$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: Bc9vRCFxP/An4AsCTCF9cuT8Q8aKUEVOJgDCDZdVppw= Subject key identifier: AF:07:FC:CD:7E:2C:26:A1:3F:AD:B5:BA:A3:84:7B:44:9A:C7:2F:82 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019D992B756B2C17721F7C36943732C28A4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 18EF Signing time: Fri 17 Apr 2026 02:00:55 +0000 Manifest this update: Fri 17 Apr 2026 02:00:55 +0000 Manifest next update: Sat 18 Apr 2026 02:00:55 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: 3PP5cZHpE54hIGtHp8kbYyxaZFQ.roa (hash: H82bfxWmiHNRJ1H7gR7ROjYOhxBbx/o5pU/AxcHnke8=) 6: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 7: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 8: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 9: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 10: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 11: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 12: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 13: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=) 14: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 15: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: BgBBJc6hantAjS2+fzL5PKGzR+hzVsONloNyH9k+fuY=) 17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:75:6b:2c:17:72:1f:7c:36:94:37:32:c2:8a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Apr 17 02:00:55 2026 GMT Not After : Apr 18 02:00:55 2026 GMT Subject: CN=af07fccd7e2c26a13fadb5baa3847b449ac72f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:81:21:23:95:7c:7d:09:3d:eb:de:97:5a: df:51:21:5a:a6:2c:b6:08:fc:62:6e:7b:1a:3d:34: 50:c6:c6:33:1f:33:74:55:57:6f:b8:18:05:c7:4d: 76:54:24:c5:b7:bb:9f:36:28:c1:3b:be:89:a4:fc: 2f:36:a4:30:af:5c:77:76:c4:75:93:e8:c8:7e:a7: 03:78:59:3f:5d:e7:a1:0e:df:77:c5:d2:c2:2e:9c: ae:31:db:3d:1e:48:46:6c:8d:3e:55:f6:16:d2:3b: 29:51:ac:19:19:58:96:6c:a9:89:be:cf:db:10:ed: b7:e5:05:40:38:c3:55:be:c6:ac:c0:4c:6f:aa:e4: 35:15:03:82:e1:24:16:9e:d5:8f:f9:9e:02:89:e0: 63:eb:06:99:5c:9f:f7:7c:de:93:41:7b:7e:2e:02: 0b:92:71:5f:6e:85:c5:91:59:2c:2c:6a:dd:85:00: c9:f0:a5:70:e7:78:79:8b:d4:22:8b:b3:5c:5d:43: ee:34:bd:e8:24:cd:cd:0d:31:a4:e6:a3:4b:d0:5c: ae:b8:96:84:b4:c1:4b:22:01:4c:a2:dc:c0:94:e7: fd:e0:9e:75:75:f5:88:cd:08:0a:f1:bd:b4:d5:cc: 88:ea:66:e1:6c:a7:58:c7:d8:e9:8b:c6:15:65:74: a8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:07:FC:CD:7E:2C:26:A1:3F:AD:B5:BA:A3:84:7B:44:9A:C7:2F:82 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:14:77:eb:8d:8b:cd:cf:85:fe:b8:b1:c9:94:5d:3c:49:2b: 02:26:a3:f7:24:6f:44:8a:29:33:c7:f9:b3:92:c2:5d:14:ba: 46:bf:69:b7:5b:3d:e9:02:a9:20:2a:40:d2:fc:e9:da:b6:5a: dd:ff:ac:c6:34:88:c9:8a:d9:38:d1:d7:79:f4:f5:06:7b:30: 7f:1b:cd:98:6f:88:9a:99:ad:5a:75:1f:bd:ee:94:93:29:f6: e3:3b:fb:00:87:1e:c8:92:14:7d:4b:70:95:67:1b:80:92:04: 00:cc:9a:83:93:61:95:0b:8d:60:92:60:ef:e8:de:c4:2b:f0: e6:da:1c:ca:54:6e:9b:7c:1a:10:82:8a:8b:fe:cc:9e:1e:56: 68:65:14:cf:35:ff:0e:f2:c5:09:51:eb:33:05:90:81:e5:40: 32:6b:63:ab:1e:bf:17:a4:aa:71:2a:36:21:2e:a1:f0:63:87: ad:e4:c7:3e:41:ec:00:b5:6e:53:8e:66:01:6b:9b:6e:00:b5: 7b:1e:0c:7a:f5:80:7e:d4:2a:0c:c1:10:b3:ec:75:de:9b:73: 5f:89:2a:11:3d:42:ff:06:40:70:06:93:c5:5c:0d:8d:14:7a: f3:f0:30:bc:46:0a:de:66:1a:35:12:fc:c0:3b:80:f8:41:a1: aa:a0:80:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZK3VrLBdyH3w2lDcywopOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwNDE3MDIwMDU1WhcNMjYwNDE4MDIwMDU1WjAzMTEwLwYDVQQD EyhhZjA3ZmNjZDdlMmMyNmExM2ZhZGI1YmFhMzg0N2I0NDlhYzcyZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV6BISOVfH0JPevel1rfUSFapiy2 CPxibnsaPTRQxsYzHzN0VVdvuBgFx012VCTFt7ufNijBO76JpPwvNqQwr1x3dsR1 k+jIfqcDeFk/XeehDt93xdLCLpyuMds9HkhGbI0+VfYW0jspUawZGViWbKmJvs/b EO235QVAOMNVvsaswExvquQ1FQOC4SQWntWP+Z4CieBj6waZXJ/3fN6TQXt+LgIL knFfboXFkVksLGrdhQDJ8KVw53h5i9Qii7NcXUPuNL3oJM3NDTGk5qNL0FyuuJaE tMFLIgFMotzAlOf94J51dfWIzQgK8b201cyI6mbhbKdYx9jpi8YVZXSolQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8H/M1+LCahP621uqOEe0Saxy+CMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABR3642L zc+F/rixyZRdPEkrAiaj9yRvRIopM8f5s5LCXRS6Rr9pt1s96QKpICpA0vzp2rZa 3f+sxjSIyYrZONHXefT1BnswfxvNmG+ImpmtWnUfve6Ukyn24zv7AIceyJIUfUtw lWcbgJIEAMyag5NhlQuNYJJg7+jexCvw5tocylRum3waEIKKi/7Mnh5WaGUUzzX/ DvLFCVHrMwWQgeVAMmtjqx6/F6SqcSo2IS6h8GOHreTHPkHsALVuU45mAWubbgC1 ex4MevWAftQqDMEQs+x13ptzX4kqET1C/wZAcAaTxVwNjRR68/AwvEYK3mYaNRL8 wDuA+EGhqqCAOw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:05:20 2026 by rpki-client