$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json) Hash identifier: NT6xAHUHoESJRLyIgXPfEu4WgPlSkVNdqtvOmqEnJU4= Subject key identifier: FB:EE:90:E6:CC:CC:B1:24:49:44:83:16:BE:A7:84:B5:44:4D:54:91 Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019D9AAB93F7D0B98CBDE8800D49C0130949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft Manifest number: 18DC Signing time: Fri 17 Apr 2026 09:00:28 +0000 Manifest this update: Fri 17 Apr 2026 09:00:28 +0000 Manifest next update: Sat 18 Apr 2026 09:00:28 +0000 Files and hashes: 1: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: AWtrVbKuQ5poEZ4J7EYIY+bwylyMQ+Tzl+MPs3v55pU=) 2: 13XDGJYyNR2DoNt3I63wL8U0Jzs.roa (hash: I+JS8FII02pQo9N3kTh18PHz112YKE00khkm+cip7eA=) 3: 63yOiYKwU7JqEfSC9NxVJ01fCWk.roa (hash: K4Ob2YWWp3LxgFe3+6MIi9FKOa85HqimBOJiSHujQxY=) 4: 6nEB7u7VDBwJvvErhhk_sp8HgHM.roa (hash: SyBKloheaGBrGvFtFMvv0iZL+4Dv+JFkW0KebHTTw6E=) 5: 9H1b9QtJvvO5Q7tBMNvVVoE03o8.roa (hash: 8xeDQJquFgw+UoHUSmYV/m/pwUj8nT1iQkun0bxE7+Q=) 6: FzGpWZvbvQzmHwZ1mYWzl0OhA6A.roa (hash: V5FzneMXIFpEivxgGPkmTl20CGF3hlX/oPutyNatcaM=) 7: WS24_ZfdS-p841fXys78kKEcHFE.roa (hash: mdNWTDkBQ1LOAKpfMoKowipt1skh6RMzRxFFxzvaz1g=) 8: cohsG3SQlcWk1HwXz_9_V1W-DnM.roa (hash: Z0rTIgtHw2j6D7sRMbadoj6J39N2b5eJp5yHD6/XmPU=) 9: dIH6BysLhLi3YbgR32hD9CEC-Rc.roa (hash: EKTQSkYkTx/FLfYfj9JDL2Xp6XAMkpHk8crmyAFs8gY=) 10: dfv3LSNj2V7BvnxQDjPYXNhLTeY.roa (hash: +CS62sl2ChgX++5UXeYQ9A8BJy1JzvdoEucP6DULUqI=) 11: gjckOvmNiIbZmA-TT11ORA--iTU.roa (hash: TpmN78WgePeN399lIDAzsZi1InWuYIsnhRRV8YOoTWc=) 12: vF0VYWecbrRxbZK9c56uBdCo4ik.roa (hash: GSJ2HtyoNkdo5nkx3DTM8Av/uYVGzIaDwGAeMRt+F5E=) 13: xmMPaUT6o6zuoGJkONl9ukiVCBw.roa (hash: LEqoxiigz/XFOxjw1QTNnhB5q/85VzWFuwng23PfuYc=) 14: xrmNcJYM7IC02cwip42NZ9MYOJI.roa (hash: b6C56Rw+1/MSwcd/+Js8l5OXj80gDxqiFimnPx3BaLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:ab:93:f7:d0:b9:8c:bd:e8:80:0d:49:c0:13:09:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Apr 17 09:00:28 2026 GMT Not After : Apr 18 09:00:28 2026 GMT Subject: CN=fbee90e6ccccb12449448316bea784b5444d5491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:31:7c:34:cd:c7:5b:1c:16:5b:cd:1b:07:4f: a0:ca:9a:87:5f:0d:79:90:0f:32:24:f0:05:0f:bb: d7:07:61:aa:a3:1e:38:a0:de:98:c9:a7:31:42:c7: ae:d4:b3:79:7f:fd:27:51:85:e1:ec:aa:ee:cf:d4: 1e:a7:53:65:01:eb:01:4e:5a:d5:5d:4b:2c:1d:a7: a2:9e:86:90:71:3b:a0:61:9b:0e:72:04:58:2e:4e: 59:e3:3c:b0:67:dc:4a:05:b3:a7:b8:9e:27:93:df: 23:d9:d7:92:5f:3b:84:1f:5b:a0:02:93:7b:cf:9e: f1:ed:e1:f3:6d:f6:bb:7d:d0:c1:7b:a3:b3:8f:d3: 2e:e7:db:f4:d5:62:b2:ca:76:a8:1b:45:ee:40:52: