$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: o3UgQc1ha9t2k5RXBy2C7YTZfOvnp/BrxxXgvdIS6Go= Subject key identifier: 0C:65:1E:71:03:97:19:D8:93:B2:BF:5C:39:55:1F:A2:B5:07:DE:EB Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019D9C9A90BFF9C9F7E2935A3516F8BE4CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 14E4 Signing time: Fri 17 Apr 2026 18:01:08 +0000 Manifest this update: Fri 17 Apr 2026 18:01:08 +0000 Manifest next update: Sat 18 Apr 2026 18:01:08 +0000 Files and hashes: 1: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=) 2: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=) 3: 8rDvMkxptJnltjzzUCN1e7h2mu0.roa (hash: bN6iyJOU8RYfCqW0mfWStueUrIARdx585ED2RX3ioso=) 4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=) 5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=) 6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=) 7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=) 8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=) 9: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=) 10: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=) 11: ggV7rBXwprR59jciPQhDDTZxxmQ.roa (hash: I4MtXY7ClGvNcIjMAoHA2mKMcNbnijfTuvNa/n/j6Xw=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: nAN/Jswpu7GhTRg+rA3VqW3N0fOxvgnstfiipu7c/6Q=) 13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=) 14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:9a:90:bf:f9:c9:f7:e2:93:5a:35:16:f8:be:4c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Apr 17 18:01:08 2026 GMT Not After : Apr 18 18:01:08 2026 GMT Subject: CN=0c651e71039719d893b2bf5c39551fa2b507deeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:34:1e:1f:3a:be:56:8c:4e:25:a8:fe:db: 7f:b7:6c:73:0f:06:34:58:96:c1:81:34:63:fd:1d: 4b:07:22:b7:c9:4f:70:4d:49:33:d1:cb:39:08:3b: 82:f0:2a:8b:f1:55:ca:1c:89:9b:f4:c5:20:c4:31: 53:e0:6a:19:3e:36:31:2a:a1:e9:a1:1f:ea:79:6d: db:2c:f0:5d:b6:1d:47:27:e8:c8:2f:3d:0a:8a:6f: 65:79:5b:92:56:a4:6d:1c:fa:62:09:40:6d:0f:67: cc:cc:ab:d9:06:05:70:85:3f:07:25:ea:c4:f2:84: 65:ce:ea:43:88:a3:f0:c4:2d:2b:06:09:36:80:e2: 29:a8:1f:74:ad:32:3f:fa:22:a1:0e:31:bd:eb:9c: 1d:a5:24:01:d1:43:51:3d:a2:31:28:da:c3:5e:a4: 29:52:72:34:51:5b:d0:7a:33:d7:ab:73:43:89:ac: a3:49:1d:fe:33:1f:41:ca:62:d3:ec:a4:63:b9:c5: 7c:c0:f4:64:94:e4:da:8a:c2:c5:10:8f:05:0f:de: 58:8f:4d:a0:55:b4:19:ef:a7:58:23:7d:14:84:e9: 61:d0:8c:d5:17:ae:70:9e:48:17:c3:56:83:62:9a: 00:e6:14:62:9c:6f:6b:33:fb:16:48:e1:a9:c7:0b: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:65:1E:71:03:97:19:D8:93:B2:BF:5C:39:55:1F:A2:B5:07:DE:EB X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f4:2a:08:1b:a5:59:75:01:54:ed:10:86:38:70:b9:1e:bf: e5:dc:d0:ca:f5:f4:9e:32:a1:b5:8e:cc:6c:b9:cd:7f:a1:6d: e2:53:50:d5:c3:3b:4e:11:a0:3f:39:83:f3:86:ed:c9:af:f0: 7b:fe:9b:65:64:fa:d2:c5:c6:c1:ec:66:38:47:c5:35:91:e6: e8:86:f8:d4:d8:ca:29:2a:30:97:23:46:78:d6:e2:c3:8b:48: b9:84:a9:18:2a:b2:41:6a:2e:48:29:38:a1:7e:9a:a7:e0:7e: ff:5c:a5:2d:e3:79:09:f1:55:96:4c:e0:67:ae:0f:e2:41:f1: 7d:ee:0a:29:bc:6d:7e:82:d3:9b:4b:cc:b9:f0:b3:ce:29:35: f8:af:23:eb:c4:48:5c:b8:11:72:41:78:37:1f:83:c0:dc:b2: df:41:60:fc:8f:55:06:ce:d1:a1:5b:0a:87:a0:a7:27:5e:3e: e7:a9:c5:e4:1f:0f:e4:21:42:a1:63:d8:68:37:72:62:9d:ff: 90:6b:f4:65:c4:bd:18:ae:eb:4e:d1:b8:2b:fd:58:42:60:d4: 61:15:49:03:29:32:5a:77:74:87:6c:c4:43:9d:8f:5a:4d:89: 33:8a:e0:39:4a:dc:8e:3c:3b:77:02:b2:df:5d:8b:01:11:e7: 5b:6c:24:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cmpC/+cn34pNaNRb4vkymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwNDE3MTgwMTA4WhcNMjYwNDE4MTgwMTA4WjAzMTEwLwYDVQQD EygwYzY1MWU3MTAzOTcxOWQ4OTNiMmJmNWMzOTU1MWZhMmI1MDdkZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNo0Hh86vlaMTiWo/tt/t2xzDwY0 WJbBgTRj/R1LByK3yU9wTUkz0cs5CDuC8CqL8VXKHImb9MUgxDFT4GoZPjYxKqHp oR/qeW3bLPBdth1HJ+jILz0Kim9leVuSVqRtHPpiCUBtD2fMzKvZBgVwhT8HJerE 8oRlzupDiKPwxC0rBgk2gOIpqB90rTI/+iKhDjG965wdpSQB0UNRPaIxKNrDXqQp UnI0UVvQejPXq3NDiayjSR3+Mx9BymLT7KRjucV8wPRklOTaisLFEI8FD95Yj02g VbQZ76dYI30UhOlh0IzVF65wnkgXw1aDYpoA5hRinG9rM/sWSOGpxwvH7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxlHnEDlxnYk7K/XDlVH6K1B97rMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPQqCBul WXUBVO0QhjhwuR6/5dzQyvX0njKhtY7MbLnNf6Ft4lNQ1cM7ThGgPzmD84btya/w e/6bZWT60sXGwexmOEfFNZHm6Ib41NjKKSowlyNGeNbiw4tIuYSpGCqyQWouSCk4 oX6ap+B+/1ylLeN5CfFVlkzgZ64P4kHxfe4KKbxtfoLTm0vMufCzzik1+K8j68RI XLgRckF4Nx+DwNyy30Fg/I9VBs7RoVsKh6CnJ14+56nF5B8P5CFCoWPYaDdyYp3/ kGv0ZcS9GK7rTtG4K/1YQmDUYRVJAykyWnd0h2zEQ52PWk2JM4rgOUrcjjw7dwKy 312LARHnW2wkkg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:04:42 2026 by rpki-client