$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: JxfATSNHxkOfIK/6g+4K2HdYG4Tx9B+CTStReZ4JYww= Subject key identifier: F0:A3:8D:8F:1A:74:22:7E:07:0C:3B:7D:4D:3D:22:40:15:D5:4E:4A Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019D98F4679ED6DEC30F4DAFD2B21735DF83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 18F0 Signing time: Fri 17 Apr 2026 01:00:47 +0000 Manifest this update: Fri 17 Apr 2026 01:00:47 +0000 Manifest next update: Sat 18 Apr 2026 01:00:47 +0000 Files and hashes: 1: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: yyZCOhL0w9uBmsdFOnDEXzviaf2PkzZtWHgpG0g4j20=) 2: 6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa (hash: ECXhCTN51hl1ngcmROyprePwXkJAyAbxEBIgymRFGBA=) 3: 9Y15TiSyn2wNGdw4h-rBMbyFaAc.roa (hash: 72P6b2id8MZPAK23i1WaqWGaegThFlPqZ6DtT05Xwkc=) 4: 9qGo67yr4HRrxBkAO69NOfH1xyM.roa (hash: 9kV8qye+hDokGEdQvc6wx6xFhzWb+QDG85qAmFrrRNc=) 5: HBS5CYoNWOXobGPomOlaeFTG4h8.roa (hash: D7vH7TbSVaq4pp/oo4dyUnQisHAJ6z4gW2NLDiuh3AQ=) 6: IHMW0iOLCaPimXteCXKckZiuXok.roa (hash: eKTeqM0561BoLTc+G0Vfml+zBr4iHbl5NUyAYC+RQzM=) 7: TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa (hash: smnw3toc9NIJXiN4piIx54U4f4Mbs+Yue06OIF7Ed2g=) 8: ZAW9hLoDnVp80PJK59uzMqseMQg.roa (hash: zROFGa57szBUE/hPHlcNo31U/nC8cbg/ehhEeCGDUB4=) 9: gWVoZTw_EZmHO5EV5U00eeBw7Ak.roa (hash: FbRJTpkxn4SofZgM7qRP/j4Gbfj9ZjYqwdMhLK/wxnI=) 10: gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa (hash: zRXOYl9PkTzrkMP8UCwOsXf5eAi2L1/FabDUe5aeP6I=) 11: lVjtasqfU-kbankfm4egs--WfDk.roa (hash: ao2QCrX6Wc4z15KwrwoCeRGBCcesNS+OjA60owj+xZ4=) 12: nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa (hash: X8qVQYMo7q02YZkTCY5KKMS/PXISC65xUOcTfDXBI/8=) 13: r9Onf1Z5MTGo6HQvvK-yrmEpNLw.roa (hash: MdZ3nuj2R7EYy2YZK3WtRbRVVeyc+IpvGV7gP3oPGfI=) 14: udGl8isNJxExRSIhiZ2jjvucC5s.roa (hash: 46OQaBoVhzlHfO3MZlMA5GIChgYIIijufkFgTDDBkM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:f4:67:9e:d6:de:c3:0f:4d:af:d2:b2:17:35:df:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Apr 17 01:00:47 2026 GMT Not After : Apr 18 01:00:47 2026 GMT Subject: CN=f0a38d8f1a74227e070c3b7d4d3d224015d54e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:53:ad:ca:bf:d0:67:db:42:df:85:71:1a:d5: 36:00:df:8a:3f:f9:99:55:b8:2b:3a:2b:4b:f8:3f: 17:b9:c0:da:e2:4e:97:c5:c8:01:da:60:47:f1:81: e5:1f:c7:ac:55:ec:5b:60:0d:e4:f3:5e:cb:b0:d6: 58:d8:f5:6e:b0:91:99:ce:3c:d6:81:45:71:77:74: 41:fc:83:5e:1e:26:5a:84:65:79:75:95:7d:73:59: 75:b1:5c:28:93:9d:34:8b:b9:b4:89:d2:c5:00:19: c5:49:72:a5:62:3a:e3:d6:fc:a2:c2:dc:0a:95:43: 