$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: EMmqa0APWjGdstp/cFJy3ybNrbEleqUQgDe2+jxwRjM= Subject key identifier: E5:77:FF:F6:B8:6E:E5:01:B8:E3:38:70:E9:2B:D3:C8:FC:F2:A7:C2 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019DA30AD0D8BB879ACBF16FFC550F226FE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0C78 Signing time: Sun 19 Apr 2026 00:01:28 +0000 Manifest this update: Sun 19 Apr 2026 00:01:28 +0000 Manifest next update: Mon 20 Apr 2026 00:01:28 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: QP9CNlQFuVB9wS0BW21smKX3lBU.roa (hash: dwNtwT/3EY1R/q2zrzRe6Xma12Bkc4BEFlUrU3pbm+Q=) 9: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: XhB7Esj2PCWDC8mxD1FOFiPeHIJFynRLL9yQIowKLSM=) 10: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: fzxoNfiPUD7xeSSlqYVskKUZ9gQ.roa (hash: XjcQQ4lJaJtOIDs0K1l+gH5MfloiUUpBeoZaPEDBX6c=) 14: imTf8No1ZINbCYJNVjvMbyKdYDc.roa (hash: v7b/CtSyIh4Qh/63ZcyMa4HLHKrxYzw4yW2zbhrt2aQ=) 15: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 16: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 00:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:0a:d0:d8:bb:87:9a:cb:f1:6f:fc:55:0f:22:6f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Apr 19 00:01:28 2026 GMT Not After : Apr 20 00:01:28 2026 GMT Subject: CN=e577fff6b86ee501b8e33870e92bd3c8fcf2a7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:91:42:84:1a:d1:b2:9a:ae:b4:fd:a1:f5: ca:c9:43:38:23:04:44:ae:bd:ee:80:e6:34:5b:92: 74:35:19:25:25:2a:83:fe:dc:cb:9c:88:60:c5:33: 89:0d:bc:f9:a5:6c:b3:89:e7:48:35:85:f6:1a:1c: 82:8a:cf:b2:13:47:64:60:cf:68:1f:cc:c3:bf:49: e6:ed:00:90:4d:8f:75:bb:68:d2:73:b3:34:d2:77: c6:10:26:2f:6c:34:7a:bd:12:5d:a4:5f:73:70:fd: 4a:49:e5:ea:88:17:4b:83:9d:9e:e3:2a:6c:60:dc: e0:fa:ee:03:91:af:3c:be:4e:32:25:8c:e8:a3:67: de:0f:67:b8:40:a9:8a:0a:f6:ac:c8:48:09:d9:02: 5a:cf:69:07:69:d2:70:7c:eb:96:46:8a:2d:98:c0: 23:61:ba:84:41:14:8c:96:a7:35:d6:7d:bb:21:9c: 80:25:08:ae:4f:49:9c:77:04:1b:b9:11:06:f5:99: 1f:e4:c9:45:ff:d8:c2:25:f1:5c:57:cd:0e:b1:5d: ef:1d:60:c1:80:f0:79:10:24:53:5e:03:9d:39:f9: 33:e2:07:df:31:3c:57:7f:71:08:4c:2a:57:1c:8d: ae:81:40:4e:e8:b3:31:3b:5a:3f:dd:ae:7d:c1:2c: b2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:77:FF:F6:B8:6E:E5:01:B8:E3:38:70:E9:2B:D3:C8:FC:F2:A7:C2 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:5f:1c:99:51:dc:85:a2:d9:d8:71:b1:df:18:e2:21:4c:cb: 34:49:09:1f:c1:16:e8:b2:05:ca:16:a5:28:22:4c:bf:f6:f0: 16:d6:f1:ec:ee:22:fb:22:5a:64:54:39:52:ca:7b:c5:f1:c6: 59:cf:12:06:6d:97:e2:71:2d:67:93:3f:1c:18:40:62:97:66: 15:28:b5:53:b9:a3:36:61:8e:8e:ab:cc:df:45:09:98:6d:4e: 6f:f5:5a:65:15:ea:f6:7a:b5:0e:1e:f4:a5:f2:89:55:de:43: c5:57:a0:d9:bc:71:64:91:b3:a9:5f:3c:2a:4a:10:a5:a8:47: 93:b7:7f:f1:c4:83:03:df:08:e4:96:6c:47:33:89:6e:42:ae: 24:2c:51:3d:ed:df:2a:2f:8d:ce:06:fa:0f:15:26:3d:03:23: c7:83:c1:3d:bf:05:fd:a4:49:3d:91:ba:48:74:c0:2c:b4:b3: 78:f4:36:b2:e0:ba:45:1c:b9:4e:fa:02:a6:a4:3d:96:17:cd: e3:7e:84:9b:13:91:41:80:de:86:15:4f:b7:fe:a2:50:3f:cd: dd:8a:7f:df:1d:d9:f2:d9:b4:a8:1e:d6:17:0a:92:b6:29:d8: ef:5e:68:3f:3b:ca:3c:c8:04:c7:34:47:3f:b9:ff:c7:c8:e1: 8a:92:44:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jCtDYu4eay/Fv/FUPIm/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwNDE5MDAwMTI4WhcNMjYwNDIwMDAwMTI4WjAzMTEwLwYDVQQD EyhlNTc3ZmZmNmI4NmVlNTAxYjhlMzM4NzBlOTJiZDNjOGZjZjJhN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4GRQoQa0bKarrT9ofXKyUM4IwRE rr3ugOY0W5J0NRklJSqD/tzLnIhgxTOJDbz5pWyziedINYX2GhyCis+yE0dkYM9o H8zDv0nm7QCQTY91u2jSc7M00nfGECYvbDR6vRJdpF9zcP1KSeXqiBdLg52e4yps YNzg+u4Dka88vk4yJYzoo2feD2e4QKmKCvasyEgJ2QJaz2kHadJwfOuWRootmMAj YbqEQRSMlqc11n27IZyAJQiuT0mcdwQbuREG9Zkf5MlF/9jCJfFcV80OsV3vHWDB gPB5ECRTXgOdOfkz4gffMTxXf3EITCpXHI2ugUBO6LMxO1o/3a59wSyyjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOV3//a4buUBuOM4cOkr08j88qfCMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxl8cmVHc haLZ2HGx3xjiIUzLNEkJH8EW6LIFyhalKCJMv/bwFtbx7O4i+yJaZFQ5Usp7xfHG Wc8SBm2X4nEtZ5M/HBhAYpdmFSi1U7mjNmGOjqvM30UJmG1Ob/VaZRXq9nq1Dh70 pfKJVd5DxVeg2bxxZJGzqV88KkoQpahHk7d/8cSDA98I5JZsRzOJbkKuJCxRPe3f Ki+Nzgb6DxUmPQMjx4PBPb8F/aRJPZG6SHTALLSzePQ2suC6RRy5TvoCpqQ9lhfN 436EmxORQYDehhVPt/6iUD/N3Yp/3x3Z8tm0qB7WFwqStinY715oPzvKPMgExzRH P7n/x8jhipJErQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:57:29 2026 by rpki-client