$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: PPe+8T8FDStCTy19LKq9IDFh4ejf4f381WKRwsnXROU= Subject key identifier: 9A:47:C4:C7:62:AA:34:69:75:31:97:76:1A:05:E2:85:46:2B:6C:08 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019D97E2704DF67F69A63C5B2D46CAE5183F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 1293 Signing time: Thu 16 Apr 2026 20:01:32 +0000 Manifest this update: Thu 16 Apr 2026 20:01:32 +0000 Manifest next update: Fri 17 Apr 2026 20:01:32 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: Hp0vnK6LsH978scPrAVFBl2kfG4.roa (hash: MiTGwbJzWQLF/5BUrcBlVLuqzCKJBbep6wp6tPRmCrg=) 6: JGgBlVIY2oUSh_HFDVRqyLKytmE.roa (hash: RKsfB4gNYffazBWvIDvr2El30bylWlzUFL7S8HQbwRU=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: lln4AE7evcc/ZcFIGv9m6KuDqIQvQUOZdJLAznP9kNg=) 11: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 12: iyrSz_wsF9CBGgcuXGLfggTWLUc.roa (hash: hTAJ5z1uKngFKR3nayC40cEb7tmnFdoOcWdYxUuDRsQ=) 13: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 14: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 15: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:e2:70:4d:f6:7f:69:a6:3c:5b:2d:46:ca:e5:18:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Apr 16 20:01:32 2026 GMT Not After : Apr 17 20:01:32 2026 GMT Subject: CN=9a47c4c762aa3469753197761a05e285462b6c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:21:2e:cb:3d:9c:fa:64:fe:ab:b2:1d:0d: 64:7d:b6:da:a3:97:1c:58:1f:d2:aa:9b:c1:13:fd: b5:f8:8c:e8:3c:3a:43:5d:ca:fb:03:14:23:3f:16: c8:04:4a:f1:03:b6:9d:47:36:c6:3c:6d:29:14:23: d3:b1:a5:6c:33:46:b9:9f:1c:54:f9:e3:9d:25:2c: 44:af:69:1e:5b:fb:43:83:44:d7:af:5e:1f:14:68: 00:e1:15:8d:85:c9:3c:ba:31:e4:82:a4:58:06:2d: d2:41:2c:ac:3f:90:8a:32:a0:7d:9b:0e:e6:02:73: f0:a1:05:93:35:00:0c:6a:d6:1d:94:65:b0:83:ab: 03:a0:7f:d6:27:7d:58:bd:9e:4f:26:21:9a:1b:47: b9:9d:5c:27:34:bc:4a:e0:fb:63:9d:32:ca:f4:9a: b3:9f:70:50:0d:cd:8e:c6:31:3a:a0:86:f2:4f:c4: 26:29:9b:63:ec:de:2b:26:fc:0a:7e:ac:9b:24:ad: 60:90:ac:35:5e:ec:74:e8:fd:16:f2:6d:38:e0:f0: fd:85:5d:90:a2:5e:26:ec:67:c9:24:be:5d:81:25: 62:c0:97:d9:0b:fe:ab:15:e3:a7:11:17:92:26:ff: f7:3c:c2:1c:12:35:79:af:52:de:b8:f9:57:54:bd: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:47:C4:C7:62:AA:34:69:75:31:97:76:1A:05:E2:85:46:2B:6C:08 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:18:3e:fa:5e:99:77:d6:9d:f8:11:a5:2b:42:b2:61:82:0a: c3:d5:a1:b0:d8:14:44:1d:62:38:94:1e:81:b0:0d:c4:9e:39: b7:e3:14:2c:9f:a7:96:cd:a3:6e:35:0b:f0:a5:87:45:09:ae: bb:0e:68:fd:bc:96:ec:e7:65:90:78:5a:d3:5b:88:d4:1c:79: 15:e9:95:81:aa:ec:6b:96:94:b5:1d:c6:d2:76:73:7e:e3:80: 0c:5b:66:4b:66:91:9b:77:e1:da:90:47:4f:10:a6:f3:5c:03: f8:8f:3e:b6:44:95:0a:a4:83:36:74:e6:62:d5:50:31:c5:bf: fd:08:33:f4:93:ae:c6:67:e5:5d:cc:87:50:e1:cd:a9:cc:95: 29:5c:3b:e9:fe:cf:5c:3e:2d:e1:f3:d4:ee:45:92:c7:c3:13: 8d:70:68:17:ff:56:4e:7d:00:a4:0d:0b:9f:79:35:5c:f8:f4: d1:f9:b8:b0:e4:c4:f0:72:69:26:85:12:6f:c0:1c:eb:e7:fc: 66:95:98:a6:76:72:ea:12:3d:6a:d1:b4:48:7e:72:cf:74:04: f5:97:75:65:fd:b4:4e:95:d5:07:cb:57:4b:d0:4b:65:ef:9e: 24:9e:07:14:4d:88:f1:27:a3:bd:5d:3a:29:49:ad:7d:2b:32: f6:56:9e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2X4nBN9n9ppjxbLUbK5Rg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwNDE2MjAwMTMyWhcNMjYwNDE3MjAwMTMyWjAzMTEwLwYDVQQD Eyg5YTQ3YzRjNzYyYWEzNDY5NzUzMTk3NzYxYTA1ZTI4NTQ2MmI2YzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaMhLss9nPpk/quyHQ1kfbbao5cc WB/SqpvBE/21+IzoPDpDXcr7AxQjPxbIBErxA7adRzbGPG0pFCPTsaVsM0a5nxxU +eOdJSxEr2keW/tDg0TXr14fFGgA4RWNhck8ujHkgqRYBi3SQSysP5CKMqB9mw7m AnPwoQWTNQAMatYdlGWwg6sDoH/WJ31YvZ5PJiGaG0e5nVwnNLxK4PtjnTLK9Jqz n3BQDc2OxjE6oIbyT8QmKZtj7N4rJvwKfqybJK1gkKw1Xux06P0W8m044PD9hV2Q ol4m7GfJJL5dgSViwJfZC/6rFeOnEReSJv/3PMIcEjV5r1LeuPlXVL3SiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpHxMdiqjRpdTGXdhoF4oVGK2wIMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohg++l6Z d9ad+BGlK0KyYYIKw9WhsNgURB1iOJQegbANxJ45t+MULJ+nls2jbjUL8KWHRQmu uw5o/byW7OdlkHha01uI1Bx5FemVgarsa5aUtR3G0nZzfuOADFtmS2aRm3fh2pBH TxCm81wD+I8+tkSVCqSDNnTmYtVQMcW//Qgz9JOuxmflXcyHUOHNqcyVKVw76f7P XD4t4fPU7kWSx8MTjXBoF/9WTn0ApA0Ln3k1XPj00fm4sOTE8HJpJoUSb8Ac6+f8 ZpWYpnZy6hI9atG0SH5yz3QE9Zd1Zf20TpXVB8tXS9BLZe+eJJ4HFE2I8SejvV06 KUmtfSsy9laeuQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:48:32 2026 by rpki-client