$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: nBENTUNO+qpEYt0Z7lEhqQn5F1HaREjT+pBYIUGS334= Subject key identifier: 89:1E:51:F8:A8:04:67:BA:2F:4C:F7:D1:73:31:C7:7F:BD:E0:1A:63 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019D97E234B3B16F96EA0C1F3E387823ABBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 18D4 Signing time: Thu 16 Apr 2026 20:01:17 +0000 Manifest this update: Thu 16 Apr 2026 20:01:17 +0000 Manifest next update: Fri 17 Apr 2026 20:01:17 +0000 Files and hashes: 1: 1-Av5slqVQGl13SrEfsDMUE9C8xw.roa (hash: fHxcC/pLnuuTMmJ/MEePK0x7KhULD48H+HBYLlLnLM0=) 2: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=) 3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=) 4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=) 5: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=) 6: HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa (hash: 3z+4GXfqGZOD8OYrsC4T9FL0WEjQRqb08RZme3k48Lw=) 7: JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa (hash: W7p0gBk862eedQpONG4wyoOk08n0osQClMT4stp+hJs=) 8: PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa (hash: +8V8Dt++uOTSXhRHoCWJ+fxEyoBe8YcJTvD0shhiPWM=) 9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=) 10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=) 11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=) 12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: 9OBgmfly/j5rZP0xbY+k7YbF2NFAaRv+5qOttUDbT9k=) 13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=) 14: oYXyy77jFFZFt2039BhjAw8G3L0.roa (hash: Cn7bnwSGye9UBPsmnOsVK1mE3z5k0eAVuqmgNwd2Ik4=) 15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=) 16: s1pXuGWW8y0eMDg2PLAPlJOS44g.roa (hash: 65AbhQkFbG41XkwAPCWwnfEfJS7XNkEvl4ocnYbT4oA=) 17: tKQOFu4gDtiR9E_Fs5E_WSdxqYs.roa (hash: WdBgiiX6jEX+9nf9y/4sf97cV0r9Y0+TqLFDE6JwVjA=) 18: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=) 19: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=) 20: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:e2:34:b3:b1:6f:96:ea:0c:1f:3e:38:78:23:ab:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Apr 16 20:01:17 2026 GMT Not After : Apr 17 20:01:17 2026 GMT Subject: CN=891e51f8a80467ba2f4cf7d17331c77fbde01a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:e7:24:46:0e:ba:c7:46:eb:5d:38:ec:57: 5a:92:ff:08:4b:b4:3f:aa:04:be:8e:ed:85:47:8c: 00:7a:d6:90:cb:1f:8a:8b:e6:45:da:3e:24:08:0d: 75:d5:a6:f6:31:5a:dd:1a:c0:c4:c0:a2:78:72:08: cf:40:3a:76:85:47:bd:5c:82:ed:49:8b:18:5d:62: 0e:65:81:d9:89:af:8c:88:e7:f8:56:b9:8f:50:70: 66:db:de:cf:5f:5e:c6:98:83:6a:ed:a7:a9:3e:4b: 