$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: 75oOOgWnjWbwGOlGarm/IzaDpvga3blwv0ai6B3IBZg= Subject key identifier: 50:23:8A:DB:5A:40:DB:FA:EA:DF:81:90:8D:A9:70:51:2A:6E:DA:47 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019D9AE29BFFA2A86F5BD92814FE1B2DCD00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 18A3 Signing time: Fri 17 Apr 2026 10:00:35 +0000 Manifest this update: Fri 17 Apr 2026 10:00:35 +0000 Manifest next update: Sat 18 Apr 2026 10:00:35 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=) 5: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 6: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 7: XN2j2ZnyCgistBzzXo98ceyqR5E.roa (hash: /uVeuVZywozOmzMeKf0pUlvlMBObR5bHXnc9LBKX9hg=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: OX8gdwXpzvELPTdWo0CHHBpzOJ3XcLdzkMB522n969I=) 9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:e2:9b:ff:a2:a8:6f:5b:d9:28:14:fe:1b:2d:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Apr 17 10:00:35 2026 GMT Not After : Apr 18 10:00:35 2026 GMT Subject: CN=50238adb5a40dbfaeadf81908da970512a6eda47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:8d:00:ef:b3:34:a8:60:f1:91:c0:f4:b2: ac:40:07:26:62:61:cf:e7:e2:3c:ec:ce:0a:b3:ac: 4f:3a:64:9f:ef:16:c9:5b:66:1e:84:19:8b:68:73: 69:02:73:39:8f:5c:92:d6:91:94:dd:e7:ce:3b:28: cd:ff:66:ed:34:51:fc:6c:84:3f:4c:af:c8:17:7e: ab:d5:df:5b:7f:bd:0f:60:73:ba:aa:38:19:90:66: 7a:7a:45:38:0b:05:f5:a3:de:46:27:8a:6b:52:f8: 48:34:3b:b8:ad:e7:cf:29:93:b5:f0:f4:0e:f3:b6: f1:d0:eb:b3:82:00:a4:f9:fb:fc:c9:0f:57:3d:11: 0b:2e:56:77:b1:df:8a:3c:8a:cb:5f:8f:d4:68:04: c0:06:b3:67:30:d7:1c:ea:d0:8e:83:5c:62:54:a0: df:3b:5c:12:f7:6a:1c:5f:84:5a:5f:98:a8:59:80: c8:59:53:62:10:a9:63:7a:52:5d:95:5d:e3:f1:52: fe:9a:25:59:97:23:e9:d7:b4:61:73:94:a5:2e:00: c0:93:de:53:94:86:e6:6e:27:f8:54:45:e2:cc:c1: 96:82:5b:86:b3:50:4a:90:6e:85:f5:bb:67:d7:9e: d0:cc:77:9d:d6:36:cd:2d:a5:4a:2c:a1:1e:b1:7b: dd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:23:8A:DB:5A:40:DB:FA:EA:DF:81:90:8D:A9:70:51:2A:6E:DA:47 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:81:12:cb:9e:84:c1:cf:69:77:66:5d:32:2f:a9:cd:db:07: 1a:12:67:01:ad:39:ca:5e:2c:f2:5e:1a:d6:27:3d:41:15:4f: d3:c3:a8:d8:95:06:21:5c:6d:d5:21:20:32:94:7a:a6:45:4f: 0a:4e:4d:4d:e7:19:e7:bb:e1:15:62:10:ae:b0:ae:2d:b4:b7: da:62:51:a2:11:27:34:66:87:46:da:be:b7:a4:d8:49:af:ff: 06:07:10:01:78:eb:1e:5c:32:88:8d:2b:c4:af:ba:ee:24:48: 33:30:9e:ee:cd:b8:f5:f2:d3:a6:16:cb:10:9d:22:20:d1:0b: 5a:2b:16:f8:c6:a9:db:24:f7:67:26:79:09:fc:c1:8d:72:ed: 7d:34:c9:63:67:e9:53:d9:3d:5d:d8:c7:70:36:47:73:8a:83: b1:71:c6:ea:a6:5f:dc:99:20:1b:ef:fe:9d:29:21:12:af:6e: be:cf:87:bc:7c:ce:c7:5d:43:39:94:c2:16:4e:8c:87:64:6c: fe:e1:46:e7:81:aa:4d:6c:90:9c:4e:52:1a:a5:9f:69:fd:70: 57:f6:7a:d6:03:91:c9:7c:dd:62:e9:26:ba:00:73:92:d0:bb: 26:2e:c6:a8:e5:23:63:7a:66:a4:31:43:8e:f1:78:4d:33:15: f3:b1:e9:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2a4pv/oqhvW9koFP4bLc0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwNDE3MTAwMDM1WhcNMjYwNDE4MTAwMDM1WjAzMTEwLwYDVQQD Eyg1MDIzOGFkYjVhNDBkYmZhZWFkZjgxOTA4ZGE5NzA1MTJhNmVkYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqeNAO+zNKhg8ZHA9LKsQAcmYmHP 5+I87M4Ks6xPOmSf7xbJW2YehBmLaHNpAnM5j1yS1pGU3efOOyjN/2btNFH8bIQ/ TK/IF36r1d9bf70PYHO6qjgZkGZ6ekU4CwX1o95GJ4prUvhINDu4refPKZO18PQO 87bx0OuzggCk+fv8yQ9XPRELLlZ3sd+KPIrLX4/UaATABrNnMNcc6tCOg1xiVKDf O1wS92ocX4RaX5ioWYDIWVNiEKljelJdlV3j8VL+miVZlyPp17Rhc5SlLgDAk95T lIbmbif4VEXizMGWgluGs1BKkG6F9btn157QzHed1jbNLaVKLKEesXvdlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAjittaQNv66t+BkI2pcFEqbtpHMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4ESy56E wc9pd2ZdMi+pzdsHGhJnAa05yl4s8l4a1ic9QRVP08Oo2JUGIVxt1SEgMpR6pkVP Ck5NTecZ57vhFWIQrrCuLbS32mJRohEnNGaHRtq+t6TYSa//BgcQAXjrHlwyiI0r xK+67iRIMzCe7s249fLTphbLEJ0iINELWisW+Map2yT3ZyZ5CfzBjXLtfTTJY2fp U9k9XdjHcDZHc4qDsXHG6qZf3JkgG+/+nSkhEq9uvs+HvHzOx11DOZTCFk6Mh2Rs /uFG54GqTWyQnE5SGqWfaf1wV/Z61gORyXzdYukmugBzktC7Ji7GqOUjY3pmpDFD jvF4TTMV87Hp9w== -----END CERTIFICATE-----Generated at Fri Apr 17 16:21:26 2026 by rpki-client