$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: seG6aShLCjczRH/Ql1KmS/NKpyiH8f67g25UKv4qnaQ= Subject key identifier: 30:F2:67:ED:2C:04:78:D4:40:1A:26:5D:B9:17:6C:29:CB:E4:DC:0C Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019DA41D089EFE48020546D01A3A86A00E52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 18D1 Signing time: Sun 19 Apr 2026 05:00:59 +0000 Manifest this update: Sun 19 Apr 2026 05:00:59 +0000 Manifest next update: Mon 20 Apr 2026 05:00:59 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: /sgjzeCr+tFhw3Z3ZarrLE6odL7/BZXgle1MKd4YxHI=) 2: 4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa (hash: 37kfxzMZjAEGlX1IGqlGrRZxkEO+b+KVXD2c+rB8lAQ=) 3: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=) 4: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=) 5: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=) 6: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=) 7: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=) 8: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=) 9: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=) 10: qF5xd0E9VHjEoVDgrR2EV2reNkg.roa (hash: +LVENHANP4Wm2qt1oX01yx6cEEPM3z4kpbtQOwe00sQ=) 11: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=) 12: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:1d:08:9e:fe:48:02:05:46:d0:1a:3a:86:a0:0e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Apr 19 05:00:59 2026 GMT Not After : Apr 20 05:00:59 2026 GMT Subject: CN=30f267ed2c0478d4401a265db9176c29cbe4dc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a6:d2:bf:bf:b7:4c:cf:9d:5b:69:ae:88:65: 2f:60:16:8f:c3:8c:79:c7:fc:c0:57:6a:d7:b9:54: bc:81:92:94:be:df:6d:23:4f:09:dc:ed:72:d2:be: c6:19:62:5b:9f:0b:fa:38:09:12:cd:21:ea:cf:ae: 07:02:35:af:ec:8d:17:b4:56:f4:35:7a:91:1f:8f: 99:8f:74:1c:6e:63:c4:29:88:fa:5a:b9:93:0a:3e: c9:94:3a:d2:2c:66:1d:91:83:65:16:3a:bb:49:be: ef:18:ef:4f:26:16:01:a0:4d:dc:1f:97:bd:20:85: 0f:1b:56:ee:48:02:1b:e3:f5:42:da:55:f1:2e:30: 29:3a:b1:6a:2a:57:de:3a:5c:aa:5d:b5:65:e8:d7: 18:cb:87:68:79:21:e1:2b:45:ad:7d:89:32:fe:43: e7:35:7f:ee:0c:49:94:98:c0:83:42:d9:a8:f3:a4: d8:99:05:ba:de:f2:70:db:72:ba:ad:28:6f:c7:24: b3:7b:a0:11:9c:c3:55:38:47:1f:27:c4:21:36:6b: 07:33:bb:81:70:22:f0:1c:93:e6:73:b1:8e:27:70: 0f:70:1c:12:ee:c7:05:2f:6f:6c:ed:db:01:cb:61: e5:00:e4:af:47:69:26:4f:52:61:9a:51:1b:6b:c4: 45:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F2:67:ED:2C:04:78:D4:40:1A:26:5D:B9:17:6C:29:CB:E4:DC:0C X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d1:5d:ea:95:60:f3:3f:a0:75:c5:06:55:37:3d:18:09:79: 3b:f4:a9:06:d4:8d:9f:03:b3:f4:f5:31:11:02:4a:4a:ab:0e: 78:17:dd:1b:3d:d3:66:4c:bd:7d:d3:fa:f3:3b:87:10:f9:de: a9:91:79:2f:f0:7a:77:cb:19:29:ac:e6:95:4a:9b:dc:c8:e4: d4:95:8c:d1:49:a8:a9:0a:dd:2f:6d:7a:cb:60:46:c4:97:e3: 23:d0:d5:90:64:a1:c0:a2:2e:97:1b:2c:fe:6f:79:4f:95:9d: ce:73:93:9a:dc:f3:1e:59:f6:0e:51:87:0c:38:41:02:aa:ea: 0a:14:35:9d:0a:9d:e9:7c:62:12:75:53:fd:10:01:4a:7b:1a: da:cf:8a:26:8e:62:d4:dd:1c:b8:11:ff:19:4f:3f:b2:b1:95: 7a:5e:37:46:c5:1e:ae:4b:70:e0:8c:ee:d7:fa:fa:92:bb:06: 0b:3c:29:d5:62:b4:39:f1:ec:db:15:c7:db:3b:bf:90:76:63: 43:cf:dc:7b:22:ec:ba:f7:fc:52:9b:a8:10:28:9a:d2:70:f8: e1:18:63:29:3a:48:29:7d:5b:bc:56:9b:b7:c6:ca:d3:31:bc: 90:15:6e:c8:38:fe:e2:7d:f9:b0:f8:d0:ea:66:b4:67:64:bf: 32:c3:9b:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kHQie/kgCBUbQGjqGoA5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwNDE5MDUwMDU5WhcNMjYwNDIwMDUwMDU5WjAzMTEwLwYDVQQD EygzMGYyNjdlZDJjMDQ3OGQ0NDAxYTI2NWRiOTE3NmMyOWNiZTRkYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoabSv7+3TM+dW2muiGUvYBaPw4x5 x/zAV2rXuVS8gZKUvt9tI08J3O1y0r7GGWJbnwv6OAkSzSHqz64HAjWv7I0XtFb0 NXqRH4+Zj3QcbmPEKYj6WrmTCj7JlDrSLGYdkYNlFjq7Sb7vGO9PJhYBoE3cH5e9 IIUPG1buSAIb4/VC2lXxLjApOrFqKlfeOlyqXbVl6NcYy4doeSHhK0WtfYky/kPn NX/uDEmUmMCDQtmo86TYmQW63vJw23K6rShvxySze6ARnMNVOEcfJ8QhNmsHM7uB cCLwHJPmc7GOJ3APcBwS7scFL29s7dsBy2HlAOSvR2kmT1JhmlEba8RFFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDyZ+0sBHjUQBomXbkXbCnL5NwMMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9Fd6pVg 8z+gdcUGVTc9GAl5O/SpBtSNnwOz9PUxEQJKSqsOeBfdGz3TZky9fdP68zuHEPne qZF5L/B6d8sZKazmlUqb3Mjk1JWM0UmoqQrdL216y2BGxJfjI9DVkGShwKIulxss /m95T5WdznOTmtzzHln2DlGHDDhBAqrqChQ1nQqd6XxiEnVT/RABSnsa2s+KJo5i 1N0cuBH/GU8/srGVel43RsUerktw4Izu1/r6krsGCzwp1WK0OfHs2xXH2zu/kHZj Q8/ceyLsuvf8UpuoECia0nD44RhjKTpIKX1bvFabt8bK0zG8kBVuyDj+4n35sPjQ 6ma0Z2S/MsObtA== -----END CERTIFICATE-----Generated at Sun Apr 19 11:35:44 2026 by rpki-client