$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft File: 5eAzVGZsTLKr_VFBHspdUksNW-U.mft (raw, json) Hash identifier: 6+1XZrkaKnvtrCX5obWVE2XfkCtmO6b7STaISnnyILg= Subject key identifier: 51:C2:00:0B:98:40:A0:FF:F2:07:DA:7A:B8:9A:52:58:4B:BB:A5:51 Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5 Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5 Certificate serial: 019DA3E6839198AA21E802CC73BF9240FCAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft Manifest number: 72 Signing time: Sun 19 Apr 2026 04:01:26 +0000 Manifest this update: Sun 19 Apr 2026 04:01:26 +0000 Manifest next update: Mon 20 Apr 2026 04:01:26 +0000 Files and hashes: 1: 5eAzVGZsTLKr_VFBHspdUksNW-U.crl (hash: dAEPVAF9RUF0pozEFMbJFzDPLr9YYHQgu7lO4DqCXkY=) 2: H0LmI3hwP5vuk6s2D4uvDcdqzVk.roa (hash: 2sxJRLlrwU2S9zOA5ff7Badv9IoN7irocgD2LEsbLN0=) 3: c8eJl-3JP9AxZFULMhM6YkciJnY.roa (hash: T6HFSllAOvG1TkfBGfSjeP+EN0EobptIaOD6pvtjKUM=) 4: kdWUYDREoQ3N2A7deVtO68-yqs4.roa (hash: bUgQp1LB1aMffjw2lKit1+GbbhesVmXQqan+Qw/1ROI=) 5: kw51Lm0mc5w8FwzYeE7YIp_f-Gk.roa (hash: OMZso7/dCWxfJTLo4VPx0QJ4cvTP9uIN1LOsWuS06Cs=) 6: o548aWjyv_hfBdpA1bVFK3wrNP4.roa (hash: zUyBvFaEHdugGyGKIt6bIfLj0Nkxf9FI6lzJjaoR1s4=) 7: skRcoxVV_e4zKUJ-PcawwudWhvs.roa (hash: /T5/7ESG8AnsEEwa67YOqMxxgqR+qtDogLVw2PIFibM=) 8: w2BhL8IoeKHyOBrWe4qdH75R0rE.roa (hash: f7oxnga0mFy31MbGdu6HRoHXFf4LdXAjl0cocBZKmKw=) 9: xqkIGkwCiGI9_ROxA-753BCeMSo.roa (hash: 6Wbd2frdsClpbkut2snIQAUUZt2yqFLdakRBdxOpvPI=) 10: yv3IV4Vlkd8eePPSX6RP7lOMXhU.roa (hash: IlfKdK3YlVuTxh1bRqhdGRqWCOTVftiLmI4fUhCGywY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:e6:83:91:98:aa:21:e8:02:cc:73:bf:92:40:fc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5 Validity Not Before: Apr 19 04:01:26 2026 GMT Not After : Apr 20 04:01:26 2026 GMT Subject: CN=51c2000b9840a0fff207da7ab89a52584bbba551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:c7:ae:90:a1:21:23:f9:3c:5b:f4:a8:c6: 83:36:81:51:0a:62:8c:f4:04:08:72:9f:27:0c:ae: 40:45:d8:01:94:5c:b9:7d:50:11:f5:e6:2f:94:9f: db:01:19:6d:df:f4:c0:44:18:af:d9:e5:5d:91:bf: 08:da:c7:ae:a2:93:64:7c:98:62:3b:bf:67:d5:98: 81:6d:63:f4:93:81:f0:7a:75:2f:db:2f:58:c7:dd: d4:79:7b:b8:ee:0c:51:24:fb:b9:72:05:39:f2:b2: c7:11:dc:a3:45:e0:c7:37:49:ff:10:af:a7:52:eb: 3c:e0:83:31:76:4a:47:67:81:a4:71:db:a7:f8:3c: af:e6:f9:7e:80:34:13:2d:c4:ce:d5:44:36:71:93: ae:03:8f:da:01:8d:c8:01:06:d9:05:b8:0a:df:98: 48:e8:f2:74:70:cf:e3:af:ba:83:5a:f0:0a:76:e8: ec:e8:e3:65:fc:ba:7b:5a:7b:e2:17:59:10:cc:99: 86:d6:63:56:f9:f9:7c:58:f9:0e:2c:5c:2c:79:0b: