$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: YGR9f+YXLobc5L22lQjU2psLOmLDKJj/lpYSrJ2RE/I= Subject key identifier: 48:4C:C0:18:EB:41:AC:10:12:0B:C9:A2:7F:DE:97:CB:FD:5A:A1:FD Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019D9A3F10CF9884DD297EF28DC6CF1E388E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 18D5 Signing time: Fri 17 Apr 2026 07:01:57 +0000 Manifest this update: Fri 17 Apr 2026 07:01:57 +0000 Manifest next update: Sat 18 Apr 2026 07:01:57 +0000 Files and hashes: 1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=) 2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=) 3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=) 4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=) 5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=) 6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=) 7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=) 8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=) 9: _EVIloZkNxmGZyYoucRtLycs2NM.roa (hash: hhnd4/lK0WaT0EX9/P9lh5SOkp9/hmkVwIYPiP2PidU=) 10: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=) 11: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=) 12: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=) 13: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=) 14: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=) 15: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=) 16: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: GZlRdC2f2/b/WWUxcjyy7WkfpThC2HpIg0D7186GVHM=) 17: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=) 18: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=) 19: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3f:10:cf:98:84:dd:29:7e:f2:8d:c6:cf:1e:38:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Apr 17 07:01:57 2026 GMT Not After : Apr 18 07:01:57 2026 GMT Subject: CN=484cc018eb41ac10120bc9a27fde97cbfd5aa1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:ee:0f:dd:dc:09:d8:06:31:9a:40:94:38: 21:76:c2:c0:5c:6a:a6:bc:0f:6e:16:f7:fb:cb:0a: ef:ff:31:86:ce:a1:ae:7b:2c:b0:d9:fd:09:69:be: 67:50:00:2e:9f:33:d6:c0:5c:35:c7:0b:e2:b4:2c: 86:d6:06:24:c4:a8:77:d0:20:e1:26:d5:1b:99:e2: b2:14:7b:7f:98:ff:ab:9e:c6:9b:f2:91:28:80:32: 61:21:14:de:7a:cb:14:af:d9:02:ca:d7:61:06:44: 1d:cf:83:04:37:f8:39:18:56:1b:48:63:94:86:34: 11:c8:db:c1:9a:aa:25:61:ba:d5:29:b8:f7:39:36: c6:19:f5:a0:71:52:c2:cd:52:92:82:a8:56:31:f6: 79:ea:e8:70:27:26:4b:e7:cb:a9:52:58:cf:ce:cc: 18:1f:cf:f3:d2:19:d8:b2:91:bc:7a:d0:74:e8:06: c6:0e:97:35:2f:f5:7d:95:c6:32:07:9b:23:78:e2: 16:e9:39:3e:ee:e6:a2:0b:39:da:1a:26:25:5b:61: 6b:f2:e5:fa:21:41:db:82:a4:df:cd:75:03:08:80: 7c:21:73:a1:58:b1:a5:dc:61:9b:eb:3d:86:e0:09: 6e:c8:58:1d:81:11:4c:65:b8:19:f9:c0:6a:8b:2d: 7b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4C:C0:18:EB:41:AC:10:12:0B:C9:A2:7F:DE:97:CB:FD:5A:A1:FD X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0f:58:4c:9f:16:a8:ea:47:a5:8c:34:d4:2d:fb:f8:81:97: 02:b7:b1:fe:a7:d5:7d:08:e2:f9:80:a1:c8:06:7d:82:68:dd: ec:19:34:be:82:28:12:bd:6a:68:be:52:81:3c:95:ef:45:56: 8e:d4:c6:45:f0:ef:45:d4:38:2a:2c:75:38:57:a6:16:9a:2f: 6d:d2:9c:6f:13:5f:29:71:53:14:cc:dd:b5:6c:db:85:14:82: 9a:b8:75:95:da:e8:29:77:6a:c5:b6:db:f6:dc:bb:12:94:b3: 1f:fb:67:29:e4:bb:40:6f:fa:bb:67:16:18:1e:65:ee:fe:75: 30:6b:92:07:c6:bb:4d:f8:d5:bc:35:13:dd:ed:62:b7:61:92: 39:96:f9:0c:0b:95:5a:8a:50:02:71:64:9a:ad:26:d3:3a:c9: 5c:7f:f1:5a:99:4f:8f:c4:a2:dc:7f:01:55:30:28:72:47:6c: 67:a3:63:4d:15:8e:70:4a:5c:07:1e:6b:3e:87:4a:be:e0:d5: 4c:6b:4d:91:44:81:04:14:c0:9a:73:90:51:10:36:7a:f0:c6: 5f:3c:81:9b:79:d0:95:35:70:08:c2:b1:a6:36:a5:c7:ce:39: 79:56:d6:a0:8f:d4:8b:43:ca:54:e5:1e:46:68:f7:70:40:a2: 67:82:ff:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPxDPmITdKX7yjcbPHjiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwNDE3MDcwMTU3WhcNMjYwNDE4MDcwMTU3WjAzMTEwLwYDVQQD Eyg0ODRjYzAxOGViNDFhYzEwMTIwYmM5YTI3ZmRlOTdjYmZkNWFhMWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpbuD93cCdgGMZpAlDghdsLAXGqm vA9uFvf7ywrv/zGGzqGueyyw2f0Jab5nUAAunzPWwFw1xwvitCyG1gYkxKh30CDh JtUbmeKyFHt/mP+rnsab8pEogDJhIRTeessUr9kCytdhBkQdz4MEN/g5GFYbSGOU hjQRyNvBmqolYbrVKbj3OTbGGfWgcVLCzVKSgqhWMfZ56uhwJyZL58upUljPzswY H8/z0hnYspG8etB06AbGDpc1L/V9lcYyB5sjeOIW6Tk+7uaiCznaGiYlW2Fr8uX6 IUHbgqTfzXUDCIB8IXOhWLGl3GGb6z2G4AluyFgdgRFMZbgZ+cBqiy172QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhMwBjrQawQEgvJon/el8v9WqH9MB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmw9YTJ8W qOpHpYw01C37+IGXArex/qfVfQji+YChyAZ9gmjd7Bk0voIoEr1qaL5SgTyV70VW jtTGRfDvRdQ4Kix1OFemFpovbdKcbxNfKXFTFMzdtWzbhRSCmrh1ldroKXdqxbbb 9ty7EpSzH/tnKeS7QG/6u2cWGB5l7v51MGuSB8a7TfjVvDUT3e1it2GSOZb5DAuV WopQAnFkmq0m0zrJXH/xWplPj8Si3H8BVTAockdsZ6NjTRWOcEpcBx5rPodKvuDV TGtNkUSBBBTAmnOQURA2evDGXzyBm3nQlTVwCMKxpjalx845eVbWoI/Ui0PKVOUe Rmj3cECiZ4L/Tw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:57:05 2026 by rpki-client