$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: P1olbHeA1SuXi8wCS72uVTx/30bwXhvpEsITAjItxPI= Subject key identifier: E7:B4:FB:D1:71:18:37:2B:41:3A:9C:CF:16:28:0E:66:17:1C:71:D0 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019D97E19E329E168CAC65CD75E950959069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 18C9 Signing time: Thu 16 Apr 2026 20:00:38 +0000 Manifest this update: Thu 16 Apr 2026 20:00:38 +0000 Manifest next update: Fri 17 Apr 2026 20:00:38 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: hlusRQFqOuCbFUTqXx2e5MdzDk+TFyKxNljlut0H0Wc=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:e1:9e:32:9e:16:8c:ac:65:cd:75:e9:50:95:90:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Apr 16 20:00:38 2026 GMT Not After : Apr 17 20:00:38 2026 GMT Subject: CN=e7b4fbd17118372b413a9ccf16280e66171c71d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f1:a1:11:e6:95:bf:7e:4f:3f:b4:13:f3:99: 6f:e9:9b:c8:bf:cc:2a:9c:9d:fc:cc:69:28:2f:b0: 90:f4:d3:7a:6f:71:cb:ba:87:f4:fa:28:b4:bc:99: 3e:8d:60:91:bf:49:dc:76:a0:1f:2c:1e:d5:cc:d3: 5f:da:83:17:39:86:ce:d3:cb:ad:1f:af:28:56:be: 60:a4:d8:af:8a:46:3c:c4:83:a5:fd:5f:5f:ec:9b: 25:c8:fc:3e:61:ca:57:d5:82:05:53:27:84:7b:e5: 38:b0:07:ab:00:9f:93:42:fe:a7:52:1e:b1:bd:8b: 41:0c:9e:71:67:de:14:69:d8:23:94:5d:5a:d0:81: a8:31:5d:d9:43:91:bb:69:25:39:99:d9:b7:1f:59: c5:7b:db:bb:6d:f3:64:74:f0:ee:f1:84:1e:37:4b: 38:a3:5e:9a:91:93:7f:de:38:a1:88:1c:42:b3:3f: b6:6e:ca:00:0f:01:c5:ba:4a:af:41:85:9d:38:39: f6:77:f8:f2:e0:c1:e6:39:dd:ac:a4:67:58:0e:09: ba:10:35:b9:d8:a0:b1:25:30:bd:7d:9a:7e:28:a8: 00:27:ae:4a:99:4c:01:8a:a4:2b:f6:03:b1:f0:f8: 74:b1:de:e2:48:d9:e5:59:b8:c8:04:10:4e:6e:79: 62:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B4:FB:D1:71:18:37:2B:41:3A:9C:CF:16:28:0E:66:17:1C:71:D0 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a9:29:c9:49:38:02:83:51:0f:64:fa:ba:32:e9:ca:f3:5d: f5:78:28:7e:dd:59:a6:f9:af:79:45:d9:9f:35:f6:77:ab:d9: cd:c6:dd:cf:ec:ba:f9:af:d2:a8:16:ed:0e:0b:ad:a0:0e:3a: 41:d3:16:76:5f:6b:a2:95:9b:71:92:3b:d9:1e:46:50:bb:3a: 49:f1:5d:43:0b:80:e4:3a:16:69:69:ce:ec:42:56:d0:ee:0c: d0:08:4c:4d:92:2f:55:6f:cb:cc:d0:27:bb:dc:05:de:c4:9c: bc:36:a1:00:7f:24:9b:b8:d3:6a:9f:a1:52:5e:f7:4d:6a:20: 5a:96:b2:4b:1b:c5:93:81:3e:a3:ef:1e:cd:fb:72:e8:94:e1: 62:fb:b6:be:46:c5:34:0c:56:d4:bc:44:e6:ad:c7:8b:d4:54: 3b:3b:c8:ee:96:95:32:aa:3d:bb:12:ce:4a:19:6b:0d:d8:24: 39:b6:d4:11:91:7a:49:0c:40:c4:2f:19:b2:8e:f6:6c:b6:81: d0:24:0c:5b:17:e5:92:4e:d0:f0:f5:5f:97:5b:ce:b7:29:6e: 96:8d:4c:2c:e0:f6:0f:a4:cf:6f:02:8e:47:62:d8:e7:37:aa: 52:5c:49:9b:75:5c:e8:3d:c1:59:aa:f1:c1:b6:95:ee:51:d5: 8d:f0:58:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2X4Z4ynhaMrGXNdelQlZBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwNDE2MjAwMDM4WhcNMjYwNDE3MjAwMDM4WjAzMTEwLwYDVQQD EyhlN2I0ZmJkMTcxMTgzNzJiNDEzYTljY2YxNjI4MGU2NjE3MWM3MWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PGhEeaVv35PP7QT85lv6ZvIv8wq nJ38zGkoL7CQ9NN6b3HLuof0+ii0vJk+jWCRv0ncdqAfLB7VzNNf2oMXOYbO08ut H68oVr5gpNivikY8xIOl/V9f7JslyPw+YcpX1YIFUyeEe+U4sAerAJ+TQv6nUh6x vYtBDJ5xZ94UadgjlF1a0IGoMV3ZQ5G7aSU5mdm3H1nFe9u7bfNkdPDu8YQeN0s4 o16akZN/3jihiBxCsz+2bsoADwHFukqvQYWdODn2d/jy4MHmOd2spGdYDgm6EDW5 2KCxJTC9fZp+KKgAJ65KmUwBiqQr9gOx8Ph0sd7iSNnlWbjIBBBObnli/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOe0+9FxGDcrQTqczxYoDmYXHHHQMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqkpyUk4 AoNRD2T6ujLpyvNd9Xgoft1ZpvmveUXZnzX2d6vZzcbdz+y6+a/SqBbtDgutoA46 QdMWdl9ropWbcZI72R5GULs6SfFdQwuA5DoWaWnO7EJW0O4M0AhMTZIvVW/LzNAn u9wF3sScvDahAH8km7jTap+hUl73TWogWpaySxvFk4E+o+8ezfty6JThYvu2vkbF NAxW1LxE5q3Hi9RUOzvI7paVMqo9uxLOShlrDdgkObbUEZF6SQxAxC8Zso72bLaB 0CQMWxflkk7Q8PVfl1vOtylulo1MLOD2D6TPbwKOR2LY5zeqUlxJm3Vc6D3BWarx wbaV7lHVjfBYmg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:06:56 2026 by rpki-client