$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: Ad+zs4L3TfQj7DyqsM2KE2rwH9qHWjOT8qBTx1361lU= Subject key identifier: C6:96:4B:77:66:25:43:8D:5A:ED:1F:1A:18:AD:E4:E1:AE:BE:F4:B2 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019D984FA4D2A2D189F0C7100DE6D1232E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 1110 Signing time: Thu 16 Apr 2026 22:00:49 +0000 Manifest this update: Thu 16 Apr 2026 22:00:49 +0000 Manifest next update: Fri 17 Apr 2026 22:00:49 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: c7Rg7zfN5oOoceKbb3lJ3SxulE5he/0Cm7Fqi6wSHpk=) 7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=) 9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 10: qOS44k4K1WSKtUKGLEhRxJxPEas.roa (hash: FW03t2tk2X1t0JN65p0CDI9DvEztasvMAKi+nwmwwnw=) 11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:4f:a4:d2:a2:d1:89:f0:c7:10:0d:e6:d1:23:2e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Apr 16 22:00:49 2026 GMT Not After : Apr 17 22:00:49 2026 GMT Subject: CN=c6964b776625438d5aed1f1a18ade4e1aebef4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:cf:b8:a9:4f:a4:8c:09:fd:8c:c7:6e:a3: 0c:cb:36:99:4b:ae:14:ef:7d:be:93:4e:53:34:22: 65:4c:94:e8:62:7b:0b:a1:b5:0e:31:7c:a2:f8:78: 6b:3b:10:c9:d5:76:c5:3e:7d:8a:0c:00:2d:1a:84: ae:93:42:90:23:dc:52:c8:80:49:d7:9a:88:47:e7: 9a:a1:ce:f8:b3:29:94:d1:38:5f:17:db:08:f0:3f: 7b:30:49:27:23:df:3b:04:ca:88:11:25:4b:f7:bf: 51:ad:79:ac:e6:db:7b:eb:9d:fd:d0:c0:b7:a1:d0: 64:49:90:fe:1c:a8:08:cf:6c:55:48:17:32:28:b2: a5:05:2e:1f:8d:71:02:bc:de:f2:ff:c3:1e:c6:63: 5f:c7:2f:ae:11:11:eb:62:42:da:76:61:bb:f6:5f: 5a:f5:41:f0:0a:72:dd:0b:f8:4e:af:be:5f:6c:fe: fb:b0:1f:ae:5f:fa:e5:69:a3:d4:87:88:6f:e2:4e: 6f:f9:16:28:6f:2f:29:d5:33:44:a4:39:ba:e3:4e: 83:5a:a0:fb:ba:f4:3c:88:fb:7c:4a:2f:81:65:35: b7:5e:b7:25:4c:cc:80:bd:7a:f2:82:7c:64:a2:8b: fe:d2:77:b5:9b:45:c3:f7:7c:68:d4:00:aa:04:46: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:96:4B:77:66:25:43:8D:5A:ED:1F:1A:18:AD:E4:E1:AE:BE:F4:B2 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9a:39:68:13:17:48:1c:c5:d5:05:05:ee:64:51:35:54:48: 1a:a6:db:34:8d:46:4e:4f:e3:15:aa:a4:25:84:c3:7f:65:de: 57:35:d9:6d:01:c8:aa:50:69:3d:44:fa:1a:f4:33:de:9e:86: e1:fb:f2:00:7d:96:24:a2:1f:2e:dc:da:dd:fd:46:74:95:7d: b3:57:9d:9e:4c:0b:0a:27:2c:9b:ac:7c:a2:59:14:c1:08:24: f5:d2:06:17:ab:4e:46:c4:81:7b:3b:da:62:9c:c0:83:eb:95: 56:9b:1d:8b:54:eb:34:2f:42:81:d3:f6:30:a8:3d:b1:42:d0: d2:cb:ab:31:a5:19:bc:15:3f:f5:5d:a8:fd:76:88:2f:22:3a: d4:0d:24:11:cf:98:19:a4:72:15:53:6c:a1:6b:a5:e7:d8:08: a3:dd:ad:7d:64:fd:41:3c:7f:ef:70:b7:3b:22:f7:b4:d5:4e: 3d:fc:be:42:f9:4c:ea:27:73:1e:ee:19:13:6e:d6:63:8b:4c: cd:49:68:68:fd:1e:f3:72:f7:0d:f5:fa:c1:8e:f3:52:4b:fe: 25:92:d7:2a:78:ba:fa:73:81:e7:a0:53:2c:ce:ce:f7:dd:77: 62:57:44:cf:45:f2:85:2d:0b:90:31:62:83:13:2d:55:f0:e4: ee:6c:ff:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YT6TSotGJ8McQDebRIy5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwNDE2MjIwMDQ5WhcNMjYwNDE3MjIwMDQ5WjAzMTEwLwYDVQQD EyhjNjk2NGI3NzY2MjU0MzhkNWFlZDFmMWExOGFkZTRlMWFlYmVmNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIjPuKlPpIwJ/YzHbqMMyzaZS64U 732+k05TNCJlTJToYnsLobUOMXyi+HhrOxDJ1XbFPn2KDAAtGoSuk0KQI9xSyIBJ 15qIR+eaoc74symU0ThfF9sI8D97MEknI987BMqIESVL979RrXms5tt765390MC3 odBkSZD+HKgIz2xVSBcyKLKlBS4fjXECvN7y/8MexmNfxy+uERHrYkLadmG79l9a 9UHwCnLdC/hOr75fbP77sB+uX/rlaaPUh4hv4k5v+RYoby8p1TNEpDm6406DWqD7 uvQ8iPt8Si+BZTW3XrclTMyAvXrygnxkoov+0ne1m0XD93xo1ACqBEauvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaWS3dmJUONWu0fGhit5OGuvvSyMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpo5aBMX SBzF1QUF7mRRNVRIGqbbNI1GTk/jFaqkJYTDf2XeVzXZbQHIqlBpPUT6GvQz3p6G 4fvyAH2WJKIfLtza3f1GdJV9s1ednkwLCicsm6x8olkUwQgk9dIGF6tORsSBezva YpzAg+uVVpsdi1TrNC9CgdP2MKg9sULQ0surMaUZvBU/9V2o/XaILyI61A0kEc+Y GaRyFVNsoWul59gIo92tfWT9QTx/73C3OyL3tNVOPfy+QvlM6idzHu4ZE27WY4tM zUloaP0e83L3DfX6wY7zUkv+JZLXKni6+nOB56BTLM7O9913YldEz0XyhS0LkDFi gxMtVfDk7mz/+Q== -----END CERTIFICATE-----Generated at Fri Apr 17 03:22:52 2026 by rpki-client