$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: HPjw5KkRHtjONVrx4HY3FMK60IBByV7E8UVQMgYzc2U= Subject key identifier: E7:83:88:5F:32:27:B3:CA:63:BD:8D:E8:F0:EC:27:AE:8D:39:27:29 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019D9C9A713F79ACC07DACB92222CA692F1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 14A1 Signing time: Fri 17 Apr 2026 18:01:00 +0000 Manifest this update: Fri 17 Apr 2026 18:01:00 +0000 Manifest next update: Sat 18 Apr 2026 18:01:00 +0000 Files and hashes: 1: 0hcq4PZX-1xxmrjFSYjLo3wgxq8.roa (hash: fBvZPJmlkoGB3cHe8R1wzHuEiD2O7hJFr9Ij0HVMY1c=) 2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=) 3: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (hash: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=) 4: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=) 5: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=) 6: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: xYBkIzNc5PBarxJFJfRzfxe+PUBKd7N95fZc4lrOm18=) 7: ONFJ7LphZxOGZ2K2zbv66AhtweY.roa (hash: DDngO20oZwmh9SFw7vnZ3c/5+t8eB0azTMW7fa0PcqY=) 8: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=) 9: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=) 10: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=) 11: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=) 12: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:9a:71:3f:79:ac:c0:7d:ac:b9:22:22:ca:69:2f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Apr 17 18:01:00 2026 GMT Not After : Apr 18 18:01:00 2026 GMT Subject: CN=e783885f3227b3ca63bd8de8f0ec27ae8d392729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:98:63:1f:38:23:cb:33:85:83:36:64:2f: a9:6a:81:be:e6:cc:03:7c:a2:9f:2d:50:07:57:2b: 1d:43:4f:3a:38:f2:44:e8:4e:01:a7:8a:6d:42:c0: c0:8f:4a:39:f5:10:d6:33:0e:d4:fe:24:64:31:b3: 3b:99:45:a1:b8:ce:9c:48:c5:02:b5:d7:28:33:e4: 00:1e:c2:68:5d:f8:55:35:f8:1c:43:fe:e0:49:af: b0:f9:40:52:1d:4d:96:1f:67:71:97:5c:94:96:62: 34:7b:e4:8f:ee:c6:b8:4f:e9:4b:34:f9:3d:2b:00: 88:a9:80:97:c1:ca:3f:6a:0a:73:f2:4b:9d:16:b7: 2c:6c:d1:41:03:5a:45:42:a6:b5:78:e1:05:c6:d0: bf:62:68:3c:c9:f1:c5:dd:b2:6f:fa:8c:f7:86:b5: 76:2f:4f:2b:af:47:3e:f5:19:82:b0:0d:df:64:f7: 99:a7:16:15:be:92:43:6e:13:26:19:24:37:d3:87: 84:fe:87:f7:b0:27:d7:94:89:03:89:87:cc:9b:9d: 8a:29:5c:be:89:0f:dc:af:9c:4f:19:f4:e1:34:72: 12:fe:fb:c6:3e:29:98:e8:7b:5d:42:43:40:f5:9d: b5:5a:f2:c3:39:d7:90:cf:83:b4:f3:e7:1c:4b:35: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:83:88:5F:32:27:B3:CA:63:BD:8D:E8:F0:EC:27:AE:8D:39:27:29 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ea:78:7e:40:aa:e6:84:95:7e:fb:f0:27:21:ba:47:ca:a3: bf:50:5a:8e:23:d4:b9:99:27:68:8b:53:bf:27:44:55:32:bf: a3:71:75:9d:d3:b8:52:9e:9d:a8:f8:d4:47:92:a3:f7:b5:8a: 07:83:85:65:af:fb:8d:38:0d:74:fa:ba:e0:fd:b4:56:ea:55: 94:8d:03:86:25:2d:b7:73:89:aa:0d:43:79:25:5c:81:81:1b: eb:d2:28:f6:c2:bf:e2:4f:4f:57:0b:73:b2:ac:a5:41:83:6c: 00:7d:7a:4c:04:fa:89:f1:80:3c:67:1f:d4:86:9e:82:9e:4a: b6:04:fc:2f:6a:2d:fe:26:70:bd:e6:15:f7:64:e4:1f:57:05: d4:a6:7a:87:74:94:ab:fb:29:fb:4f:84:dc:dd:33:e8:0c:f9: 1f:b1:45:b7:04:34:54:4a:1f:19:1a:80:4e:08:dd:e0:0a:8d: 44:35:c6:3e:48:a2:02:c9:db:50:01:c2:d4:a9:cf:19:94:e2: 11:d6:1f:13:e0:31:d9:34:e2:53:e4:53:df:fb:62:dc:09:41: fa:fc:b9:46:ff:ca:98:ef:77:d9:47:7e:c9:de:2c:79:7f:c3: ee:8c:4d:4d:94:4e:06:97:0c:86:74:e3:94:eb:70:13:cd:a3: 02:71:1e:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cmnE/eazAfay5IiLKaS8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjYwNDE3MTgwMTAwWhcNMjYwNDE4MTgwMTAwWjAzMTEwLwYDVQQD EyhlNzgzODg1ZjMyMjdiM2NhNjNiZDhkZThmMGVjMjdhZThkMzkyNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEyYYx84I8szhYM2ZC+paoG+5swD fKKfLVAHVysdQ086OPJE6E4Bp4ptQsDAj0o59RDWMw7U/iRkMbM7mUWhuM6cSMUC tdcoM+QAHsJoXfhVNfgcQ/7gSa+w+UBSHU2WH2dxl1yUlmI0e+SP7sa4T+lLNPk9 KwCIqYCXwco/agpz8kudFrcsbNFBA1pFQqa1eOEFxtC/Ymg8yfHF3bJv+oz3hrV2 L08rr0c+9RmCsA3fZPeZpxYVvpJDbhMmGSQ304eE/of3sCfXlIkDiYfMm52KKVy+ iQ/cr5xPGfThNHIS/vvGPimY6HtdQkNA9Z21WvLDOdeQz4O08+ccSzW3gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeDiF8yJ7PKY72N6PDsJ66NOScpMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOp4fkCq 5oSVfvvwJyG6R8qjv1BajiPUuZknaItTvydEVTK/o3F1ndO4Up6dqPjUR5Kj97WK B4OFZa/7jTgNdPq64P20VupVlI0DhiUtt3OJqg1DeSVcgYEb69Io9sK/4k9PVwtz sqylQYNsAH16TAT6ifGAPGcf1Iaegp5KtgT8L2ot/iZwveYV92TkH1cF1KZ6h3SU q/sp+0+E3N0z6Az5H7FFtwQ0VEofGRqATgjd4AqNRDXGPkiiAsnbUAHC1KnPGZTi EdYfE+Ax2TTiU+RT3/ti3AlB+vy5Rv/KmO932Ud+yd4seX/D7oxNTZROBpcMhnTj lOtwE82jAnEepQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:04:00 2026 by rpki-client