$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: 5ATt2CaR6arpa12JzZ0pCxUavUCFb9cAsMo95whP+WU= Subject key identifier: 53:2C:29:02:24:B6:E2:AF:68:ED:EF:A0:86:A4:0A:70:E0:AA:40:2D Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019DA48ABEDB4B57B7B8637D76C25B8807B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0C20 Signing time: Sun 19 Apr 2026 07:00:49 +0000 Manifest this update: Sun 19 Apr 2026 07:00:49 +0000 Manifest next update: Mon 20 Apr 2026 07:00:49 +0000 Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=) 2: 6WWr83TSCDVC54Q6T3lJdNTzhec.roa (hash: bqOXRmyjRmssTC0gEpcTMmCXeTubysghN9/RhsWfZ2I=) 3: 8d1TSvhqd070e1gxYQ3MnczO_xc.roa (hash: /b+G6xqm7avkCzyKrxmL+NHi0UtXKICGZqK/1lGYRPA=) 4: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: X9JzTa+U6t1DMgxne4C0VFp4cMDPBXMXeSmg7+15jv4=) 5: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=) 6: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=) 7: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=) 8: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=) 9: Xb74_mxC58qckaHte1VFV4EbES8.roa (hash: bHLl4jzDn9SqUhje+ZibMWhomIBMoABBlLHUs8yypwk=) 10: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=) 11: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=) 12: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=) 13: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=) 14: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=) 15: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=) 16: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=) 17: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:8a:be:db:4b:57:b7:b8:63:7d:76:c2:5b:88:07:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Apr 19 07:00:49 2026 GMT Not After : Apr 20 07:00:49 2026 GMT Subject: CN=532c290224b6e2af68edefa086a40a70e0aa402d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:d4:af:bf:3d:e2:60:09:1a:53:7b:5b:6a: 8f:0f:8b:76:8d:4c:b3:1d:8e:d5:50:86:be:e8:92: ec:d6:c6:d8:d8:e5:2d:c3:59:b2:1e:a5:de:5d:5f: 59:d5:37:95:c4:0f:36:56:cc:09:cd:85:12:66:47: f3:56:64:55:b6:a8:fb:c3:18:db:d7:04:d5:66:6b: 71:1a:e0:b5:7e:b0:23:be:9d:03:bc:9f:fe:ab:ae: 7e:75:68:4f:fb:76:51:8a:c2:19:35:e0:64:01:93: 59:be:77:a3:13:3c:f9:1a:9e:6e:fc:49:a9:9a:46: 2f:c0:9f:ac:59:e8:e1:da:21:19:59:cd:d6:04:a2: e3:01:d3:59:5f:f4:85:56:ad:3b:f6:59:d8:80:7c: 24:06:d4:e5:75:5d:b1:49:65:aa:c1:70:b5:57:4b: 54:93:0c:93:d7:e7:0b:ac:f9:f2:fd:c8:55:cb:31: ed:68:3b:4b:ef:b7:44:6a:00:62:6a:9f:ac:d0:2d: 3a:17:db:5b:eb:60:42:32:29:04:7b:28:62:17:33: c4:51:b5:66:83:a1:20:08:ad:44:fb:93:10:c6:99: a4:bf:b4:f5:84:ee:a1:01:dd:d0:fa:d9:24:38:4a: f9:11:b1:17:1a:a0:3b:0f:8b:50:ed:0c:91:86:ad: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2C:29:02:24:B6:E2:AF:68:ED:EF:A0:86:A4:0A:70:E0:AA:40:2D X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:22:66:a7:89:34:08:b6:3d:c4:c3:37:fc:b8:a6:0e:8e:11: 9e:36:71:8c:02:e9:55:6b:22:3d:a6:aa:73:d8:ab:28:60:d1: f7:12:35:c1:7d:88:fc:12:97:e3:e7:da:4f:6a:2e:84:72:54: 04:c2:97:65:68:ce:6c:12:34:b2:23:8f:18:c1:d4:57:33:be: 8b:87:2f:01:f5:f3:6a:51:91:49:9f:3d:fc:c0:63:b4:e2:4d: 8a:ec:3a:fd:ad:d7:9d:82:18:91:bf:f5:a7:2b:39:e3:bf:8b: 2b:26:0b:1b:e6:86:64:47:01:6a:4c:ef:9e:63:a0:ce:4d:c2: 9b:db:e0:4b:ee:67:97:d4:14:05:ac:99:c9:8b:22:67:ed:cb: 56:24:41:21:94:45:2c:5a:fc:d2:69:2b:a7:d1:55:43:58:12: 40:67:44:f2:2d:3a:26:fe:69:0e:1c:2d:cc:5c:d8:50:86:c2: fe:09:03:c5:37:08:f2:ae:4a:ba:44:09:ad:b8:2d:38:73:e9: 6d:75:f2:1c:c9:bd:c7:bd:d7:c5:21:b0:f4:6b:c6:90:eb:33: ee:fc:c0:39:38:f1:f7:60:3c:91:89:52:64:f5:40:5b:75:01: ed:63:33:a0:ab:11:6d:2a:84:a9:05:a3:c5:e8:0b:7c:22:96: 30:7a:a0:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kir7bS1e3uGN9dsJbiAe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwNDE5MDcwMDQ5WhcNMjYwNDIwMDcwMDQ5WjAzMTEwLwYDVQQD Eyg1MzJjMjkwMjI0YjZlMmFmNjhlZGVmYTA4NmE0MGE3MGUwYWE0MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquzUr7894mAJGlN7W2qPD4t2jUyz HY7VUIa+6JLs1sbY2OUtw1myHqXeXV9Z1TeVxA82VswJzYUSZkfzVmRVtqj7wxjb 1wTVZmtxGuC1frAjvp0DvJ/+q65+dWhP+3ZRisIZNeBkAZNZvnejEzz5Gp5u/Emp mkYvwJ+sWejh2iEZWc3WBKLjAdNZX/SFVq079lnYgHwkBtTldV2xSWWqwXC1V0tU kwyT1+cLrPny/chVyzHtaDtL77dEagBiap+s0C06F9tb62BCMikEeyhiFzPEUbVm g6EgCK1E+5MQxpmkv7T1hO6hAd3Q+tkkOEr5EbEXGqA7D4tQ7QyRhq2A5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMsKQIktuKvaO3voIakCnDgqkAtMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiJmp4k0 CLY9xMM3/LimDo4RnjZxjALpVWsiPaaqc9irKGDR9xI1wX2I/BKX4+faT2ouhHJU BMKXZWjObBI0siOPGMHUVzO+i4cvAfXzalGRSZ89/MBjtOJNiuw6/a3XnYIYkb/1 pys547+LKyYLG+aGZEcBakzvnmOgzk3Cm9vgS+5nl9QUBayZyYsiZ+3LViRBIZRF LFr80mkrp9FVQ1gSQGdE8i06Jv5pDhwtzFzYUIbC/gkDxTcI8q5KukQJrbgtOHPp bXXyHMm9x73XxSGw9GvGkOsz7vzAOTjx92A8kYlSZPVAW3UB7WMzoKsRbSqEqQWj xegLfCKWMHqg9A== -----END CERTIFICATE-----Generated at Sun Apr 19 11:05:24 2026 by rpki-client