$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: mkZZIk7kM7LBHCoGe+HUw+3SA1xxTTXy2nHpVjxxW48= Subject key identifier: 7D:8E:38:D9:D5:E9:0A:B8:06:28:AD:D9:FE:C6:61:7D:66:8B:43:98 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019D999900FF1C5EBC6D1D6B1D47934F7791 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 077A Signing time: Fri 17 Apr 2026 04:00:34 +0000 Manifest this update: Fri 17 Apr 2026 04:00:34 +0000 Manifest next update: Sat 18 Apr 2026 04:00:34 +0000 Files and hashes: 1: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 2: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: 6/RoGTwsv3VL5lP3kFMCIxucglqoKeh7TPivXKBOMC0=) 3: 7SwUXzEbynVOAJ41PRN1VV-DthQ.roa (hash: /HRDLDX8YtXPPm0ZzH9OOI6lge2ijM43IUSyaitp3HA=) 4: AuuFpGckEdWDmpSli6J4EvnBEFA.roa (hash: UWwZYirMViLQ4FhWk6naRNb3lf/S07gxbtcPGiaea3M=) 5: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 6: JRpzznWelvDGpNctUx-9YeQj91I.roa (hash: UWpK2mc+BRq0WDsXbRZApCIJ/yZuMuk8WsuIDijlk30=) 7: N8T1T4yzeC_svV7N6clN6YYuhS0.roa (hash: Zjsphs8xxbX+E2wFNgFNlo+S/FNhRonrcNCUdPBKUgo=) 8: VJhfwBMpKYGf6ops4QG8W2D9K5Y.roa (hash: BYsR2fxa81FQHh1Dxyok1UJdkjHu0vH5dq3diC+m0iI=) 9: XCau4ffd9wRsX7TYXIogzR2WqO4.roa (hash: ftqkiMajJgdI8EjDHWxMovMT410S0p0no+51o9gTIa8=) 10: YfhOPAWRkHzsFNKQodjoA2IhLKM.roa (hash: 9/L6hUhQcrkiGTuXjLMFbE6LlWLBn2NBCH2Dr2RZSJA=) 11: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 12: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 13: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 14: aHuFfSOUYXmTmBwxHlPwh-EVryM.roa (hash: 4h0lpb8Jw+MnXWrJAhTnOT+WFcvU+QMAmEsFwZdu5/k=) 15: egsOE6bZvfKQiaDurlHql4l7FQo.roa (hash: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4=) 16: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) 17: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:99:00:ff:1c:5e:bc:6d:1d:6b:1d:47:93:4f:77:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Apr 17 04:00:34 2026 GMT Not After : Apr 18 04:00:34 2026 GMT Subject: CN=7d8e38d9d5e90ab80628add9fec6617d668b4398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:05:98:67:ca:70:90:46:20:75:0b:e3:59: ea:ea:e6:ce:53:c8:62:c7:d0:42:3d:ca:f3:41:75: d5:dc:d4:fd:44:8a:8b:16:1d:86:d8:67:4d:9d:08: dd:28:3b:6d:fe:10:50:69:cc:36:5b:54:e9:ab:83: c2:0d:45:9f:db:b9:d6:0b:f6:6a:62:f5:22:56:9c: f9:4f:89:56:99:73:c6:14:98:5a:1d:75:a9:84:43: b1:72:75:94:18:08:df:08:e0:c9:3f:48:ca:18:13: bf:8c:64:41:a8:7a:fa:c8:d4:8a:06:00:b4:4a:ba: 48:b1:9d:62:27:f8:4e:88:6e:f5:18:8a:69:73:c2: 