$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft File: E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft (raw, json) Hash identifier: A/1v/sU3rHmmVgveVKtqHPpS6CVYSVNdI3qPuyAEqXk= Subject key identifier: 54:36:16:D6:8C:A3:29:9F:1E:37:5C:A6:5A:B4:CD:85:7D:FB:7C:B8 Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae Certificate serial: 019D9AABEC5B73C4AC730A993F54E60D7153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft Manifest number: 8D Signing time: Fri 17 Apr 2026 09:00:51 +0000 Manifest this update: Fri 17 Apr 2026 09:00:51 +0000 Manifest next update: Sat 18 Apr 2026 09:00:51 +0000 Files and hashes: 1: CYSDTEbN7HCPv6WiTf4vl9sTrPY.roa (hash: z82DlMwvfURdZOYsNEnqd/DqjQsx8SUcftkxrBVOKkI=) 2: DuR8R9YJWEDaCvnw-8235RrAPAI.roa (hash: nwr1wP+HSbTaiN0zlgVNEhTYrOWHjDVW/mSXRxlqdg0=) 3: E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl (hash: OUf35z+9e96XCjp3Cnc7Hqae6Zn07xGuGtyeQVMNYpo=) 4: Gx_-pKDS4W4D41qyLJU2jBKgxHE.asa (hash: GPJjuHl/wOxygBr8M9LdkRIbbAaa1Ab0/4/w207xH9g=) 5: HVtjpFrYsNMiZMANtbtwZb7tXTA.roa (hash: RT0/NHuxEn3/LChxeNjl7pnDqmmNjeuWdurgtBY/1ac=) 6: JjobvDHzB_RdGlQHuakDY7g6qUc.roa (hash: lMc17XsqpF3q+RuSqmQMroyA9fOiD+xrXB77wQY0+oY=) 7: KoAxChCFkAeIK98qjbf3bksCgHg.roa (hash: GFujlbeBcjaBQBdj6uHIkxK5RA2RyoYqfL9mlDRfy0E=) 8: Nwdo9pCrD81ywh_gJmPjPhdaStc.roa (hash: CByN02Aqb3g+j+Q+mQ1Lee+5OIhmSlvoV3blLVBIyuw=) 9: Pjr8P4WxPjNWQYpDxrZZw8gQcac.roa (hash: hnkHYyW4iqL/9EC+ffrxQuiBvp6Sspix+g4e3XwjMN0=) 10: TMGy79dW2pXkye7BEHy8CMyor_w.roa (hash: 1GLCODVONP48lg8Ky3uS0bIOpPD9LaSttQUDyZyBj78=) 11: UnSYaDgDlq6mma-qSvxlxf3f7cY.roa (hash: Vq/fmGi7ZxgEu6+2GPpPORkHD4V173NnGLUxV5LVIwU=) 12: X9uVty-Z6ODzhaNGS5l1xq5pPVw.roa (hash: OOv3o2LHWlvIdA+Zgu9PaIEfBk4ChhYVmLlz2Cwp33o=) 13: _d_dQloK01ZkSLtux-TTKEsYrEE.asa (hash: sspGTnJbSKKU9rh9o/EyW1U+z5UyGnPtDAK4MNHo/vE=) 14: hZr8-GHSaT1LVC0d0SUnsdKNWgk.roa (hash: wG/J0iawhu+Kl1JUrzlumoLnQM5wpIB/0XILiot9T/0=) 15: jull1G7Mi3Uby_3uVJ9HiKyIuUU.asa (hash: iGNOsfSO5/O27KwrR9Udt5xqXbBD1CVar7La49ACaPU=) 16: mvsrCDC-NqbWrnDx8KIZT31_F9w.roa (hash: 6La2GkWDdDzTNk/r06zzIsY5pdXU8koA2+wcTUWWsEc=) 17: sP9A4cnylfqxWlDpkBAm0CIqBFU.roa (hash: pWmUgGcf93vr+1FE5Mpw2z4+mxojC+Zrtg39SIpckEs=) 18: sRwrUFPu8IufvUSdc5VMbpkKMcw.roa (hash: lN69V7XtAFJGqTEtBBnFGAJOekVEyr0Idgtc+5393lw=) 19: v0ktEALprjuYyYztKF7oiuux4Yc.roa (hash: uoK2ToELcvQ/V62kgkj3wD/DyJ0aXYt2dIxjN0uwM8E=) 20: yNImWxuyQjHzmmv-3_EoOXHf-CU.roa (hash: +omRj5AvhzVWWvcblTxHnl95I2HJgpEVlK0ldmd1MWY=) 21: yY8I4l0MBr9vnTlmQUYn6NoYBgM.roa (hash: o+wuVfWOWZsZTQMjwMDsqTstb94f+lmkvMjkI7KxcD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:ab:ec:5b:73:c4:ac:73:0a:99:3f:54:e6:0d:71:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae Validity Not Before: Apr 17 09:00:51 2026 GMT Not After : Apr 18 09:00:51 2026 GMT Subject: CN=543616d68ca3299f1e375ca65ab4cd857dfb7cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8b:d8:ee:08:3c:ec:e5:a1:71:22:cf:9a:3c: f6:63:08:2a:d0:80:5a:f5:c4:21:bd:72:b7:53:90: 64:75:f9:70:0f:ff:bf:96:15:97:1c:82:39:e4:c7: bb:41:ff:09:45:c1:35:d1:9a:20:1a:2b:57:d1:9a: 