$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: /QKbcJBIVXAR2Rp0y0EvalQ1234pwwMnyBQuJnU/btA= Subject key identifier: 62:1A:75:A6:F8:A3:31:6A:9A:42:21:2D:78:B9:18:B6:A8:38:DD:C3 Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019D9C62F7D94C2684B1380A76B9307A9223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 03BB Signing time: Fri 17 Apr 2026 17:00:24 +0000 Manifest this update: Fri 17 Apr 2026 17:00:24 +0000 Manifest next update: Sat 18 Apr 2026 17:00:24 +0000 Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=) 2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=) 3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=) 4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=) 5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=) 6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=) 7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=) 8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=) 9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=) 10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=) 11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=) 12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: PkaY+U1VaWiiqOE0EYwyqvGe1Bfz2OPySqKAwUDnjoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:62:f7:d9:4c:26:84:b1:38:0a:76:b9:30:7a:92:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Apr 17 17:00:24 2026 GMT Not After : Apr 18 17:00:24 2026 GMT Subject: CN=621a75a6f8a3316a9a42212d78b918b6a838ddc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:3c:0d:5f:af:7a:be:4e:b2:ca:4c:95:db: f0:e8:e8:19:38:5f:b4:a5:6e:9b:d0:ff:9c:4a:01: af:5b:4a:e1:96:f6:10:74:b9:27:d4:ef:6b:4a:13: c2:8c:03:c5:e8:85:55:9a:d9:74:a4:bb:12:b2:8a: e6:24:13:4d:5e:1b:6e:4d:c7:1e:93:e4:c8:0b:6d: fc:09:ac:4c:77:80:90:be:2f:f0:ec:e8:54:34:3e: ff:56:c2:7d:b2:b9:a2:0e:c4:70:4f:3d:f7:e4:bb: ee:be:a3:d2:2c:c0:cf:94:1f:f1:52:a3:74:1c:73: dd:1c:bc:e2:02:9c:4e:e2:95:62:96:49:92:9d:44: 82:96:8e:d2:7a:63:83:c5:7a:68:00:0e:ab:f0:78: 20:05:35:76:49:44:7f:4e:04:a1:82:81:84:26:6d: 4f:01:57:97:69:18:19:1d:60:7a:d1:3a:5c:7b:0c: 19:02:9d:56:5d:44:0d:67:1e:97:6e:40:25:51:51: 86:67:1d:4a:8c:1d:1c:57:cd:97:cd:3f:65:25:22: a0:a5:9e:bb:14:3b:d2:5c:46:1b:ba:0a:cf:67:9c: fd:73:17:0b:66:e2:8f:10:fc:a0:05:00:5b:46:43: 8f:d9:b0:a6:7b:fa:e7:fe:a9:73:4a:1e:d5:c4:16: 81:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1A:75:A6:F8:A3:31:6A:9A:42:21:2D:78:B9:18:B6:A8:38:DD:C3 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:21:80:7c:74:39:2a:98:a7:fe:54:74:f3:cd:b2:90:a8:df: ef:e9:5c:9d:da:99:aa:45:66:0f:5c:99:e3:f8:b1:da:59:13: 8c:9d:9f:41:45:d4:47:4e:fe:7d:9c:dd:5b:81:2f:62:f6:a4: dc:f6:ea:7a:48:9d:2e:1c:a4:6c:d2:d4:ae:6c:17:a2:97:07: 3d:bf:f1:35:d0:70:98:01:64:f2:7f:ce:e9:ce:4e:74:4a:66: 86:2e:e7:a7:9d:09:f9:3c:98:79:49:53:0a:8b:6e:19:5a:86: 10:21:2c:e5:b0:8b:bf:bf:3a:82:04:92:8b:21:cf:24:11:a3: 3e:03:8f:9d:da:14:84:0c:84:03:e6:fd:30:10:76:e7:87:84: 23:26:14:91:e4:fa:0d:6c:a6:98:41:68:d6:96:cf:8c:98:a1: cd:32:39:a5:65:06:ad:20:98:45:1f:42:57:8f:8b:3e:8e:de: c1:eb:3d:fb:1f:e3:c5:18:3b:c5:12:32:c4:75:e0:a7:5e:0c: 21:24:6d:ec:0d:a2:2c:b1:03:f2:a0:fc:71:04:e1:2a:e9:5b: d0:e6:9d:db:75:90:25:7d:0e:46:54:57:c9:64:7e:4d:29:3a: fe:63:a4:d7:1b:36:8f:b2:d0:a1:15:89:e1:8c:e9:c4:48:92: de:94:91:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cYvfZTCaEsTgKdrkwepIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwNDE3MTcwMDI0WhcNMjYwNDE4MTcwMDI0WjAzMTEwLwYDVQQD Eyg2MjFhNzVhNmY4YTMzMTZhOWE0MjIxMmQ3OGI5MThiNmE4MzhkZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorE8DV+ver5OsspMldvw6OgZOF+0 pW6b0P+cSgGvW0rhlvYQdLkn1O9rShPCjAPF6IVVmtl0pLsSsormJBNNXhtuTcce k+TIC238CaxMd4CQvi/w7OhUND7/VsJ9srmiDsRwTz335LvuvqPSLMDPlB/xUqN0 HHPdHLziApxO4pVilkmSnUSClo7SemODxXpoAA6r8HggBTV2SUR/TgShgoGEJm1P AVeXaRgZHWB60TpcewwZAp1WXUQNZx6XbkAlUVGGZx1KjB0cV82XzT9lJSKgpZ67 FDvSXEYbugrPZ5z9cxcLZuKPEPygBQBbRkOP2bCme/rn/qlzSh7VxBaBGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIadab4ozFqmkIhLXi5GLaoON3DMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCGAfHQ5 Kpin/lR0882ykKjf7+lcndqZqkVmD1yZ4/ix2lkTjJ2fQUXUR07+fZzdW4EvYvak 3PbqekidLhykbNLUrmwXopcHPb/xNdBwmAFk8n/O6c5OdEpmhi7np50J+TyYeUlT CotuGVqGECEs5bCLv786ggSSiyHPJBGjPgOPndoUhAyEA+b9MBB254eEIyYUkeT6 DWymmEFo1pbPjJihzTI5pWUGrSCYRR9CV4+LPo7ewes9+x/jxRg7xRIyxHXgp14M ISRt7A2iLLED8qD8cQThKulb0Oad23WQJX0ORlRXyWR+TSk6/mOk1xs2j7LQoRWJ 4YzpxEiS3pSR1g== -----END CERTIFICATE-----Generated at Fri Apr 17 19:20:31 2026 by rpki-client