$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: G+3ZjF9zMybZ5fT7zQUGBOH6qkYPqDkedVQyZtJi34g= Subject key identifier: 2E:DB:24:81:AE:A5:1A:37:F0:73:D4:55:53:61:F8:44:4A:15:83:A5 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019D992B0D0DA35287378DA151BFCC068375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 1681 Signing time: Fri 17 Apr 2026 02:00:28 +0000 Manifest this update: Fri 17 Apr 2026 02:00:28 +0000 Manifest next update: Sat 18 Apr 2026 02:00:28 +0000 Files and hashes: 1: 5izoM-ae0viPYeMa8vG_OMdcCFM.roa (hash: TwuLhMgA2SHR4gXSc9/RCEg/7dBujziBPA56lp4yzpw=) 2: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=) 3: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=) 4: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=) 5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: mDFiP2FnUF1MSwYtDi/fwkeFRkatzl/QiFBTkYQd3sA=) 6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=) 7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=) 8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=) 9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=) 10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=) 11: qJOi4zVPIJeiBz6kzCUQLpwMngk.roa (hash: vqduf5OrqJ9boER+M0PF82VqTnPYijX9elPDZEa03wo=) 12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=) 13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=) 14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:0d:0d:a3:52:87:37:8d:a1:51:bf:cc:06:83:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Apr 17 02:00:28 2026 GMT Not After : Apr 18 02:00:28 2026 GMT Subject: CN=2edb2481aea51a37f073d4555361f8444a1583a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:5c:3b:5f:a3:38:7e:d4:af:7f:21:4e:0a: 32:16:db:9f:8d:f8:f8:2e:c8:98:1a:37:7d:71:be: 37:7b:11:48:e4:6c:0b:33:f2:b0:88:22:47:fd:84: c5:e2:fc:df:e5:91:8b:bb:b7:68:3e:a9:79:d3:4f: 7e:ea:b4:4d:c4:c0:a3:05:be:8f:4f:35:5a:48:cf: 74:ea:86:5b:9e:16:8b:f6:01:61:37:74:10:cc:f3: c4:b7:8a:9b:c6:65:73:4e:5d:a4:b0:83:74:1f:e8: 7e:2b:a5:99:33:ba:9f:5d:53:79:ee:72:16:7f:d8: 24:13:61:75:95:41:ba:91:2a:46:55:f1:e4:32:b4: 75:25:45:df:07:bc:e2:23:15:73:fb:4e:95:e0:51: 83:e1:9e:04:a4:36:9b:96:20:02:a1:7d:3a:eb:f6: a0:5b:2f:05:d8:82:78:2b:1d:ab:4f:ba:97:1e:49: 08:09:19:01:11:7a:53:63:43:13:ab:3f:ab:77:a6: b7:49:8f:a4:33:be:60:31:b1:c8:cd:c1:2b:88:bc: 91:9c:3f:52:c5:4d:66:c5:fb:22:bf:d0:ab:b9:c3: 04:1f:9b:5b:88:e8:7d:7b:5b:c7:75:2e:fa:b1:1f: 28:e0:38:e3:53:16:d8:59:29:59:d5:31:58:d7:8a: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DB:24:81:AE:A5:1A:37:F0:73:D4:55:53:61:F8:44:4A:15:83:A5 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ca:73:86:ff:91:51:fa:7b:3b:f3:8b:8c:64:0b:3b:10:21: 4b:b2:1d:30:15:fb:71:43:6d:b3:1a:3c:07:9b:89:ab:f5:ea: c4:e9:bc:04:77:63:e2:b8:30:ba:ea:a7:a6:8c:41:fc:79:95: 35:45:c2:59:3f:e7:d3:75:0e:27:2e:77:5c:9a:61:39:8f:9d: 91:7f:04:4b:4e:09:f4:1d:eb:98:be:23:c2:f4:ef:fc:c8:77: 3f:04:65:69:de:23:fd:a5:ab:5c:51:a3:af:82:c6:b8:c4:d0: 9d:22:68:54:91:56:49:3b:e2:c9:a3:65:16:34:0b:c1:da:ef: d7:fb:57:f4:28:66:7b:6a:40:f1:8f:d7:fc:cf:c3:9e:d9:34: 75:15:c1:e3:eb:b7:ad:2c:46:96:d2:12:e7:ab:de:93:f1:5f: c2:48:bc:66:28:b9:29:7e:39:cf:da:36:62:ed:4e:f4:a3:f7: 9a:8e:d9:ba:7b:1d:5e:da:48:b7:81:bf:97:5f:4d:af:11:70: 8f:d1:74:b5:28:38:82:8c:76:ab:50:0d:37:a9:6d:a5:7b:20: bc:26:ac:1a:de:d5:da:e2:73:bc:36:b2:bf:3c:77:62:68:47: 2e:65:ec:86:2d:e4:3d:c5:35:53:38:10:4c:1b:cb:93:6d:cb: 4f:30:3f:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZKw0No1KHN42hUb/MBoN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwNDE3MDIwMDI4WhcNMjYwNDE4MDIwMDI4WjAzMTEwLwYDVQQD EygyZWRiMjQ4MWFlYTUxYTM3ZjA3M2Q0NTU1MzYxZjg0NDRhMTU4M2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwJcO1+jOH7Ur38hTgoyFtufjfj4 LsiYGjd9cb43exFI5GwLM/KwiCJH/YTF4vzf5ZGLu7doPql5009+6rRNxMCjBb6P TzVaSM906oZbnhaL9gFhN3QQzPPEt4qbxmVzTl2ksIN0H+h+K6WZM7qfXVN57nIW f9gkE2F1lUG6kSpGVfHkMrR1JUXfB7ziIxVz+06V4FGD4Z4EpDabliACoX066/ag Wy8F2IJ4Kx2rT7qXHkkICRkBEXpTY0MTqz+rd6a3SY+kM75gMbHIzcEriLyRnD9S xU1mxfsiv9CrucMEH5tbiOh9e1vHdS76sR8o4DjjUxbYWSlZ1TFY14pqhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7bJIGupRo38HPUVVNh+ERKFYOlMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMpzhv+R Ufp7O/OLjGQLOxAhS7IdMBX7cUNtsxo8B5uJq/XqxOm8BHdj4rgwuuqnpoxB/HmV NUXCWT/n03UOJy53XJphOY+dkX8ES04J9B3rmL4jwvTv/Mh3PwRlad4j/aWrXFGj r4LGuMTQnSJoVJFWSTviyaNlFjQLwdrv1/tX9Chme2pA8Y/X/M/Dntk0dRXB4+u3 rSxGltIS56vek/Ffwki8Zii5KX45z9o2Yu1O9KP3mo7ZunsdXtpIt4G/l19NrxFw j9F0tSg4gox2q1ANN6ltpXsgvCasGt7V2uJzvDayvzx3YmhHLmXshi3kPcU1UzgQ TBvLk23LTzA/zg== -----END CERTIFICATE-----Generated at Fri Apr 17 03:42:27 2026 by rpki-client