$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft File: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json) Hash identifier: R88aZ2FzguezOG/bMw7CKkzQPuc33vJZHClDp5SzFHI= Subject key identifier: 8F:1F:94:06:BE:0E:73:46:82:3C:63:04:A0:F9:E1:9A:BA:AE:AC:27 Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a Certificate serial: 019D984FD7C5EE0A2EFC939227B378EEF38C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft Manifest number: 18CD Signing time: Thu 16 Apr 2026 22:01:02 +0000 Manifest this update: Thu 16 Apr 2026 22:01:02 +0000 Manifest next update: Fri 17 Apr 2026 22:01:02 +0000 Files and hashes: 1: CE6rRh7gwkNwQsNCEV_5-qvby8o.roa (hash: +C6crj3tlveY40cfyaDLAmJKc2kjvGSJAnx+Tun2pBQ=) 2: H-Z-59qkp7uHQPcWeenVARkWiac.roa (hash: HKW7RkaEKR+tAOc8fjxLJQH13xKLm1JBXk6SPdfsZ20=) 3: J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa (hash: dwuiTVtxcw0Gm8ehWtdolENkQjfHnVWwxpd27Y3PhYA=) 4: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: 8VU5oU0equEehmTaU5wViSMKycVASOMGpD/n1PUxAlI=) 5: MjvomoUdbRCYMRTivd64oJucyR4.roa (hash: cQeTekUSkTsAQzZ5llLXfmDS9liZjdYx7jCgTSy2Qs0=) 6: dwe_m7iK2njmUFFGe9nnrN8FZV4.roa (hash: utaiyLTsrEWxNDIzyZ7TNXdP2ryHcGA9G92URVMLgOY=) 7: ixjloOI87OkWVNhgbhDEEFBTJ_A.roa (hash: cx+C+iENlLKYVwuPtzW+PgZZj9Jz/VMG8suoQFDv4vY=) 8: j2qKFrWfusxDiFzkFOC9pNjdNeM.roa (hash: eedi82Numcyo5s6BIiJHhclTJ6KJqgbKjG36ZSW5eFU=) 9: m3RaVncm_gBlS4tVezr7XBZHrR4.roa (hash: NCcn02MU0AdzNYn2EHJlZXzwGScb4dWUGw8AznxeOaE=) 10: pxvwZ83GQsd2xDFU232Uh7bybX4.roa (hash: wTQyNgjrlPNNWRBqCTTjBvEsBojPl8WoXlgNibVwY1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:4f:d7:c5:ee:0a:2e:fc:93:92:27:b3:78:ee:f3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a Validity Not Before: Apr 16 22:01:02 2026 GMT Not After : Apr 17 22:01:02 2026 GMT Subject: CN=8f1f9406be0e7346823c6304a0f9e19abaaeac27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:0a:38:d4:69:6c:b1:e4:72:b4:05:34:c5: 43:53:69:f9:03:5b:65:fc:0c:b7:2e:c2:a0:3f:b6: 67:08:6b:ec:8d:8e:75:72:d3:c5:94:8d:65:84:d0: 6a:cd:e7:26:b8:77:57:ad:2f:6c:e8:fb:b2:c8:eb: bf:47:24:fe:26:f4:7e:cb:0c:df:b1:4e:74:f1:17: 77:d4:02:4a:c4:a6:fd:3f:b1:42:43:80:79:6c:13: e9:ad:a0:45:ca:5f:bd:54:1d:9f:8a:d3:89:e1:2d: 01:ec:85:73:e4:8a:5d:91:5d:81:c5:a2:39:06:75: a8:56:35:7f:6b:92:66:46:de:1b:e3:93:e6:f9:4d: cf:12:ee:83:de:56:82:7c:e9:97:b1:6d:5f:3e:95: 7b:8d:ff:d1:78:c8:7c:b4:1f:27:0a:07:e8:4a:ac: 22:89:04:34:19:10:53:8e:34:dd:11:17:b0:66:01: 2f:a0:be:33:4d:27:c4:7a:0d:80:cb:bf:1b:08:13: b8:1a:83:da:9b:53:bf:82:dc:ee:d9:10:b0:73:75: