRwIs6ARLZqM6y23+TXc9gPZVAEL 5xmYnK7tQ9dH8J28mZ0UvgECtgbNYpaAXXG/57IEW59MwFCOxvDqrLvKlimmtMC6 1M78pmPFZsfW4vjalY4Kx9RrPq1K+x8d3sLRwp0OVYgk3rv9ubXjK2qg9aR/n9IU l3VkL5ucUl7KyRx4JWWCgrIrmyihfNLKrO4PzbONZuv1ORKBQlyfpbVnys6KKkx9 WJTkyEWVp+crgzP5XiZ0B0INAPDWq/Qu32UynG9MKZ3EQ8JGS/SFjUbpQeachwLp balYuNXW7XGZv7KhZ2xIs2JwjjWJOn5kGjKGr8ctYoUYzWlXpF5Guhe7XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdw/9lZUpNu3p8xrcZTmL90XbzbMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYY3YAtZJ cJneUGNHctrjfAusAPn/6UEZWaTvWD5DFc0YqRRfThwKies5Cy1yP/bnPaZbULA+ 5ogPNXnsIPqtX+8FuTq8fBeE+Ctstduu0dd9fSglHj4ZY5BdZXNW5XQ1lm+W0m8E haHaAC/S8aU4ou587MKJrYnoZU8OAi2OB0oNk8OeNIfmHD+rOv1GzFYpeo7TCnxp Xwzmop7B5/SDEJU4xvmtlAoQWRRD5E8hnbN8TmwNHgVyIfxqZgY/50eoOmWVshxK JFzo5G3YHBL6yj095MwBbwb8Ct6z50R6KQe6ZdMAn81h2Al8u/iToj0JeFFdPNlG ApuCt86ubNEKqg== -----END CERTIFICATE-----Generated at Sun Apr 19 10:14:28 2026 by rpki-client