$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: 1OYiMoG3XEZ8lTkMDTVg8Zy6A1wKMC0K3REU7flR3Cc= Subject key identifier: D7:86:65:95:99:94:C8:73:0D:D6:21:4A:37:D6:AF:95:AC:88:D3:C3 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019D99D01C5A3126CA90ED78C9510807C9B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 166A Signing time: Fri 17 Apr 2026 05:00:45 +0000 Manifest this update: Fri 17 Apr 2026 05:00:45 +0000 Manifest next update: Sat 18 Apr 2026 05:00:45 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 4LTSiiIXCY2aVQheO-OK2Ks1zVc.roa (hash: /HUlN5mU4nQlfn3Lbzxe64CdVsxaFWp5WmzIr3dsQ+U=) 3: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 4: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 5: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 6: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 7: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: KiLA-XCCVQ3hp6NK0nSvvdBkVaA.roa (hash: Wrbvgs04+OV9y9FcYP+1OM/PeyM8B8+/OgsBO82HfPE=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 13: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 14: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: AEYSOsFXYJycJuR0IG6mkYqh96Kc1M7EesjixElazfI=) 15: dZo66_L9wh2qbij7G3JOKCs449k.roa (hash: EcfgXVOvSMiIqr4XDNVO8j7tZpRnQKNduJAQlIX28Ko=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa (hash: 8fLuiRSXi1wlRLB5+uM6MoQhKZD4VrD7fYAS5Z6UVgU=) 18: vR9E1xSnliRW9Usue4V0ADKHiho.roa (hash: S5rMh/OoVyLOT3VDLY9zfWdq9jorvnICYEBPJuWsM0s=) 19: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 20: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:d0:1c:5a:31:26:ca:90:ed:78:c9:51:08:07:c9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Apr 17 05:00:45 2026 GMT Not After : Apr 18 05:00:45 2026 GMT Subject: CN=d78665959994c8730dd6214a37d6af95ac88d3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:24:0f:fc:71:1c:ca:a9:34:c8:a0:bd:20: e0:34:40:55:47:0c:5d:ae:cc:d0:f7:c5:c6:df:74: 80:14:51:44:3f:d8:10:7f:12:2d:72:5f:82:01:e8: d3:ba:dc:1e:b8:b1:97:4a:88:69:2d:6c:7f:da:32: 47:57:97:b5:df:50:59:34:7f:c7:61:44:3f:11:3a: 1b:69:00:62:4b:e3:90:7e:47:4d:9b:50:e0:58:e4: 7f:76:03:ee:c3:b6:24:19:37:65:9b:c1:e6:e9:e5: e2:01:54:76:01:c0:c7:85:ce:aa:b6:54:c2:13:74: 4c:83:04:bd:57:14:95:c4:df:71:0d:9d:0c:d4:dc: fe:84:7d:85:5b:2f:60:ee:a5:42:ba:e0:9a:1d:0e: 8d:b7:c8:b9:34:34:31:39:0a:5b:ad:36:06:45:1a: 5a:1d:b4:29:67:d7:5c:bd:28:e0:be:0e:d0:30:c1: 89:b3:32:3d:ef:cc:44:9c:61:f6:bf:9d:a6:a7:85: cf:79:e5:40:58:09:8a:7a:48:41:f0:98:d5:b8:fa: ea:bc:37:da:6a:3f:55:f4:b9:29:31:0c:32:5a:c7: 28:1d:12:d6:0a:18:ed:9c:b9:be:00:39:5f:01:2d: 1e:c3:60:27:16:18:48:17:98:2b:eb:d8:24:22:24: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:86:65:95:99:94:C8:73:0D:D6:21:4A:37:D6:AF:95:AC:88:D3:C3 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6c:e7:44:55:42:ea:6e:4b:cf:ba:16:37:fe:2f:39:49:43: b8:90:bc:e3:58:9d:30:ec:82:b9:02:50:c0:74:8d:e6:76:11: 1d:cc:58:d1:0a:36:5d:5b:72:1e:6e:3c:bb:e5:ec:5a:9a:2e: fa:68:29:d5:ee:1e:12:db:4f:f8:b3:93:26:9b:bf:c0:7c:86: 3f:ca:15:01:a0:ed:67:dd:1f:0c:86:7b:f7:bd:27:21:78:79: 21:17:2e:8c:16:8d:9b:86:87:05:df:a7:75:6c:52:1c:29:34: 31:c5:3e:60:e7:7d:84:7b:49:3c:83:85:c2:63:82:b7:8e:76: 3c:e7:0a:1f:86:1d:7a:a7:dd:d3:19:ab:87:c9:4d:07:cf:e4: 69:28:e7:f9:e4:e7:35:bd:9e:36:ef:96:c8:26:b7:08:5e:a2: 70:14:5a:13:f7:d9:4b:ba:03:30:28:6a:7b:09:46:6c:50:cb: 79:06:b0:8a:34:8b:e2:89:9c:1b:a8:84:34:31:d4:c6:46:04: 28:f1:84:48:7f:17:95:03:e0:e0:e5:cc:06:7c:7d:79:43:72: 25:49:9d:b4:3d:f7:d2:77:09:86:4b:f9:63:dc:e6:55:1c:82: 51:69:b9:31:38:1f:cb:16:6d:ed:7e:bd:90:a1:aa:22:ad:86: 9b:64:2f:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Z0BxaMSbKkO14yVEIB8m4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwNDE3MDUwMDQ1WhcNMjYwNDE4MDUwMDQ1WjAzMTEwLwYDVQQD EyhkNzg2NjU5NTk5OTRjODczMGRkNjIxNGEzN2Q2YWY5NWFjODhkM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnckD/xxHMqpNMigvSDgNEBVRwxd rszQ98XG33SAFFFEP9gQfxItcl+CAejTutweuLGXSohpLWx/2jJHV5e131BZNH/H YUQ/ETobaQBiS+OQfkdNm1DgWOR/dgPuw7YkGTdlm8Hm6eXiAVR2AcDHhc6qtlTC E3RMgwS9VxSVxN9xDZ0M1Nz+hH2FWy9g7qVCuuCaHQ6Nt8i5NDQxOQpbrTYGRRpa HbQpZ9dcvSjgvg7QMMGJszI978xEnGH2v52mp4XPeeVAWAmKekhB8JjVuPrqvDfa aj9V9LkpMQwyWscoHRLWChjtnLm+ADlfAS0ew2AnFhhIF5gr69gkIiS/VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeGZZWZlMhzDdYhSjfWr5WsiNPDMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmznRFVC 6m5Lz7oWN/4vOUlDuJC841idMOyCuQJQwHSN5nYRHcxY0Qo2XVtyHm48u+XsWpou +mgp1e4eEttP+LOTJpu/wHyGP8oVAaDtZ90fDIZ7970nIXh5IRcujBaNm4aHBd+n dWxSHCk0McU+YOd9hHtJPIOFwmOCt452POcKH4Ydeqfd0xmrh8lNB8/kaSjn+eTn Nb2eNu+WyCa3CF6icBRaE/fZS7oDMChqewlGbFDLeQawijSL4omcG6iENDHUxkYE KPGESH8XlQPg4OXMBnx9eUNyJUmdtD330ncJhkv5Y9zmVRyCUWm5MTgfyxZt7X69 kKGqIq2Gm2QvzQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:05:01 2026 by rpki-client