67:48:90:4b:34:3c:37:88:22:27:43:96:7a:77:eb: 69:81:2d:f2:39:d8:a4:df:ef:5e:d3:d8:55:6d:42: a1:5a:6c:95:d9:50:20:29:f4:f1:da:ed:9b:2d:a2: fc:7e:af:ec:42:4b:2f:24:42:03:f5:ad:d2:16:b7: b6:57:f9:50:58:f4:a8:ce:7b:a9:0a:0b:0a:08:7b: d2:2b:c7:3a:f4:19:75:d8:05:43:c9:80:ea:81:d6: 85:f6:47:f6:b2:02:5e:47:91:6e:c8:86:bf:a3:58: 82:08:e3:59:9e:c9:9f:03:19:ca:d9:55:29:65:07: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8E:38:D9:D5:E9:0A:B8:06:28:AD:D9:FE:C6:61:7D:66:8B:43:98 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d5:ae:91:2b:3e:9b:e0:b3:f3:79:74:ae:1f:54:e3:e7:da: ec:66:f0:45:3a:66:06:80:4f:6b:38:ea:23:99:56:9f:26:1f: 84:e2:61:76:8f:77:c3:d5:c6:53:91:05:e8:83:bb:8b:b3:90: af:e2:8a:d8:50:79:50:6b:3c:4a:1a:d0:b1:74:92:9c:61:6b: c7:5b:54:e0:11:22:15:76:bd:e6:ac:12:e5:16:0e:98:96:2e: c1:de:bb:89:6e:a1:e8:9f:4d:bf:df:98:ae:b4:57:e4:1d:eb: b8:4b:6e:9e:e9:cc:64:0f:c1:12:2c:60:df:dd:ac:63:e2:f2: ab:07:cf:c3:a2:54:04:9a:48:10:05:f4:24:67:d9:57:1d:e3: 21:c7:60:7a:9a:44:a1:00:e6:9e:be:9c:fd:c3:c1:1d:12:6b: 84:2c:dd:ab:68:41:ac:52:b2:38:01:5a:07:2d:7b:03:82:ff: bb:e1:80:67:f5:69:6e:14:92:7a:3f:4a:02:2c:80:99:da:86: d4:da:d3:47:5a:fb:f0:3b:a8:24:d4:b3:25:2c:fe:8a:4f:6b: f3:6b:af:e1:6b:cf:7d:f8:d8:4c:5a:b1:e1:bb:a3:97:2a:e5: e7:79:6d:f6:f2:12:52:8c:6e:b4:41:ad:78:c9:fc:03:1f:79: 53:b8:22:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmQD/HF68bR1rHUeTT3eRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwNDE3MDQwMDM0WhcNMjYwNDE4MDQwMDM0WjAzMTEwLwYDVQQD Eyg3ZDhlMzhkOWQ1ZTkwYWI4MDYyOGFkZDlmZWM2NjE3ZDY2OGI0Mzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G0FmGfKcJBGIHUL41nq6ubOU8hi x9BCPcrzQXXV3NT9RIqLFh2G2GdNnQjdKDtt/hBQacw2W1Tpq4PCDUWf27nWC/Zq YvUiVpz5T4lWmXPGFJhaHXWphEOxcnWUGAjfCODJP0jKGBO/jGRBqHr6yNSKBgC0 SrpIsZ1iJ/hOiG71GIppc8JnSJBLNDw3iCInQ5Z6d+tpgS3yOdik3+9e09hVbUKh WmyV2VAgKfTx2u2bLaL8fq/sQksvJEID9a3SFre2V/lQWPSoznupCgsKCHvSK8c6 9Bl12AVDyYDqgdaF9kf2sgJeR5FuyIa/o1iCCONZnsmfAxnK2VUpZQdKXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2OONnV6Qq4Biit2f7GYX1mi0OYMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNWukSs+ m+Cz83l0rh9U4+fa7GbwRTpmBoBPazjqI5lWnyYfhOJhdo93w9XGU5EF6IO7i7OQ r+KK2FB5UGs8ShrQsXSSnGFrx1tU4BEiFXa95qwS5RYOmJYuwd67iW6h6J9Nv9+Y rrRX5B3ruEtununMZA/BEixg392sY+LyqwfPw6JUBJpIEAX0JGfZVx3jIcdgeppE oQDmnr6c/cPBHRJrhCzdq2hBrFKyOAFaBy17A4L/u+GAZ/VpbhSSej9KAiyAmdqG 1NrTR1r78DuoJNSzJSz+ik9r82uv4WvPffjYTFqx4bujlyrl53lt9vISUoxutEGt eMn8Ax95U7gisw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:47:55 2026 by rpki-client