06:fa:80:0c:7d:02:da:ac:5f:66:c2:71:e6:72:f0: fa:f1:a4:b0:6d:5c:4a:24:a2:10:5f:6e:c7:38:3a: 79:c1:1c:c1:3b:4f:23:71:80:6b:72:ca:e6:f9:3f: 67:d8:f2:de:79:5e:87:94:f8:79:34:7c:22:45:fa: ae:42:bd:00:00:9e:9e:14:d4:f6:06:99:79:ba:36: ca:08:e7:06:ce:e4:1c:97:14:08:fb:50:04:69:74: f1:3e:44:e5:b3:23:b5:85:47:ad:bf:02:4c:39:04: 40:2e:36:f1:6f:67:31:ff:ff:f9:66:0b:0b:eb:63: 28:a1:30:9d:2f:32:2f:a5:4d:74:eb:74:36:83:e2: 8a:e0:c8:63:1c:02:9a:7c:68:e3:3c:dd:32:fe:28: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1E:51:F8:A8:04:67:BA:2F:4C:F7:D1:73:31:C7:7F:BD:E0:1A:63 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:7b:ab:1d:4b:c2:14:68:5a:db:3d:26:79:48:ff:47:ed:d4: e8:da:35:d8:7e:72:ab:53:ce:81:3b:52:7a:b0:58:bd:bf:fb: 86:c3:08:1c:ff:5b:f0:7f:6b:35:de:16:f4:8a:30:2e:1d:ab: 1f:de:19:91:89:e3:24:46:a0:5b:55:56:6d:29:ef:d8:2d:ae: 1e:6c:36:99:be:e0:58:9c:fc:d7:f0:cf:4d:ac:e7:26:5d:f3: f4:36:01:8a:70:34:b5:f6:f6:6e:53:f5:f7:9b:09:eb:49:bd: fa:53:f7:e5:f2:cb:e0:9e:f7:84:7d:02:f7:99:0c:24:f4:cc: e6:0a:1c:51:3a:8b:09:99:fa:e3:d6:48:94:39:1b:9b:35:a7: f7:91:a6:c8:91:68:07:b1:13:65:c4:23:a7:09:f6:b1:f8:96: f1:e9:9d:78:e5:cb:53:05:41:f7:ef:c9:e4:af:73:13:9f:45: 22:78:85:39:25:97:c6:7d:2e:72:1e:68:44:82:76:58:50:a8: 9d:6a:9f:2f:fb:62:62:0b:bd:34:7b:41:fb:7e:62:ba:06:4a: 37:51:92:56:38:ad:14:56:d4:fc:f5:0e:a8:cd:fb:5f:ae:bc: 41:bb:db:98:d1:de:de:6c:a7:29:f4:f3:3a:05:ff:6c:70:fe: 87:93:78:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2X4jSzsW+W6gwfPjh4I6u9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwNDE2MjAwMTE3WhcNMjYwNDE3MjAwMTE3WjAzMTEwLwYDVQQD Eyg4OTFlNTFmOGE4MDQ2N2JhMmY0Y2Y3ZDE3MzMxYzc3ZmJkZTAxYTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg7nJEYOusdG61047Fdakv8IS7Q/ qgS+ju2FR4wAetaQyx+Ki+ZF2j4kCA111ab2MVrdGsDEwKJ4cgjPQDp2hUe9XILt SYsYXWIOZYHZia+MiOf4VrmPUHBm297PX17GmINq7aepPksG+oAMfQLarF9mwnHm cvD68aSwbVxKJKIQX27HODp5wRzBO08jcYBrcsrm+T9n2PLeeV6HlPh5NHwiRfqu Qr0AAJ6eFNT2Bpl5ujbKCOcGzuQclxQI+1AEaXTxPkTlsyO1hUetvwJMOQRALjbx b2cx///5ZgsL62MooTCdLzIvpU1063Q2g+KK4MhjHAKafGjjPN0y/ijSywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkeUfioBGe6L0z30XMxx3+94BpjMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXurHUvC FGha2z0meUj/R+3U6No12H5yq1POgTtSerBYvb/7hsMIHP9b8H9rNd4W9IowLh2r H94ZkYnjJEagW1VWbSnv2C2uHmw2mb7gWJz81/DPTaznJl3z9DYBinA0tfb2blP1 95sJ60m9+lP35fLL4J73hH0C95kMJPTM5gocUTqLCZn649ZIlDkbmzWn95GmyJFo B7ETZcQjpwn2sfiW8emdeOXLUwVB9+/J5K9zE59FIniFOSWXxn0uch5oRIJ2WFCo nWqfL/tiYgu9NHtB+35iugZKN1GSVjitFFbU/PUOqM37X668QbvbmNHe3mynKfTz OgX/bHD+h5N4NQ== -----END CERTIFICATE-----Generated at Fri Apr 17 03:52:57 2026 by rpki-client