$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: R6uSBLblHvhi4vpJ2N5mIg9r7KXmYYW4ROwRbNEoWV4= Subject key identifier: BD:86:C5:74:43:72:6D:C4:90:F0:62:DF:CD:90:BD:61:31:D5:01:6D Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019D9963103E884F6AF0A11BDEEAE5C4439F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0AF6 Signing time: Fri 17 Apr 2026 03:01:39 +0000 Manifest this update: Fri 17 Apr 2026 03:01:39 +0000 Manifest next update: Sat 18 Apr 2026 03:01:39 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: C7NjAkV/gNtxOyzflLksTWPKRU05S+8mtiZr96+IVfI=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: LZ_m2waZIs7_F9DFpQeDZwKSqaI.roa (hash: AswbWRxQk3rPm90PMBMeMwOGoat0R8hOqCGqrGPRnek=) 8: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 9: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 10: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 11: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 12: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 13: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 14: k4m5uF6d86bKxXryYJZgXjvW8I0.roa (hash: H2jNyKD+HmfBkpz7JaRABFyLsbIlNp19F4CUBAdQu10=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:63:10:3e:88:4f:6a:f0:a1:1b:de:ea:e5:c4:43:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Apr 17 03:01:39 2026 GMT Not After : Apr 18 03:01:39 2026 GMT Subject: CN=bd86c57443726dc490f062dfcd90bd6131d5016d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:77:00:88:72:41:2f:69:4c:eb:70:e8:8d:59: 5f:0d:5c:02:66:cd:e2:f8:06:97:c8:64:89:ab:2d: f9:cb:45:10:44:1e:8a:4a:a8:52:19:97:79:03:36: d6:b5:48:bb:07:6d:63:59:df:97:95:57:b0:49:c5: 56:29:3b:47:16:3a:ad:bd:0d:38:26:30:31:78:20: 7f:e1:61:73:d1:d1:6e:f7:a4:8c:8e:60:b4:fc:88: d9:14:0a:32:50:82:5b:0d:aa:45:ce:8f:ee:d6:10: 56:bc:b9:71:76:1c:ea:bf:3b:72:09:fa:1b:47:a8: 3e:e2:07:4f:d2:34:e1:9b:ae:9b:6b:9c:3b:c3:fd: b5:db:c4:1c:1b:c0:0a:c9:ed:58:83:36:be:fc:81: c5:ec:be:24:60:78:ee:bb:ee:ae:4d:90:12:0e:65: 6c:a5:79:6b:7b:b3:f9:d3:58:8e:33:19:7c:6a:f0: f9:30:6a:9e:77:c5:a9:71:6a:f8:4e:06:4b:60:e8: 14:97:a3:35:3e:99:f2:92:4b:c3:97:e5:5f:57:12: 20:8a:46:3d:6d:26:14:83:5e:df:24:11:8a:9c:c6: 3e:76:ad:61:49:37:b4:78:de:33:86:81:8d:e3:e6: 72:31:0c:21:9b:da:72:81:62:e9:24:0d:2f:ef:75: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:86:C5:74:43:72:6D:C4:90:F0:62:DF:CD:90:BD:61:31:D5:01:6D X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:88:83:09:64:60:e5:60:5d:88:82:5e:d4:2b:ed:7e:a5:c9: c1:78:de:bb:3d:23:3d:5c:02:3e:d7:8f:0b:16:b5:f8:a1:01: a0:37:e6:81:26:08:5b:80:c8:ec:21:ab:5d:a8:29:de:a1:12: ec:c2:86:12:e8:45:b4:1e:56:3c:da:b2:45:e1:a2:aa:80:8a: 15:5d:c2:4c:51:db:87:34:9d:9b:28:e7:2c:c0:1c:b7:00:5c: f3:ec:11:c5:2b:71:ea:c5:d0:39:b1:bc:cd:4c:4f:76:84:0d: 73:80:35:2a:a0:87:da:9f:fa:56:d8:9a:89:f0:3f:7d:4f:53: 79:ea:b6:f3:6c:93:3d:34:91:74:e8:eb:6a:f9:2f:96:9a:47: 85:fa:9f:04:86:5a:2d:7f:74:bb:4c:bc:ad:3c:23:1b:3f:f0: f1:3a:3d:ef:d1:50:cf:a7:63:ef:b3:0a:52:0a:ac:3a:33:d1: 8c:a5:21:84:3d:ce:52:fa:eb:48:c0:9f:3e:a4:34:10:ef:09: 53:ce:ed:f1:c1:54:ba:d3:d2:58:c2:d8:44:45:34:d7:6e:af: 17:e9:db:a9:72:da:f7:74:d0:3e:0d:5f:f7:af:b9:bb:83:3c: 6b:56:04:1d:ad:f7:6c:25:7f:95:59:1b:50:63:34:ca:2d:fd: 3d:af:d2:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYxA+iE9q8KEb3urlxEOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwNDE3MDMwMTM5WhcNMjYwNDE4MDMwMTM5WjAzMTEwLwYDVQQD EyhiZDg2YzU3NDQzNzI2ZGM0OTBmMDYyZGZjZDkwYmQ2MTMxZDUwMTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ncAiHJBL2lM63DojVlfDVwCZs3i +AaXyGSJqy35y0UQRB6KSqhSGZd5AzbWtUi7B21jWd+XlVewScVWKTtHFjqtvQ04 JjAxeCB/4WFz0dFu96SMjmC0/IjZFAoyUIJbDapFzo/u1hBWvLlxdhzqvztyCfob R6g+4gdP0jThm66ba5w7w/2128QcG8AKye1Ygza+/IHF7L4kYHjuu+6uTZASDmVs pXlre7P501iOMxl8avD5MGqed8WpcWr4TgZLYOgUl6M1PpnykkvDl+VfVxIgikY9 bSYUg17fJBGKnMY+dq1hSTe0eN4zhoGN4+ZyMQwhm9pygWLpJA0v73W9QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2GxXRDcm3EkPBi382QvWEx1QFtMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYiDCWRg 5WBdiIJe1CvtfqXJwXjeuz0jPVwCPtePCxa1+KEBoDfmgSYIW4DI7CGrXagp3qES 7MKGEuhFtB5WPNqyReGiqoCKFV3CTFHbhzSdmyjnLMActwBc8+wRxStx6sXQObG8 zUxPdoQNc4A1KqCH2p/6VtiaifA/fU9Teeq282yTPTSRdOjravkvlppHhfqfBIZa LX90u0y8rTwjGz/w8To979FQz6dj77MKUgqsOjPRjKUhhD3OUvrrSMCfPqQ0EO8J U87t8cFUutPSWMLYREU0126vF+nbqXLa93TQPg1f96+5u4M8a1YEHa33bCV/lVkb UGM0yi39Pa/S0Q== -----END CERTIFICATE-----Generated at Fri Apr 17 04:59:10 2026 by rpki-client