$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: 9QdCh53sBTSEzP5vGxTgObvgYnYebq29uK2Gh6H6poM= Subject key identifier: 76:3D:C9:B6:31:19:FD:4C:0E:DC:E5:F2:73:33:3B:70:8F:F6:14:92 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019D9818FAD587E94E8EFDD099FB7F9F7AEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 0772 Signing time: Thu 16 Apr 2026 21:01:07 +0000 Manifest this update: Thu 16 Apr 2026 21:01:07 +0000 Manifest next update: Fri 17 Apr 2026 21:01:07 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: 5YpQM+G/l+qHDRzScaYRcrmsI1AXO1z1iFJoc9TryTw=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:18:fa:d5:87:e9:4e:8e:fd:d0:99:fb:7f:9f:7a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Apr 16 21:01:07 2026 GMT Not After : Apr 17 21:01:07 2026 GMT Subject: CN=763dc9b63119fd4c0edce5f273333b708ff61492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:c7:ba:f6:ab:82:15:24:5c:4c:b4:ce:18: 34:9b:4b:f3:65:7b:56:b4:ce:4b:d6:e9:99:33:93: 28:16:61:39:db:c1:0f:48:65:ea:a8:ab:fe:25:95: 2f:06:b9:08:a9:9c:1f:50:df:68:d7:f4:72:25:00: 19:ec:7e:bb:c6:b3:ca:3c:a5:10:54:23:ae:bc:2b: f5:9d:65:4f:49:3e:b1:2c:dc:d8:5d:ad:e5:e2:a2: b2:4f:7c:e2:91:be:44:e5:7f:4f:d1:e3:8c:eb:5d: d1:fe:60:75:34:4a:99:90:a9:38:7f:66:88:a7:d0: 66:06:f7:af:84:ee:e8:c7:9f:0f:d9:f4:66:23:0a: c8:79:52:70:e4:b7:a8:fc:9a:15:60:39:34:2d:5d: 1d:5b:c0:78:73:e7:58:54:58:26:07:e2:bd:a7:8b: 2d:dc:1b:0a:0a:12:e2:e1:ce:d9:c7:12:d8:0b:ad: 62:ec:2e:6e:8b:53:80:a9:a6:74:bf:a2:60:88:e9: 5e:57:b6:e1:21:09:d3:fc:06:ad:12:1e:0f:40:8a: 20:67:e5:09:98:6c:bf:08:85:30:43:50:42:d6:f7: e9:79:cd:ea:80:cb:fc:14:e1:65:27:0d:97:64:2e: de:f9:7f:9c:cd:a4:eb:3f:53:28:15:fb:06:3e:7b: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3D:C9:B6:31:19:FD:4C:0E:DC:E5:F2:73:33:3B:70:8F:F6:14:92 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9a:dc:9e:57:aa:3f:cd:1e:4c:c1:a7:da:c3:f5:51:4c:60: 30:7a:72:43:c5:f4:cb:ff:6b:d2:0b:cc:c2:90:2f:f7:1d:39: f3:5b:27:04:e3:dd:f2:36:24:28:80:8c:55:68:7f:f9:62:b4: ff:1d:93:4d:16:6b:77:fc:1b:b5:85:7a:58:00:81:6d:74:8c: f4:3d:4a:5c:09:84:6f:ee:ee:2e:65:96:71:58:92:a5:57:13: 8b:e0:6c:a8:40:a3:9f:7a:f9:71:66:42:8f:20:5c:1e:6e:6c: 7d:a5:5b:89:7b:5c:25:2a:b3:a7:a6:c8:aa:c3:04:50:8b:2e: 26:84:c9:e4:35:f6:1d:42:20:18:92:d7:ff:41:9c:07:78:e3: 99:f0:76:33:81:3d:a5:9b:3e:3a:d6:88:0c:2b:0d:d6:55:c1: 1c:af:f5:22:26:be:89:9a:7c:4e:d3:cd:e9:12:60:e1:89:f1: 45:f0:f4:df:f4:ed:aa:27:0a:41:3a:65:f2:7c:90:0d:db:ac: e2:a1:6f:12:dd:d9:df:84:bd:09:e7:11:ae:04:73:5b:a0:10: 0e:af:55:0d:8a:bf:cd:61:6c:38:e4:e9:92:62:78:4b:10:9e: 0c:ff:e6:58:5b:90:9c:db:b1:c6:17:c7:12:f0:50:9e:47:ed: 93:de:68:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YGPrVh+lOjv3Qmft/n3rrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwNDE2MjEwMTA3WhcNMjYwNDE3MjEwMTA3WjAzMTEwLwYDVQQD Eyg3NjNkYzliNjMxMTlmZDRjMGVkY2U1ZjI3MzMzM2I3MDhmZjYxNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGPHuvarghUkXEy0zhg0m0vzZXtW tM5L1umZM5MoFmE528EPSGXqqKv+JZUvBrkIqZwfUN9o1/RyJQAZ7H67xrPKPKUQ VCOuvCv1nWVPST6xLNzYXa3l4qKyT3zikb5E5X9P0eOM613R/mB1NEqZkKk4f2aI p9BmBvevhO7ox58P2fRmIwrIeVJw5Leo/JoVYDk0LV0dW8B4c+dYVFgmB+K9p4st 3BsKChLi4c7ZxxLYC61i7C5ui1OAqaZ0v6JgiOleV7bhIQnT/AatEh4PQIogZ+UJ mGy/CIUwQ1BC1vfpec3qgMv8FOFlJw2XZC7e+X+czaTrP1MoFfsGPns6RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHY9ybYxGf1MDtzl8nMzO3CP9hSSMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5rcnleq P80eTMGn2sP1UUxgMHpyQ8X0y/9r0gvMwpAv9x0581snBOPd8jYkKICMVWh/+WK0 /x2TTRZrd/wbtYV6WACBbXSM9D1KXAmEb+7uLmWWcViSpVcTi+BsqECjn3r5cWZC jyBcHm5sfaVbiXtcJSqzp6bIqsMEUIsuJoTJ5DX2HUIgGJLX/0GcB3jjmfB2M4E9 pZs+OtaIDCsN1lXBHK/1Iia+iZp8TtPN6RJg4YnxRfD03/TtqicKQTpl8nyQDdus 4qFvEt3Z34S9CecRrgRzW6AQDq9VDYq/zWFsOOTpkmJ4SxCeDP/mWFuQnNuxxhfH EvBQnkftk95ohA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:57:16 2026 by rpki-client