$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: YQ6L0F1Z0Xa39ph4KJo9gKMdlHCawNWiyuVZ6u5qbdk= Subject key identifier: 8A:7E:59:AF:52:15:78:3B:03:E1:7E:0B:24:53:23:3E:C8:D0:4E:7B Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019D9A07336185C4813DE365B5CD961B3090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 18CD Signing time: Fri 17 Apr 2026 06:00:56 +0000 Manifest this update: Fri 17 Apr 2026 06:00:56 +0000 Manifest next update: Sat 18 Apr 2026 06:00:56 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: 95z0L3INptNGZgwj2CE079X0mkdoKSCp8vXSbD4Wyso=) 2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=) 3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=) 4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=) 5: cYgMOmj6u6TwRZVxPY0GRuR_57c.roa (hash: PFEwcIm0GvfowU+QS3ePDAQm79limgzxJJZAQhsXoQM=) 6: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=) 7: n8m0xVPUJ7sSm50Su5RRDOcBypY.roa (hash: gyRmAMA/LaYNtHFV0LdlYDTpgJV5V6CTCcVfo5PwA40=) 8: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=) 9: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=) 10: zt_YvrwgG8U0qs9ZxDXsKeZ9EVw.roa (hash: t0BRGsA3yMu+tS9ODb23oVtqY4JggUZywQTE6WaROKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:07:33:61:85:c4:81:3d:e3:65:b5:cd:96:1b:30:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Apr 17 06:00:56 2026 GMT Not After : Apr 18 06:00:56 2026 GMT Subject: CN=8a7e59af5215783b03e17e0b2453233ec8d04e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:f1:34:9b:d3:f6:f4:58:27:d9:4d:a0:a8: 22:e5:c6:88:a3:15:4b:ea:72:26:5d:1d:c1:a1:c1: 9d:a8:75:93:8d:8a:b5:cc:40:4b:41:d8:6d:38:19: 67:41:f9:76:e3:83:8f:15:82:e8:aa:fc:0a:89:c0: 5b:e2:d2:a7:36:fb:15:d0:b2:49:76:d3:82:17:47: e2:31:f2:14:f7:de:b0:73:90:d5:80:99:39:1b:f5: 35:64:39:99:d2:8f:11:4f:56:63:09:1c:f1:93:21: cf:20:da:a3:a7:01:fc:a2:2f:a4:7e:88:e1:30:20: 7c:ec:21:f0:53:13:16:be:97:33:15:ba:1f:a4:98: 04:9e:27:dc:f6:3a:c0:81:94:12:3c:4d:7c:40:dd: 26:a4:38:0c:22:2b:c4:e0:aa:10:87:a1:b4:15:ad: 9a:49:de:98:e2:40:9a:ce:63:4b:e8:81:ea:b5:bf: 7c:70:ad:7c:91:74:d2:6e:7b:b2:b1:30:b0:4d:16: f8:7b:4d:50:38:c7:08:b6:06:09:14:9d:35:bc:81: dd:c2:8f:b4:f8:6b:ec:eb:81:b9:a7:c9:e0:4b:11: 0b:ae:d2:85:28:38:2e:b8:7f:62:92:d6:de:30:02: 1a:71:78:4d:f1:16:bb:82:57:35:21:35:ce:74:44: 2f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7E:59:AF:52:15:78:3B:03:E1:7E:0B:24:53:23:3E:C8:D0:4E:7B X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:94:75:46:e3:f7:14:d3:93:3a:ac:4f:51:7e:7f:ee:ec:92: 7f:ac:a5:37:6e:9f:6c:72:8d:b3:a0:95:73:3a:55:aa:fe:19: fc:dd:7c:d2:ce:9e:18:f6:37:b6:b3:cb:be:8a:78:46:ce:32: 31:6b:bd:2e:cc:48:56:86:01:2b:5d:9f:29:5d:91:d3:6d:94: 78:f1:ba:26:76:f0:6f:c2:84:79:a9:2d:e5:45:f8:10:36:fc: 78:6d:54:b8:ec:62:a1:52:00:a3:59:34:7d:40:d4:c4:0d:6b: 8b:5e:8d:bc:34:34:43:b9:dc:f9:86:52:99:6c:6c:e4:5a:dd: 0f:bc:eb:59:63:6a:5f:ff:b7:4b:3c:81:1c:81:a8:20:e6:36: d1:00:bb:e5:97:69:3d:52:bd:91:14:ed:8c:88:91:60:33:53: a9:b2:fa:da:6b:56:73:24:1c:39:49:d6:fd:09:53:52:52:19: e9:40:dc:cf:60:7f:10:10:f1:2e:f6:3f:fd:d7:3b:6d:56:be: 3e:7c:eb:31:e9:35:36:95:6e:db:25:4f:f5:3f:ea:af:f4:ab: 5d:15:f1:d3:97:c2:26:e2:5b:81:a3:ad:4a:fc:a5:75:ef:40: 22:9c:0a:c6:a8:4c:f7:4e:4d:1f:2f:ed:aa:2c:d4:c8:82:97: 98:0f:41:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBzNhhcSBPeNltc2WGzCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwNDE3MDYwMDU2WhcNMjYwNDE4MDYwMDU2WjAzMTEwLwYDVQQD Eyg4YTdlNTlhZjUyMTU3ODNiMDNlMTdlMGIyNDUzMjMzZWM4ZDA0ZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzPxNJvT9vRYJ9lNoKgi5caIoxVL 6nImXR3BocGdqHWTjYq1zEBLQdhtOBlnQfl244OPFYLoqvwKicBb4tKnNvsV0LJJ dtOCF0fiMfIU996wc5DVgJk5G/U1ZDmZ0o8RT1ZjCRzxkyHPINqjpwH8oi+kfojh MCB87CHwUxMWvpczFbofpJgEnifc9jrAgZQSPE18QN0mpDgMIivE4KoQh6G0Fa2a Sd6Y4kCazmNL6IHqtb98cK18kXTSbnuysTCwTRb4e01QOMcItgYJFJ01vIHdwo+0 +Gvs64G5p8ngSxELrtKFKDguuH9iktbeMAIacXhN8Ra7glc1ITXOdEQvuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp+Wa9SFXg7A+F+CyRTIz7I0E57MB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5R1RuP3 FNOTOqxPUX5/7uySf6ylN26fbHKNs6CVczpVqv4Z/N180s6eGPY3trPLvop4Rs4y MWu9LsxIVoYBK12fKV2R022UePG6Jnbwb8KEeakt5UX4EDb8eG1UuOxioVIAo1k0 fUDUxA1ri16NvDQ0Q7nc+YZSmWxs5FrdD7zrWWNqX/+3SzyBHIGoIOY20QC75Zdp PVK9kRTtjIiRYDNTqbL62mtWcyQcOUnW/QlTUlIZ6UDcz2B/EBDxLvY//dc7bVa+ PnzrMek1NpVu2yVP9T/qr/SrXRXx05fCJuJbgaOtSvylde9AIpwKxqhM905NHy/t qizUyIKXmA9BAQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:43:23 2026 by rpki-client