$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: WqUIGJ9JX/rOvTM6ds8ILv2UhlCuBFT7QEGKfJnSRy4= Subject key identifier: C9:F4:37:06:12:7D:D9:9A:18:0E:2E:5D:B8:55:C6:E3:49:25:4F:E5 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019D98BD30F9F4B92372C383653AFB2F410E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 18DF Signing time: Fri 17 Apr 2026 00:00:28 +0000 Manifest this update: Fri 17 Apr 2026 00:00:28 +0000 Manifest next update: Sat 18 Apr 2026 00:00:28 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: A5PgGRLn4kXJK7rp7MRelJlQCGs.roa (hash: uoHX6U7FvckkMUmhHzgYs1oGVMNEJnR2TmiJTsJFLvY=) 3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 4: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 5: HQZ8h0k5o98AkDATLinCxsRe43I.roa (hash: aSwjxHDuomJbPa6AGVBEyYNaJyQepEqbPTE9fjxbKqY=) 6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: WALLykPhwjxyZKFqYp8+gaanY49q08HVtoeGIe06z14=) 9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 10: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 11: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 12: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:30:f9:f4:b9:23:72:c3:83:65:3a:fb:2f:41:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Apr 17 00:00:28 2026 GMT Not After : Apr 18 00:00:28 2026 GMT Subject: CN=c9f43706127dd99a180e2e5db855c6e349254fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:05:34:5a:ae:47:9e:48:26:c6:91:4e:c2: 66:73:02:65:bb:cd:bb:ee:cd:fd:82:8d:de:b0:49: 9e:9c:3a:0c:5c:03:0a:ec:28:6e:f3:df:c6:96:a0: d5:17:dc:bf:d5:a5:b7:83:14:d2:96:67:50:b0:3a: 38:b5:68:03:d5:05:b8:6a:4f:27:22:95:67:5a:80: 6d:ff:0b:9e:c7:8b:db:b4:cf:fc:65:4c:4d:12:77: b0:06:5b:96:e2:e1:ed:f6:55:c8:5e:48:dd:52:b6: 8d:ac:96:83:da:ca:23:82:11:e9:e0:ba:e7:5f:28: 9b:e3:c3:1b:37:40:f8:99:16:2d:dc:d2:0f:ee:c0: 58:fe:b3:ea:94:7d:e9:36:a1:c7:11:9e:9a:6d:58: ef:ba:e8:7e:41:72:66:bd:01:45:aa:d1:8f:85:10: 8d:92:1d:24:70:44:75:f3:62:6f:1e:03:9c:fb:94: e1:60:57:02:79:c5:c1:7a:59:f2:29:e6:35:97:78: c3:31:d1:f2:65:92:66:3b:fc:82:e6:73:49:94:53: 2d:64:cd:32:74:c9:29:bb:ea:0d:b6:ee:a9:1f:60: 68:3d:cb:c0:8d:c4:96:2d:4f:df:db:65:d5:58:1d: 2a:5b:28:8a:41:09:53:0d:55:c6:fd:47:ec:05:82: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F4:37:06:12:7D:D9:9A:18:0E:2E:5D:B8:55:C6:E3:49:25:4F:E5 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:13:c4:ca:62:51:a1:16:5f:43:1a:27:0e:c6:4f:51:68:d6: 5b:5a:d1:a3:a6:76:1f:08:bb:fa:33:24:55:01:da:af:4b:1c: ae:04:86:b5:ca:d7:c8:58:a8:7c:c2:e9:b0:51:b0:fa:97:bf: e3:0e:87:93:c9:d8:2a:58:70:8c:6a:ed:01:56:36:13:2d:0b: 9c:2e:5b:2a:6d:13:f3:01:4a:d2:1e:b5:16:7f:f1:e2:d7:62: 3f:59:0f:ec:68:55:e7:ff:d0:d4:52:2e:6d:fe:e5:62:ac:75: 38:64:cf:62:e4:a7:8c:0e:71:e2:a5:cd:70:b4:92:d7:86:1a: a9:5a:90:25:a4:d7:2c:38:cb:a8:fa:e1:42:cd:c1:af:9f:94: 3c:9a:ba:14:a0:88:50:e8:38:62:61:f1:44:8c:98:92:a3:0e: 7f:f8:9e:58:5b:58:9d:05:52:2a:b1:72:d4:45:21:f4:b7:97: 80:53:5d:ee:0e:9c:a4:fa:35:a5:a5:f0:aa:38:9c:cd:10:06: 30:0d:56:20:5a:42:54:a6:73:b3:12:6e:75:fc:37:bf:73:14: b1:f0:dc:cc:1c:e0:f8:5c:23:36:f6:73:75:38:99:51:d9:bb: 2b:3d:ba:25:ae:3e:23:2c:f5:b4:7a:22:94:60:aa:26:98:ba: ea:62:8d:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YvTD59LkjcsODZTr7L0EOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwNDE3MDAwMDI4WhcNMjYwNDE4MDAwMDI4WjAzMTEwLwYDVQQD EyhjOWY0MzcwNjEyN2RkOTlhMTgwZTJlNWRiODU1YzZlMzQ5MjU0ZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstQFNFquR55IJsaRTsJmcwJlu827 7s39go3esEmenDoMXAMK7Chu89/GlqDVF9y/1aW3gxTSlmdQsDo4tWgD1QW4ak8n IpVnWoBt/wuex4vbtM/8ZUxNEnewBluW4uHt9lXIXkjdUraNrJaD2sojghHp4Lrn Xyib48MbN0D4mRYt3NIP7sBY/rPqlH3pNqHHEZ6abVjvuuh+QXJmvQFFqtGPhRCN kh0kcER182JvHgOc+5ThYFcCecXBelnyKeY1l3jDMdHyZZJmO/yC5nNJlFMtZM0y dMkpu+oNtu6pH2BoPcvAjcSWLU/f22XVWB0qWyiKQQlTDVXG/UfsBYLonwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn0NwYSfdmaGA4uXbhVxuNJJU/lMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBPEymJR oRZfQxonDsZPUWjWW1rRo6Z2Hwi7+jMkVQHar0scrgSGtcrXyFiofMLpsFGw+pe/ 4w6Hk8nYKlhwjGrtAVY2Ey0LnC5bKm0T8wFK0h61Fn/x4tdiP1kP7GhV5//Q1FIu bf7lYqx1OGTPYuSnjA5x4qXNcLSS14YaqVqQJaTXLDjLqPrhQs3Br5+UPJq6FKCI UOg4YmHxRIyYkqMOf/ieWFtYnQVSKrFy1EUh9LeXgFNd7g6cpPo1paXwqjiczRAG MA1WIFpCVKZzsxJudfw3v3MUsfDczBzg+FwjNvZzdTiZUdm7Kz26Ja4+Iyz1tHoi lGCqJpi66mKNQw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:27:32 2026 by rpki-client