$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: LYunNpjriUU8ZCjuyn3Z4FzpiljtcGccMoEUVzUMnBo= Subject key identifier: 72:60:C1:F9:44:D4:E5:77:41:51:B9:CF:A5:52:76:62:FF:4F:A9:46 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019D9AABCEDF00E5A0677F83D125A56C4DC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1290 Signing time: Fri 17 Apr 2026 09:00:44 +0000 Manifest this update: Fri 17 Apr 2026 09:00:44 +0000 Manifest next update: Sat 18 Apr 2026 09:00:44 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: MCDNRLHiycJTlugkZZrxHtpM2f4qYRJsYyLWq4sK9Mg=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:ab:ce:df:00:e5:a0:67:7f:83:d1:25:a5:6c:4d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Apr 17 09:00:44 2026 GMT Not After : Apr 18 09:00:44 2026 GMT Subject: CN=7260c1f944d4e5774151b9cfa5527662ff4fa946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:00:b0:de:0b:6e:69:56:21:4a:ea:2c:00: 5c:eb:bf:fb:db:5c:76:ea:1a:58:64:d8:67:71:66: 4b:76:99:ce:53:80:a2:cd:73:0a:8d:67:40:94:61: c4:dc:fc:f5:76:d0:d0:42:83:2d:97:d7:24:a3:e7: 74:c9:80:fa:f6:b1:f4:b2:e9:9a:69:68:66:fd:6a: a5:57:58:25:b5:58:c6:ef:92:b8:8c:5f:24:ae:3f: 5a:29:0e:16:46:29:2f:e9:09:70:40:08:16:19:d1: fd:dd:40:3f:ab:80:41:a9:27:9c:ef:46:48:9a:ec: 9a:69:1a:83:9a:53:4d:f4:40:10:1e:21:6e:9e:f5: 3f:db:d8:d8:80:7f:ca:40:8e:a1:59:eb:33:bb:0d: 2f:b8:65:76:fc:e4:f0:a8:41:35:29:b7:1f:17:8e: 3c:30:1f:23:75:8f:6b:dc:db:e0:4c:ad:41:a0:42: 16:33:15:da:ce:18:fd:5a:3a:01:ad:a3:23:35:bc: ac:2e:f4:15:bc:65:6b:03:60:8d:00:7d:0a:33:3b: 10:18:18:21:64:49:7d:37:27:c6:4a:e5:c9:16:95: a4:47:d2:aa:03:67:27:2c:f9:61:a7:82:67:5d:f9: 72:d5:6c:84:38:87:72:cf:94:b5:c7:b8:be:88:db: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:60:C1:F9:44:D4:E5:77:41:51:B9:CF:A5:52:76:62:FF:4F:A9:46 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7b:20:75:12:ea:68:b0:c8:78:30:0c:ce:ad:bf:a7:d2:90: 1e:f7:3b:80:70:00:1c:a7:d4:76:35:cf:4d:78:96:c5:9c:ab: ce:e2:76:76:21:1a:d4:56:df:34:eb:70:c5:9c:e8:08:a6:69: a7:98:d4:de:94:83:c4:34:51:14:80:23:6d:4c:20:9c:b3:ab: f5:cb:b2:93:e4:6d:46:bb:27:93:7a:ef:81:46:0f:0f:06:85: 2d:d3:29:c7:1e:cb:18:6b:3a:46:9c:6a:fa:df:82:07:7d:ca: 8d:3e:d3:0c:03:79:7d:5e:b7:c3:83:49:62:32:04:6a:dc:fb: 74:e2:52:e1:5e:d1:77:dc:5a:8c:cd:75:30:f0:76:c4:3e:42: f7:45:f5:1f:44:90:d7:45:4e:67:b2:c8:72:7d:fe:51:71:01: d2:a5:ec:7f:f2:91:e5:f3:99:3f:64:63:26:a9:3f:37:78:72: cc:0a:d6:8a:aa:06:6c:1f:a6:91:64:05:95:96:57:a0:ea:3c: 31:3a:9d:a4:12:d5:af:2f:8c:97:7f:22:ce:32:59:0a:c6:0c: e7:81:52:62:a9:e1:c9:8f:e1:76:5f:5b:46:7e:b6:02:64:6e: 83:e5:c9:28:b1:cf:f1:57:dd:4e:ce:cb:51:96:1a:be:0c:ab: 68:21:96:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aq87fAOWgZ3+D0SWlbE3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwNDE3MDkwMDQ0WhcNMjYwNDE4MDkwMDQ0WjAzMTEwLwYDVQQD Eyg3MjYwYzFmOTQ0ZDRlNTc3NDE1MWI5Y2ZhNTUyNzY2MmZmNGZhOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWMAsN4LbmlWIUrqLABc67/721x2 6hpYZNhncWZLdpnOU4CizXMKjWdAlGHE3Pz1dtDQQoMtl9cko+d0yYD69rH0suma aWhm/WqlV1gltVjG75K4jF8krj9aKQ4WRikv6QlwQAgWGdH93UA/q4BBqSec70ZI muyaaRqDmlNN9EAQHiFunvU/29jYgH/KQI6hWeszuw0vuGV2/OTwqEE1KbcfF448 MB8jdY9r3NvgTK1BoEIWMxXazhj9WjoBraMjNbysLvQVvGVrA2CNAH0KMzsQGBgh ZEl9NyfGSuXJFpWkR9KqA2cnLPlhp4JnXfly1WyEOIdyz5S1x7i+iNvVqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJgwflE1OV3QVG5z6VSdmL/T6lGMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinsgdRLq aLDIeDAMzq2/p9KQHvc7gHAAHKfUdjXPTXiWxZyrzuJ2diEa1FbfNOtwxZzoCKZp p5jU3pSDxDRRFIAjbUwgnLOr9cuyk+RtRrsnk3rvgUYPDwaFLdMpxx7LGGs6Rpxq +t+CB33KjT7TDAN5fV63w4NJYjIEatz7dOJS4V7Rd9xajM11MPB2xD5C90X1H0SQ 10VOZ7LIcn3+UXEB0qXsf/KR5fOZP2RjJqk/N3hyzArWiqoGbB+mkWQFlZZXoOo8 MTqdpBLVry+Ml38izjJZCsYM54FSYqnhyY/hdl9bRn62AmRug+XJKLHP8VfdTs7L UZYavgyraCGWRA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:46:25 2026 by rpki-client