$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json) Hash identifier: L5mZjmR2yX3QjA2lsDbwIFrj74Q81XsemaoFaLdgsH0= Subject key identifier: 12:82:88:51:31:AC:C3:C4:48:DC:01:CE:8C:FD:0D:9B:B6:CF:3C:2F Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20 Certificate serial: 019D97E232A41EB31B2416B3BF141ED66F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft Manifest number: 1913 Signing time: Thu 16 Apr 2026 20:01:16 +0000 Manifest this update: Thu 16 Apr 2026 20:01:16 +0000 Manifest next update: Fri 17 Apr 2026 20:01:16 +0000 Files and hashes: 1: 1-ygVXvpX3v0iELiClfnmQNYwGyE.roa (hash: X5he1s+27okfT854bA2DHGCg/8azuLS5wg9wh4BAYOk=) 2: 81IrEqThFJ71oZltC7sydtXNojo.roa (hash: tEfEiIXn9wfKX7SvDjdARvZLxRgzMJ/S8JlSOukelog=) 3: AMQlobx9HParaeDL7T0v3tR4_mg.roa (hash: DvsmpIh8xvNvja7LOYbDo2D2JDk07c51OKvsQR0zZ1A=) 4: CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa (hash: hFhoH59R3e+GZod8NYfc3YpX1Y6SV4cXhI67xJcoHls=) 5: JUcvuyeTGukHCqTR6Mz7mT8UzrM.roa (hash: ApgtiPp395Jbu4eMbjIE9qm3tPStuEmPFB0TljPswyE=) 6: JxJo9qALLP7eJJE5vuTtbxNKarg.roa (hash: HkVv74vSVM+BvE4aRbMZl6E3E6sT2RpvFk2i93TTTiE=) 7: QZ_9dSDQYledA3mZvzzU2XsR2W0.roa (hash: nZN1cE74YklriGKMRngm1fgmd4ilU9K/u2p2JG2cQ20=) 8: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=) 9: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: jzCv3w/BwVz0HlR+gcx2++0UC+jMPbzfcFBUk3QEOAQ=) 10: bdvOdORq1R90uFfrxYw4iBM7kqg.roa (hash: 4NNR+K8RfDGHTLo6ea+O3NVX7BGGwrS0QYCsrB8x0h0=) 11: de2lwVssf8rnTbV-vrGaj_YNofM.roa (hash: X+D652oMPb3y57iVvUCNT577oF8mBPxjOL994t6GNZs=) 12: fxuyMV_7iGJ5rjIPhk3y0WiOc-Y.roa (hash: kZWQ/Ewlc4WMwycM0JTInlzSOn7k6IqfaiPaxpvk380=) 13: g4ShtOVoK1sOm96RfSspdLumCvI.roa (hash: dbDK/BecQeIz6Zb33EjyuQY6S7PvjAP+A9ZP96sRxE8=) 14: pXvD79Zml20XD8705pvsmU8J_GQ.roa (hash: SwtSGe6kdeJc/WuWw1ApFcrI82cgsWeYh2Z9I8ocSMI=) 15: qo7ie-ZCOxr3kULK0wr2-czci7A.roa (hash: tjSzYVU1BPWM+eWE8epAD1zQp+0FNjjYVtJc8ORfDvE=) 16: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=) 17: zA17qoirAi97IIZj_QFD6CKbTws.roa (hash: wIxn+OqU3bbLtcBaIrI+kk/Wk/TrLzNgcnRrWeWUt/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:e2:32:a4:1e:b3:1b:24:16:b3:bf:14:1e:d6:6f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20 Validity Not Before: Apr 16 20:01:16 2026 GMT Not After : Apr 17 20:01:16 2026 GMT Subject: CN=1282885131acc3c448dc01ce8cfd0d9bb6cf3c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:22:35:80:e4:b6:75:ef:db:73:64:75:fb: 52:fd:92:d9:53:e5:2a:0c:6d:36:b2:41:8f:cb:f3: 8c:ee:bc:38:20:8f:db:42:40:37:0f:28:18:36:4b: 95:e7:6b:66:4c:72:3b:6b:dc:7b:ec:86:98:27:24: fc:80:f8:d7:00:87:fa:b0:2b:1b:32:6d:cd:e9:e3: 54:79:4c:4b:a9:88:3c:30:dd:9b:65:41:28:8a:9b: 7c:f5:de:f2:62:d3:1e:3a:96:d1:5e:e3:26:a0:7d: