$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: nGJp1SEd6tzHz8A6M0XBHI3pvko9CzAuiIaGGTh9aCE= Subject key identifier: 36:F7:5E:2E:BD:7B:38:7E:47:AF:A9:F1:6F:00:D2:D8:18:81:68:50 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019D9AABF64BEBAF55FB86FE4FC0F00A8EC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 168C Signing time: Fri 17 Apr 2026 09:00:54 +0000 Manifest this update: Fri 17 Apr 2026 09:00:54 +0000 Manifest next update: Sat 18 Apr 2026 09:00:54 +0000 Files and hashes: 1: 3U7B-AnDLcxVr4hQgcRtH3bY-Mc.roa (hash: 3EM7kaqylIIwfXdPOEw0QjuIVj1MmMgs2rs+igLT96s=) 2: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (hash: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk=) 3: Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (hash: S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=) 4: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (hash: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k=) 5: MAC77AGiw2eaAoPXZSbuYQ5o9Cc.roa (hash: ghyy8oG2hGKa4y9DRVajZ2XWsgYoOvFgJh6c1yjrEXg=) 6: NanNAKKpriw1xLHpXZYYWO89_ic.roa (hash: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk=) 7: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (hash: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM=) 8: Wvbb_a2COrZy8u2YHT4IAcPCo7A.roa (hash: JCvZpNcLMyYDQVI9nqJFb7h8bZSYYqo2EDX3T4my9ww=) 9: _d125rYs_YgWJE2199BRmZF843k.roa (hash: m5skVkixBC7cNTKqYmRl5Rw3Fyg0ZkEkKEj4MY2KXTY=) 10: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (hash: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE=) 11: jLQvt7xt7c45_vSreDahi9DVpRY.roa (hash: ehpV8kVezAA0EZ6tWKcBeH2QxQBoWNRqgByIZ4i/lv8=) 12: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: ZD7uZ55mub3t78d+V8EYSH+UTaQzk3WWvajcXTPnj+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:ab:f6:4b:eb:af:55:fb:86:fe:4f:c0:f0:0a:8e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Apr 17 09:00:54 2026 GMT Not After : Apr 18 09:00:54 2026 GMT Subject: CN=36f75e2ebd7b387e47afa9f16f00d2d818816850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:f6:1d:56:cc:bc:df:ed:d1:ce:bd:c1:fc: e4:23:e5:0f:70:01:10:6b:b6:04:d1:32:9f:ac:b6: da:64:fd:46:f1:9c:f4:bf:06:58:04:ff:df:a8:09: 79:c8:ed:1f:69:28:e2:54:3a:74:de:b3:d6:3e:fc: 81:c9:00:38:30:c5:d2:d0:65:30:63:d3:a1:21:2e: f2:51:19:9b:45:54:0f:e7:b6:a0:b9:76:4a:da:91: 63:45:88:59:8b:f4:59:46:82:64:d9:d9:ab:bc:12: 03:00:e7:8b:ff:7a:17:05:81:6d:07:75:9a:fd:3e: d5:20:24:fa:a1:c0:0b:81:bc:e3:17:0e:b6:d5:97: 