$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: DgFDeOuFU+Stb9WcHoQ0WMDyQ8+5js5a0sgfgswBETU= Subject key identifier: 61:90:E8:D6:48:AF:24:5E:9F:39:6A:6D:86:79:FA:43:CC:5E:18:EB Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019D9962F1749564A044E1656AE330F22B03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 18EB Signing time: Fri 17 Apr 2026 03:01:31 +0000 Manifest this update: Fri 17 Apr 2026 03:01:31 +0000 Manifest next update: Sat 18 Apr 2026 03:01:31 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 1CdaDEMYuczsE5fB0W--_kjgKz4.roa (hash: eLlevVfSpCGIySbdmJVMxY3O6xhqpu9HHp+hjTsXa+Y=) 3: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: hV+TS6YsVY0g4eFVFCLB3vnVO9gxuuiUyEocY71Iez0=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: XfKFQ0jrYjUJX2-xXdeOtI2PwBA.roa (hash: Dv4g2hdF2DWTn9KmOFquly3+gEa0c48Mrasajz85cj8=) 8: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:f1:74:95:64:a0:44:e1:65:6a:e3:30:f2:2b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Apr 17 03:01:31 2026 GMT Not After : Apr 18 03:01:31 2026 GMT Subject: CN=6190e8d648af245e9f396a6d8679fa43cc5e18eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:86:65:fe:59:34:f1:89:92:f1:ba:f0:f1:e3: 55:8e:7b:34:c1:76:c9:bd:fd:0d:ae:df:25:0b:a5: 91:92:8d:49:09:f4:c6:70:e0:20:20:0f:15:e8:66: 49:d0:a4:41:ce:4f:cb:4a:86:c8:5d:15:40:6e:88: bc:6b:2d:91:b2:61:c4:b0:6c:16:3f:af:10:a9:27: 2a:7d:f1:75:6c:c7:a9:2a:9f:3a:16:00:f0:42:43: a0:84:05:e8:f5:d4:ff:26:a9:99:63:96:6e:78:96: 76:63:e4:72:b6:08:4f:f4:d5:69:ae:06:5a:e6:14: e8:58:1d:28:35:01:3d:ce:08:e3:bf:be:05:3b:0d: 6c:6d:ad:89:10:11:a9:b4:35:3f:ce:86:4d:16:e8: 43:5b:01:83:c6:26:6f:89:40:0c:f7:3f:1b:c2:1f: 0a:6a:28:1e:1f:e8:5e:14:6f:7c:b2:59:b0:b7:d2: 6f:ff:2f:9c:26:e1:eb:fb:92:98:4c:20:f4:dd:a5: 8d:37:7f:20:4b:a2:02:45:38:b5:4f:bc:0b:85:9d: f0:15:e8:8a:c7:8e:9f:52:ed:2c:cf:06:31:d0:af: c4:4c:95:13:39:56:87:69:cf:9a:d0:ac:0b:2e:79: e6:da:50:3f:aa:9f:d9:c9:37:38:e1:94:78:4e:13: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:90:E8:D6:48:AF:24:5E:9F:39:6A:6D:86:79:FA:43:CC:5E:18:EB X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e2:33:bf:11:98:78:c0:1a:59:c4:13:8c:a8:90:31:f5:00: 9c:93:da:a4:1b:80:29:3c:a7:b0:12:07:b5:e3:82:40:79:b2: 3f:92:fc:44:83:da:72:9d:c8:e4:f0:b8:74:43:bd:af:57:fa: 34:1b:82:62:ed:c9:ab:69:cf:25:d6:c8:1f:7d:2f:1b:e0:36: 2d:3e:a8:40:25:84:2c:4f:60:07:d5:db:b4:f4:df:46:de:ff: 6f:72:c5:ac:92:f8:26:77:09:f3:e7:9d:89:d1:4e:00:ee:0f: 1e:de:89:b8:d1:05:a9:50:c1:c2:f3:25:81:12:66:85:c3:b4: 83:1c:3f:aa:0c:1c:74:d9:fe:12:63:a9:b8:e2:dc:90:e4:25: 31:4a:32:47:87:9b:76:f3:86:02:b8:48:80:ca:97:bd:87:14: 03:c1:cd:bb:9f:ba:80:81:81:e5:6e:3a:af:ca:82:56:0a:d7: dc:49:f1:33:1d:1a:4d:3c:5a:2f:73:96:ff:8a:69:03:a3:2b: 72:c9:ae:be:51:c4:49:97:00:52:aa:d5:a0:24:6c:32:60:4d: ea:27:30:1a:a0:95:3b:2c:18:67:13:6d:c8:a2:eb:07:ef:ab: ba:fc:15:77:d8:4b:a1:cc:4f:55:af:27:ef:6e:60:c4:20:95: 8a:bc:31:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYvF0lWSgROFlauMw8isDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwNDE3MDMwMTMxWhcNMjYwNDE4MDMwMTMxWjAzMTEwLwYDVQQD Eyg2MTkwZThkNjQ4YWYyNDVlOWYzOTZhNmQ4Njc5ZmE0M2NjNWUxOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IZl/lk08YmS8brw8eNVjns0wXbJ vf0Nrt8lC6WRko1JCfTGcOAgIA8V6GZJ0KRBzk/LSobIXRVAboi8ay2RsmHEsGwW P68QqScqffF1bMepKp86FgDwQkOghAXo9dT/JqmZY5ZueJZ2Y+RytghP9NVprgZa 5hToWB0oNQE9zgjjv74FOw1sba2JEBGptDU/zoZNFuhDWwGDxiZviUAM9z8bwh8K aigeH+heFG98slmwt9Jv/y+cJuHr+5KYTCD03aWNN38gS6ICRTi1T7wLhZ3wFeiK x46fUu0szwYx0K/ETJUTOVaHac+a0KwLLnnm2lA/qp/ZyTc44ZR4ThPNMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGQ6NZIryRenzlqbYZ5+kPMXhjrMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOIzvxGY eMAaWcQTjKiQMfUAnJPapBuAKTynsBIHteOCQHmyP5L8RIPacp3I5PC4dEO9r1f6 NBuCYu3Jq2nPJdbIH30vG+A2LT6oQCWELE9gB9XbtPTfRt7/b3LFrJL4JncJ8+ed idFOAO4PHt6JuNEFqVDBwvMlgRJmhcO0gxw/qgwcdNn+EmOpuOLckOQlMUoyR4eb dvOGArhIgMqXvYcUA8HNu5+6gIGB5W46r8qCVgrX3EnxMx0aTTxaL3OW/4ppA6Mr csmuvlHESZcAUqrVoCRsMmBN6icwGqCVOywYZxNtyKLrB++ruvwVd9hLocxPVa8n 725gxCCVirwxYQ== -----END CERTIFICATE-----Generated at Fri Apr 17 11:10:03 2026 by rpki-client