$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: MfscGDIKIugGH083rzILteiI7YDpQhMbSVKesTUN7II= Subject key identifier: 28:BF:56:EF:8D:D6:3B:E6:8B:FC:A0:F7:1C:3E:AC:16:F0:45:65:F3 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019D9A3DEC17F51B1B7E93A5A1DF6EBDA515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 1786 Signing time: Fri 17 Apr 2026 07:00:42 +0000 Manifest this update: Fri 17 Apr 2026 07:00:42 +0000 Manifest next update: Sat 18 Apr 2026 07:00:42 +0000 Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=) 2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=) 3: hAy8VtAwci_v3cGOO19dEdefvMA.roa (hash: g1nY4ONoPi4/cXPph4hFcjnMaUzSfWsZYHkL3fHcL7Y=) 4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=) 5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=) 6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=) 7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: L0uE0d/1RFAnmKm4iDic7vULyYYTcDqj6vZ/dT1+mqY=) 8: suUbWGeNBw5ePtioMY9U94S7lSw.roa (hash: M06oDkMYsepjO/1pxSEeQ8cUvDUMgzU9aQtQ7cy78x8=) 9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=) 10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3d:ec:17:f5:1b:1b:7e:93:a5:a1:df:6e:bd:a5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Apr 17 07:00:42 2026 GMT Not After : Apr 18 07:00:42 2026 GMT Subject: CN=28bf56ef8dd63be68bfca0f71c3eac16f04565f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5c:b4:82:af:fe:d5:8e:1e:31:3b:5e:bc:5c: f3:b9:79:c6:b7:5d:96:54:06:91:81:2e:88:35:d5: 33:8d:3d:ef:5d:b4:01:90:3c:b5:2d:c2:b2:08:54: ac:60:ef:02:99:8a:34:06:0f:85:23:40:96:4b:47: 06:90:a1:d0:a9:32:a2:3a:70:81:a1:04:9f:95:57: 3f:28:ae:53:88:b3:f4:5e:d6:c4:69:6f:18:96:aa: 17:5f:4f:8b:c6:79:ac:2f:da:60:1e:11:3d:e8:90: 2d:98:45:c8:fe:54:93:03:0f:2a:a3:3c:df:6e:82: c4:e6:96:1f:0f:ab:e9:47:f3:65:57:00:84:f6:77: b9:7e:aa:a3:0e:ee:b0:bc:8d:5f:2f:1d:f2:fb:fe: af:e0:02:95:cf:90:98:c9:54:59:6c:73:f0:19:9b: 77:f6:1c:0a:ba:4c:2d:2d:de:9e:78:d5:fa:42:04: 51:64:d0:36:12:ad:ae:a2:55:d0:1f:d6:a9:01:3d: d6:25:0f:36:25:50:63:e0:1d:90:e2:4d:b2:d7:c0: e7:e3:28:64:52:77:71:6e:51:19:21:18:c4:f6:ca: ab:6c:79:c0:86:34:17:85:7a:0c:ef:a3:38:01:61: 81:d4:6c:bd:cf:82:b3:31:06:31:2b:19:33:02:f9: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BF:56:EF:8D:D6:3B:E6:8B:FC:A0:F7:1C:3E:AC:16:F0:45:65:F3 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6c:10:30:ad:1a:6e:01:8d:c7:cf:d7:11:f9:45:a1:e9:3a: 3d:9d:81:c1:41:ea:3f:49:58:57:29:fc:bf:f3:11:cc:03:96: 8f:7c:92:74:30:80:a9:64:93:cf:39:e4:c7:34:90:8b:4f:c3: f2:ba:bc:1b:f1:4d:f5:c1:0e:0d:53:88:13:37:85:4f:94:2a: f2:69:19:ea:ab:6a:c4:3d:3e:e1:79:bb:56:b3:4c:4d:3a:f3: 49:13:f6:72:48:3d:0b:31:71:28:03:7b:cf:f9:db:2b:8e:d2: b9:7c:c1:a7:68:1e:d9:f5:e7:45:50:53:c9:11:93:4f:5d:ff: 88:27:26:f6:b9:82:0f:00:66:65:15:d5:6a:ea:17:73:6a:3c: ca:1e:b3:03:4c:63:16:f2:33:83:0c:aa:e5:13:b8:c6:90:2e: 10:d6:9c:56:60:51:96:6b:a8:79:64:b4:7f:fd:31:7e:a4:14: 95:57:3b:3d:14:b3:53:dc:f6:9a:a2:cb:93:20:78:a8:c1:8a: 09:ca:6d:fa:d1:dc:00:d9:c1:05:08:df:5b:87:2e:03:fc:2c: c8:68:26:7e:ee:1b:90:24:8e:16:cb:65:fe:2f:e9:87:c3:16: 31:60:6a:8a:df:d2:a2:d6:85:16:49:8b:81:ce:81:89:10:7f: 4c:15:7d:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPewX9RsbfpOlod9uvaUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwNDE3MDcwMDQyWhcNMjYwNDE4MDcwMDQyWjAzMTEwLwYDVQQD EygyOGJmNTZlZjhkZDYzYmU2OGJmY2EwZjcxYzNlYWMxNmYwNDU2NWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Fy0gq/+1Y4eMTtevFzzuXnGt12W VAaRgS6INdUzjT3vXbQBkDy1LcKyCFSsYO8CmYo0Bg+FI0CWS0cGkKHQqTKiOnCB oQSflVc/KK5TiLP0XtbEaW8YlqoXX0+LxnmsL9pgHhE96JAtmEXI/lSTAw8qozzf boLE5pYfD6vpR/NlVwCE9ne5fqqjDu6wvI1fLx3y+/6v4AKVz5CYyVRZbHPwGZt3 9hwKukwtLd6eeNX6QgRRZNA2Eq2uolXQH9apAT3WJQ82JVBj4B2Q4k2y18Dn4yhk UndxblEZIRjE9sqrbHnAhjQXhXoM76M4AWGB1Gy9z4KzMQYxKxkzAvmigwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi/Vu+N1jvmi/yg9xw+rBbwRWXzMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWwQMK0a bgGNx8/XEflFoek6PZ2BwUHqP0lYVyn8v/MRzAOWj3ySdDCAqWSTzznkxzSQi0/D 8rq8G/FN9cEODVOIEzeFT5Qq8mkZ6qtqxD0+4Xm7VrNMTTrzSRP2ckg9CzFxKAN7 z/nbK47SuXzBp2ge2fXnRVBTyRGTT13/iCcm9rmCDwBmZRXVauoXc2o8yh6zA0xj FvIzgwyq5RO4xpAuENacVmBRlmuoeWS0f/0xfqQUlVc7PRSzU9z2mqLLkyB4qMGK Ccpt+tHcANnBBQjfW4cuA/wsyGgmfu4bkCSOFstl/i/ph8MWMWBqit/SotaFFkmL gc6BiRB/TBV9/Q== -----END CERTIFICATE-----Generated at Fri Apr 17 15:23:50 2026 by rpki-client