$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: 8rMNZtNzpZuHgJzMdts1e9TYry3ciQQ+ctL3J11FqbE= Subject key identifier: 2A:14:A1:00:98:23:88:3E:FD:42:33:95:AA:4B:57:BE:B8:A6:32:34 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019DA2D2E331A4EF597EFA5D89A185A15E4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 1686 Signing time: Sat 18 Apr 2026 23:00:22 +0000 Manifest this update: Sat 18 Apr 2026 23:00:22 +0000 Manifest next update: Sun 19 Apr 2026 23:00:22 +0000 Files and hashes: 1: 5izoM-ae0viPYeMa8vG_OMdcCFM.roa (hash: TwuLhMgA2SHR4gXSc9/RCEg/7dBujziBPA56lp4yzpw=) 2: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=) 3: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=) 4: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=) 5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: mH7y2yc2SFX7Z1sZtkUFjn2pJY6h01x3GIFzP4UC5yo=) 6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=) 7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=) 8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=) 9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=) 10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=) 11: qJOi4zVPIJeiBz6kzCUQLpwMngk.roa (hash: vqduf5OrqJ9boER+M0PF82VqTnPYijX9elPDZEa03wo=) 12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=) 13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=) 14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 23:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a2:d2:e3:31:a4:ef:59:7e:fa:5d:89:a1:85:a1:5e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Apr 18 23:00:22 2026 GMT Not After : Apr 19 23:00:22 2026 GMT Subject: CN=2a14a1009823883efd423395aa4b57beb8a63234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:74:3f:33:7c:ea:8e:a2:28:9e:ca:60:2f: 4b:1f:5a:36:f3:46:8d:1b:59:93:ba:c4:5d:81:7f: 87:44:8c:6c:d8:a0:d6:aa:c4:24:00:71:f4:8d:90: d5:1b:d1:87:1f:c3:5e:6c:3a:ec:d9:c6:ac:38:10: 61:32:62:f1:f9:c8:6c:4d:99:fa:ae:99:7d:e5:92: 8a:c2:d0:1a:65:89:26:2f:40:52:e9:df:03:80:f6: ce:8d:1f:61:90:67:67:71:ac:64:6d:22:c0:8b:0d: ae:33:e0:a7:2a:2a:78:71:60:46:3b:2f:1c:4b:98: 87:02:d9:2c:c3:6b:4e:16:32:1c:b2:46:ad:a2:9f: 9f:eb:34:3d:e8:0d:de:56:1e:8c:b0:31:d3:c5:fb: ec:0c:e5:c3:2f:a1:2e:4f:9d:09:f2:0e:28:c7:69: c3:b9:21:f0:e5:80:e7:5a:00:67:73:38:fb:9a:b2: ef:94:dd:eb:cd:75:4f:2c:30:09:6f:27:b8:d7:16: 9c:e7:a3:c0:b6:1f:ff:81:09:7c:e2:fa:32:ef:67: b5:f4:8b:e6:27:f1:8f:50:d9:86:1d:75:e5:ca:ce: 0b:ec:ec:e5:04:98:5d:dd:75:9c:0d:7c:e3:5a:cd: dd:a1:c4:a1:ff:c7:3e:8e:26:1e:21:8a:19:e2:b5: 8f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:14:A1:00:98:23:88:3E:FD:42:33:95:AA:4B:57:BE:B8:A6:32:34 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c7:1a:be:49:7f:24:2c:ce:52:e7:ad:36:ca:78:80:7e:89: 8a:8e:a7:41:5e:72:50:cc:63:ec:91:f8:86:85:4b:05:31:03: 22:0a:19:9c:16:de:13:31:6c:5f:68:6e:b1:8d:19:37:90:01: 0f:c7:cf:79:6f:e2:3a:be:d9:08:64:df:8f:a0:9d:aa:4c:95: b1:de:a6:c4:f0:4d:0a:eb:29:9c:55:c2:d3:9c:cd:00:e9:83: f0:1a:59:19:38:21:4b:a0:57:1e:38:ec:b8:a2:bc:58:39:7f: 9c:29:f8:6d:0b:cc:92:c4:68:64:4b:08:3c:de:93:f4:6e:80: 1d:7f:b2:e6:07:51:d1:d3:54:f1:06:3b:e0:e2:92:15:b4:dc: 9c:c0:6f:1e:44:a5:8f:5c:f5:cc:38:01:e9:09:e9:7b:c1:2f: 0e:3f:cf:5b:3b:bc:70:18:de:a3:8e:75:45:ae:7d:5d:2d:7a: 80:b5:34:b2:c3:88:66:01:6b:79:ea:81:15:67:9f:bd:66:b9: c7:c8:7d:00:8f:ea:31:04:af:32:31:ad:ea:e8:2e:ae:73:9c: 3c:60:78:78:40:5b:00:bd:a1:13:79:01:c5:c9:06:d5:ff:42: b8:13:b4:ea:c3:e3:16:69:29:00:7c:33:f6:4b:89:d5:1d:b3: dc:19:8b:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2i0uMxpO9ZfvpdiaGFoV5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwNDE4MjMwMDIyWhcNMjYwNDE5MjMwMDIyWjAzMTEwLwYDVQQD EygyYTE0YTEwMDk4MjM4ODNlZmQ0MjMzOTVhYTRiNTdiZWI4YTYzMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsep0PzN86o6iKJ7KYC9LH1o280aN G1mTusRdgX+HRIxs2KDWqsQkAHH0jZDVG9GHH8NebDrs2casOBBhMmLx+chsTZn6 rpl95ZKKwtAaZYkmL0BS6d8DgPbOjR9hkGdncaxkbSLAiw2uM+CnKip4cWBGOy8c S5iHAtksw2tOFjIcskatop+f6zQ96A3eVh6MsDHTxfvsDOXDL6EuT50J8g4ox2nD uSHw5YDnWgBnczj7mrLvlN3rzXVPLDAJbye41xac56PAth//gQl84voy72e19Ivm J/GPUNmGHXXlys4L7OzlBJhd3XWcDXzjWs3docSh/8c+jiYeIYoZ4rWPywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoUoQCYI4g+/UIzlapLV764pjI0MB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMcavkl/ JCzOUuetNsp4gH6Jio6nQV5yUMxj7JH4hoVLBTEDIgoZnBbeEzFsX2husY0ZN5AB D8fPeW/iOr7ZCGTfj6CdqkyVsd6mxPBNCuspnFXC05zNAOmD8BpZGTghS6BXHjjs uKK8WDl/nCn4bQvMksRoZEsIPN6T9G6AHX+y5gdR0dNU8QY74OKSFbTcnMBvHkSl j1z1zDgB6Qnpe8EvDj/PWzu8cBjeo451Ra59XS16gLU0ssOIZgFreeqBFWefvWa5 x8h9AI/qMQSvMjGt6ugurnOcPGB4eEBbAL2hE3kBxckG1f9CuBO06sPjFmkpAHwz 9kuJ1R2z3BmLnA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:54:48 2026 by rpki-client