$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft File: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json) Hash identifier: x8vNCD3VEvY+Rv9M2Vh+3Q08TSo1hPLWMoiXJZqY8WQ= Subject key identifier: 11:01:FC:D8:10:39:B3:B8:B8:0C:B2:9C:06:78:1C:ED:F5:F5:E0:7D Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019D9A3E5E78AD15A1208AA59A930B785F07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft Manifest number: 18E6 Signing time: Fri 17 Apr 2026 07:01:11 +0000 Manifest this update: Fri 17 Apr 2026 07:01:11 +0000 Manifest next update: Sat 18 Apr 2026 07:01:11 +0000 Files and hashes: 1: 3QvNaBTxs1PjLqnE1VOIhI45V7c.roa (hash: WFmXAUAeTAg/52UhkkFJsciHEc280mGsBIoSVtzTk+c=) 2: 5ERvaJCjijofjZEEyshS2DN7G8w.roa (hash: L0qBBv8W1SeaQxwY+yM3qe9nhTQXTw1BhXzcHvSUW8A=) 3: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: 8ZashAFObP5YqJ8DhJkNnbZ2KxNkfvegIJLA5AtMFwQ=) 4: 9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa (hash: NsC3+Fupa1mo3BaWG6ctFYcneaqQ6slJ0dPljJ/QMXI=) 5: 9aKkqtdGa1ABukMG_yLakFtZfm8.roa (hash: KrI6Pr1fZmvsqfb7nSDh5Zvb9gr8g8QjzGikzHidhBA=) 6: AUmE2YbKzYGKohczr4jMETToilY.roa (hash: HU9CxUgtmqm30Tk4KPw7deDUwU0eCp+soz3LnSEevJY=) 7: D9ueYQAGeLx75Euk-RV6ER30CIk.roa (hash: UMB0udBkU8ic9PwtzEJZCPjDGJvIv61IcjNxyKBRmOM=) 8: Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa (hash: ZxzzP3F2j7XnslqpQi6FYUYx4xkKMdzCPqasRFAy5H4=) 9: Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa (hash: SRNE2+sx9FNGp2a8VnJm35Y0pORouHxk0y7BXf1WH74=) 10: LD-3cK94EujojZ7ZiN9ZmU7leBA.roa (hash: cS7YGfmXGTnX+pBKgNWgV7kZw2s1r4jfbn1oYwmWhSE=) 11: LDB6M5jKAUAX0pW_Ow6Al3r3TVc.roa (hash: 0871MmeimwA3qa6fuNCLnFf75uwna79ZP/U6WsupA/A=) 12: N9SJly_iVwmkDpbj9fIuOkPtA8E.roa (hash: OOmuPWfaQlIoeFuc06EF+wS2RKHaEW6adcFSP2176rs=) 13: QwRlOQcYxSvdN2FJpOpcXHAZE5I.roa (hash: JFqMAVJTjeNtNUVkPs0ekqTe1vs1PCY+bp6cGNGb31A=) 14: RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa (hash: Mpj7iy2/6clWPzb2aVRARaYOeEI5SbFcnwOqd9+kHL4=) 15: Sjw15gl8TsiPxYWGxwle5yVmVpI.roa (hash: KyfTMSv87/ffxlDqBdVXEjJETz4cQjnD5+jWHw/lzng=) 16: UOozdgMWkk0RJwT79mq5mSwdurM.roa (hash: fJ4sYv6ZeyusyQL5urhnyr1YZ9IQ2Da9R2oWQOCYu0A=) 17: W80Mf4_ivkezZ0bshb3ksFAV6PY.roa (hash: GvDsjIe4MFxa+3NX/qnfQlgFppPBUAANoYbReZaXdUk=) 18: aWg21xYS3AUVunbtCCZYY0IE-qA.roa (hash: FfCb8eVmyUDpcRLrhqbLVf0Nu60pvL/vFuk4kk28e1o=) 19: eToy7Dy86gp6pNPMymfDqa4MdTI.roa (hash: dTIlaV1AqccCy+1JNiT8jHC2RbOVH0ledpyPTc9PFZo=) 20: gb92OyPtFV8ggf63vEi-KCDdf-s.roa (hash: +rhI/ux5CfxH5KWi60cOU2i3sB6AO/30yOzY/E/1xts=) 21: hCuigtGnGrmGxt4fb38OXAzWTfY.roa (hash: iil9Ij6qPFCaMYbGlEBHWiblDDvzQIMW27VYLojp5iU=) 22: hQ2GFL3dnEKzJSAPLs1axACh1nE.roa (hash: XfsYyUXshVaU5kesRq6m5zdn9J6jCqEigoDtxpwvnck=) 23: iHwdh7RQbqHYXi1tV5PT6-9KMZc.roa (hash: Vt5thfBB9WwucwEL2pJBtrKMfJA6iF3TBVYycl0yvI0=) 24: m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa (hash: iTzlGtzNibw71SECgWWAtWLsGGjMg9WIxNFV2xfi6y4=) 25: mdu1Exn0vcwhf2D-oUz3A06rLz0.roa (hash: dkzkWhkhgt5FRBH7GshJAC2Twq+nZCCBlUCXlmzP+Ks=) 26: nVYscJl5lSrsIHBCJc12P0YYc1I.roa (hash: Qaq790oVJnBvnSmkP1Q9R1yIhbQhRqgrmHzuuPyL64c=) 27: quu8bKvWsrapvb9agdJWOzx8vCU.roa (hash: GuhXE2SWFgsGNwW07uZU74XAQZgfH3lzNUDa1zFBJKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3e:5e:78:ad:15:a1:20:8a:a5:9a:93:0b:78:5f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Apr 17 07:01:11 2026 GMT Not After : Apr 18 07:01:11 2026 GMT Subject: CN=1101fcd81039b3b8b80cb29c06781cedf5f5e07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:39:75:e0:70:64:54:92:61:5f:65:26:50: 18:88:81:5e:a1:5c:9d:56:28:57:09:2f:9a:88:f5: c7:12:69:ec:c7:d2:c3:ec:2e:37:67:f4:5b:b4:1f: 79:d5:0b:8c:a4:91:22:15:d6:80:a2:7b:1a:7e:9b: 02:d9:e8:9d:10:b8:14:3d:0a:2b:cf:c9:77:b5:5e: 86:a3:ef:00:4f:c9:54:7d:f8:79:93:63:67:c9:cf: 7f:dc:d8:77:c5:52:71:6e:7a:46:3d:c1:04:75:02: 26:ee:bd:63:14:8f:3a:da:fb:67:31:70:c6:11:86: 82:50:e0:58:8d:e8:dc:b3:f6:d9:58:1f:5a:86:fb: df:4f:8f:87:3d:76:e3:8e:b0:10:44:9a:bc:85:94: 49:3e:24:d8:ee:1d:85:ed:c1:8c:3f:95:34:a9:7b: 30:13:bf:e3:a9:8c:88:29:76:68:71:eb:f7:79:d2: f6:f3:b3:f6:6d:03:f4:8c:34:92:5c:36:6b:da:be: ed:eb:13:53:d4:67:15:a9:c2:43:b1:91:a4:09:d7: 2b:a6:71:6f:f0:f1:06:e2:69:ca:dc:e4:24:4b:b2: f5:45:3a:31:34:18:f9:6e:cc:1d:90:14:2c:0c:1a: d2:f6:55:c5:9f:d6:0a:ff:59:ce:82:72:4b:47:6c: a0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:01:FC:D8:10:39:B3:B8:B8:0C:B2:9C:06:78:1C:ED:F5:F5:E0:7D X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:19:62:2a:7c:3a:63:b5:ea:5f:eb:e8:35:97:e9:85:dd:d2: 06:91:b5:76:8d:0e:f6:e4:08:53:a3:d3:aa:25:1f:a9:d0:80: d2:1b:f3:3d:a1:e6:51:1e:64:12:29:d8:7c:99:8e:95:74:b7: b8:b1:cd:9e:d2:ae:51:a8:52:79:a2:48:51:fb:84:e0:c4:83: 8f:7d:ef:a0:17:7c:24:c9:60:f3:69:bd:5a:d1:fb:f8:11:43: 9c:39:7d:28:f6:d5:f8:cb:f1:0c:80:3f:fb:28:e0:87:57:bb: 39:ac:9a:3d:b9:b7:95:ee:24:5d:42:d7:7e:74:ab:ef:52:7e: a7:23:38:42:15:a5:23:b4:55:af:5f:7b:59:41:37:d1:d0:0a: af:45:31:d3:a2:ea:b9:3d:5a:20:96:a7:4f:36:97:77:e4:66: 48:a0:4f:7d:09:77:80:74:24:2e:ef:fd:9e:e9:b3:17:34:2e: a7:51:9d:9e:a5:04:98:d9:d8:96:91:80:2a:f2:84:58:36:6b: eb:6e:71:54:22:f8:f1:d9:2e:c3:72:03:72:68:1a:2e:e5:bf: 12:3b:82:1b:7d:3f:f4:de:08:eb:23:ef:81:b6:3d:77:23:3b: 05:0b:db:03:f7:b3:a0:5a:35:98:1d:e8:8d:53:95:91:0f:98: dc:2c:5c:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPl54rRWhIIqlmpMLeF8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwNDE3MDcwMTExWhcNMjYwNDE4MDcwMTExWjAzMTEwLwYDVQQD EygxMTAxZmNkODEwMzliM2I4YjgwY2IyOWMwNjc4MWNlZGY1ZjVlMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrk5deBwZFSSYV9lJlAYiIFeoVyd VihXCS+aiPXHEmnsx9LD7C43Z/RbtB951QuMpJEiFdaAonsafpsC2eidELgUPQor z8l3tV6Go+8AT8lUffh5k2Nnyc9/3Nh3xVJxbnpGPcEEdQIm7r1jFI862vtnMXDG EYaCUOBYjejcs/bZWB9ahvvfT4+HPXbjjrAQRJq8hZRJPiTY7h2F7cGMP5U0qXsw E7/jqYyIKXZocev3edL287P2bQP0jDSSXDZr2r7t6xNT1GcVqcJDsZGkCdcrpnFv 8PEG4mnK3OQkS7L1RToxNBj5bswdkBQsDBrS9lXFn9YK/1nOgnJLR2ygTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEB/NgQObO4uAyynAZ4HO319eB9MB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxliKnw6 Y7XqX+voNZfphd3SBpG1do0O9uQIU6PTqiUfqdCA0hvzPaHmUR5kEinYfJmOlXS3 uLHNntKuUahSeaJIUfuE4MSDj33voBd8JMlg82m9WtH7+BFDnDl9KPbV+MvxDIA/ +yjgh1e7OayaPbm3le4kXULXfnSr71J+pyM4QhWlI7RVr197WUE30dAKr0Ux06Lq uT1aIJanTzaXd+RmSKBPfQl3gHQkLu/9numzFzQup1GdnqUEmNnYlpGAKvKEWDZr 625xVCL48dkuw3IDcmgaLuW/EjuCG30/9N4I6yPvgbY9dyM7BQvbA/ezoFo1mB3o jVOVkQ+Y3CxcbA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:33:31 2026 by rpki-client