$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft File: b56WltzPbBpDIJBAhRSuzcP2Bzk.mft (raw, json) Hash identifier: 3gFVwbBn3hnDZaNMjDKQClZf/TUPcWUKuyjtmyBuTBA= Subject key identifier: 1D:93:5B:20:CC:5E:8F:6A:62:DE:01:1F:E7:ED:E7:74:6C:B7:E2:2A Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019D99D0C4BD6D4F766CD8AF7FA427755A89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft Manifest number: 0FDC Signing time: Fri 17 Apr 2026 05:01:29 +0000 Manifest this update: Fri 17 Apr 2026 05:01:29 +0000 Manifest next update: Sat 18 Apr 2026 05:01:29 +0000 Files and hashes: 1: 02C_yN_pBtrRHfaPFMBLJa0WHZ8.roa (hash: 7dhoMo1eR7pFH0VVu4/1Umj2Sqmm2uRRTNfBAcPSvnQ=) 2: 1-6TPWOGFnVc0Nj7oVC4aAr613ls.roa (hash: fO8iBbvBaMNoHq3COqjue3TAdfcc3LHY54KEjAJ2QqA=) 3: 4gWTFBdbX28RmU-vZWa7w0Na-oY.roa (hash: qVoPT+hSYJGFIxsu7hxtF38NHWCrB7G+eA7b60ig6oM=) 4: B6LIx5SFj-LpvkMusTX6eylqB8Q.roa (hash: 8sXEje/NFZbddnD1ozsYpbMXZouncZaHmKPwgX4Mau8=) 5: C2l9FVRYOzzBJurzWsT0JOwEoX4.roa (hash: 7Sk+vqLvJx0/QulXIfk1zjfce9b9KULZIVzx1MsBroo=) 6: GqCPC0caM7vVLyfxlDbXr-1bB6Q.roa (hash: 5BgcRj7E+Zjch4bi8qsfXSHZRBSk5RcNGFESWPAD6ZM=) 7: HD3Ku7wm-D2ZNqFQc0d3iaq3EpA.roa (hash: aXoYi4sL26UfttU2AQRoMTdqaFswBst+yXFXy3bMFQI=) 8: Kd5BCnuh7Vfh_ncYW41MRfZTY_g.roa (hash: 550VYYwHjp6DkAL2ALMNefBJad9ffNBJSB4pG2l/Jxc=) 9: Ov08WMAA8s4fGJQZj-YBPxQx7ao.roa (hash: AmlE5tYLPssjw9U4Xmt2RH2S2h07B8JY5rM+qQje4aM=) 10: WpG-HECBoKzNEGH7SZCr2uB_62w.roa (hash: QHsaGRcXtfYHvO3WG+U0BRusuvkiVd+XVkbhpqWYJNE=) 11: YgnciPpG25vPLjs4alvklTckQa0.roa (hash: LMsW71cXkQjTBXqyfbQ1BVncfxCsq9ms60/4uLgDxuQ=) 12: b56WltzPbBpDIJBAhRSuzcP2Bzk.crl (hash: UlThnWHeaPWGijMfwoBn1X1uyJhhaAhPh00nCqIygs0=) 13: gW7JxFR7uiW4ZpkuSJauf4QocGo.roa (hash: cXbpQwceKEQaMo+TbQWEr8PhkuENmJydovPMYT6tg40=) 14: hMLqEXV_h8cwrkd0qVqjik9UM5Q.roa (hash: 049g9W8sXpkKaEFMxqweslPE125wn44hfoXmY1GLrGM=) 15: hOkQmF7Lw2-BvISqqDLTuUkkq5w.roa (hash: NgSV6JkTSImeWP6gCSVbJkpIH9ZghYaqVNR51xDKH60=) 16: z7k8kovlPmv-zBHmb4FIXdtjtc4.roa (hash: 34UjHgoDLPq5cVz9xOQp030/8J4AwYYZjM3LuMub1Pg=) 17: zFi2gp3SKU3c0S_naj_PpCRo6aU.roa (hash: /L5t/XoZ8kDLzebR3QIc1BMtvCbpTdiF6nGgxkPEo1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:d0:c4:bd:6d:4f:76:6c:d8:af:7f:a4:27:75:5a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Apr 17 05:01:29 2026 GMT Not After : Apr 18 05:01:29 2026 GMT Subject: CN=1d935b20cc5e8f6a62de011fe7ede7746cb7e22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:51:47:50:cc:97:23:73:f4:9a:bb:87:e0: 90:40:50:22:b9:0c:6a:1e:e2:2f:0e:99:54:26:c3: aa:eb:81:c4:42:e3:ea:ea:7a:e9:38:07:04:ca:d1: 90:b8:93:b4:61:35:77:42:19:5a:64:2d:90:95:6d: 16:47:cd:a9:be:45:bb:6d:95:59:9b:39:0d:c5:6c: 65:f9:88:ef:9a:ff:15:2f:93:fd:14:42:c4:33:84: 