$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: Lv8yjuLNwnL2TbMY5jhiVC+5F30UYQw/lp2qhp2mw0I= Subject key identifier: 63:6F:49:C7:7B:2A:19:81:CD:E3:1D:EC:48:FB:60:23:2F:AC:D6:89 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019D977457454BA89168DBB3D223D138450F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 18FD Signing time: Thu 16 Apr 2026 18:01:17 +0000 Manifest this update: Thu 16 Apr 2026 18:01:17 +0000 Manifest next update: Fri 17 Apr 2026 18:01:17 +0000 Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=) 2: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=) 3: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=) 4: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=) 5: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=) 6: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=) 7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: 6UGex/0H0Jo4eFbzEILIH2PgDcKKgD0dg2iOik1Ku8c=) 8: S4ZdWdrpb3qYx-e6gRNqyxS9XXU.roa (hash: HWieGKn5oMIm/cd+NltvfFL1DEkHDM7h4JKc/BDbryw=) 9: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=) 10: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=) 11: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=) 12: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=) 13: XuBKY0oAARsXVXjq7u8JeDvNOcU.roa (hash: vlWZjrm0v836+Ch01+GkfQiIKmv/HzSaOumEGtSwczo=) 14: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=) 15: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=) 16: nkcD404rwM-bjy3W1eqAGIf4-jM.roa (hash: c+Jt4XtXipvJeR1ev/pkQCOQCvUzFmWnznkD8NrTMoI=) 17: pWHrs5rw_KgbSRJAL6KONruKqFc.roa (hash: AB3huwEj/N+euzlEzjByisO3oP/M0v+P+iouNnZD7xs=) 18: unZltpWjHIJfFpLIwg4b58uUsuU.roa (hash: hb7AVSL7Cg4MYbwSNaPjN4NWBI4LlWAD7QoGarhaIFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 18:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:74:57:45:4b:a8:91:68:db:b3:d2:23:d1:38:45:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Apr 16 18:01:17 2026 GMT Not After : Apr 17 18:01:17 2026 GMT Subject: CN=636f49c77b2a1981cde31dec48fb60232facd689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:d6:4b:d8:cf:f9:ab:d6:11:22:60:2d:5d: b5:14:7f:8a:36:f7:9c:0f:ef:88:ac:f3:f6:6b:8c: cf:33:7f:3c:85:1f:2e:08:86:40:38:0c:94:bc:87: 20:1e:9b:7f:59:a7:a1:1f:b6:4a:64:27:0e:9d:e0: d2:74:4e:1b:bb:34:d3:ac:a5:c7:00:85:d1:89:2e: 55:a4:c1:bc:a6:d9:e1:cc:27:35:34:ff:e7:70:25: 0f:39:02:5d:45:48:1e:31:6d:dd:ad:6e:54:41:d8: b1:e3:4a:ef:d1:b8:01:9c:41:59:b1:b0:d0:c5:11: 2a:55:f1:25:0b:c4:b5:ad:fe:3b:05:81:73:1b:0e: 