$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: 3VeYuhnjNrOz/FdCNs4+/nJsmOYv8RpcA2z0i1IlQas= Subject key identifier: 92:D6:E0:5F:FE:4B:96:79:02:46:C7:7B:C4:D3:63:2B:CE:B9:65:B5 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019D98BD32DC93F7FFCB2DAD5A50BB7CC504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 139B Signing time: Fri 17 Apr 2026 00:00:29 +0000 Manifest this update: Fri 17 Apr 2026 00:00:29 +0000 Manifest next update: Sat 18 Apr 2026 00:00:29 +0000 Files and hashes: 1: 5GxvHZCMMVes7bAUdIaYsXEtdX4.roa (hash: x5pIX8HDxeQPjQseodSp8HJv0Ul8z850CXMOjeGpMb0=) 2: Mb17AOKZNC1KtKmoS5wai5IdIbo.roa (hash: R/E+muLS2RYpCjFJb4AXDVul1IdGidHedeLvMIE70cg=) 3: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (hash: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA=) 4: ODMDEGyVLTmd47TMfFo6JexY6HQ.roa (hash: zruo3XY1xsZ3gUUyKc7wrw3okSMA8oCjUH3Rw6OmsMw=) 5: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: adtJSOunJ/atfif3Wuh7xhR4+bhNn6S7ig9aI7Gm6mQ=) 6: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (hash: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck=) 7: bp6p58RrsHDAJt-0FKHpeTioAb0.roa (hash: +dNPIc1eY6aILjseFmv9KTW6y1s+ashe2HZMhXx8P9k=) 8: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (hash: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM=) 9: kZfuHKDAiQJXBvJliXqrjaU0XIg.roa (hash: DHMZVeLexmvq1Vc8FbkkKH/pRR44r4WIYoKUwGuSUU0=) 10: lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (hash: wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=) 11: m0_gbn3feXvXHw_cYO_Nfm2Xxfc.roa (hash: KJNXj9uAflfe61jQCgnfBrsgkg1fFmoywQfWErB1+KU=) 12: n0qUh9R2qSn_FGDUGu4NzWw85oA.roa (hash: VouJP45N/Qz78cWxNlxzcacwk9tugDuBJxf1M6WkcOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:32:dc:93:f7:ff:cb:2d:ad:5a:50:bb:7c:c5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Apr 17 00:00:29 2026 GMT Not After : Apr 18 00:00:29 2026 GMT Subject: CN=92d6e05ffe4b96790246c77bc4d3632bceb965b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:7d:b1:f6:31:45:5d:3c:c3:08:71:b4:6a: cb:e2:fa:5a:b1:1d:fe:89:04:73:62:9d:25:d4:8e: cf:17:85:18:50:bb:1f:09:cc:2e:f4:7d:02:2f:d8: d4:83:09:8d:88:9f:b9:17:cc:ee:b4:01:91:13:0a: 9e:ac:18:9e:dd:01:c0:d8:58:8d:1a:f3:78:97:cb: 2a:97:74:6a:ce:91:f2:90:96:0a:48:ab:9c:1c:a8: cc:58:e8:8f:30:55:6d:62:84:66:11:60:9e:ea:cc: 4f:1c:24:e0:14:10:3f:31:d3:62:28:91:94:0e:97: 8f:af:9f:62:5c:10:ca:44:10:02:42:7e:f2:f8:11: 9d:a2:2e:a5:b9:ae:cd:b4:18:b4:73:ec:e0:7d:84: 