$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: U+f+ehlAyW40XZABjHxpkhB3QKnCDiMphFikl9n04VE= Subject key identifier: C8:2C:B6:68:E6:86:2D:72:49:2A:BB:7D:E7:BA:B4:F2:9C:71:FC:E8 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019D992B64398F2DCD51D458BF2A508E0734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 18D3 Signing time: Fri 17 Apr 2026 02:00:50 +0000 Manifest this update: Fri 17 Apr 2026 02:00:50 +0000 Manifest next update: Sat 18 Apr 2026 02:00:50 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: aNaQaS6pRT1CIwTZUmxVje0a7fMbNZcoI62lXCHVoBw=) 6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 7: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 12: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 13: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:64:39:8f:2d:cd:51:d4:58:bf:2a:50:8e:07:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Apr 17 02:00:50 2026 GMT Not After : Apr 18 02:00:50 2026 GMT Subject: CN=c82cb668e6862d72492abb7de7bab4f29c71fce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:fd:8e:b3:8c:34:91:3c:78:13:30:97:a5: c3:5c:ef:f4:d8:a0:88:54:b5:29:9a:c1:2a:1f:6f: 92:18:a7:bf:f1:b1:1f:e3:71:0c:ef:2e:b2:e4:b1: c8:bc:9f:1e:5a:fd:b0:0a:3e:b8:b5:0e:3b:6e:58: eb:6f:1c:57:de:3a:d0:66:48:2e:c2:51:53:c2:1c: 4c:a5:c6:c0:c2:92:06:49:9a:97:8b:db:16:db:c7: 9b:2b:99:bd:61:44:38:13:63:8f:e0:ea:a4:d5:d4: e5:91:b1:0b:d9:8c:86:ab:d8:e7:19:aa:5d:30:a2: a1:09:8b:5f:ac:af:56:65:ef:1a:29:e0:ba:62:60: b7:9e:91:e8:3a:a9:99:75:40:63:c0:68:cb:85:c0: 43:13:4a:67:51:04:b8:df:87:73:9f:05:dd:e4:ab: 40:65:f9:29:26:95:65:de:73:c8:b9:9b:3e:90:1b: 77:cc:8c:07:a0:e7:a8:c0:36:c6:f8:9b:10:96:4a: 63:4a:e4:f4:a7:48:91:b3:07:d5:44:28:c0:da:4d: 6b:ef:c8:dd:2d:4f:dd:ca:35:40:b4:66:0d:46:71: ab:22:d6:99:a6:db:86:c3:e5:de:9d:35:7d:82:8b: 13:67:b9:d9:b1:19:1a:f7:bc:d4:80:e0:37:3a:31: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2C:B6:68:E6:86:2D:72:49:2A:BB:7D:E7:BA:B4:F2:9C:71:FC:E8 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:22:0f:5d:fa:cd:40:9c:32:bc:00:a7:c0:cf:3e:7b:a8:9d: 45:cc:f1:0b:7c:83:84:09:3e:2b:78:18:ab:e3:c9:7b:c6:b0: 6a:5e:aa:e1:44:5a:0e:cb:65:02:e9:80:5d:8f:4c:cd:94:ac: f3:0e:22:66:1f:02:e6:59:4d:0b:56:6e:ef:94:6a:28:af:2a: 34:39:64:e8:0b:67:f4:22:33:e4:13:f1:e9:ad:2f:21:aa:b7: e5:e8:ab:c3:6b:38:d1:33:29:a2:0e:73:e0:d2:19:12:ed:0d: bb:1d:44:10:3d:68:d6:90:8d:13:c5:93:69:89:f5:2b:27:cb: 23:7a:41:98:ea:e3:9a:93:32:0c:03:00:22:1b:63:9f:86:c0: 65:c2:a6:77:90:95:e4:a3:1e:93:dd:7d:f9:65:22:c9:d7:3e: 69:32:88:85:54:67:d3:55:01:b5:73:30:8a:50:05:61:5e:d4: d7:a4:de:9d:ff:17:cd:82:d0:0e:d0:3f:c1:7d:ea:9b:ca:e5: 63:5e:64:43:da:c8:92:0a:36:12:b4:cb:86:b1:dc:e3:1b:6d: 52:ef:ef:6c:3e:40:0c:d6:07:41:34:b5:51:1f:d0:10:d8:32: 8f:e9:0c:24:15:ef:37:1e:4a:a8:00:bc:91:53:58:db:8f:ba: df:72:44:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZK2Q5jy3NUdRYvypQjgc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwNDE3MDIwMDUwWhcNMjYwNDE4MDIwMDUwWjAzMTEwLwYDVQQD EyhjODJjYjY2OGU2ODYyZDcyNDkyYWJiN2RlN2JhYjRmMjljNzFmY2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14D9jrOMNJE8eBMwl6XDXO/02KCI VLUpmsEqH2+SGKe/8bEf43EM7y6y5LHIvJ8eWv2wCj64tQ47bljrbxxX3jrQZkgu wlFTwhxMpcbAwpIGSZqXi9sW28ebK5m9YUQ4E2OP4Oqk1dTlkbEL2YyGq9jnGapd MKKhCYtfrK9WZe8aKeC6YmC3npHoOqmZdUBjwGjLhcBDE0pnUQS434dznwXd5KtA ZfkpJpVl3nPIuZs+kBt3zIwHoOeowDbG+JsQlkpjSuT0p0iRswfVRCjA2k1r78jd LU/dyjVAtGYNRnGrItaZptuGw+XenTV9gosTZ7nZsRka97zUgOA3OjEKSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgstmjmhi1ySSq7fee6tPKccfzoMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiIPXfrN QJwyvACnwM8+e6idRczxC3yDhAk+K3gYq+PJe8awal6q4URaDstlAumAXY9MzZSs 8w4iZh8C5llNC1Zu75RqKK8qNDlk6Atn9CIz5BPx6a0vIaq35eirw2s40TMpog5z 4NIZEu0Nux1EED1o1pCNE8WTaYn1KyfLI3pBmOrjmpMyDAMAIhtjn4bAZcKmd5CV 5KMek919+WUiydc+aTKIhVRn01UBtXMwilAFYV7U16Tenf8XzYLQDtA/wX3qm8rl Y15kQ9rIkgo2ErTLhrHc4xttUu/vbD5ADNYHQTS1UR/QENgyj+kMJBXvNx5KqAC8 kVNY24+633JE0A== -----END CERTIFICATE-----Generated at Fri Apr 17 10:12:29 2026 by rpki-client