$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: zC14CQYBNWwFHg79lAgHG75Gh46U3GJ15WTAOamkV9s= Subject key identifier: F4:24:74:5F:DF:05:2A:C8:70:29:FF:E8:C9:66:3D:A5:6E:55:E6:F7 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019DA3AE9F16914C5307A3D3215AF78D1723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 18FF Signing time: Sun 19 Apr 2026 03:00:23 +0000 Manifest this update: Sun 19 Apr 2026 03:00:23 +0000 Manifest next update: Mon 20 Apr 2026 03:00:23 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: zNsVAkKC0OjPl3hhhTAdm8PONWpviSuXQlkT1ppCjMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:ae:9f:16:91:4c:53:07:a3:d3:21:5a:f7:8d:17:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Apr 19 03:00:23 2026 GMT Not After : Apr 20 03:00:23 2026 GMT Subject: CN=f424745fdf052ac87029ffe8c9663da56e55e6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:93:c7:f5:f7:d6:c4:16:25:01:98:eb:44: ce:7d:79:1f:b2:fa:d1:f9:7c:2e:b6:1d:0d:92:25: c1:ed:07:15:bd:c9:b0:c8:44:da:2f:b1:c5:7d:3d: 32:d4:c6:62:11:83:79:a6:ee:6b:39:77:f0:8e:51: 47:d8:2b:ce:c4:bd:53:80:60:86:72:95:76:d0:89: c0:f7:9e:d1:ab:6e:4f:1d:b5:42:6d:06:18:96:01: 4e:f0:03:bb:12:7a:fc:51:23:5f:0b:10:7c:51:47: 1f:63:2a:20:90:93:b1:d2:af:58:d5:8f:1e:af:be: d6:50:79:cd:ea:53:5b:4a:02:9d:60:a2:e4:a6:59: dd:6c:50:15:93:f6:04:9d:a3:4a:ef:6e:b9:5c:68: fc:73:c5:d6:12:3f:ce:92:3b:3c:0c:66:7b:10:4f: 5d:fd:8e:69:8e:ee:9a:54:01:ff:50:93:7e:79:01: d0:49:1b:71:05:62:76:81:fb:fb:a3:b9:61:91:3a: 21:c5:85:02:78:ad:79:09:65:52:95:38:71:06:5e: 85:1e:3e:04:0f:a8:34:ea:c7:b7:e2:73:fd:50:b4: b2:74:58:8e:b1:59:15:03:e9:25:e8:4c:23:94:dd: 94:2f:62:09:39:63:2a:0c:8f:df:ad:17:5c:79:c3: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:74:5F:DF:05:2A:C8:70:29:FF:E8:C9:66:3D:A5:6E:55:E6:F7 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:05:cc:28:81:8d:5c:96:a9:f9:dd:b3:30:17:12:2a:3c:2a: 6a:c7:51:1e:86:a4:a6:b7:2e:0c:48:49:b7:8d:d0:64:a3:bf: 7a:dd:91:ef:68:18:1e:3a:eb:9d:1e:8e:41:e5:b0:08:c4:82: 63:eb:9f:95:23:82:8e:ae:8f:43:42:62:cd:4c:dd:e9:84:cf: 0d:7b:67:39:99:73:7f:fd:f8:9b:66:50:eb:3b:8a:33:26:40: a0:90:36:80:c2:eb:c9:b1:3f:7f:74:f1:cd:c5:d6:79:a1:8f: 85:15:12:55:54:24:6b:1e:63:73:8f:63:22:16:bc:4e:84:ac: c4:97:d1:a3:31:00:1c:48:ed:64:13:ea:77:9c:c4:35:1c:f3: 97:12:eb:6f:7c:8c:90:34:7e:b8:a7:de:12:f4:fc:d1:8a:5b: f7:67:96:8d:66:c3:e6:9f:09:2c:6e:07:1b:be:4a:b6:0b:39: dc:ba:d1:d6:5a:46:cf:93:57:b8:a9:d7:be:9e:d8:6d:fc:58: 42:2e:b5:49:56:4d:e6:9e:14:26:a9:df:6d:69:30:9d:a8:2b: 8b:5e:2b:de:75:3e:02:af:e1:3c:74:a3:50:d8:de:fb:e5:7a: 2f:90:ae:8b:0d:d4:63:89:95:5b:19:a6:66:ac:ad:d8:28:4a: bc:ab:38:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jrp8WkUxTB6PTIVr3jRcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwNDE5MDMwMDIzWhcNMjYwNDIwMDMwMDIzWjAzMTEwLwYDVQQD EyhmNDI0NzQ1ZmRmMDUyYWM4NzAyOWZmZThjOTY2M2RhNTZlNTVlNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGGTx/X31sQWJQGY60TOfXkfsvrR +Xwuth0NkiXB7QcVvcmwyETaL7HFfT0y1MZiEYN5pu5rOXfwjlFH2CvOxL1TgGCG cpV20InA957Rq25PHbVCbQYYlgFO8AO7Enr8USNfCxB8UUcfYyogkJOx0q9Y1Y8e r77WUHnN6lNbSgKdYKLkplndbFAVk/YEnaNK7265XGj8c8XWEj/Okjs8DGZ7EE9d /Y5pju6aVAH/UJN+eQHQSRtxBWJ2gfv7o7lhkTohxYUCeK15CWVSlThxBl6FHj4E D6g06se34nP9ULSydFiOsVkVA+kl6EwjlN2UL2IJOWMqDI/frRdcecO9YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQkdF/fBSrIcCn/6MlmPaVuVeb3MB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwXMKIGN XJap+d2zMBcSKjwqasdRHoakprcuDEhJt43QZKO/et2R72gYHjrrnR6OQeWwCMSC Y+uflSOCjq6PQ0JizUzd6YTPDXtnOZlzf/34m2ZQ6zuKMyZAoJA2gMLrybE/f3Tx zcXWeaGPhRUSVVQkax5jc49jIha8ToSsxJfRozEAHEjtZBPqd5zENRzzlxLrb3yM kDR+uKfeEvT80Ypb92eWjWbD5p8JLG4HG75Ktgs53LrR1lpGz5NXuKnXvp7YbfxY Qi61SVZN5p4UJqnfbWkwnagri14r3nU+Aq/hPHSjUNje++V6L5Cuiw3UY4mVWxmm Zqyt2ChKvKs4vw== -----END CERTIFICATE-----Generated at Sun Apr 19 11:35:29 2026 by rpki-client