19:87:fd:e0:a8:e4:28:25:6d:c7:93:f9:79:82:33: b5:74:10:0f:ce:26:d2:89:96:0a:b5:46:97:96:18: f7:bf:44:d0:ca:4c:21:aa:f6:91:0d:6d:d2:05:ec: 28:08:66:0b:03:b9:c1:c7:3d:60:9f:08:99:a3:98: e1:57:82:80:a8:43:0f:55:1a:a2:9a:53:ad:bf:40: f2:76:f0:95:07:16:68:31:d3:a9:39:c5:8c:60:b5: b7:fa:91:9d:fa:f0:fa:83:9c:e5:c4:7b:3e:28:b6: ba:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D6:E0:5F:FE:4B:96:79:02:46:C7:7B:C4:D3:63:2B:CE:B9:65:B5 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6e:19:ab:da:69:50:c9:c3:3a:be:e7:67:1a:6d:27:ed:32: 48:44:57:49:95:bd:87:af:d9:65:63:4d:4a:74:66:14:8d:07: db:da:ce:72:8c:5e:70:13:fb:36:23:3a:19:b5:0e:66:e5:2f: 01:28:92:97:6a:1c:5b:f9:fa:26:02:81:3e:0e:d8:f9:b4:4c: 2c:63:b2:a3:8b:ce:06:c7:76:c8:61:20:f0:61:64:d0:77:6b: 3c:1d:d4:8a:5c:10:f0:eb:75:80:af:bd:6b:8e:26:18:de:7e: b6:e7:3f:24:3c:15:67:6c:c8:1f:01:d2:81:ef:74:93:f0:1a: fc:55:5c:7d:00:fb:85:d4:0a:07:b7:4a:cb:89:4b:ee:a2:fd: 74:58:6d:a9:00:53:8e:9d:0f:f3:c4:18:ed:15:67:ae:e5:f7: 04:e6:fc:a0:1a:0d:e1:83:33:12:31:bf:ff:1e:c3:5f:9b:32: 90:6e:7f:98:3b:d5:de:c6:19:ab:81:60:9e:19:01:9a:9f:14: 98:c6:a2:e5:e9:69:78:2d:de:63:f0:d2:b1:65:25:c0:4f:d5: f0:fc:78:cb:a8:93:0b:f2:2f:f8:75:e6:87:40:35:51:57:47: 20:8b:97:d0:57:d9:cc:6f:fe:cf:2a:45:78:93:92:f1:90:11: 9d:1c:8d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YvTLck/f/yy2tWlC7fMUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwNDE3MDAwMDI5WhcNMjYwNDE4MDAwMDI5WjAzMTEwLwYDVQQD Eyg5MmQ2ZTA1ZmZlNGI5Njc5MDI0NmM3N2JjNGQzNjMyYmNlYjk2NWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ct9sfYxRV08wwhxtGrL4vpasR3+ iQRzYp0l1I7PF4UYULsfCcwu9H0CL9jUgwmNiJ+5F8zutAGREwqerBie3QHA2FiN GvN4l8sql3RqzpHykJYKSKucHKjMWOiPMFVtYoRmEWCe6sxPHCTgFBA/MdNiKJGU DpePr59iXBDKRBACQn7y+BGdoi6lua7NtBi0c+zgfYQZh/3gqOQoJW3Hk/l5gjO1 dBAPzibSiZYKtUaXlhj3v0TQykwhqvaRDW3SBewoCGYLA7nBxz1gnwiZo5jhV4KA qEMPVRqimlOtv0DydvCVBxZoMdOpOcWMYLW3+pGd+vD6g5zlxHs+KLa6CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLW4F/+S5Z5AkbHe8TTYyvOuWW1MB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgG4Zq9pp UMnDOr7nZxptJ+0ySERXSZW9h6/ZZWNNSnRmFI0H29rOcoxecBP7NiM6GbUOZuUv ASiSl2ocW/n6JgKBPg7Y+bRMLGOyo4vOBsd2yGEg8GFk0HdrPB3UilwQ8Ot1gK+9 a44mGN5+tuc/JDwVZ2zIHwHSge90k/Aa/FVcfQD7hdQKB7dKy4lL7qL9dFhtqQBT jp0P88QY7RVnruX3BOb8oBoN4YMzEjG//x7DX5sykG5/mDvV3sYZq4FgnhkBmp8U mMai5elpeC3eY/DSsWUlwE/V8Px4y6iTC/Iv+HXmh0A1UVdHIIuX0FfZzG/+zypF eJOS8ZARnRyNow== -----END CERTIFICATE-----Generated at Fri Apr 17 10:39:22 2026 by rpki-client