$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: PIPkMjUFNeBrlj8jejpz0UqtTX0+uFr65lOtPDC/9tM= Subject key identifier: CD:8A:A0:56:43:1F:1E:74:DB:D9:76:E3:81:C6:09:58:F3:1B:40:F7 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019D97E20667ED6DDB97DBE98B86474358DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 18D2 Signing time: Thu 16 Apr 2026 20:01:05 +0000 Manifest this update: Thu 16 Apr 2026 20:01:05 +0000 Manifest next update: Fri 17 Apr 2026 20:01:05 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 4: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 5: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 6: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 7: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 8: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: h9FY/vpdSRtd3PdwihaEnLQrrUvUJk2/ThwyN+jW85c=) 9: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 10: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 11: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:e2:06:67:ed:6d:db:97:db:e9:8b:86:47:43:58:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Apr 16 20:01:05 2026 GMT Not After : Apr 17 20:01:05 2026 GMT Subject: CN=cd8aa056431f1e74dbd976e381c60958f31b40f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:df:8a:df:66:d8:a6:0a:96:9d:61:83:14: f9:61:0c:3d:de:09:b5:fb:27:32:ce:fc:24:28:1b: b9:00:96:8d:b6:37:22:a9:41:2f:21:8e:bb:c8:88: 32:db:8b:08:c0:58:5d:36:e0:12:84:db:c4:6c:e0: 02:b7:86:66:39:3a:e6:a0:0b:f7:09:fc:38:11:af: 9f:55:17:b8:bd:ee:03:c7:68:6a:de:3e:e8:8c:22: 3c:2d:39:b4:7e:27:a8:3e:f4:bd:40:24:94:1d:75: 1e:7d:66:fc:0c:60:bc:b7:db:0d:08:fa:0c:56:8a: 6b:79:76:24:89:87:f4:92:9b:e4:82:c5:25:e7:cd: 5b:b3:62:3d:2d:df:5d:6d:3b:43:9b:75:a1:cd:c1: 6a:7e:21:31:eb:d8:87:7d:19:aa:9a:d9:89:17:aa: c3:c9:c1:7a:da:bb:5c:43:b5:c5:d8:fc:ef:e8:01: ec:f4:81:a9:b5:34:fa:73:bf:74:a9:5d:02:ca:9f: 6d:97:6c:87:e5:4f:fb:8c:54:9e:96:0a:22:be:98: f4:e8:93:3d:b7:a3:d8:1e:2a:f2:26:30:84:61:c6: 52:ad:11:34:f9:ed:e3:7a:ab:40:d4:93:9a:5d:52: 65:2a:8a:4a:e9:ac:63:74:b1:b2:29:b3:f4:28:2d: 26:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8A:A0:56:43:1F:1E:74:DB:D9:76:E3:81:C6:09:58:F3:1B:40:F7 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:62:ae:6d:a9:e8:e9:99:58:fb:ed:c3:c7:0b:3e:81:74:96: 2e:43:cf:22:2f:ac:c1:7f:8e:f4:1d:70:69:6b:4b:e3:be:bb: da:8a:49:0d:d3:f6:8d:4b:12:90:da:d0:06:ad:18:ac:59:51: 77:8c:03:32:1a:96:9a:09:a7:64:76:89:63:e3:78:73:d3:53: dc:1d:27:c2:69:b6:6b:48:41:92:36:9a:2a:fd:f8:d5:bf:6e: 81:d3:af:a3:90:33:cd:22:70:97:5e:0d:04:f6:e7:75:30:a3: c3:0d:31:ee:5b:94:56:d4:f6:2f:a2:00:14:8a:09:95:53:3a: 7b:3c:64:f7:54:b7:4c:5a:7a:f0:30:37:a2:b5:93:de:d1:15: 2d:b6:e7:1c:a9:24:b5:01:4a:c0:ab:06:82:30:e6:ab:ae:aa: ea:10:78:87:c4:46:d5:1c:8c:cd:ec:4f:cd:f5:e1:1d:a9:2c: e7:e8:68:d6:a2:19:46:44:33:b7:3c:0e:76:09:11:66:c2:be: e2:35:93:65:39:44:df:8e:bf:ea:68:d8:48:d1:32:63:86:43: 32:b5:c8:69:07:84:f0:3c:c7:4a:72:a2:e5:19:67:0f:f4:5b: b4:ca:6b:63:88:b8:74:df:ca:5d:7f:5d:b3:f9:50:9b:c1:ef: ed:bf:3f:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2X4gZn7W3bl9vpi4ZHQ1jeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwNDE2MjAwMTA1WhcNMjYwNDE3MjAwMTA1WjAzMTEwLwYDVQQD EyhjZDhhYTA1NjQzMWYxZTc0ZGJkOTc2ZTM4MWM2MDk1OGYzMWI0MGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Xfit9m2KYKlp1hgxT5YQw93gm1 +ycyzvwkKBu5AJaNtjciqUEvIY67yIgy24sIwFhdNuAShNvEbOACt4ZmOTrmoAv3 Cfw4Ea+fVRe4ve4Dx2hq3j7ojCI8LTm0fieoPvS9QCSUHXUefWb8DGC8t9sNCPoM VopreXYkiYf0kpvkgsUl581bs2I9Ld9dbTtDm3WhzcFqfiEx69iHfRmqmtmJF6rD ycF62rtcQ7XF2Pzv6AHs9IGptTT6c790qV0Cyp9tl2yH5U/7jFSelgoivpj06JM9 t6PYHiryJjCEYcZSrRE0+e3jeqtA1JOaXVJlKopK6axjdLGyKbP0KC0mSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2KoFZDHx5029l244HGCVjzG0D3MB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmKubano 6ZlY++3Dxws+gXSWLkPPIi+swX+O9B1waWtL47672opJDdP2jUsSkNrQBq0YrFlR d4wDMhqWmgmnZHaJY+N4c9NT3B0nwmm2a0hBkjaaKv341b9ugdOvo5AzzSJwl14N BPbndTCjww0x7luUVtT2L6IAFIoJlVM6ezxk91S3TFp68DA3orWT3tEVLbbnHKkk tQFKwKsGgjDmq66q6hB4h8RG1RyMzexPzfXhHaks5+ho1qIZRkQztzwOdgkRZsK+ 4jWTZTlE346/6mjYSNEyY4ZDMrXIaQeE8DzHSnKi5RlnD/RbtMprY4i4dN/KXX9d s/lQm8Hv7b8/gw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:34:57 2026 by rpki-client