$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: h01XsfqFQ55JWCazNdWHddEdU2BrA6takme0whcZNxI= Subject key identifier: 06:9E:A7:6A:B7:47:B7:80:CB:E5:C3:28:77:38:E8:59:68:8C:38:FC Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019D98BD77B5468DA6664195B24C987309D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 159E Signing time: Fri 17 Apr 2026 00:00:46 +0000 Manifest this update: Fri 17 Apr 2026 00:00:46 +0000 Manifest next update: Sat 18 Apr 2026 00:00:46 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=) 4: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 5: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 6: aBJGwoNtwjYYCfL_vY3KC-5KRiw.roa (hash: qe/bdX+L1Ag/Xhut7yjVu6KrdVE0BnulRsPIthNL1pg=) 7: cYegkqTDRQkQYBG0QAGLC43ERoE.roa (hash: Jj0rGclcjFrkbXAtvfPBQZbVxQ41VQry0fjFc8pn/lw=) 8: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 9: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: 4qr1gAv2yrozcVzlOMsExXORP89loFqBJbLBY+DKS08=) 10: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=) 11: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 12: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:77:b5:46:8d:a6:66:41:95:b2:4c:98:73:09:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Apr 17 00:00:46 2026 GMT Not After : Apr 18 00:00:46 2026 GMT Subject: CN=069ea76ab747b780cbe5c3287738e859688c38fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:29:9b:75:40:e8:ba:a4:cf:b9:b4:a9:19: 61:d9:49:2a:b9:a8:3c:e1:42:e9:21:d4:c6:4e:3b: 2d:1e:23:04:39:16:29:94:f7:7b:02:47:d2:a3:23: c7:19:b5:51:04:ee:a7:af:16:ff:e5:95:8c:ff:17: 23:71:63:35:70:e0:3e:8b:e2:e7:b6:6f:b8:ab:39: b6:59:bc:55:60:c4:25:06:e9:e7:54:1d:c8:11:10: 75:12:91:53:ad:f9:85:25:93:11:fd:40:31:30:80: f0:1e:ca:7a:e9:42:44:f2:6f:e1:3e:49:64:fe:94: 45:3d:ba:e5:1a:71:0e:5e:88:b7:96:c4:3b:c8:01: 82:21:48:7d:d3:7d:32:69:60:aa:67:b8:25:de:ce: 39:8a:b0:e2:4e:54:5b:2d:7a:75:99:3d:1d:fa:dc: 19:09:75:ac:09:53:39:76:bd:ec:df:e6:84:46:9d: 49:b8:b9:ed:cc:8a:93:76:4f:04:ac:21:12:c8:e3: 89:d5:a3:c5:3d:d6:9d:0e:17:56:5e:97:90:9f:3e: 43:b7:74:fa:cc:d2:17:40:41:a3:fb:5a:24:10:c0: a4:49:4a:9c:51:8d:bc:96:cc:df:65:3d:73:af:bc: fb:2b:8d:21:ae:05:17:21:79:49:61:47:97:c2:4c: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9E:A7:6A:B7:47:B7:80:CB:E5:C3:28:77:38:E8:59:68:8C:38:FC X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:fd:b9:99:88:8e:99:4d:33:be:36:62:c5:2e:36:d9:94:f4: 82:b0:07:53:86:9b:5c:7c:1e:58:2a:85:f7:49:07:b7:b8:2e: 21:9a:b5:88:4e:f8:66:fc:77:87:19:a2:99:5e:7f:64:c1:0e: 44:41:3f:fa:5c:67:3d:7d:19:06:72:d0:0f:b7:e0:4c:df:54: 5f:ef:ba:a1:da:9f:5b:80:75:0b:d7:70:cb:e0:25:3c:f5:bd: ee:9e:07:0b:dd:c3:3a:cb:df:bb:73:d9:63:1d:3e:18:38:8b: 25:4b:ec:5f:6f:23:6b:99:91:38:ef:c5:b6:8f:a5:fc:0b:d5: 1d:9f:34:28:f3:a9:fa:ef:65:11:e6:13:4b:41:de:fb:81:5a: e6:c9:2f:96:94:91:b7:54:5b:be:44:99:0b:5e:56:04:88:5b: e6:c8:83:ef:42:d4:c9:a8:4c:06:cf:4e:11:a9:fe:33:01:c0: 44:8a:4e:80:a8:c6:96:ee:8f:28:22:66:b8:37:76:ec:6f:6f: dc:53:fc:8a:a7:87:de:77:d3:11:2d:38:d4:3e:b5:f5:b5:3e: f2:bc:1e:e1:e1:73:d9:e3:83:c9:5d:71:79:7c:3f:2b:9e:00: 86:27:bb:9f:e5:b7:fd:bd:d1:5a:d4:e4:e2:f2:85:03:64:79: e2:ce:71:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YvXe1Ro2mZkGVskyYcwnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwNDE3MDAwMDQ2WhcNMjYwNDE4MDAwMDQ2WjAzMTEwLwYDVQQD EygwNjllYTc2YWI3NDdiNzgwY2JlNWMzMjg3NzM4ZTg1OTY4OGMzOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm8pm3VA6Lqkz7m0qRlh2Ukquag8 4ULpIdTGTjstHiMEORYplPd7AkfSoyPHGbVRBO6nrxb/5ZWM/xcjcWM1cOA+i+Ln tm+4qzm2WbxVYMQlBunnVB3IERB1EpFTrfmFJZMR/UAxMIDwHsp66UJE8m/hPklk /pRFPbrlGnEOXoi3lsQ7yAGCIUh9030yaWCqZ7gl3s45irDiTlRbLXp1mT0d+twZ CXWsCVM5dr3s3+aERp1JuLntzIqTdk8ErCESyOOJ1aPFPdadDhdWXpeQnz5Dt3T6 zNIXQEGj+1okEMCkSUqcUY28lszfZT1zr7z7K40hrgUXIXlJYUeXwkyLhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaep2q3R7eAy+XDKHc46FlojDj8MB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArf25mYiO mU0zvjZixS422ZT0grAHU4abXHweWCqF90kHt7guIZq1iE74Zvx3hxmimV5/ZMEO REE/+lxnPX0ZBnLQD7fgTN9UX++6odqfW4B1C9dwy+AlPPW97p4HC93DOsvfu3PZ Yx0+GDiLJUvsX28ja5mROO/Fto+l/AvVHZ80KPOp+u9lEeYTS0He+4Fa5skvlpSR t1RbvkSZC15WBIhb5siD70LUyahMBs9OEan+MwHARIpOgKjGlu6PKCJmuDd27G9v 3FP8iqeH3nfTES041D619bU+8rwe4eFz2eODyV1xeXw/K54Ahie7n+W3/b3RWtTk 4vKFA2R54s5x7A== -----END CERTIFICATE-----Generated at Fri Apr 17 09:41:37 2026 by rpki-client