e4:86:c3:ba:8e:e8:8d:a9:e7:f2:40:f8:17:20:35: 2d:8a:d0:c7:63:0d:01:d5:2b:10:9e:4b:69:e4:79: 54:4b:9a:2e:aa:62:59:63:cc:c7:1b:11:4d:4c:1d: e2:ec:82:3f:fc:2a:fc:53:7b:eb:c7:23:81:a5:bd: 01:c7:ed:75:0f:b1:37:7a:86:c9:6a:a8:e9:41:fe: 8e:5e:1b:a6:c2:79:77:32:ca:01:25:2e:52:be:e6: 74:b2:f4:c2:ad:91:ba:3d:6d:03:ff:a3:3a:9a:b5: 91:67:5d:ad:a5:3a:2e:b0:94:fe:0f:0b:c0:ee:d6: a2:58:c8:84:95:86:3e:91:29:67:a8:ed:f1:a9:40: 4d:5f:d2:a3:d1:4b:1c:ef:9b:c1:c5:aa:62:05:3d: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:82:88:51:31:AC:C3:C4:48:DC:01:CE:8C:FD:0D:9B:B6:CF:3C:2F X509v3 Authority Key Identifier: keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:35:da:4b:c1:90:45:96:7e:1c:2c:48:92:04:14:a0:99:c2: df:59:a1:26:d0:93:77:c5:a0:a9:fa:2a:c1:bc:29:95:98:1c: ac:3d:3d:c6:f1:e2:9e:af:a2:50:1a:0f:fc:6b:74:36:54:e1: f1:52:3f:7b:5f:ac:eb:09:a4:79:d2:af:47:eb:f9:9f:c0:27: c1:d4:91:b9:07:12:f8:ba:3d:6c:3b:a0:8c:c7:a9:ff:fd:4c: 8d:53:6d:a6:f0:a9:81:f5:2d:cc:65:1a:c4:fc:68:2b:78:5a: 97:c1:c8:9a:3f:61:4d:cf:49:cc:52:7b:b4:3a:9f:a7:af:e7: 8c:7a:b7:e6:2b:85:96:88:1c:fe:b3:2b:52:70:d5:ad:16:4a: 05:0f:84:ca:f7:78:bc:ee:d9:89:8e:4a:2f:b1:b3:cd:66:b8: 06:46:7b:fd:6d:74:95:87:59:95:fa:2a:e6:f9:78:a7:63:60: 53:fb:17:1c:5f:3f:1a:7c:4e:aa:22:94:43:a6:4b:a3:7f:0b: 0d:dd:c6:cb:fe:e5:27:d8:1a:ae:0a:3f:0c:a8:69:cf:73:36: 03:7e:05:77:4c:23:e9:f1:40:c8:f3:8a:dc:e3:e0:64:54:be: 4a:5d:ef:98:fa:c2:df:f6:a5:2f:28:28:97:26:27:ec:9b:f7: f7:fb:51:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2X4jKkHrMbJBazvxQe1m8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0 OTRlMjAwHhcNMjYwNDE2MjAwMTE2WhcNMjYwNDE3MjAwMTE2WjAzMTEwLwYDVQQD EygxMjgyODg1MTMxYWNjM2M0NDhkYzAxY2U4Y2ZkMGQ5YmI2Y2YzYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy70iNYDktnXv23NkdftS/ZLZU+Uq DG02skGPy/OM7rw4II/bQkA3DygYNkuV52tmTHI7a9x77IaYJyT8gPjXAIf6sCsb Mm3N6eNUeUxLqYg8MN2bZUEoipt89d7yYtMeOpbRXuMmoH3khsO6juiNqefyQPgX IDUtitDHYw0B1SsQnktp5HlUS5ouqmJZY8zHGxFNTB3i7II//Cr8U3vrxyOBpb0B x+11D7E3eobJaqjpQf6OXhumwnl3MsoBJS5SvuZ0svTCrZG6PW0D/6M6mrWRZ12t pTousJT+DwvA7taiWMiElYY+kSlnqO3xqUBNX9Kj0Usc75vBxapiBT1kvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKCiFExrMPESNwBzoz9DZu2zzwvMB8GA1UdIwQY MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt YmE3YzdkODE5MGNhLzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjXaS8GQ RZZ+HCxIkgQUoJnC31mhJtCTd8WgqfoqwbwplZgcrD09xvHinq+iUBoP/Gt0NlTh 8VI/e1+s6wmkedKvR+v5n8AnwdSRuQcS+Lo9bDugjMep//1MjVNtpvCpgfUtzGUa xPxoK3hal8HImj9hTc9JzFJ7tDqfp6/njHq35iuFlogc/rMrUnDVrRZKBQ+Eyvd4 vO7ZiY5KL7GzzWa4BkZ7/W10lYdZlfoq5vl4p2NgU/sXHF8/GnxOqiKUQ6ZLo38L Dd3Gy/7lJ9gargo/DKhpz3M2A34Fd0wj6fFAyPOK3OPgZFS+Sl3vmPrC3/alLygo lyYn7Jv39/tRtA== -----END CERTIFICATE-----Generated at Fri Apr 17 03:11:31 2026 by rpki-client