$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: P3jjdEwlA56bEXtyIRCgQlrOMbHTKdIDryLN21cX25A= Subject key identifier: E2:07:88:26:CD:BE:60:4B:93:6B:1E:D9:6A:15:27:41:6D:DD:F4:5F Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019DA309EED89ABCFBF2DC6B7174B55445B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 18D5 Signing time: Sun 19 Apr 2026 00:00:30 +0000 Manifest this update: Sun 19 Apr 2026 00:00:30 +0000 Manifest next update: Mon 20 Apr 2026 00:00:30 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 6: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 7: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: qaaWc1J19+d6EaKbn6t0dj26Np4eqwUApGT2Ql6BJYI=) 8: cYY9JWownI4dxUC113BsmeB-bPg.asa (hash: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4=) 9: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 10: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 11: iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (hash: Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=) 12: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (hash: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE=) 13: z8lBi3aAEOzIA4rjFoQW2NBYnGI.roa (hash: WkLdmUjUmDG0OM0nogJaG3cgrVGCp28qMqMnj28ytDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:09:ee:d8:9a:bc:fb:f2:dc:6b:71:74:b5:54:45:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Apr 19 00:00:30 2026 GMT Not After : Apr 20 00:00:30 2026 GMT Subject: CN=e2078826cdbe604b936b1ed96a1527416dddf45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ef:5a:22:5a:23:7f:ce:4d:fa:04:6f:b2:f2: e7:e1:f8:d1:79:6d:48:a0:44:5b:af:b0:23:04:63: 25:f0:9b:78:b6:f1:24:99:98:c8:18:50:eb:2a:d5: c8:6b:68:97:89:89:ee:8c:69:89:34:be:79:f3:eb: a0:7d:2d:a2:ea:d1:4d:0f:72:b4:2d:28:2c:0a:ef: e0:f6:60:d5:88:11:95:85:1e:3f:d9:f8:15:3f:ab: 25:80:23:01:9d:f7:e2:11:14:9f:3f:88:9f:da:fb: ab:ae:57:1a:88:10:68:0d:fd:5f:ce:bc:ee:98:fc: d6:6c:73:42:97:ee:c6:4d:b7:9e:0a:9f:39:17:f2: 03:cb:e0:98:b1:c2:e9:5f:e9:2a:23:e7:11:85:0d: a1:4e:ce:e2:1e:71:04:b4:b8:71:2f:7d:cc:f2:fa: fb:1f:f4:fc:31:35:b4:6c:2a:07:ac:e2:11:26:48: 4b:9f:bf:eb:a1:0a:86:8d:f9:d9:a0:73:95:3d:ff: ff:12:e3:d7:29:23:2c:b8:5b:53:a0:2f:22:0b:aa: 02:22:3e:f6:ed:55:75:0b:62:c9:c7:1a:99:43:0b: ee:8c:66:9c:77:39:21:98:ad:c6:a8:a1:f1:af:4b: b9:0b:4f:0b:e0:20:57:e2:22:34:62:fe:96:60:7f: 13:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:07:88:26:CD:BE:60:4B:93:6B:1E:D9:6A:15:27:41:6D:DD:F4:5F X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a3:cc:55:82:d2:b3:4b:a4:e0:bc:ec:de:12:34:12:28:17: 51:d6:55:04:76:6a:0d:01:31:c8:35:80:c7:61:1f:33:44:10: 58:3e:e3:1f:af:76:5a:cd:62:bf:1f:02:9b:d9:bb:d1:94:d1: 39:5d:0b:04:e4:a3:92:ec:ff:a1:32:1c:84:19:16:73:87:fc: 33:96:3e:8f:56:82:63:7f:01:43:a2:33:3f:eb:a5:4b:7c:1d: 41:02:f0:70:e3:31:c6:14:34:2a:de:47:be:57:25:30:6c:c0: 28:6b:59:7f:e2:9e:c9:a9:88:0f:29:69:01:fb:aa:09:30:b4: b4:3b:46:24:30:3c:8c:a8:fc:9e:14:d9:30:8e:b7:57:0c:e2: 0f:78:d5:04:cd:94:1b:34:5e:a9:35:bf:7a:08:91:71:15:b6: ac:1d:d9:97:46:4c:01:1b:d9:17:62:d3:09:80:dd:3d:81:87: 59:f1:bf:ef:26:a5:23:2e:1a:c6:1a:d1:5e:63:aa:be:0d:48: 6e:79:db:00:ee:d9:d1:44:0c:c7:a3:b1:aa:57:05:22:51:54: c0:d2:74:d4:5c:aa:10:b5:56:6b:75:a4:22:07:1c:67:b8:53: 77:3b:8d:d4:c4:b6:43:3b:3c:01:58:a3:37:c5:75:b0:d6:85: ee:36:c7:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jCe7Ymrz78txrcXS1VEWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwNDE5MDAwMDMwWhcNMjYwNDIwMDAwMDMwWjAzMTEwLwYDVQQD EyhlMjA3ODgyNmNkYmU2MDRiOTM2YjFlZDk2YTE1Mjc0MTZkZGRmNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5u9aIlojf85N+gRvsvLn4fjReW1I oERbr7AjBGMl8Jt4tvEkmZjIGFDrKtXIa2iXiYnujGmJNL558+ugfS2i6tFND3K0 LSgsCu/g9mDViBGVhR4/2fgVP6slgCMBnffiERSfP4if2vurrlcaiBBoDf1fzrzu mPzWbHNCl+7GTbeeCp85F/IDy+CYscLpX+kqI+cRhQ2hTs7iHnEEtLhxL33M8vr7 H/T8MTW0bCoHrOIRJkhLn7/roQqGjfnZoHOVPf//EuPXKSMsuFtToC8iC6oCIj72 7VV1C2LJxxqZQwvujGacdzkhmK3GqKHxr0u5C08L4CBX4iI0Yv6WYH8T7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIHiCbNvmBLk2se2WoVJ0Ft3fRfMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKPMVYLS s0uk4Lzs3hI0EigXUdZVBHZqDQExyDWAx2EfM0QQWD7jH692Ws1ivx8Cm9m70ZTR OV0LBOSjkuz/oTIchBkWc4f8M5Y+j1aCY38BQ6IzP+ulS3wdQQLwcOMxxhQ0Kt5H vlclMGzAKGtZf+KeyamIDylpAfuqCTC0tDtGJDA8jKj8nhTZMI63VwziD3jVBM2U GzReqTW/egiRcRW2rB3Zl0ZMARvZF2LTCYDdPYGHWfG/7yalIy4axhrRXmOqvg1I bnnbAO7Z0UQMx6OxqlcFIlFUwNJ01FyqELVWa3WkIgccZ7hTdzuN1MS2Qzs8AVij N8V1sNaF7jbHFw== -----END CERTIFICATE-----Generated at Sun Apr 19 08:52:04 2026 by rpki-client