$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: KoukfA0Md1LZfZEYezmAkHFG3tccHSNpjPBBpbkspRQ= Subject key identifier: 68:6B:40:18:5A:91:0D:A0:C8:F1:6A:5B:80:5C:60:4D:C5:66:9B:F9 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019D98F52A390533D815736E5FC3042C6660 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 18C8 Signing time: Fri 17 Apr 2026 01:01:37 +0000 Manifest this update: Fri 17 Apr 2026 01:01:37 +0000 Manifest next update: Sat 18 Apr 2026 01:01:37 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: nqAV2QOPbFJoYGndAgPm+TYYeGKU/MPOOGi8tyOQqWM=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: JzVOn48opN5OmQw_kWDCZlB03-8.roa (hash: WnteOYQuoH/SPZnd3lWEYH6qe+d3lLK1B3+/F/zOHBo=) 8: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 12: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 13: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:f5:2a:39:05:33:d8:15:73:6e:5f:c3:04:2c:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Apr 17 01:01:37 2026 GMT Not After : Apr 18 01:01:37 2026 GMT Subject: CN=686b40185a910da0c8f16a5b805c604dc5669bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b4:26:57:66:72:e6:7f:9a:c1:8f:c9:59:80: e6:9a:5b:aa:99:6e:50:02:bb:55:fc:28:6e:47:48: 34:ed:28:5b:46:a3:ac:3a:f9:c9:e5:63:79:34:fa: 81:9f:e8:9c:c6:a6:99:93:27:3e:f3:d9:75:bf:b8: cd:16:72:4b:f2:f8:13:ac:db:5d:25:c0:3d:1d:48: 8c:74:0d:95:64:70:55:61:76:53:aa:ea:ef:1b:18: 56:b9:b0:df:32:ac:16:01:90:84:61:72:d8:69:55: 42:32:b9:ae:9d:09:1e:2d:31:b9:6b:83:84:23:f4: 7d:99:7f:f4:85:5f:df:77:ac:37:72:5b:ce:ac:6a: 3d:b9:b7:da:d2:44:67:f4:28:20:3d:a6:a2:6d:72: 13:84:b4:fe:11:bf:34:52:58:fb:a3:f7:68:77:26: b7:96:39:e3:ed:ae:6e:72:e5:a6:7b:bb:02:e6:9c: 17:88:0d:7d:bf:54:cc:df:53:22:b2:22:6d:cc:ee: b2:4c:1e:10:f2:71:d6:ed:87:a2:cc:1d:69:a2:4d: d9:2e:22:be:9e:0f:d9:c2:2e:53:8c:26:b4:29:75: e9:bf:2b:a4:82:ca:c4:4a:21:99:71:11:da:b5:bd: f2:38:7d:05:30:8c:fb:0e:44:d1:9b:d9:c5:9a:de: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6B:40:18:5A:91:0D:A0:C8:F1:6A:5B:80:5C:60:4D:C5:66:9B:F9 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:62:9e:c8:1a:e2:a2:fc:0a:01:73:cd:a6:5a:7a:fa:44:99: 44:e7:58:ab:5d:84:8f:38:38:4a:14:1f:b0:65:22:9e:22:8a: f8:66:3d:ba:f2:11:bd:63:94:fd:6c:50:1c:b7:ca:7a:ff:10: e1:f2:a4:33:5a:90:59:70:fd:89:16:77:24:24:57:76:15:75: ee:f8:9c:0e:d5:d8:1e:f7:4f:58:23:61:38:27:a0:04:6b:33: 74:1c:26:ff:2c:28:8c:e4:bb:eb:92:2c:00:22:4c:cc:43:cf: 10:35:9d:c8:22:34:a7:f9:e8:7d:9d:57:53:db:08:65:b7:74: 4c:49:e3:f9:04:25:a9:cb:ae:f0:3b:8b:29:70:5d:9a:27:93: 66:5c:32:95:f7:4a:c5:9f:eb:d9:0a:8a:e6:e7:9c:f1:c4:61: a1:da:ab:1a:b5:af:ad:14:3d:e0:be:71:43:44:b6:62:9a:9e: b6:c7:ac:58:82:a8:ec:cf:4e:50:c6:9c:08:76:3c:cc:74:ce: 15:09:e4:f9:61:00:65:f4:a5:9b:dd:f2:94:93:b7:fc:b4:63: f1:13:de:90:a7:15:c1:45:ea:19:0d:1e:fd:4d:30:02:e3:1d: 86:87:dd:14:09:b9:35:56:9b:21:23:2d:f1:46:39:ce:d2:bc: 84:77:29:f9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ2Y9So5BTPYFXNuX8MELGZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwNDE3MDEwMTM3WhcNMjYwNDE4MDEwMTM3WjAzMTEwLwYDVQQD Eyg2ODZiNDAxODVhOTEwZGEwYzhmMTZhNWI4MDVjNjA0ZGM1NjY5YmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bQmV2Zy5n+awY/JWYDmmluqmW5Q ArtV/ChuR0g07ShbRqOsOvnJ5WN5NPqBn+icxqaZkyc+89l1v7jNFnJL8vgTrNtd JcA9HUiMdA2VZHBVYXZTqurvGxhWubDfMqwWAZCEYXLYaVVCMrmunQkeLTG5a4OE I/R9mX/0hV/fd6w3clvOrGo9ubfa0kRn9CggPaaibXIThLT+Eb80Ulj7o/dodya3 ljnj7a5ucuWme7sC5pwXiA19v1TM31MisiJtzO6yTB4Q8nHW7YeizB1pok3ZLiK+ ng/Zwi5TjCa0KXXpvyukgsrESiGZcRHatb3yOH0FMIz7DkTRm9nFmt5l6wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGhrQBhakQ2gyPFqW4BcYE3FZpv5MB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGKe yBriovwKAXPNplp6+kSZROdYq12Ejzg4ShQfsGUiniKK+GY9uvIRvWOU/WxQHLfK ev8Q4fKkM1qQWXD9iRZ3JCRXdhV17vicDtXYHvdPWCNhOCegBGszdBwm/ywojOS7 65IsACJMzEPPEDWdyCI0p/nofZ1XU9sIZbd0TEnj+QQlqcuu8DuLKXBdmieTZlwy lfdKxZ/r2QqK5uec8cRhodqrGrWvrRQ94L5xQ0S2YpqetsesWIKo7M9OUMacCHY8 zHTOFQnk+WEAZfSlm93ylJO3/LRj8RPekKcVwUXqGQ0e/U0wAuMdhofdFAm5NVab ISMt8UY5ztK8hHcp+Q== -----END CERTIFICATE-----Generated at Fri Apr 17 08:19:05 2026 by rpki-client