52:bb:a0:ba:42:b3:31:c8:c1:fb:7f:74:bb:bb:83: c7:de:4f:4d:69:73:1b:70:55:8d:05:d0:f9:76:d5: bd:3f:0c:25:2b:ca:38:1c:a0:95:ff:a6:77:c2:28: 84:19:11:c6:9b:27:b2:c1:45:0c:51:80:dc:1a:25: 48:fc:10:9c:87:57:63:55:d2:df:e8:66:73:64:f6: aa:c0:ae:87:d8:a8:2c:a7:12:23:2f:b0:37:54:16: 91:17:e3:e0:71:12:a2:ee:24:11:19:be:55:89:d3: ac:28:83:29:65:28:87:4e:b7:23:dc:62:26:1e:d7: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6F:49:C7:7B:2A:19:81:CD:E3:1D:EC:48:FB:60:23:2F:AC:D6:89 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:94:0f:a2:13:80:3d:e5:e3:58:d0:ca:36:35:fa:6d:fe:da: 4d:c8:48:d1:8e:d5:3e:0b:56:b1:85:7b:69:0b:1d:5f:d2:8c: b0:7d:c4:63:50:85:b3:fe:75:89:fb:b3:c0:e7:70:f8:1e:54: 3b:dd:96:6d:be:57:c9:f8:66:d7:ec:04:ac:61:e3:24:e3:e8: 0c:f1:b1:e5:c6:39:17:47:82:35:f1:a4:ae:6d:ad:45:ef:69: 8e:ee:23:2f:82:c8:af:ec:c8:a4:3c:ff:0a:ba:36:99:7f:8f: 22:c7:2e:94:82:9e:7e:b1:78:1b:24:13:6e:d4:25:d5:0c:0c: 03:ad:a6:29:5f:25:c5:bf:63:8e:e0:5e:a5:fc:ab:7f:c0:bf: bf:83:0c:52:c8:f7:33:a5:82:15:3e:11:52:4f:98:f4:f6:a7: 8a:5e:8c:3b:24:5b:38:63:64:4d:aa:8e:15:d0:af:5a:3b:5f: cc:06:06:5e:6e:eb:9f:88:d1:67:4f:3f:7a:89:1e:62:4b:9b: 31:a0:f2:52:74:bf:3a:a0:61:90:e3:4b:fe:a1:c6:f6:68:a0: 13:ef:06:a4:24:c2:7f:51:3f:2b:c6:a3:3e:ac:7c:71:e7:84: c9:ce:80:05:a2:b6:e8:f5:c0:47:30:e7:96:03:bb:d5:85:fc: 9e:92:7d:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2XdFdFS6iRaNuz0iPROEUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwNDE2MTgwMTE3WhcNMjYwNDE3MTgwMTE3WjAzMTEwLwYDVQQD Eyg2MzZmNDljNzdiMmExOTgxY2RlMzFkZWM0OGZiNjAyMzJmYWNkNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX7WS9jP+avWESJgLV21FH+KNvec D++IrPP2a4zPM388hR8uCIZAOAyUvIcgHpt/WaehH7ZKZCcOneDSdE4buzTTrKXH AIXRiS5VpMG8ptnhzCc1NP/ncCUPOQJdRUgeMW3drW5UQdix40rv0bgBnEFZsbDQ xREqVfElC8S1rf47BYFzGw5Su6C6QrMxyMH7f3S7u4PH3k9NaXMbcFWNBdD5dtW9 PwwlK8o4HKCV/6Z3wiiEGRHGmyeywUUMUYDcGiVI/BCch1djVdLf6GZzZPaqwK6H 2KgspxIjL7A3VBaRF+PgcRKi7iQRGb5VidOsKIMpZSiHTrcj3GImHtceHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNvScd7KhmBzeMd7Ej7YCMvrNaJMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5QPohOA PeXjWNDKNjX6bf7aTchI0Y7VPgtWsYV7aQsdX9KMsH3EY1CFs/51ifuzwOdw+B5U O92Wbb5Xyfhm1+wErGHjJOPoDPGx5cY5F0eCNfGkrm2tRe9pju4jL4LIr+zIpDz/ Cro2mX+PIsculIKefrF4GyQTbtQl1QwMA62mKV8lxb9jjuBepfyrf8C/v4MMUsj3 M6WCFT4RUk+Y9Panil6MOyRbOGNkTaqOFdCvWjtfzAYGXm7rn4jRZ08/eokeYkub MaDyUnS/OqBhkONL/qHG9migE+8GpCTCf1E/K8ajPqx8ceeEyc6ABaK26PXARzDn lgO71YX8npJ9uA== -----END CERTIFICATE-----Generated at Fri Apr 17 01:59:38 2026 by rpki-client