$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: CjCAWr/81I35oXNWTA0sGXYuI8ip9CiRv61rWkG0sZE= Subject key identifier: 95:41:6D:02:6F:99:49:DB:ED:BF:0A:06:91:A6:62:F2:5C:E3:12:18 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019D9773804FF04DDCF13A409A7C98DDFA2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 18D2 Signing time: Thu 16 Apr 2026 18:00:22 +0000 Manifest this update: Thu 16 Apr 2026 18:00:22 +0000 Manifest next update: Fri 17 Apr 2026 18:00:22 +0000 Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=) 2: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=) 3: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=) 4: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=) 5: FGXifY4YNXSWwZi4QtD01XX8A_4.roa (hash: r3Yn9lbI97BgnohED52RZmDaF/H4yGegwCsX0vScc1U=) 6: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=) 7: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=) 8: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=) 9: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=) 10: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=) 11: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=) 12: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=) 13: iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa (hash: qHRlnH6xTrPGrh7Rcfy15Z1OzJA8rkrqC8qbXcCLhY0=) 14: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=) 15: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=) 16: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: vYRkYaI/3huMyI3Kwjd2K2BoijBChYjT3XAAZc3bCak=) 17: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 18:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:73:80:4f:f0:4d:dc:f1:3a:40:9a:7c:98:dd:fa:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Apr 16 18:00:22 2026 GMT Not After : Apr 17 18:00:22 2026 GMT Subject: CN=95416d026f9949dbedbf0a0691a662f25ce31218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:65:1c:c0:05:eb:6c:68:9c:d4:0b:eb:17:f3: a0:3b:0e:68:3d:02:31:50:e0:0c:d9:89:97:e2:18: 72:28:5c:d3:71:12:e6:7a:c7:6c:49:97:7d:a6:3f: 40:83:06:ff:ec:f2:11:31:99:06:86:3e:56:dd:3b: 0a:34:ff:ab:dd:ee:bf:9a:0c:6c:14:fd:bd:42:bc: f3:39:d8:e8:04:ac:bb:75:ef:22:b3:57:2f:34:c2: db:8f:a7:d9:5a:7d:04:3b:bb:51:2e:76:4c:2b:50: 3f:de:8e:94:e1:ab:1d:ac:8e:73:ab:ed:26:65:bc: 8a:27:5f:f3:71:fe:08:2f:0b:7e:b2:4e:3f:4e:33: 24:56:63:ae:32:48:f9:f9:a4:ad:e8:9c:7f:8a:9d: 79:ea:65:1b:74:d0:87:32:41:c1:42:10:33:77:d1: 4e:71:a1:14:a5:84:96:30:34:e2:67:3b:07:2e:6f: 6e:f2:85:56:08:93:8c:e8:ad:50:dc:68:ba:6c:49: 59:4e:1a:e9:6f:9a:c3:bc:3e:ee:4a:09:36:a0:c6: d9:2d:5c:f6:da:3c:b6:3a:ed:ae:ef:0d:79:5b:db: 86:e2:d6:c3:65:7d:cb:2c:83:6b:63:bd:80:63:31: 9d:0b:9a:3e:38:d0:2c:5a:94:e5:aa:14:ce:00:de: cf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:41:6D:02:6F:99:49:DB:ED:BF:0A:06:91:A6:62:F2:5C:E3:12:18 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:1b:8d:6e:a4:3c:f8:a5:8b:61:2a:d5:75:f3:4d:c2:7f:76: b8:77:d7:3f:24:e4:28:a5:84:8c:6d:5e:ef:4c:84:cd:b8:af: 92:0b:34:b7:49:d4:6c:fd:4f:02:13:27:26:25:3f:59:dc:a5: c8:96:8a:ca:93:86:f5:5a:75:09:dd:23:d7:cd:21:1e:61:9b: 43:57:79:6a:47:9d:3b:8b:99:4d:f1:a4:9f:a7:9d:7f:8e:27: 5b:cd:0f:d6:48:e5:db:5f:8e:df:10:ef:1f:f8:ed:7a:88:92: c4:d5:a8:bd:8b:ea:4b:a4:0d:ea:77:a1:1d:c5:f1:3c:8c:5c: 22:8a:0d:c9:89:72:30:bc:ca:14:f7:a3:29:34:b5:01:d7:84: 24:0e:09:e9:aa:66:2b:2e:2e:0b:ba:05:2f:ce:2e:ea:72:c9: de:fd:27:5e:d5:17:62:7f:c0:33:3d:55:14:3a:ce:e3:bb:ce: 94:ee:23:d0:70:1a:95:55:f3:ff:a7:8e:1f:9c:28:45:23:fd: 13:b5:c0:25:16:9c:37:87:a5:bb:8c:2b:50:13:00:6a:a5:cf: ad:fd:08:cf:b4:86:d5:ce:27:1c:f1:6d:09:d9:c4:39:1e:87: 0d:f1:a2:a1:fb:50:3f:1f:06:6d:64:b3:7f:7d:fa:c7:8d:3e: cd:09:41:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Xc4BP8E3c8TpAmnyY3fovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwNDE2MTgwMDIyWhcNMjYwNDE3MTgwMDIyWjAzMTEwLwYDVQQD Eyg5NTQxNmQwMjZmOTk0OWRiZWRiZjBhMDY5MWE2NjJmMjVjZTMxMjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmUcwAXrbGic1AvrF/OgOw5oPQIx UOAM2YmX4hhyKFzTcRLmesdsSZd9pj9Agwb/7PIRMZkGhj5W3TsKNP+r3e6/mgxs FP29QrzzOdjoBKy7de8is1cvNMLbj6fZWn0EO7tRLnZMK1A/3o6U4asdrI5zq+0m ZbyKJ1/zcf4ILwt+sk4/TjMkVmOuMkj5+aSt6Jx/ip156mUbdNCHMkHBQhAzd9FO caEUpYSWMDTiZzsHLm9u8oVWCJOM6K1Q3Gi6bElZThrpb5rDvD7uSgk2oMbZLVz2 2jy2Ou2u7w15W9uG4tbDZX3LLINrY72AYzGdC5o+ONAsWpTlqhTOAN7P2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVBbQJvmUnb7b8KBpGmYvJc4xIYMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhuNbqQ8 +KWLYSrVdfNNwn92uHfXPyTkKKWEjG1e70yEzbivkgs0t0nUbP1PAhMnJiU/Wdyl yJaKypOG9Vp1Cd0j180hHmGbQ1d5akedO4uZTfGkn6edf44nW80P1kjl21+O3xDv H/jteoiSxNWovYvqS6QN6nehHcXxPIxcIooNyYlyMLzKFPejKTS1AdeEJA4J6apm Ky4uC7oFL84u6nLJ3v0nXtUXYn/AMz1VFDrO47vOlO4j0HAalVXz/6eOH5woRSP9 E7XAJRacN4elu4wrUBMAaqXPrf0Iz7SG1c4nHPFtCdnEOR6HDfGioftQPx8GbWSz f336x40+zQlBTg== -----END CERTIFICATE-----Generated at Fri Apr 17 03:22:40 2026 by rpki-client