f9:94:5e:5c:a8:1d:c9:01:15:64:81:35:1f:38:9e: 4b:fc:85:0a:de:23:a4:e6:21:ae:11:5c:4b:d5:50: cb:4a:56:c0:38:89:b0:64:48:25:2f:2a:d0:1c:24: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C2:00:0B:98:40:A0:FF:F2:07:DA:7A:B8:9A:52:58:4B:BB:A5:51 X509v3 Authority Key Identifier: keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:87:2d:8c:71:58:53:ab:b9:e3:6f:73:90:4c:b1:ef:af:f3: 74:71:f6:e5:6b:da:d6:7a:17:f2:20:d6:d1:a0:da:81:43:31: ed:d1:ad:3d:b5:4b:6b:7d:6c:91:e9:07:52:fa:19:b7:6d:8c: 89:e1:96:a5:36:5a:7b:dd:8d:be:6e:e7:ec:5e:ba:46:29:5e: c6:68:a0:8b:e4:15:e3:bd:6c:dc:1e:9e:ed:6b:4d:e2:d1:20: 29:32:41:d7:6c:73:6b:ca:27:8f:68:65:3d:30:23:03:c3:e4: d9:59:18:9a:6e:31:87:ca:1e:7c:e9:ed:d2:a6:73:28:ab:de: d5:22:9d:60:34:9e:b1:13:d9:a9:2e:a9:16:d9:5f:bb:ad:d4: aa:de:84:8f:a2:07:9e:08:66:90:23:3f:28:21:da:d2:95:8d: 5b:64:0c:8c:89:71:0c:56:b0:68:03:e0:d9:af:ca:9f:63:ab: d6:aa:e6:9a:d9:7c:1b:2c:a5:be:d2:cf:2f:5b:58:d6:f6:89: 39:60:19:75:b3:8f:53:b1:80:36:a8:29:11:35:3c:43:58:31: 32:fc:f0:bd:c2:f6:ee:26:87:f9:d9:22:5a:d2:f7:8a:d9:65: 68:67:0c:a1:5e:59:77:3c:bb:e1:ef:6c:71:88:34:d3:3a:f4: c6:25:60:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2j5oORmKoh6ALMc7+SQPysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZTAzMzU0NjY2YzRjYjJhYmZkNTE0MTFlY2E1ZDUyNGIw ZDViZTUwHhcNMjYwNDE5MDQwMTI2WhcNMjYwNDIwMDQwMTI2WjAzMTEwLwYDVQQD Eyg1MWMyMDAwYjk4NDBhMGZmZjIwN2RhN2FiODlhNTI1ODRiYmJhNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGbHrpChISP5PFv0qMaDNoFRCmKM 9AQIcp8nDK5ARdgBlFy5fVAR9eYvlJ/bARlt3/TARBiv2eVdkb8I2seuopNkfJhi O79n1ZiBbWP0k4HwenUv2y9Yx93UeXu47gxRJPu5cgU58rLHEdyjReDHN0n/EK+n Uus84IMxdkpHZ4Gkcdun+Dyv5vl+gDQTLcTO1UQ2cZOuA4/aAY3IAQbZBbgK35hI 6PJ0cM/jr7qDWvAKdujs6ONl/Lp7WnviF1kQzJmG1mNW+fl8WPkOLFwseQv5lF5c qB3JARVkgTUfOJ5L/IUK3iOk5iGuEVxL1VDLSlbAOImwZEglLyrQHCStRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHCAAuYQKD/8gfaeriaUlhLu6VRMB8GA1UdIwQY MBaAFOXgM1RmbEyyq/1RQR7KXVJLDVvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYt NjBmYjBmOTE5OTdlLzEvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYtNjBmYjBmOTE5OTdl LzEvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4ctjHFY U6u5429zkEyx76/zdHH25Wva1noX8iDW0aDagUMx7dGtPbVLa31skekHUvoZt22M ieGWpTZae92Nvm7n7F66Rilexmigi+QV471s3B6e7WtN4tEgKTJB12xza8onj2hl PTAjA8Pk2VkYmm4xh8oefOnt0qZzKKve1SKdYDSesRPZqS6pFtlfu63Uqt6Ej6IH nghmkCM/KCHa0pWNW2QMjIlxDFawaAPg2a/Kn2Or1qrmmtl8GyylvtLPL1tY1vaJ OWAZdbOPU7GANqgpETU8Q1gxMvzwvcL27iaH+dkiWtL3itllaGcMoV5Zdzy74e9s cYg00zr0xiVgCg== -----END CERTIFICATE-----Generated at Sun Apr 19 10:12:58 2026 by rpki-client