7a:cc:40:83:65:79:e3:d8:fe:1b:87:c2:30:b9:f0: 55:2b:05:30:b5:1b:d7:49:30:8f:42:a7:cc:6d:2b: b0:7b:53:f8:a4:8e:51:92:c4:ab:01:03:95:b4:df: 38:c8:8f:79:9b:f4:9a:e0:9c:21:67:fa:bd:e7:bd: fe:31:b6:62:91:ae:a4:ff:b6:91:06:17:ba:a9:eb: 9a:d0:ee:e4:eb:42:3d:16:3a:72:08:57:44:26:e7: 8d:2c:60:43:ac:b5:59:2e:19:02:1f:ff:61:64:8c: 78:cc:c1:77:76:c0:21:5f:4e:25:dc:55:ac:7c:86: 29:4e:e5:42:08:f3:49:d0:ba:03:0b:ef:06:9f:27: 16:0d:67:10:da:ef:db:e3:80:f0:05:d8:d0:e5:b4: 48:1d:fe:0c:2f:08:f3:20:11:7d:30:03:62:05:13: 6d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:93:5B:20:CC:5E:8F:6A:62:DE:01:1F:E7:ED:E7:74:6C:B7:E2:2A X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:59:76:ad:fa:fe:6e:f2:70:c4:ab:ee:e0:c9:3d:d0:dc:1b: 47:72:36:cb:9e:13:03:80:d9:dd:36:d3:ea:c0:98:9e:d9:42: 6b:23:e0:52:fb:03:40:7e:2d:4f:0d:e6:cb:af:aa:2f:92:d3: f4:fd:32:72:8f:2f:c7:42:6d:57:0f:ef:14:15:b3:1d:24:98: b4:bb:49:48:78:3a:b6:50:03:1d:8f:8f:f0:8c:93:70:0d:eb: 38:06:6c:de:a1:1c:4b:db:ad:58:03:e3:61:86:6d:25:35:8c: 10:5f:1c:43:4c:ee:48:f7:28:15:c7:99:eb:07:e0:e5:bc:2d: a8:34:b6:01:3b:d0:b3:3a:a7:08:92:bb:fc:b6:14:c3:03:da: b4:b0:9f:09:7f:52:c2:e4:e0:87:4b:42:4a:55:6e:ff:2a:97: 86:7b:e8:bb:1c:43:d5:cf:78:7b:0b:9a:fe:24:0c:94:81:de: 2d:a0:cc:8f:8c:f2:49:7c:40:2b:52:c2:6e:fa:29:ca:9f:11: ce:23:7a:dc:ed:08:3c:31:8e:64:d0:8b:87:31:4e:39:14:72: 6c:55:8c:36:5f:0e:d9:79:ae:2c:1e:66:c9:b8:b0:b1:0f:2d: c9:1a:fc:d3:2c:8f:ca:7f:1c:3b:12:41:73:8e:3b:a5:ea:a2: 14:8c:01:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Z0MS9bU92bNivf6QndVqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwNDE3MDUwMTI5WhcNMjYwNDE4MDUwMTI5WjAzMTEwLwYDVQQD EygxZDkzNWIyMGNjNWU4ZjZhNjJkZTAxMWZlN2VkZTc3NDZjYjdlMjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHJRR1DMlyNz9Jq7h+CQQFAiuQxq HuIvDplUJsOq64HEQuPq6nrpOAcEytGQuJO0YTV3QhlaZC2QlW0WR82pvkW7bZVZ mzkNxWxl+Yjvmv8VL5P9FELEM4R6zECDZXnj2P4bh8IwufBVKwUwtRvXSTCPQqfM bSuwe1P4pI5RksSrAQOVtN84yI95m/Sa4JwhZ/q9573+MbZika6k/7aRBhe6qeua 0O7k60I9FjpyCFdEJueNLGBDrLVZLhkCH/9hZIx4zMF3dsAhX04l3FWsfIYpTuVC CPNJ0LoDC+8GnycWDWcQ2u/b44DwBdjQ5bRIHf4MLwjzIBF9MANiBRNtmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2TWyDMXo9qYt4BH+ft53Rst+IqMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArll2rfr+ bvJwxKvu4Mk90NwbR3I2y54TA4DZ3TbT6sCYntlCayPgUvsDQH4tTw3my6+qL5LT 9P0yco8vx0JtVw/vFBWzHSSYtLtJSHg6tlADHY+P8IyTcA3rOAZs3qEcS9utWAPj YYZtJTWMEF8cQ0zuSPcoFceZ6wfg5bwtqDS2ATvQszqnCJK7/LYUwwPatLCfCX9S wuTgh0tCSlVu/yqXhnvouxxD1c94ewua/iQMlIHeLaDMj4zySXxAK1LCbvopyp8R ziN63O0IPDGOZNCLhzFOORRybFWMNl8O2XmuLB5mybiwsQ8tyRr80yyPyn8cOxJB c447peqiFIwBNA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:35:13 2026 by rpki-client