$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: 24xVIYn+FTluNP/jaSyqEsJJcDua4tRmDwZO57nBDPc= Subject key identifier: 8C:19:44:EB:99:80:E8:36:CD:FE:63:1D:2D:FD:4E:BF:A4:70:AF:9B Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019D9A74C9AF1FEE0E067737E50D6974D38A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 10DA Signing time: Fri 17 Apr 2026 08:00:38 +0000 Manifest this update: Fri 17 Apr 2026 08:00:38 +0000 Manifest next update: Sat 18 Apr 2026 08:00:38 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa (hash: XCZ0JTvoTGZ62Q11PauRxwPTiRMvREV2N/LHqEFLe2w=) 4: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 5: GyehNP3GNMAkeXlLJEWyWCcQtzU.roa (hash: IpYqqZa4sTN+dmYx8FkURhFjGrU2UAuArFl+utDihPQ=) 6: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 7: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: Jph9kbyhRWMkPemADYqMKF3r4MN7ntBCjCQnguQFRI4=) 8: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 9: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 10: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 11: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:74:c9:af:1f:ee:0e:06:77:37:e5:0d:69:74:d3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Apr 17 08:00:38 2026 GMT Not After : Apr 18 08:00:38 2026 GMT Subject: CN=8c1944eb9980e836cdfe631d2dfd4ebfa470af9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ac:ff:04:a8:3f:08:a5:8c:83:1c:6e:13:ce: b4:15:1a:98:0c:ec:76:59:b0:46:18:9e:d6:8d:49: 3a:b6:73:5b:fe:0a:54:20:e1:b5:95:31:3f:e7:23: ec:17:d2:0d:70:6f:83:c1:dd:4f:27:07:8f:4a:31: 7f:8b:20:87:b4:2c:69:2c:55:70:74:d5:18:38:f2: a9:05:86:04:98:8c:6c:b0:f8:df:5c:09:80:51:8c: b3:e7:89:28:0a:94:bf:e5:ad:b9:31:01:5e:44:a0: da:48:e8:5d:eb:b0:52:a3:33:1c:f3:45:80:3e:cf: 37:88:49:83:0b:c4:db:89:e3:66:9b:f0:0d:2c:b6: a1:f6:05:e7:d5:23:3a:d0:11:7d:83:65:08:d0:25: 64:4b:0c:89:06:28:83:ce:18:68:2b:3c:b5:31:96: 81:3a:4c:30:3c:9d:31:6f:c2:20:c6:72:80:cc:46: 8d:f9:ed:b3:11:7e:40:0f:e7:38:4a:3c:11:d7:48: a8:1b:79:6f:52:2d:ef:fe:f5:ce:2f:60:3c:62:73: 95:8d:f2:ac:4e:d1:84:27:2a:f6:12:f4:57:f5:5e: db:72:f3:19:50:38:d8:c2:e3:1f:e7:3a:d1:0e:60: 8b:00:f9:78:eb:aa:64:27:07:cc:95:9e:2f:28:1f: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:19:44:EB:99:80:E8:36:CD:FE:63:1D:2D:FD:4E:BF:A4:70:AF:9B X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7a:a2:6b:53:67:5a:f9:a4:3b:84:44:6a:ea:fa:2b:b4:d5: 3d:a1:af:d9:89:36:d1:dc:7b:1c:59:39:f6:b8:cc:26:c9:2b: 5a:d2:77:74:f8:39:48:e5:1b:08:d2:54:7f:b5:c3:7e:9c:1f: 6f:66:8e:0d:fb:84:42:d5:91:70:27:8b:0a:05:b2:7b:d9:fa: 95:5e:e3:59:e3:3a:fd:49:df:86:38:ee:3a:7b:14:e1:01:e3: 79:61:a3:a5:6e:54:e3:bf:bf:b8:92:6d:fd:37:2c:da:1e:bf: 05:71:3f:0a:b1:16:64:fa:c7:13:37:28:95:8a:fa:df:96:d7: 9d:a6:d8:23:31:3e:e4:c6:21:dc:80:d0:eb:be:27:d4:d8:ac: 44:7d:3a:8a:f1:fb:01:69:43:ce:11:80:52:90:4c:22:39:f5: 1b:b9:e1:77:9b:c1:06:15:17:a5:1b:26:fe:b6:86:2e:4f:f7: 96:6d:d3:be:5d:a1:83:68:04:fb:db:de:64:a3:07:e5:88:b4: 42:c6:30:d5:bd:eb:66:f6:a4:79:51:e9:af:80:f5:f9:af:16: 62:9e:11:29:b2:0c:86:2c:7b:0a:c1:95:fc:a9:3d:63:52:22: a4:c2:55:cc:c0:d1:cd:3b:90:0d:e6:8c:1d:c5:ae:8e:b9:2d: 79:c6:e9:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adMmvH+4OBnc35Q1pdNOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwNDE3MDgwMDM4WhcNMjYwNDE4MDgwMDM4WjAzMTEwLwYDVQQD Eyg4YzE5NDRlYjk5ODBlODM2Y2RmZTYzMWQyZGZkNGViZmE0NzBhZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2az/BKg/CKWMgxxuE860FRqYDOx2 WbBGGJ7WjUk6tnNb/gpUIOG1lTE/5yPsF9INcG+Dwd1PJwePSjF/iyCHtCxpLFVw dNUYOPKpBYYEmIxssPjfXAmAUYyz54koCpS/5a25MQFeRKDaSOhd67BSozMc80WA Ps83iEmDC8TbieNmm/ANLLah9gXn1SM60BF9g2UI0CVkSwyJBiiDzhhoKzy1MZaB OkwwPJ0xb8IgxnKAzEaN+e2zEX5AD+c4SjwR10ioG3lvUi3v/vXOL2A8YnOVjfKs TtGEJyr2EvRX9V7bcvMZUDjYwuMf5zrRDmCLAPl466pkJwfMlZ4vKB8eLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwZROuZgOg2zf5jHS39Tr+kcK+bMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3qia1Nn WvmkO4REaur6K7TVPaGv2Yk20dx7HFk59rjMJskrWtJ3dPg5SOUbCNJUf7XDfpwf b2aODfuEQtWRcCeLCgWye9n6lV7jWeM6/UnfhjjuOnsU4QHjeWGjpW5U47+/uJJt /Tcs2h6/BXE/CrEWZPrHEzcolYr635bXnabYIzE+5MYh3IDQ674n1NisRH06ivH7 AWlDzhGAUpBMIjn1G7nhd5vBBhUXpRsm/raGLk/3lm3Tvl2hg2gE+9veZKMH5Yi0 QsYw1b3rZvakeVHpr4D1+a8WYp4RKbIMhix7CsGV/Kk9Y1IipMJVzMDRzTuQDeaM HcWujrktecbpng== -----END CERTIFICATE-----Generated at Fri Apr 17 09:59:49 2026 by rpki-client