$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: rGh/FJMMPRnr5O4BvoXDkk/1CJvdU+0BIhkQu1WZO9o= Subject key identifier: 8D:0A:37:2F:7A:70:81:E1:C8:FA:65:99:52:63:58:6E:9A:04:D7:38 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019D9AABA01A5D98DB3369B066D3B50939AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 0927 Signing time: Fri 17 Apr 2026 09:00:32 +0000 Manifest this update: Fri 17 Apr 2026 09:00:32 +0000 Manifest next update: Sat 18 Apr 2026 09:00:32 +0000 Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=) 2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=) 3: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=) 4: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=) 5: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=) 6: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=) 7: aQNb-FqJ24XdWhT_swKdwi6zjfo.roa (hash: OZW1x0BW+Z3FS3TLXrrEiad6eP2zWg5FoTORYNZrouA=) 8: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=) 9: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: iBkD5CmWnlOir9tyaT/UEDQcdJ702NoXNY/y0ZSCMwA=) 10: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=) 11: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=) 12: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:ab:a0:1a:5d:98:db:33:69:b0:66:d3:b5:09:39:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Apr 17 09:00:32 2026 GMT Not After : Apr 18 09:00:32 2026 GMT Subject: CN=8d0a372f7a7081e1c8fa65995263586e9a04d738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:37:8a:fc:6f:a2:b4:35:c5:af:8d:d3:04: 68:ee:fc:ca:97:b0:79:a9:80:a6:dd:a4:b8:ff:6c: aa:f5:fe:c9:97:d6:66:b4:84:23:31:c9:6c:d2:1e: bf:67:33:f4:f2:b9:be:76:a2:c8:79:a2:d1:07:f5: 77:2a:8f:12:90:85:e1:d1:5c:07:d1:17:e3:5d:d7: 82:c4:43:95:ba:44:dc:98:08:f6:52:05:2c:11:27: 26:6d:a0:68:65:2d:e1:9c:2f:38:e1:e1:e5:79:bc: f9:6d:62:c4:79:b7:36:e7:02:fd:c7:ef:fe:ef:ca: ef:cd:26:94:59:79:70:c5:0d:13:b3:f0:fe:4b:12: a3:a2:b6:c0:55:6d:bd:17:f5:89:bf:96:9d:2f:09: e1:c0:58:58:74:c1:61:63:c0:66:f6:7f:2a:ec:cd: 29:88:1d:fe:d4:06:fc:fb:af:96:2b:4a:a3:a3:d6: 47:03:f8:ab:0c:8b:78:32:04:14:73:b1:4d:b5:58: a6:b5:e0:44:1e:f4:33:14:5e:a6:23:41:fe:a5:1b: 56:7b:bf:2a:69:b5:31:c8:8b:6e:10:a9:b2:3b:23: 45:04:fe:df:aa:68:ed:8b:e8:0b:f8:b3:21:d6:92: a8:66:64:da:46:ba:4d:98:e5:17:be:9b:41:6b:3c: f8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0A:37:2F:7A:70:81:E1:C8:FA:65:99:52:63:58:6E:9A:04:D7:38 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:85:31:92:b2:69:59:d9:5f:42:e6:c6:8c:ee:04:34:50:b0: 41:f6:36:46:e0:7b:19:28:13:76:86:76:9a:8b:7e:9e:c4:82: c9:e5:25:e8:82:90:91:f9:7d:e7:ee:dd:00:ce:78:92:0a:73: 66:05:a9:65:e5:5c:c6:74:9e:98:87:5f:3d:7e:f6:f6:c1:ba: 31:2b:f6:aa:14:7e:c4:1c:92:76:de:1d:e6:24:a1:97:0f:5f: 12:0f:c1:1f:50:d4:7b:b2:c3:52:80:ad:b4:04:7d:4b:cc:a7: 12:d6:81:d2:a2:4b:c8:b9:13:9a:f7:cd:e8:3d:fb:5b:78:2c: 3e:d8:11:ac:dd:cc:86:d7:7c:d9:2d:b7:90:2f:b7:9f:72:68: 52:c6:14:dd:1a:86:1e:57:07:91:97:f0:84:d3:d9:29:3f:6e: ee:f4:50:cd:a7:b5:07:8a:7b:dc:7d:d6:8e:eb:19:d9:0b:82: 15:57:70:4b:8f:9a:60:2f:6f:a2:5b:21:77:e0:b5:16:91:77: 93:8e:d0:13:7b:c0:ad:81:4e:cc:90:0f:96:34:fc:aa:41:20: 00:ef:c3:e0:ed:a5:93:17:85:ce:e2:cb:bd:22:90:2a:ab:e1: ed:33:66:79:a0:00:97:19:4a:a4:06:ee:3f:a3:9f:8c:31:78: 8f:5d:08:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aq6AaXZjbM2mwZtO1CTmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwNDE3MDkwMDMyWhcNMjYwNDE4MDkwMDMyWjAzMTEwLwYDVQQD Eyg4ZDBhMzcyZjdhNzA4MWUxYzhmYTY1OTk1MjYzNTg2ZTlhMDRkNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusc3ivxvorQ1xa+N0wRo7vzKl7B5 qYCm3aS4/2yq9f7Jl9ZmtIQjMcls0h6/ZzP08rm+dqLIeaLRB/V3Ko8SkIXh0VwH 0RfjXdeCxEOVukTcmAj2UgUsEScmbaBoZS3hnC844eHlebz5bWLEebc25wL9x+/+ 78rvzSaUWXlwxQ0Ts/D+SxKjorbAVW29F/WJv5adLwnhwFhYdMFhY8Bm9n8q7M0p iB3+1Ab8+6+WK0qjo9ZHA/irDIt4MgQUc7FNtVimteBEHvQzFF6mI0H+pRtWe78q abUxyItuEKmyOyNFBP7fqmjti+gL+LMh1pKoZmTaRrpNmOUXvptBazz4OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0KNy96cIHhyPplmVJjWG6aBNc4MB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoUxkrJp WdlfQubGjO4ENFCwQfY2RuB7GSgTdoZ2mot+nsSCyeUl6IKQkfl95+7dAM54kgpz ZgWpZeVcxnSemIdfPX729sG6MSv2qhR+xBySdt4d5iShlw9fEg/BH1DUe7LDUoCt tAR9S8ynEtaB0qJLyLkTmvfN6D37W3gsPtgRrN3Mhtd82S23kC+3n3JoUsYU3RqG HlcHkZfwhNPZKT9u7vRQzae1B4p73H3WjusZ2QuCFVdwS4+aYC9volshd+C1FpF3 k47QE3vArYFOzJAPljT8qkEgAO/D4O2lkxeFzuLLvSKQKqvh7TNmeaAAlxlKpAbu P6OfjDF4j10Ivw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:55 2026 by rpki-client