$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: tbniISWfgfYnwe5QpRz1gZnFUzuWSOwV/nq7V5DkWyI= Subject key identifier: 76:E8:F3:43:D2:B3:50:CF:83:D5:3B:2A:97:D3:C7:BE:ED:4A:17:C6 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019D9962DD0197C2CCE5A31E8A14DCA8C463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 1914 Signing time: Fri 17 Apr 2026 03:01:26 +0000 Manifest this update: Fri 17 Apr 2026 03:01:26 +0000 Manifest next update: Sat 18 Apr 2026 03:01:26 +0000 Files and hashes: 1: 0sdOvh4nfn0lveRxykk33cNxIIM.roa (hash: kD83I12ad3Fh1a3zjr7gmmT7/0FXYiO1h6O1pIwZPsc=) 2: 0xQr7SsuNbVkdglbPEuYeR908M4.roa (hash: OwNc5ie37GMpKkc5b6+YlsSSG7y7AT9vwxdWFk6XL+M=) 3: 62z-_Nd4i8kmKRcFEqTrWOYEGyQ.roa (hash: s4eIzMK2BxY+5zTpdTU6OHEC3fxJT8gAlfgpPK+B7Q8=) 4: BHrhKKFyGuAXmGXi2uSOTH4JyEM.roa (hash: Etgsi90oMnqKxDk2sxnBlfxaINgYrLG9ZZzEIRCrPps=) 5: C2WOVwVQYwVr2nuLF8nZxh0HNso.roa (hash: dY3J82jDEAIC/rY1dL+3vS1oH5Nh7406smEXm0DFhew=) 6: IOHxcXYoTkPZ8SNGG2e5ArcFyZs.roa (hash: okIc8Ez3ehyNvt0MyrhxyHEumFu+GWw2/XRgSeYqOe4=) 7: PpTOr4rXJzyV-q6NiqHNVjbAYZU.roa (hash: jQEomOlSvY4s8mgJ4+q3cKFP031XgY4ZDEypZ2ab0XY=) 8: QaIOKbnLhv0FBwr6_gZMcRUUWWg.roa (hash: BMFsOeiNuY49ojsyecDmxR9mnhel+ZMb42FzYYuLqW4=) 9: WhADIH61bkJ2leuk_zArifd_fK0.roa (hash: BbhmWA4WKgNmNImPrf4BgLaJQFe/cOoj0PIkA8fbtMo=) 10: Ygn_c8zbC36xqFlDHNWeV-WM8pU.roa (hash: CXih/mSxLCAOHxPVZ72EgZHKzViKS2T68SjIziUjdEM=) 11: k71425zZrgvZnNmix7lRrfFGz8M.roa (hash: PiD2EpNiloJo/j8uv2nAjNLT1tlEQH/8b4eKQtnzMqI=) 12: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: GNURafDGuNg6cCZCfhZjUaRSkxu/HEnwFeuRWzIrqbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:dd:01:97:c2:cc:e5:a3:1e:8a:14:dc:a8:c4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Apr 17 03:01:26 2026 GMT Not After : Apr 18 03:01:26 2026 GMT Subject: CN=76e8f343d2b350cf83d53b2a97d3c7beed4a17c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:26:ee:9b:c7:f7:e8:cc:f2:9d:d5:39:cf: ad:8d:ed:52:9f:34:49:36:97:cd:80:26:e7:76:5e: b3:10:00:b6:a2:e0:be:23:ec:11:c5:60:3b:45:b7: 16:a3:a2:fe:71:18:b0:2f:bf:be:e3:69:a8:6b:21: c0:3a:80:3f:44:3b:01:fe:df:0f:ae:21:7d:45:44: bf:46:b7:a0:d1:4c:40:d9:a0:f0:23:b2:ac:68:a5: 01:25:28:e7:a6:52:3c:c7:48:41:5d:57:e4:c0:10: b1:1b:02:31:80:e3:4f:44:a8:9b:a4:69:9b:86:7c: c5:40:66:61:26:53:17:c7:44:ef:c2:3f:cb:fe:74: b9:82:d4:35:eb:92:c9:52:26:44:8a:b4:4d:aa:1b: ef:34:35:8f:9a:a3:d4:8b:76:be:65:a8:d7:b9:94: 