$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json) Hash identifier: fo11BW4Ou5AXP7L4dJ2TFFsNQCcMsWAI7+DWDgUhH2s= Subject key identifier: 39:A3:B6:D7:22:ED:1A:31:E7:7A:61:5B:66:2B:BE:D5:B6:8A:A3:DF Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019D984FE6EC827622481DB4C2953AF73061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft Manifest number: 18F7 Signing time: Thu 16 Apr 2026 22:01:06 +0000 Manifest this update: Thu 16 Apr 2026 22:01:06 +0000 Manifest next update: Fri 17 Apr 2026 22:01:06 +0000 Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=) 2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=) 3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: 7mYLYc7vRvi4Vxm0tH+J3EIzshnTL+UEtlVDSwjtnBk=) 4: IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (hash: 1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=) 5: Mqx-zb562ywYV8pX6wNPPIxwnPA.roa (hash: OtbembzOi1Q67rhuvfY9lENyB3xApH7b2U9zu5YCpzg=) 6: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=) 7: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (hash: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=) 8: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=) 9: X01sfTguEZRlbViMsVbdLRhWtwM.asa (hash: ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=) 10: ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (hash: hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=) 11: bFkaQMapJshDo2hgXls_q4kXpds.asa (hash: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=) 12: dAyDeUp51SPbYS8fxmJNG0482Ng.asa (hash: 6/i5RS8ShUMSXbYzZlVqHGyL8kobjym9yxw0gdprH7E=) 13: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=) 14: plAxktASIb4YACIP-hXXxq1vBPQ.asa (hash: YS1t0iZi+tG5TRUgxqQhrFYuMkSCCdM92QwP+HVjJ7w=) 15: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:4f:e6:ec:82:76:22:48:1d:b4:c2:95:3a:f7:30:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Apr 16 22:01:06 2026 GMT Not After : Apr 17 22:01:06 2026 GMT Subject: CN=39a3b6d722ed1a31e77a615b662bbed5b68aa3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1e:7d:04:09:b6:d7:c6:81:98:a8:d7:4b:3f: 95:f9:2f:75:12:21:18:6b:70:e5:56:28:be:f2:39: 59:18:62:7b:fc:1c:0e:e5:fa:55:60:94:52:b0:b0: 83:9e:88:e3:f6:b1:cb:7e:86:61:52:f7:d9:4c:a1: 54:f3:f4:76:47:01:05:7f:64:a1:30:9c:0d:cc:e8: fe:2c:69:68:b0:5c:a1:e9:ab:62:d5:90:1e:de:9e: 63:d2:17:a7:d7:fa:01:a5:bb:39:93:1e:19:af:ce: 6f:80:dc:3d:e7:14:03:1a:38:9f:12:b9:d6:73:4d: e1:fe:da:cc:c5:6e:8e:93:c6:53:18:74:6e:94:0a: c2:10:58:42:a2:8e:be:11:8e:b2:e5:ef:d3:61:b7: 97:7f:2c:4f:a4:e0:51:70:37:7e:d9:17:82:0b:18: ce:54:76:bc:a0:21:77:97:a7:f6:3f:16:bd:b2:89: 56:1c:2a:69:0f:08:dd:23:1a:2c:35:d1:b1:56:5f: 05:13:37:4d:b5:cf:0b:44:77:bb:2b:2d:bf:db:75: 75:2e:46:b6:d0:46:4a:5e:6a:66:dc:4b:fd:58:d8: 5b:3b:20:38:9f:f3:ea:f1:87:f6:de:1b:0f:10:ee: a9:a0:f1:a2:87:92:c0:a7:b9:da:63:cf:47:c2:e1: 40:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:B6:D7:22:ED:1A:31:E7:7A:61:5B:66:2B:BE:D5:B6:8A:A3:DF X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0e:7d:58:d5:d5:37:f0:1e:a2:c5:98:af:3c:5f:f8:d2:6c: 46:5a:75:88:c4:a1:56:2b:1a:59:88:c0:84:74:4a:60:b4:f0: ba:d8:86:c4:23:e2:ab:19:f0:81:2c:cd:1b:f3:24:25:c6:13: 3b:f3:7e:93:0f:4e:3c:cd:d6:7e:96:d0:aa:bd:e0:bb:40:f2: 14:dd:15:f7:5b:72:32:f0:d8:2b:b5:74:47:fa:e0:03:92:5d: 43:bc:b3:6a:da:43:48:22:59:a2:64:ba:7e:f4:5b:20:e4:c7: de:28:22:3c:f3:7d:c9:2a:fe:dd:cc:e9:cf:8c:37:22:81:47: 31:27:ad:81:3c:8a:fd:00:9f:a3:93:3c:2e:9d:2d:24:ca:5a: ca:11:6c:c1:a6:ba:d1:b5:f2:10:34:95:5b:94:41:95:1d:98: 4f:1e:ed:4c:1d:82:2e:56:36:ec:17:2b:e8:05:f1:32:e4:7e: 0e:89:68:b0:07:fc:6d:b7:39:1a:3e:0d:a2:69:31:9e:7e:d7: 06:d5:34:26:46:24:79:e4:40:bc:97:d2:82:4a:4e:68:d3:e0: 7e:60:2d:98:29:a0:0b:ab:93:4b:d9:b2:c3:c8:18:5b:2f:14: bd:0b:ab:35:f9:8a:ef:c7:73:36:4b:2a:ea:94:f4:a0:0b:b2: 47:2f:b9:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YT+bsgnYiSB20wpU69zBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYwNDE2MjIwMTA2WhcNMjYwNDE3MjIwMTA2WjAzMTEwLwYDVQQD EygzOWEzYjZkNzIyZWQxYTMxZTc3YTYxNWI2NjJiYmVkNWI2OGFhM2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+R59BAm218aBmKjXSz+V+S91EiEY a3DlVii+8jlZGGJ7/BwO5fpVYJRSsLCDnojj9rHLfoZhUvfZTKFU8/R2RwEFf2Sh MJwNzOj+LGlosFyh6ati1ZAe3p5j0hen1/oBpbs5kx4Zr85vgNw95xQDGjifErnW c03h/trMxW6Ok8ZTGHRulArCEFhCoo6+EY6y5e/TYbeXfyxPpOBRcDd+2ReCCxjO VHa8oCF3l6f2Pxa9solWHCppDwjdIxosNdGxVl8FEzdNtc8LRHe7Ky2/23V1Lka2 0EZKXmpm3Ev9WNhbOyA4n/Pq8Yf23hsPEO6poPGih5LAp7naY89HwuFA1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmjttci7Rox53phW2YrvtW2iqPfMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYA59WNXV N/AeosWYrzxf+NJsRlp1iMShVisaWYjAhHRKYLTwutiGxCPiqxnwgSzNG/MkJcYT O/N+kw9OPM3WfpbQqr3gu0DyFN0V91tyMvDYK7V0R/rgA5JdQ7yzatpDSCJZomS6 fvRbIOTH3igiPPN9ySr+3czpz4w3IoFHMSetgTyK/QCfo5M8Lp0tJMpayhFswaa6 0bXyEDSVW5RBlR2YTx7tTB2CLlY27Bcr6AXxMuR+DolosAf8bbc5Gj4Nomkxnn7X BtU0JkYkeeRAvJfSgkpOaNPgfmAtmCmgC6uTS9myw8gYWy8UvQurNfmK78dzNksq 6pT0oAuyRy+5pQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:07 2026 by rpki-client