$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: ujWpseCdS3CJIkBm2B2MMPV6gZ0ZYd+4AzLYj1rZnOY= Subject key identifier: 13:BA:C8:34:E1:CA:2A:28:95:E0:C2:C1:FE:11:52:A6:70:F3:0B:2D Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019D973D0E7C218F1ADC2360D7842918257B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 18DD Signing time: Thu 16 Apr 2026 17:00:54 +0000 Manifest this update: Thu 16 Apr 2026 17:00:54 +0000 Manifest next update: Fri 17 Apr 2026 17:00:54 +0000 Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=) 2: 4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (hash: B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=) 3: 6Vdh4FGCVMwVRQZATAoIJY19BhA.roa (hash: N5OkyN4cTSYp1fEUhJpK/QkJ0RgLoAXTt9U+OqR+N2w=) 4: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=) 5: R2FNO1Ygep-crgCBZOCm6rPiC1g.asa (hash: ApEGVteE4lW6zOIWL6jC0gxWXUXXinVHVBq0ULy5NCg=) 6: Xij9xh5DddLLuqwtCNwg7qmWYfY.asa (hash: 3EqZun6qc3DEqBJqVt9g499WWwGeNostKOQ4l981464=) 7: Y19P_g-vBYYPjku8AAu-CeAzWW0.roa (hash: 0p9ZYZuTWuetqmVFdCZJU25sYbQjPpo04+Hro2GGGZA=) 8: bt7v5S1iGVK94mqOZQHRX86O4nE.asa (hash: swB8MgNoQmF6xNb6V+G76LxIip8Z23hDxriDFCYhY6o=) 9: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: CNvFJP0MuwMmahujG+wM5uBwPoR7mDBz4JS+/lWr7YU=) 10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=) 11: psPWwnT647exV4ggiJz8vloBaHU.roa (hash: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:3d:0e:7c:21:8f:1a:dc:23:60:d7:84:29:18:25:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Apr 16 17:00:54 2026 GMT Not After : Apr 17 17:00:54 2026 GMT Subject: CN=13bac834e1ca2a2895e0c2c1fe1152a670f30b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:4e:89:76:c7:34:80:e4:21:0b:7e:f0:f6: cf:49:22:0d:d7:91:c2:fb:7a:f2:6d:3d:e1:5e:26: 23:0a:2f:ed:76:9b:c4:ac:ae:6b:b9:c9:e8:26:fc: fa:81:f9:1b:03:80:42:86:77:df:a3:a2:50:b9:0f: 03:8a:2e:64:6e:24:26:8d:02:7f:b1:6a:b3:50:2d: 1a:15:d6:26:12:2f:10:d6:f9:70:cb:b3:4d:3a:55: 9b:0e:5b:ca:4a:82:a2:b1:a3:31:72:36:04:b1:5c: 41:00:1d:35:ef:1c:88:49:89:90:75:2f:97:b8:93: 4f:ce:f8:0c:f3:2f:07:8b:de:2a:d8:93:a0:9c:98: bb:ea:ca:1d:29:68:85:83:05:6f:11:76:6f:99:8c: 89:d0:62:0b:86:c9:a8:a4:9c:1e:81:7b:d3:21:be: 2c:72:88:27:47:b0:06:8e:6c:2e:4e:31:16:b4:3b: ae:0c:db:1c:03:39:d0:9b:d8:10:d5:a8:a7:4a:f3: 78:dd:df:6c:be:73:0a:79:5b:19:44:df:4b:19:9e: a0:08:2f:fd:6d:4f:fb:4e:b1:8a:33:24:2c:eb:3e: 4b:c1:ac:d7:bf:ec:37:94:1c:07:e1:a4:f3:04:5a: a5:e9:b3:6d:51:c5:fe:6f:d8:ef:40:50:08:45:c7: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BA:C8:34:E1:CA:2A:28:95:E0:C2:C1:FE:11:52:A6:70:F3:0B:2D X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d8:a2:01:fb:cd:89:f3:4e:d4:92:fd:e4:aa:b4:2b:1a:9a: 3d:60:dc:28:bc:2a:cc:a9:87:c6:61:b6:f7:b7:84:c7:c9:30: bb:5f:1c:23:95:64:18:11:91:9c:df:91:09:31:51:56:2a:fe: 3e:1e:1e:5a:04:46:85:77:5c:e6:47:38:30:c0:06:9e:5f:9b: 6c:08:32:9f:95:66:25:44:51:c7:54:e1:31:90:eb:c6:ab:a9: 6e:01:f6:34:51:ec:d8:f9:5e:cc:5f:25:9d:c0:2e:3b:db:af: c9:ac:6a:de:f1:04:83:b7:99:5e:31:93:85:46:68:e6:7c:8a: a6:a6:4b:58:87:54:78:17:ac:66:e8:bf:74:18:5e:0c:d7:b2: c9:8f:51:79:3a:a2:a5:74:46:2d:3d:30:ca:bd:86:cc:bb:7d: 0e:82:25:0a:49:54:f1:6b:db:0b:48:0a:6c:9d:85:a2:36:cc: 6f:32:6c:0f:6c:6d:f3:74:dc:72:3a:42:5c:25:a2:a2:54:c2: 22:8d:00:8e:62:63:bb:59:76:79:6e:7a:b4:08:46:53:3c:94: 5b:99:90:8a:24:68:57:f1:82:4a:98:fd:1a:ff:22:56:1f:55: 2f:55:bb:d7:3d:58:41:fc:f5:a8:e2:02:fa:03:2b:51:bd:7a: d2:e6:11:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2XPQ58IY8a3CNg14QpGCV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYwNDE2MTcwMDU0WhcNMjYwNDE3MTcwMDU0WjAzMTEwLwYDVQQD EygxM2JhYzgzNGUxY2EyYTI4OTVlMGMyYzFmZTExNTJhNjcwZjMwYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPZOiXbHNIDkIQt+8PbPSSIN15HC +3rybT3hXiYjCi/tdpvErK5rucnoJvz6gfkbA4BChnffo6JQuQ8Dii5kbiQmjQJ/ sWqzUC0aFdYmEi8Q1vlwy7NNOlWbDlvKSoKisaMxcjYEsVxBAB017xyISYmQdS+X uJNPzvgM8y8Hi94q2JOgnJi76sodKWiFgwVvEXZvmYyJ0GILhsmopJwegXvTIb4s cognR7AGjmwuTjEWtDuuDNscAznQm9gQ1ainSvN43d9svnMKeVsZRN9LGZ6gCC/9 bU/7TrGKMyQs6z5LwazXv+w3lBwH4aTzBFql6bNtUcX+b9jvQFAIRcfwzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBO6yDThyiooleDCwf4RUqZw8wstMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNiiAfvN ifNO1JL95Kq0KxqaPWDcKLwqzKmHxmG297eEx8kwu18cI5VkGBGRnN+RCTFRVir+ Ph4eWgRGhXdc5kc4MMAGnl+bbAgyn5VmJURRx1ThMZDrxqupbgH2NFHs2PlezF8l ncAuO9uvyaxq3vEEg7eZXjGThUZo5nyKpqZLWIdUeBesZui/dBheDNeyyY9ReTqi pXRGLT0wyr2GzLt9DoIlCklU8WvbC0gKbJ2FojbMbzJsD2xt83TccjpCXCWiolTC Io0AjmJju1l2eW56tAhGUzyUW5mQiiRoV/GCSpj9Gv8iVh9VL1W71z1YQfz1qOIC +gMrUb160uYRUQ== -----END CERTIFICATE-----Generated at Thu Apr 16 23:56:37 2026 by rpki-client