$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: ir+HdL/hKue6Fn9HuGHvDTOQJ9y2fcrcrvjwXns4YRs= Subject key identifier: F1:22:31:11:C5:5D:16:04:32:E1:B5:C3:72:F3:3F:90:DA:9D:67:05 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019DA3AEAD3BB1A91AC8253293D2826AED7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 0778 Signing time: Sun 19 Apr 2026 03:00:26 +0000 Manifest this update: Sun 19 Apr 2026 03:00:26 +0000 Manifest next update: Mon 20 Apr 2026 03:00:26 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: hJkspQPhoRH5BeSYXjONYRithyDee0u3xw8Ba7EgdfE=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:ae:ad:3b:b1:a9:1a:c8:25:32:93:d2:82:6a:ed:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Apr 19 03:00:26 2026 GMT Not After : Apr 20 03:00:26 2026 GMT Subject: CN=f1223111c55d160432e1b5c372f33f90da9d6705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:19:22:42:ac:d7:35:24:99:4b:69:23:bd: 24:10:c3:4c:a9:34:bf:bc:e4:9b:32:6f:44:7f:1a: 26:da:b4:71:7f:7e:50:ad:92:66:f3:a1:09:12:91: c3:8f:03:74:7c:06:6a:2a:1b:81:62:85:a2:21:d6: 0e:88:cd:c6:3c:61:6c:4e:26:04:a8:30:c7:07:0f: 71:c0:88:a4:c5:9d:82:a2:d8:25:2a:d9:f2:b6:58: 7d:d4:53:ec:f9:57:a5:ed:13:db:89:c2:be:45:a7: 3d:87:9f:26:96:41:ec:40:3e:e7:91:11:12:cb:f1: c3:09:a3:86:90:27:0d:6b:ae:c3:24:67:50:5e:06: ef:6f:73:80:ff:1b:d3:2c:76:e8:2d:73:7d:89:93: 45:2e:11:56:af:39:5a:6a:c9:31:3e:6a:c0:ea:ee: 54:77:8a:89:85:50:96:7d:6d:dd:12:c7:b5:e1:d6: fb:91:97:b1:bf:be:12:64:ee:cf:8b:0f:6a:62:30: 3f:e1:e1:6b:f0:fb:4c:f2:d3:3a:b1:73:86:6a:6c: f4:9f:8d:56:a9:7a:95:75:f7:c3:9d:65:dd:dc:ca: 48:9a:56:e6:88:14:01:f3:24:39:36:e8:17:81:14: cb:22:e4:72:2e:99:a4:81:08:4a:2f:c7:ba:26:66: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:22:31:11:C5:5D:16:04:32:E1:B5:C3:72:F3:3F:90:DA:9D:67:05 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2c:00:7b:e1:27:74:98:1e:ef:97:53:cb:9a:3b:45:e2:9e: c7:4f:c5:a4:88:4b:a4:b9:b9:52:9a:8b:41:e0:96:fc:fe:0a: 8f:67:84:4a:5d:c7:c7:98:75:83:e0:35:70:0b:fe:2f:69:b7: 6b:ac:64:53:fa:b7:1b:57:20:9d:63:c7:a1:6f:4d:ad:c8:57: 26:1b:fe:09:42:a7:67:26:fe:83:e4:92:7c:1c:48:e0:64:d4: 4f:e1:c9:9c:07:ba:7d:5d:15:ed:0c:5b:a8:8f:54:08:17:b6: f0:38:9a:9f:9f:6d:2a:dc:91:bd:58:bc:51:48:11:78:f8:61: ba:d9:8a:66:25:a9:d5:37:2c:13:29:6c:f0:06:45:23:1e:9e: c1:c6:52:34:0c:5e:7d:3d:69:63:3c:50:20:14:8f:9a:59:c6: f2:29:65:17:78:6c:47:99:c6:5b:1e:70:32:4e:46:77:33:e1: fc:80:b9:3a:66:20:62:98:2f:de:31:31:c3:51:c9:e1:0c:81: 1f:4d:08:f0:14:0d:0c:a3:94:79:76:93:f8:e2:61:cb:74:cd: e4:0a:eb:c3:d2:fc:0c:fd:c9:a0:46:ba:57:4e:13:a8:99:d7: 86:67:85:bc:c6:c6:37:3f:71:fb:33:0a:09:c2:25:04:4d:d1: 1a:c7:63:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jrq07sakayCUyk9KCau1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwNDE5MDMwMDI2WhcNMjYwNDIwMDMwMDI2WjAzMTEwLwYDVQQD EyhmMTIyMzExMWM1NWQxNjA0MzJlMWI1YzM3MmYzM2Y5MGRhOWQ2NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBcZIkKs1zUkmUtpI70kEMNMqTS/ vOSbMm9Efxom2rRxf35QrZJm86EJEpHDjwN0fAZqKhuBYoWiIdYOiM3GPGFsTiYE qDDHBw9xwIikxZ2CotglKtnytlh91FPs+Vel7RPbicK+Rac9h58mlkHsQD7nkRES y/HDCaOGkCcNa67DJGdQXgbvb3OA/xvTLHboLXN9iZNFLhFWrzlaaskxPmrA6u5U d4qJhVCWfW3dEse14db7kZexv74SZO7Piw9qYjA/4eFr8PtM8tM6sXOGamz0n41W qXqVdffDnWXd3MpImlbmiBQB8yQ5NugXgRTLIuRyLpmkgQhKL8e6JmapwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEiMRHFXRYEMuG1w3LzP5DanWcFMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCwAe+En dJge75dTy5o7ReKex0/FpIhLpLm5UpqLQeCW/P4Kj2eESl3Hx5h1g+A1cAv+L2m3 a6xkU/q3G1cgnWPHoW9NrchXJhv+CUKnZyb+g+SSfBxI4GTUT+HJnAe6fV0V7Qxb qI9UCBe28Dian59tKtyRvVi8UUgRePhhutmKZiWp1TcsEyls8AZFIx6ewcZSNAxe fT1pYzxQIBSPmlnG8illF3hsR5nGWx5wMk5GdzPh/IC5OmYgYpgv3jExw1HJ4QyB H00I8BQNDKOUeXaT+OJhy3TN5Arrw9L8DP3JoEa6V04TqJnXhmeFvMbGNz9x+zMK CcIlBE3RGsdjMQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:48:08 2026 by rpki-client