b4:e7:73:50:15:3f:3a:8d:3f:9c:f2:2b:70:35:10: ce:a7:49:97:89:a2:b3:a2:c0:f3:31:e1:c8:19:53: f4:3b:00:ee:1f:c8:4f:23:be:1a:e9:e0:32:21:1c: d7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1F:94:06:BE:0E:73:46:82:3C:63:04:A0:F9:E1:9A:BA:AE:AC:27 X509v3 Authority Key Identifier: keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7a:6a:9e:a7:26:f6:c0:3b:a1:d5:90:2b:bc:b9:aa:49:c3: f4:08:8c:78:84:9e:12:14:df:b0:24:85:52:17:da:b5:92:b3: 4d:cb:0f:c4:df:76:39:94:f0:d6:77:bf:02:50:c9:f8:c5:7b: 25:14:cb:fa:47:aa:ec:ac:cb:dd:c1:aa:6f:58:52:97:56:da: 02:01:52:9e:b5:fa:71:c1:b5:77:a6:7c:ee:1e:f5:ea:ed:ec: a6:f4:0e:1b:db:0e:5e:f1:02:60:bb:88:11:ab:83:06:20:2c: 23:c1:5b:bc:d9:dd:db:dd:16:11:5a:d4:8e:84:bf:32:ed:a0: 37:ec:e3:b9:c1:80:80:da:c9:31:58:06:f1:c5:54:35:cc:90: c7:96:64:a7:ae:70:61:1d:ff:21:3d:3c:25:d3:d4:30:e5:b5: 9b:cc:79:c1:1c:9b:24:ab:d9:b2:a5:e0:a8:2d:a7:e9:81:a3: ff:b1:f8:f3:fc:0b:d4:9a:9b:c6:6f:46:6c:d3:40:9f:53:e2: e1:2b:5e:f2:7f:cf:40:0f:53:02:24:5a:90:5e:6a:b5:7c:12: 7d:03:e6:2b:04:df:93:78:bc:66:70:f2:c5:aa:91:6e:97:f2: 6c:aa:d1:59:61:14:b5:37:56:d4:7d:d9:20:6b:11:4b:bb:67: 1c:e0:43:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YT9fF7gou/JOSJ7N47vOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MzExNjZkZTc4NWEzNTMxYmRjODM2MWYxMTkwYTgzNjlh N2VkNmEwHhcNMjYwNDE2MjIwMTAyWhcNMjYwNDE3MjIwMTAyWjAzMTEwLwYDVQQD Eyg4ZjFmOTQwNmJlMGU3MzQ2ODIzYzYzMDRhMGY5ZTE5YWJhYWVhYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxcKONRpbLHkcrQFNMVDU2n5A1tl /Ay3LsKgP7ZnCGvsjY51ctPFlI1lhNBqzecmuHdXrS9s6PuyyOu/RyT+JvR+ywzf sU508Rd31AJKxKb9P7FCQ4B5bBPpraBFyl+9VB2fitOJ4S0B7IVz5IpdkV2BxaI5 BnWoVjV/a5JmRt4b45Pm+U3PEu6D3laCfOmXsW1fPpV7jf/ReMh8tB8nCgfoSqwi iQQ0GRBTjjTdERewZgEvoL4zTSfEeg2Ay78bCBO4GoPam1O/gtzu2RCwc3W053NQ FT86jT+c8itwNRDOp0mXiaKzosDzMeHIGVP0OwDuH8hPI74a6eAyIRzXYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8flAa+DnNGgjxjBKD54Zq6rqwnMB8GA1UdIwQY MBaAFCYxFm3nhaNTG9yDYfEZCoNpp+1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUt Yjg5YTI2MTk5OTc2LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUtYjg5YTI2MTk5OTc2 LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnpqnqcm 9sA7odWQK7y5qknD9AiMeISeEhTfsCSFUhfatZKzTcsPxN92OZTw1ne/AlDJ+MV7 JRTL+keq7KzL3cGqb1hSl1baAgFSnrX6ccG1d6Z87h716u3spvQOG9sOXvECYLuI EauDBiAsI8FbvNnd290WEVrUjoS/Mu2gN+zjucGAgNrJMVgG8cVUNcyQx5Zkp65w YR3/IT08JdPUMOW1m8x5wRybJKvZsqXgqC2n6YGj/7H48/wL1Jqbxm9GbNNAn1Pi 4Ste8n/PQA9TAiRakF5qtXwSfQPmKwTfk3i8ZnDyxaqRbpfybKrRWWEUtTdW1H3Z IGsRS7tnHOBDbQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:08:08 2026 by rpki-client