$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: Qsun1GjKJANUqeiI4LUKSa7obRa8GU3omIazdX3qt6k= Subject key identifier: 78:8B:FD:8E:6C:04:B9:A6:82:1E:4E:76:72:F1:5D:43:8A:08:81:33 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019DA453746A66FE18AC9CD64629E7D258E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 18E5 Signing time: Sun 19 Apr 2026 06:00:25 +0000 Manifest this update: Sun 19 Apr 2026 06:00:25 +0000 Manifest next update: Mon 20 Apr 2026 06:00:25 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: A5PgGRLn4kXJK7rp7MRelJlQCGs.roa (hash: uoHX6U7FvckkMUmhHzgYs1oGVMNEJnR2TmiJTsJFLvY=) 3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 4: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 5: HQZ8h0k5o98AkDATLinCxsRe43I.roa (hash: aSwjxHDuomJbPa6AGVBEyYNaJyQepEqbPTE9fjxbKqY=) 6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: X1CxF8JItm1lLGbWFEPnNSKIyCEYXt8ZvJhT/AxvP2M=) 9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 10: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 11: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 12: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:53:74:6a:66:fe:18:ac:9c:d6:46:29:e7:d2:58:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Apr 19 06:00:25 2026 GMT Not After : Apr 20 06:00:25 2026 GMT Subject: CN=788bfd8e6c04b9a6821e4e7672f15d438a088133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a8:89:6b:00:1d:79:c7:d1:fb:54:b0:13:6b: 30:b1:95:84:12:45:4d:7c:ac:48:de:ea:49:c1:7b: 3b:18:c4:ce:ab:95:74:c7:4c:77:f9:eb:34:d4:b9: 59:1d:44:e1:46:1a:ac:04:d7:c8:23:95:cf:4c:2b: a5:c9:ad:5a:14:a0:a7:92:85:53:e4:6d:d1:eb:ec: a0:7c:98:c5:76:ce:37:aa:d2:90:24:a9:08:16:5e: 63:06:ff:42:0e:36:bd:5d:35:43:29:1e:15:37:8c: 7a:a7:09:33:70:54:c6:69:dd:49:ac:45:14:5a:45: 86:6e:da:26:2a:28:8c:a5:dc:72:e1:6b:b2:b6:71: 68:99:70:ad:04:65:2c:de:a0:82:20:2e:dd:45:c7: 35:7f:13:a7:19:29:47:4d:94:9f:f7:a2:eb:ea:53: cc:95:ff:36:ef:09:cf:c4:da:32:28:dd:50:c5:e7: 2d:86:88:2d:a3:c3:3b:66:f0:1b:57:13:70:78:df: 44:db:a9:97:05:99:9c:84:9e:05:a8:52:72:51:b1: e2:5c:85:79:d1:0d:29:34:1e:1c:92:c6:52:ee:1d: c6:28:a6:3f:b6:53:66:a8:4e:ed:5c:d9:c1:64:a8: e5:f5:1b:75:9b:7d:cb:35:dd:ea:4f:da:ba:2e:68: 51:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8B:FD:8E:6C:04:B9:A6:82:1E:4E:76:72:F1:5D:43:8A:08:81:33 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:01:72:45:b9:a8:c4:fa:b3:c3:50:3a:37:f3:52:65:b7:71: 3f:50:4a:88:89:29:31:1e:ab:5a:7d:73:b1:81:77:50:8d:d1: 01:91:bc:1c:a6:12:30:a6:35:0f:da:cb:1a:8f:84:2c:d6:30: e8:2c:57:07:8a:9e:20:28:4e:3b:4c:ee:78:7e:82:05:cb:fa: 3c:25:90:a4:f7:70:c0:93:91:bc:24:c1:5e:bc:eb:af:61:29: 5e:58:49:2b:8a:dc:c2:97:41:de:ab:98:15:9f:16:51:59:9a: da:95:d7:97:9d:93:eb:8a:68:ec:f1:38:96:de:31:fa:4e:df: 30:ed:a9:29:59:2e:34:8a:9d:b6:f0:47:5e:e4:3e:ad:65:a4: 9b:26:d2:25:95:4a:c4:fb:6a:dd:d7:62:13:20:98:65:53:ca: d2:89:d2:95:2b:59:f5:dc:dc:83:df:81:c3:82:3f:55:25:bc: 80:07:52:43:41:8b:0d:cc:46:58:d9:d4:45:cc:18:52:00:5d: 7b:65:d9:ca:1b:a4:12:ad:71:e5:55:82:b9:03:85:21:7b:8e: 5e:5f:00:dc:60:b7:9e:6c:83:fc:c2:40:06:c5:d8:da:65:5c: 1e:4d:0c:ac:9e:89:63:31:4b:9b:cb:9d:63:d1:24:b0:50:41: 8a:df:31:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kU3RqZv4YrJzWRinn0ljoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwNDE5MDYwMDI1WhcNMjYwNDIwMDYwMDI1WjAzMTEwLwYDVQQD Eyg3ODhiZmQ4ZTZjMDRiOWE2ODIxZTRlNzY3MmYxNWQ0MzhhMDg4MTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aiJawAdecfR+1SwE2swsZWEEkVN fKxI3upJwXs7GMTOq5V0x0x3+es01LlZHUThRhqsBNfII5XPTCulya1aFKCnkoVT 5G3R6+ygfJjFds43qtKQJKkIFl5jBv9CDja9XTVDKR4VN4x6pwkzcFTGad1JrEUU WkWGbtomKiiMpdxy4WuytnFomXCtBGUs3qCCIC7dRcc1fxOnGSlHTZSf96Lr6lPM lf827wnPxNoyKN1Qxecthogto8M7ZvAbVxNweN9E26mXBZmchJ4FqFJyUbHiXIV5 0Q0pNB4cksZS7h3GKKY/tlNmqE7tXNnBZKjl9Rt1m33LNd3qT9q6LmhREQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiL/Y5sBLmmgh5OdnLxXUOKCIEzMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAFyRbmo xPqzw1A6N/NSZbdxP1BKiIkpMR6rWn1zsYF3UI3RAZG8HKYSMKY1D9rLGo+ELNYw 6CxXB4qeIChOO0zueH6CBcv6PCWQpPdwwJORvCTBXrzrr2EpXlhJK4rcwpdB3quY FZ8WUVma2pXXl52T64po7PE4lt4x+k7fMO2pKVkuNIqdtvBHXuQ+rWWkmybSJZVK xPtq3ddiEyCYZVPK0onSlStZ9dzcg9+Bw4I/VSW8gAdSQ0GLDcxGWNnURcwYUgBd e2XZyhukEq1x5VWCuQOFIXuOXl8A3GC3nmyD/MJABsXY2mVcHk0MrJ6JYzFLm8ud Y9EksFBBit8xOg== -----END CERTIFICATE-----Generated at Sun Apr 19 12:58:08 2026 by rpki-client