0e:db:f1:81:16:cd:0c:02:77:4a:e7:40:d0:d2:34: aa:5d:8a:46:35:0c:07:6c:10:05:b6:7f:e0:eb:8e: 04:68:c6:84:b6:2b:14:34:c0:3e:d4:85:de:5c:c6: 01:20:3e:6d:2a:05:fa:f1:d2:db:df:1a:57:07:99: b6:32:3a:11:7e:4e:34:48:e0:4b:c4:e1:c7:cf:ce: 0d:0a:9d:65:71:dc:bb:c9:2f:4d:7f:79:24:f8:b6: ef:d5:fe:9b:ad:1d:b8:6f:d7:b5:20:a7:15:72:11: 45:09:01:87:b5:cc:4c:ed:04:c0:2c:ee:14:7f:4f: b7:7d:0e:de:be:fb:41:25:86:f3:51:c1:69:94:5e: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A3:8D:8F:1A:74:22:7E:07:0C:3B:7D:4D:3D:22:40:15:D5:4E:4A X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b8:5f:95:41:9d:0d:b9:52:65:1b:46:23:c7:87:16:05:ed: 8c:52:fb:de:fa:f8:cf:c0:d7:06:01:e0:b8:bb:d7:66:5a:b8: a1:0c:05:c3:59:bc:7f:bc:cc:34:4e:17:9b:64:7b:7f:18:8e: 5f:08:29:5a:2e:fe:52:ca:f6:f4:7e:92:f7:78:0b:52:9e:ba: ee:3b:a4:17:c0:a3:b8:72:ba:17:22:43:8f:91:7c:55:1e:c5: e7:77:de:c7:c6:6c:40:fa:68:f8:68:9f:a2:c6:3b:26:cb:52: 02:cb:91:a9:79:21:a1:61:15:4a:f0:de:88:29:0b:12:50:2f: 18:72:f1:d7:ef:73:b6:5c:7a:cc:16:31:12:b5:10:69:f6:2a: 38:8c:df:92:ee:e7:4d:9e:84:36:f0:39:d8:e8:07:4f:69:05: 12:9a:75:55:a9:02:2f:d4:62:d6:15:31:b5:c5:34:77:0e:a9: c3:36:e2:f1:0e:3b:7e:bc:21:b3:2d:15:40:24:17:90:ff:a3: 43:81:02:22:79:e6:0a:05:7e:47:43:c7:82:c6:1e:ee:d4:db: 53:d6:43:19:94:af:66:57:32:bb:57:1e:db:51:b1:a3:97:dd: 78:c2:d0:4f:26:b4:ec:2d:bb:97:ae:5e:29:b8:47:11:14:a8: e4:38:3c:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Y9Gee1t7DD02v0rIXNd+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwNDE3MDEwMDQ3WhcNMjYwNDE4MDEwMDQ3WjAzMTEwLwYDVQQD EyhmMGEzOGQ4ZjFhNzQyMjdlMDcwYzNiN2Q0ZDNkMjI0MDE1ZDU0ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51Otyr/QZ9tC34VxGtU2AN+KP/mZ VbgrOitL+D8XucDa4k6XxcgB2mBH8YHlH8esVexbYA3k817LsNZY2PVusJGZzjzW gUVxd3RB/INeHiZahGV5dZV9c1l1sVwok500i7m0idLFABnFSXKlYjrj1vyiwtwK lUMO2/GBFs0MAndK50DQ0jSqXYpGNQwHbBAFtn/g644EaMaEtisUNMA+1IXeXMYB ID5tKgX68dLb3xpXB5m2MjoRfk40SOBLxOHHz84NCp1lcdy7yS9Nf3kk+Lbv1f6b rR24b9e1IKcVchFFCQGHtcxM7QTALO4Uf0+3fQ7evvtBJYbzUcFplF5T3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCjjY8adCJ+Bww7fU09IkAV1U5KMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabhflUGd DblSZRtGI8eHFgXtjFL73vr4z8DXBgHguLvXZlq4oQwFw1m8f7zMNE4Xm2R7fxiO XwgpWi7+Usr29H6S93gLUp667jukF8CjuHK6FyJDj5F8VR7F53fex8ZsQPpo+Gif osY7JstSAsuRqXkhoWEVSvDeiCkLElAvGHLx1+9ztlx6zBYxErUQafYqOIzfku7n TZ6ENvA52OgHT2kFEpp1VakCL9Ri1hUxtcU0dw6pwzbi8Q47frwhsy0VQCQXkP+j Q4ECInnmCgV+R0PHgsYe7tTbU9ZDGZSvZlcyu1ce21Gxo5fdeMLQTya07C27l65e KbhHERSo5Dg8vw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:54:58 2026 by rpki-client