fb:58:19:6b:d2:12:e6:e2:29:2a:8a:fa:f0:f8:ec: 9d:c0:50:f2:10:12:04:56:7a:a4:ad:c6:81:19:d6: 38:d2:d5:22:f4:f7:3b:b4:d3:59:19:40:d3:4d:b7: 10:68:ad:5f:33:bc:dd:f8:52:d3:38:6a:32:1e:ab: c0:a3:dd:7e:01:62:b6:4d:2a:e9:02:4c:8b:45:1e: b7:fd:81:3f:f1:3c:e6:d0:23:0a:1c:23:4f:ff:da: 8d:0e:d3:eb:3a:4a:e0:fb:5a:f8:ca:cf:e1:95:b4: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EE:90:E6:CC:CC:B1:24:49:44:83:16:BE:A7:84:B5:44:4D:54:91 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:71:76:74:7a:b8:27:79:79:81:6a:d3:2a:33:a8:68:e1:35: fb:ff:c1:1c:e1:ec:84:78:f8:3a:e1:9e:96:75:24:17:8b:63: 54:bc:af:f2:d3:16:62:ec:b5:51:7b:e8:82:3d:2a:3f:4c:e0: 50:62:6a:36:3e:f5:38:8b:23:5e:3d:5f:92:14:ff:32:72:4a: 7f:26:5e:2c:90:dd:9a:9f:ac:cb:e6:06:d5:fb:4e:c6:57:73: 9d:7f:eb:e6:23:4e:2b:48:a7:4f:73:15:e7:40:e8:2c:ef:40: e2:21:86:dc:ac:d6:a5:c1:08:f6:13:a6:81:62:c7:5a:26:3c: 65:34:33:75:24:e8:92:e7:1c:7b:a4:03:90:b6:4c:3a:c3:a8: 36:62:0c:8d:41:2e:a3:1e:d7:89:0f:5f:06:e0:36:72:85:f6: 3e:f2:5c:f6:92:a5:46:94:13:ef:0f:15:e9:32:a6:bf:fe:b3: 20:aa:d2:5a:12:93:3a:a6:3a:c5:b0:24:e1:35:53:67:8c:27: 8e:2b:61:eb:81:95:20:3d:8f:8f:77:ee:fd:1e:f3:73:7c:de: e7:e4:7e:ee:93:e1:bb:3f:91:fb:38:4d:c0:26:40:45:71:48: c6:58:f9:8f:d6:d8:ea:34:9c:b0:29:c1:17:d4:1f:17:a7:c7: 89:35:dd:92 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ2aq5P30LmMveiADUnAEwlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwNDE3MDkwMDI4WhcNMjYwNDE4MDkwMDI4WjAzMTEwLwYDVQQD EyhmYmVlOTBlNmNjY2NiMTI0NDk0NDgzMTZiZWE3ODRiNTQ0NGQ1NDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTF8NM3HWxwWW80bB0+gypqHXw15 kA8yJPAFD7vXB2Gqox44oN6YyacxQseu1LN5f/0nUYXh7Kruz9Qep1NlAesBTlrV XUssHaeinoaQcTugYZsOcgRYLk5Z4zywZ9xKBbOnuJ4nk98j2deSXzuEH1ugApN7 z57x7eHzbfa7fdDBe6Ozj9Mu59v01WKyynaoG0XuQFL7WBlr0hLm4ikqivrw+Oyd wFDyEBIEVnqkrcaBGdY40tUi9Pc7tNNZGUDTTbcQaK1fM7zd+FLTOGoyHqvAo91+ AWK2TSrpAkyLRR63/YE/8Tzm0CMKHCNP/9qNDtPrOkrg+1r4ys/hlbSLiwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPvukObMzLEkSUSDFr6nhLVETVSRMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzUzL2U4Y2I0NC1hOTU0LTQ2NzItYjlhNC1hNDllNWM2NjMz YmQvMS8xLXN5N2NxcVloS1dfalE1MWRBU2hmbDRqTWl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3F2 dHq4J3l5gWrTKjOoaOE1+//BHOHshHj4OuGelnUkF4tjVLyv8tMWYuy1UXvogj0q P0zgUGJqNj71OIsjXj1fkhT/MnJKfyZeLJDdmp+sy+YG1ftOxldznX/r5iNOK0in T3MV50DoLO9A4iGG3KzWpcEI9hOmgWLHWiY8ZTQzdSTokucce6QDkLZMOsOoNmIM jUEuox7XiQ9fBuA2coX2PvJc9pKlRpQT7w8V6TKmv/6zIKrSWhKTOqY6xbAk4TVT Z4wnjith64GVID2Pj3fu/R7zc3ze5+R+7pPhuz+R+zhNwCZARXFIxlj5j9bY6jSc sCnBF9QfF6fHiTXdkg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:20:59 2026 by rpki-client