$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: K1TwivwsVqgZLUR4Y5GO4+MqP5Pw91V+VOaxNWhUtPg= Subject key identifier: 1B:18:45:EE:C6:5F:F0:A7:F3:D5:7D:86:56:EB:C5:1E:B5:FD:9C:60 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019D9A3E2A0E23B408F0C742D1F650AE7419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 18C8 Signing time: Fri 17 Apr 2026 07:00:58 +0000 Manifest this update: Fri 17 Apr 2026 07:00:58 +0000 Manifest next update: Sat 18 Apr 2026 07:00:58 +0000 Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: L8nAQlosF+tql6ucd930SrJh4qCyvdLFx7heH+biuag=) 3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3e:2a:0e:23:b4:08:f0:c7:42:d1:f6:50:ae:74:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Apr 17 07:00:58 2026 GMT Not After : Apr 18 07:00:58 2026 GMT Subject: CN=1b1845eec65ff0a7f3d57d8656ebc51eb5fd9c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:d9:7e:cb:46:e4:3b:a6:e0:90:db:95:c3: f0:24:43:aa:3a:8b:8f:e7:69:c8:bc:3a:fa:ac:46: 84:6a:88:2e:09:7e:7d:88:b3:35:c4:1b:5a:4a:d1: 31:7b:b0:92:ce:74:20:8f:aa:76:34:ab:4c:60:4b: a4:97:06:e9:a1:1e:dd:0a:5c:9f:ef:db:71:1c:43: 94:87:a5:79:92:90:c5:e2:50:55:f7:b1:f1:d1:31: 0e:4e:c9:47:b4:ab:13:87:7d:de:14:1e:4f:9e:56: 1c:c4:c4:4b:de:30:44:0e:73:9f:ac:79:3e:d8:7b: 66:b0:98:85:1e:e0:14:2c:8a:77:1c:de:0b:a5:2f: 97:8b:e5:1b:92:a8:77:78:70:c9:ca:1e:bb:f2:59: a3:4e:32:c1:3c:86:4d:1b:fb:dc:32:11:d5:d1:02: 75:21:74:76:e1:c3:de:81:d6:a0:21:74:14:e4:50: 63:ea:b2:2b:46:a3:8a:3c:41:87:36:6c:b7:e8:c6: 23:f1:23:37:73:74:a2:05:63:4c:db:4a:e8:d9:0c: bd:13:fa:8b:60:ea:d0:41:25:1c:51:b8:bc:1c:4b: bf:92:0e:b4:dd:c2:83:75:5b:70:52:a8:1f:44:e6: 17:be:22:87:dc:19:7d:e3:ef:5c:25:f2:d2:33:fb: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:18:45:EE:C6:5F:F0:A7:F3:D5:7D:86:56:EB:C5:1E:B5:FD:9C:60 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:56:48:b6:8d:8e:40:e4:79:b4:85:4e:08:02:9d:83:8a:89: 95:17:de:12:c6:fc:ff:07:39:42:ac:0b:0a:d9:23:05:32:f6: 16:46:cb:c5:63:9e:8d:9f:5e:dd:c4:83:d1:dd:01:5d:df:82: 59:1e:2d:1a:f8:9f:6a:8c:23:e8:8e:25:ba:e9:d6:be:7a:75: a4:4c:d8:36:82:d4:44:89:75:8f:84:bf:a9:78:bb:dd:b6:80: 76:8a:6b:70:9a:1b:c2:aa:61:f0:9a:e8:7d:1b:6e:ea:7c:02: 46:38:af:0c:90:cd:a0:50:c0:2d:10:2a:5d:79:a4:11:93:84: cd:3a:e6:69:1b:ea:2f:95:a3:6d:3d:3b:2e:cd:7d:a7:30:a1: a1:81:c0:e0:8d:e8:70:be:9e:0e:c0:ef:7a:7c:c2:ac:8a:4e: 73:d7:20:67:7a:f9:0d:ff:2b:f9:c0:e7:8a:a4:97:b6:d0:55: 1d:e0:30:b1:2e:53:1b:7d:21:69:7b:0c:40:91:1b:db:e5:d5: f5:24:88:90:d2:17:8a:e3:e7:c2:5e:cc:9d:db:80:b1:18:87: 96:3d:98:1f:57:fb:e3:46:62:20:17:e4:18:24:a9:45:53:fd: 04:07:34:96:ff:4d:ae:d2:64:80:f9:76:92:8c:04:85:94:2c: 60:c3:f3:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPioOI7QI8MdC0fZQrnQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwNDE3MDcwMDU4WhcNMjYwNDE4MDcwMDU4WjAzMTEwLwYDVQQD EygxYjE4NDVlZWM2NWZmMGE3ZjNkNTdkODY1NmViYzUxZWI1ZmQ5YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosLZfstG5Dum4JDblcPwJEOqOouP 52nIvDr6rEaEaoguCX59iLM1xBtaStExe7CSznQgj6p2NKtMYEuklwbpoR7dClyf 79txHEOUh6V5kpDF4lBV97Hx0TEOTslHtKsTh33eFB5PnlYcxMRL3jBEDnOfrHk+ 2HtmsJiFHuAULIp3HN4LpS+Xi+Ubkqh3eHDJyh678lmjTjLBPIZNG/vcMhHV0QJ1 IXR24cPegdagIXQU5FBj6rIrRqOKPEGHNmy36MYj8SM3c3SiBWNM20ro2Qy9E/qL YOrQQSUcUbi8HEu/kg603cKDdVtwUqgfROYXviKH3Bl94+9cJfLSM/uvbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsYRe7GX/Cn89V9hlbrxR61/ZxgMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFZIto2O QOR5tIVOCAKdg4qJlRfeEsb8/wc5QqwLCtkjBTL2FkbLxWOejZ9e3cSD0d0BXd+C WR4tGvifaowj6I4luunWvnp1pEzYNoLURIl1j4S/qXi73baAdoprcJobwqph8Jro fRtu6nwCRjivDJDNoFDALRAqXXmkEZOEzTrmaRvqL5WjbT07Ls19pzChoYHA4I3o cL6eDsDvenzCrIpOc9cgZ3r5Df8r+cDniqSXttBVHeAwsS5TG30haXsMQJEb2+XV 9SSIkNIXiuPnwl7MnduAsRiHlj2YH1f740ZiIBfkGCSpRVP9BAc0lv9NrtJkgPl2 kowEhZQsYMPzGA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:55:11 2026 by rpki-client