1c:9a:e4:a4:9a:9c:66:98:a2:fc:bf:c8:69:e5:80: ea:5b:89:fb:6b:a8:88:e1:b0:e7:8a:79:9a:1d:ef: db:29:3d:3c:e7:55:7d:bb:5b:35:cd:4e:b0:d9:6f: 90:74:d2:27:f5:25:8a:13:ad:05:e6:cc:cb:29:02: 00:09:8e:40:bf:5d:6f:06:ad:b9:00:6a:39:85:bd: 65:d4:38:1c:cc:da:c5:db:3f:51:fb:0b:25:82:62: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E8:F3:43:D2:B3:50:CF:83:D5:3B:2A:97:D3:C7:BE:ED:4A:17:C6 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ad:53:59:65:6f:1e:78:cd:52:1d:0b:40:22:67:35:fa:44: 5e:ae:65:a3:1c:7f:79:aa:3d:60:45:a0:2b:ed:2c:fc:ec:d4: e3:34:a0:6e:36:3d:f6:a1:88:a0:ea:e6:f4:b5:60:72:50:60: e6:49:17:18:6a:92:83:39:d7:ad:56:dc:be:1f:9a:ad:f7:7c: b9:1e:ba:7b:9f:f0:20:86:9e:4d:95:41:54:ef:29:55:27:cd: 79:a2:78:fc:d8:1f:4e:21:56:1a:f2:5e:9f:e0:5f:bd:47:40: 43:be:a6:ff:a2:4d:c4:0a:75:1c:fa:68:b9:ec:ab:ff:71:3a: 9e:cf:68:9c:ef:20:98:0e:f3:25:3e:22:d4:87:65:9c:28:88: 42:c8:8e:0f:fa:b6:34:cf:0c:a0:89:72:59:60:a8:7e:e8:13: 29:a5:d4:0f:4e:2f:f9:c1:be:f3:c5:1a:6d:5c:a1:c3:d6:f6: 3e:18:1f:32:42:cf:87:32:4b:ba:cc:e4:77:23:4f:2e:62:9e: dc:7e:b0:f1:a8:39:f0:14:02:57:7b:c1:88:b6:5e:1d:61:55: cd:32:65:60:07:7b:b9:45:61:86:89:db:e6:0d:09:bc:47:17: 93:bf:95:6d:ad:9d:20:06:db:23:52:a7:6a:94:30:65:88:38: a1:65:f4:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYt0Bl8LM5aMeihTcqMRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjYwNDE3MDMwMTI2WhcNMjYwNDE4MDMwMTI2WjAzMTEwLwYDVQQD Eyg3NmU4ZjM0M2QyYjM1MGNmODNkNTNiMmE5N2QzYzdiZWVkNGExN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquUm7pvH9+jM8p3VOc+tje1SnzRJ NpfNgCbndl6zEAC2ouC+I+wRxWA7RbcWo6L+cRiwL7++42moayHAOoA/RDsB/t8P riF9RUS/Rreg0UxA2aDwI7KsaKUBJSjnplI8x0hBXVfkwBCxGwIxgONPRKibpGmb hnzFQGZhJlMXx0Tvwj/L/nS5gtQ165LJUiZEirRNqhvvNDWPmqPUi3a+ZajXuZQc muSkmpxmmKL8v8hp5YDqW4n7a6iI4bDninmaHe/bKT0851V9u1s1zU6w2W+QdNIn 9SWKE60F5szLKQIACY5Av11vBq25AGo5hb1l1DgczNrF2z9R+wslgmIIPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbo80PSs1DPg9U7KpfTx77tShfGMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiq1TWWVv HnjNUh0LQCJnNfpEXq5loxx/eao9YEWgK+0s/OzU4zSgbjY99qGIoOrm9LVgclBg 5kkXGGqSgznXrVbcvh+arfd8uR66e5/wIIaeTZVBVO8pVSfNeaJ4/NgfTiFWGvJe n+BfvUdAQ76m/6JNxAp1HPpoueyr/3E6ns9onO8gmA7zJT4i1IdlnCiIQsiOD/q2 NM8MoIlyWWCofugTKaXUD04v+cG+88UabVyhw9b2PhgfMkLPhzJLuszkdyNPLmKe 3H6w8ag58BQCV3vBiLZeHWFVzTJlYAd7uUVhhonb5g0JvEcXk7+Vba2dIAbbI1Kn apQwZYg4oWX0Sg== -----END CERTIFICATE-----Generated at Fri Apr 17 13:27:03 2026 by rpki-client