$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: j5xe4rCyDmugQ7yrn60PiyQ5pJEQUIHEEZlE4y7hCRw= Subject key identifier: F4:61:86:73:92:99:3B:E7:18:9F:41:39:6B:C6:EF:86:B7:BD:86:1A Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019D9999572FBCFEE129C56E0BA48E03A2E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 18D1 Signing time: Fri 17 Apr 2026 04:00:56 +0000 Manifest this update: Fri 17 Apr 2026 04:00:56 +0000 Manifest next update: Sat 18 Apr 2026 04:00:56 +0000 Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=) 2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=) 3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=) 4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=) 5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=) 6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=) 7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=) 8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=) 9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=) 10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: bKV8TR0bDrus5hjpqfzD8Fp4taqPeQElSETjOPvY7LI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:99:57:2f:bc:fe:e1:29:c5:6e:0b:a4:8e:03:a2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Apr 17 04:00:56 2026 GMT Not After : Apr 18 04:00:56 2026 GMT Subject: CN=f461867392993be7189f41396bc6ef86b7bd861a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:4a:92:59:9c:8f:f7:3f:c1:27:a9:dc:c9: 3a:cd:d3:03:76:3d:4f:cb:3e:4d:70:c2:52:4b:02: ee:ae:5c:7a:1a:16:1b:4a:f4:55:35:59:5d:94:97: 0b:9c:ff:40:a7:28:a6:cb:4a:92:60:b3:a3:21:82: e6:bc:6d:c4:06:27:39:a6:4c:6f:2a:f2:ed:6d:67: df:65:2c:e4:37:26:84:bb:38:f4:b1:c1:fe:da:b9: e0:27:15:68:3f:e2:15:33:d7:9c:ab:41:45:23:f4: 23:69:2e:3a:7d:db:4d:f8:97:6a:6d:a8:5b:e9:c1: fa:13:52:b2:9c:68:71:cc:2c:0a:b9:97:de:d5:4f: 33:69:64:0a:ff:cb:94:b0:c7:95:f8:4f:14:c5:35: 37:e8:0d:52:90:15:b2:0c:b2:94:c4:3e:e6:3a:37: df:2d:3c:2b:dd:cd:dc:48:8a:5b:66:19:44:24:38: b1:bf:73:49:75:34:00:85:c4:9f:e2:56:10:32:b1: d3:ad:cc:cc:6b:6b:0d:90:bc:98:98:de:d6:8a:b2: 5d:85:9c:a7:90:4b:e4:8c:fc:b1:6a:72:ed:66:2a: 41:59:0d:e9:ce:b2:95:ef:8c:09:9b:aa:b0:c7:21: 4e:00:9d:fe:9d:44:e7:0c:c8:67:9c:f4:fd:ff:cb: 86:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:61:86:73:92:99:3B:E7:18:9F:41:39:6B:C6:EF:86:B7:BD:86:1A X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b5:a2:15:d2:50:49:0e:05:78:bb:8b:c9:95:06:09:0d:3c: 74:c7:50:30:ea:b9:28:59:11:34:d3:30:3d:83:d2:1e:7b:44: 64:68:29:d9:dd:82:fa:83:78:d3:b0:fc:80:40:53:7e:3d:b6: 7b:49:ce:3d:98:6e:fa:54:cc:0c:e4:1c:f4:39:91:34:be:8c: db:30:0c:1e:01:55:94:53:8e:ed:07:b0:6a:d5:a6:ec:6b:e6: e1:b9:fe:9e:e3:ad:1b:59:06:57:83:77:77:ab:6f:e9:f7:2e: 30:cc:de:01:09:e1:e0:00:1b:b2:a1:0b:13:ac:44:41:45:6b: e3:09:bd:e6:e7:df:11:c2:c1:7f:12:47:a1:3a:d8:6b:0a:d4: 87:c5:3a:4c:6b:29:0d:cd:e6:51:84:ce:a1:fb:ff:6f:1d:c7: 17:e6:84:b1:c3:e3:47:9a:70:d3:ba:7b:8f:46:7b:3b:c8:7b: 97:f0:58:b8:d3:8f:7f:b8:ce:14:e1:db:69:03:8a:b1:d4:d5: e0:90:29:aa:4e:4a:66:cb:f0:52:f0:8e:94:55:fb:cd:30:ea: 28:0a:27:58:62:32:a0:1f:47:b3:5b:27:85:ea:97:62:fd:2e: 48:1a:ea:a9:a0:37:8b:4e:3f:77:d8:82:db:b1:48:bc:12:3c: 92:c1:5a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmVcvvP7hKcVuC6SOA6LlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwNDE3MDQwMDU2WhcNMjYwNDE4MDQwMDU2WjAzMTEwLwYDVQQD EyhmNDYxODY3MzkyOTkzYmU3MTg5ZjQxMzk2YmM2ZWY4NmI3YmQ4NjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD5Kklmcj/c/wSep3Mk6zdMDdj1P yz5NcMJSSwLurlx6GhYbSvRVNVldlJcLnP9Apyimy0qSYLOjIYLmvG3EBic5pkxv KvLtbWffZSzkNyaEuzj0scH+2rngJxVoP+IVM9ecq0FFI/QjaS46fdtN+Jdqbahb 6cH6E1KynGhxzCwKuZfe1U8zaWQK/8uUsMeV+E8UxTU36A1SkBWyDLKUxD7mOjff LTwr3c3cSIpbZhlEJDixv3NJdTQAhcSf4lYQMrHTrczMa2sNkLyYmN7WirJdhZyn kEvkjPyxanLtZipBWQ3pzrKV74wJm6qwxyFOAJ3+nUTnDMhnnPT9/8uG1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRhhnOSmTvnGJ9BOWvG74a3vYYaMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbWiFdJQ SQ4FeLuLyZUGCQ08dMdQMOq5KFkRNNMwPYPSHntEZGgp2d2C+oN407D8gEBTfj22 e0nOPZhu+lTMDOQc9DmRNL6M2zAMHgFVlFOO7QewatWm7Gvm4bn+nuOtG1kGV4N3 d6tv6fcuMMzeAQnh4AAbsqELE6xEQUVr4wm95uffEcLBfxJHoTrYawrUh8U6TGsp Dc3mUYTOofv/bx3HF+aEscPjR5pw07p7j0Z7O8h7l/BYuNOPf7jOFOHbaQOKsdTV 4JApqk5KZsvwUvCOlFX7zTDqKAonWGIyoB9Hs1snheqXYv0uSBrqqaA3i04/d9iC 27FIvBI8ksFagA== -----END CERTIFICATE-----Generated at Fri Apr 17 13:15:25 2026 by rpki-client