53:dd:92:d0:3f:7a:ed:20:56:db:ad:6c:fe:57:d5: cb:ee:b5:b7:50:d2:90:ed:65:d6:24:85:f4:40:33: 1a:87:5b:18:ee:70:cd:77:1f:ee:e0:0f:13:43:d3: 2a:42:50:6d:c7:39:54:28:1e:f3:92:fe:15:75:8a: 06:80:6d:09:15:93:f0:48:a8:ec:a4:72:06:32:1c: d7:52:35:0c:64:c6:51:2c:8b:a7:c7:96:c0:26:ac: b0:72:87:5c:28:02:ba:c2:73:11:1d:b6:5a:b7:ce: 9a:0e:7f:14:10:50:fc:da:3a:8d:72:1c:42:09:ec: fe:69:9c:72:98:46:25:35:d4:9c:e4:0a:dc:53:fd: 27:20:fb:80:01:ce:59:ac:16:c5:a4:ec:2c:5f:65: 64:37:e4:8e:ce:3b:14:5c:91:89:77:2f:c4:57:14: a9:1b:5c:10:16:f5:aa:a7:d0:c3:34:3b:c5:dd:8d: bf:db:8c:98:7f:f8:66:c1:cf:a7:ef:56:b0:54:3a: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:36:16:D6:8C:A3:29:9F:1E:37:5C:A6:5A:B4:CD:85:7D:FB:7C:B8 X509v3 Authority Key Identifier: keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:3b:54:2c:83:72:53:39:ae:d3:89:20:e1:3d:49:fe:13:aa: f9:67:97:40:24:86:e9:77:bb:c3:20:ac:98:9e:ab:4e:cb:3d: 06:a5:6d:12:66:49:5f:29:28:58:b9:de:6f:4b:0f:0a:22:8b: 2f:19:b7:c5:04:3c:40:57:4e:fa:42:2e:b9:1d:74:c4:b4:44: d1:3e:a5:24:10:b9:b1:5a:2d:61:b0:c6:03:76:b9:11:f7:73: f6:bf:2a:d6:b5:85:a0:c2:24:41:e6:94:15:1c:10:d6:b1:46: 06:d2:32:ce:cd:99:76:30:7e:b5:7d:71:16:db:03:31:a7:5b: 98:9f:ad:59:b0:10:54:3f:bc:17:a1:9c:b8:d1:52:99:09:36: 56:19:67:01:6e:34:78:bd:da:e3:03:31:3d:ed:41:00:c8:e0: 85:fe:d3:36:21:b6:c9:bc:bc:1f:f1:aa:2e:55:74:b8:e8:fe: 2c:62:da:00:ae:44:59:e2:9f:0b:4f:71:85:60:65:36:73:f2: 44:21:cf:32:c2:6e:51:23:9a:f3:1a:7e:bb:80:41:62:7f:d6: 18:73:7d:e0:ab:59:df:9e:5e:e0:5c:54:8a:66:fd:de:c7:b8: 27:5b:55:df:dc:25:42:fc:df:0b:e5:17:01:ed:a7:9a:5e:ea: 46:af:d6:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aq+xbc8SscwqZP1TmDXFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2U1NzA3NDQ0YTE2YzY4ZTFhMWM1MmFjNDkwOWQwYmRj YTYyYWUwHhcNMjYwNDE3MDkwMDUxWhcNMjYwNDE4MDkwMDUxWjAzMTEwLwYDVQQD Eyg1NDM2MTZkNjhjYTMyOTlmMWUzNzVjYTY1YWI0Y2Q4NTdkZmI3Y2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIvY7gg87OWhcSLPmjz2Ywgq0IBa 9cQhvXK3U5BkdflwD/+/lhWXHII55Me7Qf8JRcE10ZogGitX0ZpT3ZLQP3rtIFbb rWz+V9XL7rW3UNKQ7WXWJIX0QDMah1sY7nDNdx/u4A8TQ9MqQlBtxzlUKB7zkv4V dYoGgG0JFZPwSKjspHIGMhzXUjUMZMZRLIunx5bAJqywcodcKAK6wnMRHbZat86a Dn8UEFD82jqNchxCCez+aZxymEYlNdSc5ArcU/0nIPuAAc5ZrBbFpOwsX2VkN+SO zjsUXJGJdy/EVxSpG1wQFvWqp9DDNDvF3Y2/24yYf/hmwc+n71awVDq+3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQ2FtaMoymfHjdcplq0zYV9+3y4MB8GA1UdIwQY MBaAFBN+VwdEShbGjhocUqxJCdC9ymKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYt YzBkMjA3YzAyZDI3LzEvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYtYzBkMjA3YzAyZDI3 LzEvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDtULINy Uzmu04kg4T1J/hOq+WeXQCSG6Xe7wyCsmJ6rTss9BqVtEmZJXykoWLneb0sPCiKL Lxm3xQQ8QFdO+kIuuR10xLRE0T6lJBC5sVotYbDGA3a5Efdz9r8q1rWFoMIkQeaU FRwQ1rFGBtIyzs2ZdjB+tX1xFtsDMadbmJ+tWbAQVD+8F6GcuNFSmQk2VhlnAW40 eL3a4wMxPe1BAMjghf7TNiG2yby8H/GqLlV0uOj+LGLaAK5EWeKfC09xhWBlNnPy RCHPMsJuUSOa8xp+u4BBYn/WGHN94KtZ355e4FxUimb93se4J1tV39wlQvzfC+UX Ae2nml7qRq/WHg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:34:33 2026 by rpki-client