41:5c:3f:6a:89:ad:5c:62:48:66:27:90:57:08:9c: 23:65:db:5f:61:86:25:5c:1b:9e:28:31:37:c1:f5: a9:36:19:a0:bc:eb:4c:52:28:3d:72:2f:bf:08:04: 23:cd:f7:f3:e5:c9:88:23:e6:2f:4f:c6:1f:b1:01: 4d:5c:53:61:d3:81:66:b1:c3:b4:3f:b1:4d:ef:71: f8:94:15:0c:09:f2:30:e1:05:56:b1:01:65:b7:a6: c8:0a:65:ab:fe:1d:0e:f7:ec:09:80:f0:f3:82:a5: ef:54:b0:4a:96:2e:bc:db:ce:ef:a1:8c:12:5f:cd: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F7:5E:2E:BD:7B:38:7E:47:AF:A9:F1:6F:00:D2:D8:18:81:68:50 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:fa:14:57:97:d6:5a:02:95:3d:a1:72:00:78:b6:71:5d:98: 42:37:c7:5f:0d:90:f8:a3:c8:a9:20:c0:c3:c7:67:d6:6c:79: a3:af:ba:aa:c2:fd:f7:8e:85:b3:a5:59:f1:73:6e:7e:e7:ba: af:8e:7f:68:3e:5e:bb:64:7f:49:3d:67:75:dc:fa:ee:d6:54: d3:72:51:5d:d1:65:b1:39:cb:fb:49:1f:53:59:4e:c0:94:c2: 17:84:34:91:8c:aa:2b:aa:65:87:ec:72:f1:c2:6b:0e:e1:8f: 64:e3:6e:ef:25:62:c1:dc:35:cf:7e:27:cd:e3:53:97:e4:26: ff:e0:1e:04:77:38:69:4a:55:2f:76:de:09:61:44:67:5d:b0: 26:02:98:f7:ab:ad:7f:9f:0b:d4:09:fd:47:df:d6:65:25:ba: 1b:e4:0d:7a:4c:d3:ca:cb:a2:1f:a1:25:d3:ee:43:56:28:e2: dc:93:a6:e6:f6:b8:3c:b6:a9:1d:e5:6d:a8:03:5f:d5:1d:91: 43:87:b5:20:be:01:43:f3:15:b7:3f:18:a0:7e:f3:95:81:80: af:ba:23:57:49:56:b1:05:2c:26:49:34:d7:3d:7c:78:8a:25: 72:24:68:28:22:95:5c:b4:9c:16:b0:34:94:d3:43:3f:81:db: 47:bd:a7:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aq/ZL669V+4b+T8DwCo7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwNDE3MDkwMDU0WhcNMjYwNDE4MDkwMDU0WjAzMTEwLwYDVQQD EygzNmY3NWUyZWJkN2IzODdlNDdhZmE5ZjE2ZjAwZDJkODE4ODE2ODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqv2HVbMvN/t0c69wfzkI+UPcAEQ a7YE0TKfrLbaZP1G8Zz0vwZYBP/fqAl5yO0faSjiVDp03rPWPvyByQA4MMXS0GUw Y9OhIS7yURmbRVQP57aguXZK2pFjRYhZi/RZRoJk2dmrvBIDAOeL/3oXBYFtB3Wa /T7VICT6ocALgbzjFw621ZdBXD9qia1cYkhmJ5BXCJwjZdtfYYYlXBueKDE3wfWp NhmgvOtMUig9ci+/CAQjzffz5cmII+YvT8YfsQFNXFNh04FmscO0P7FN73H4lBUM CfIw4QVWsQFlt6bICmWr/h0O9+wJgPDzgqXvVLBKli68287voYwSX82nYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb3Xi69ezh+R6+p8W8A0tgYgWhQMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfoUV5fW WgKVPaFyAHi2cV2YQjfHXw2Q+KPIqSDAw8dn1mx5o6+6qsL9946Fs6VZ8XNufue6 r45/aD5eu2R/ST1nddz67tZU03JRXdFlsTnL+0kfU1lOwJTCF4Q0kYyqK6plh+xy 8cJrDuGPZONu7yViwdw1z34nzeNTl+Qm/+AeBHc4aUpVL3beCWFEZ12wJgKY96ut f58L1An9R9/WZSW6G+QNekzTysuiH6El0+5DViji3JOm5va4PLapHeVtqANf1R2R Q4e1IL4BQ/MVtz8YoH7zlYGAr7ojV0lWsQUsJkk01z18eIolciRoKCKVXLScFrA0 lNNDP4HbR72nkQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:39:29 2026 by rpki-client