$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: 71ZBT1Nvw7vIxFwN6pU+db2RbTl8EITyc2opEP7MXq4= Subject key identifier: 15:AC:42:9B:F3:BA:56:9F:91:13:83:CF:A0:BB:E7:BD:FB:B3:A0:2C Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019D9BBEAF90FCCC97CC276287FB60B4EF39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 18CF Signing time: Fri 17 Apr 2026 14:00:58 +0000 Manifest this update: Fri 17 Apr 2026 14:00:58 +0000 Manifest next update: Sat 18 Apr 2026 14:00:58 +0000 Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=) 2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=) 3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: PM7ahg6Y64pegSzxwrrMG2yhe0cPu+AXMkzGAEuX6ng=) 4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=) 5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=) 6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=) 7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=) 8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=) 9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=) 10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:be:af:90:fc:cc:97:cc:27:62:87:fb:60:b4:ef:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Apr 17 14:00:58 2026 GMT Not After : Apr 18 14:00:58 2026 GMT Subject: CN=15ac429bf3ba569f911383cfa0bbe7bdfbb3a02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:d7:96:15:e6:11:f8:42:bf:74:a1:8c:53: d6:fe:4b:61:dc:ad:b6:c5:95:04:00:6e:40:99:e6: b8:b7:f8:3e:b9:0c:9b:28:3a:c0:4c:8b:eb:d3:2e: c9:90:02:d1:2b:3e:cb:fe:b9:3f:02:4d:3c:78:f4: f2:5b:6b:f2:ef:0c:8b:46:54:00:4f:f1:76:bd:d4: 32:e0:94:5c:be:35:ea:ae:ab:f8:a4:b2:bd:27:7f: 59:d6:be:92:ef:f7:30:5c:d8:dd:1a:08:13:6a:9d: 90:1d:c1:39:f7:5f:c6:76:25:a8:a1:3c:d4:93:3d: 62:dd:1f:b3:0d:37:48:00:78:37:ae:1a:9a:96:2b: f0:0a:00:89:e7:5f:b5:84:08:50:a9:c9:f3:15:b5: 3c:6e:d0:b7:2b:18:0f:43:1a:b8:9e:30:d2:d8:e3: 11:ba:d3:43:e6:91:72:4f:ec:b6:1d:de:83:40:5d: c5:b4:d2:f9:6a:d0:01:25:8f:a8:b6:d1:94:38:79: ef:48:ae:26:66:0b:7d:15:79:d2:11:96:e6:e6:6a: 0e:0a:67:b4:a1:e4:f9:26:80:d7:d0:83:0a:69:f4: 6e:d6:2c:38:65:34:34:34:f9:09:14:41:2b:d2:f3: 40:6f:72:b0:33:0c:72:db:e9:47:10:76:e7:81:f8: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AC:42:9B:F3:BA:56:9F:91:13:83:CF:A0:BB:E7:BD:FB:B3:A0:2C X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8a:42:d0:8c:2c:32:3d:d3:4b:d1:b6:5c:40:54:e0:61:16: d6:3c:ce:80:2d:ff:73:f1:ab:c2:6c:7b:35:26:79:25:cc:85: 43:2a:be:1e:f2:0c:8f:3a:7f:31:76:cf:36:8c:1c:ef:8a:f6: 7c:41:ff:70:42:06:bf:9c:b2:10:27:4d:8f:46:58:ad:64:8b: a4:a7:34:7e:e8:4c:62:30:f8:99:15:ca:61:14:85:20:bd:5e: 24:4e:9e:66:40:66:fc:fd:bb:5c:51:b6:83:83:28:a6:64:3b: bd:af:97:81:2f:ed:fa:1a:7d:71:bd:62:b2:b9:16:e1:c9:1a: 6e:92:58:f3:1e:11:20:ca:20:c4:ca:59:5d:2e:d2:eb:75:4b: 17:eb:c0:d4:46:8a:0c:7b:64:98:18:a5:46:bd:27:ff:df:28: 3d:f7:66:8e:19:90:25:18:a9:20:97:ea:cd:5a:b8:02:60:df: 57:51:89:54:8a:66:ad:9f:8d:df:71:7a:b6:e7:b4:b7:b5:5f: c4:22:1d:3d:5e:d0:39:4f:4a:e1:2a:61:15:91:0b:b9:70:5b: 4d:c8:ca:a3:b3:41:95:af:83:60:62:3f:58:1d:50:b3:09:fc: 26:99:03:79:eb:37:65:05:72:bd:88:84:88:fa:b9:e9:17:bf: e6:f8:77:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bvq+Q/MyXzCdih/tgtO85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwNDE3MTQwMDU4WhcNMjYwNDE4MTQwMDU4WjAzMTEwLwYDVQQD EygxNWFjNDI5YmYzYmE1NjlmOTExMzgzY2ZhMGJiZTdiZGZiYjNhMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBXXlhXmEfhCv3ShjFPW/kth3K22 xZUEAG5Amea4t/g+uQybKDrATIvr0y7JkALRKz7L/rk/Ak08ePTyW2vy7wyLRlQA T/F2vdQy4JRcvjXqrqv4pLK9J39Z1r6S7/cwXNjdGggTap2QHcE591/GdiWooTzU kz1i3R+zDTdIAHg3rhqalivwCgCJ51+1hAhQqcnzFbU8btC3KxgPQxq4njDS2OMR utND5pFyT+y2Hd6DQF3FtNL5atABJY+ottGUOHnvSK4mZgt9FXnSEZbm5moOCme0 oeT5JoDX0IMKafRu1iw4ZTQ0NPkJFEEr0vNAb3KwMwxy2+lHEHbngfggEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWsQpvzulafkRODz6C75737s6AsMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIpC0Iws Mj3TS9G2XEBU4GEW1jzOgC3/c/Grwmx7NSZ5JcyFQyq+HvIMjzp/MXbPNowc74r2 fEH/cEIGv5yyECdNj0ZYrWSLpKc0fuhMYjD4mRXKYRSFIL1eJE6eZkBm/P27XFG2 g4MopmQ7va+XgS/t+hp9cb1isrkW4ckabpJY8x4RIMogxMpZXS7S63VLF+vA1EaK DHtkmBilRr0n/98oPfdmjhmQJRipIJfqzVq4AmDfV1GJVIpmrZ+N33F6tue0t7Vf xCIdPV7QOU9K4SphFZELuXBbTcjKo7NBla+DYGI/WB1Qswn8JpkDees3ZQVyvYiE iPq56Re/5vh3gw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:39:55 2026 by rpki-client