$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: 5SPOUoHeEZ/02c2S79ytmMv5Gguf1UIYl9TBmI8kdMY= Subject key identifier: 4F:D8:70:84:92:2C:47:C7:7A:F7:F0:54:7B:0B:BD:24:F8:BC:35:35 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019D999964582A894988FC5236D0338BD56F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 18C2 Signing time: Fri 17 Apr 2026 04:00:59 +0000 Manifest this update: Fri 17 Apr 2026 04:00:59 +0000 Manifest next update: Sat 18 Apr 2026 04:00:59 +0000 Files and hashes: 1: 0_H--D3ld_V5A2GDwFkKX4GOiA0.roa (hash: 4e5kO9YfPo607NKs0GfVmGK8Ay03F7orhMQubGrK5s8=) 2: 2Y22JjtWrl0_nviPCh47UcoiEMc.roa (hash: MjixCwl1roku3r8M7cAmmfjxaUIrhcvJpiUdNlV6IQQ=) 3: 7aJymM8-A-Vzxrith_gpYUCnxLA.roa (hash: yavsVrmsFDM2twygwL9ROfhNDdkXtjYh0veEc5aPL6U=) 4: BREu-oLiWRVnvmr0OZpze-1yZho.roa (hash: JOSLUiFQMXinZ2s3xJFw5vOALrZZO+Y0VQuZomqNcNc=) 5: KQsPApaYWV1_80rHUTYo4kduGEc.roa (hash: DMlh9LVsGQgoH2sC6mgiD6McwaNhSBUcv3JC9I342EY=) 6: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: ShP0KGj3D8dSZQE9/ZdDxwlKBTv+62MhZa4fJZ1nvi0=) 7: QWYP1a7mE-901Npm0STCw-0_494.roa (hash: GGXXSRYOhg9nYn3L4Ohy/bvCK7SIobkN33noxERxNSE=) 8: TTEzQtE5d70mBmiMli4rrHXXguQ.roa (hash: xIxbskYOAuc9Yjyt/8RKTk7K32KNqi0KQcR/yqDrqdI=) 9: XiniKmHk48PTd4AWdTNpS7pWYPM.roa (hash: LdHpQkrTcb3/m2EigJdifn4oDDnwzMObaFnPm4GQZsE=) 10: ajM6u9AhobNFWsjqV0zszbZBQgg.roa (hash: 9dpjav4k95AK45D3gY5gAwzQc5Jmp0J5EfW5NA6MQrY=) 11: dal6AFPAMOKunkfF7hTY8Cuz5HU.roa (hash: IVF4Tz8JdO1RxYBDwDE4cvUkOAHOkcCD98baar1MrRo=) 12: hRwQ4mV8u9tsYeBBJi9cjl-qxEg.roa (hash: Z+XgNcTxGhoujnKCI9mZu3tfZCPpFoVHO4a9tPmkGVA=) 13: m7yZ_UyERPPI7rtLGNSBX9Jm9bw.roa (hash: ykcmm9r12Ob1/PzXbUDHvDBzZdTDZhIzOR7w4XuLSwc=) 14: qxewd6X7cZwHTA-zQMlA_OAvlN8.roa (hash: Ry7YnXFLSUjxQaaprtnh0Xvr7Lu/H9g4ex/4yimbRx4=) 15: shE5nirJjfzwtVvRNs6B8132Y90.roa (hash: bZPp9AYR6VCS07rIaJOgsQumohQ23Ohhw0oW9Q96CQ4=) 16: uRrZsstrzGEOJvLMKb6O233tS-U.roa (hash: hfakJlnSmscUlq1SwhM8hNCbJeeub/2zpsFlue2e450=) 17: wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa (hash: Ya4gfqovf3JM8yFavds8OzJvokLnz9/3YHuh2owqYdI=) 18: y-LHl9JCf1vCgH9ww0oXT09BT3E.roa (hash: U2dDyow3uUPlXZ81c884FwuRrB1qQId+nf/6dQa9SLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:99:64:58:2a:89:49:88:fc:52:36:d0:33:8b:d5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Apr 17 04:00:59 2026 GMT Not After : Apr 18 04:00:59 2026 GMT Subject: CN=4fd87084922c47c77af7f0547b0bbd24f8bc3535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:91:9f:44:ec:91:fe:f5:06:7b:9a:cc:50: ca:b4:63:3e:62:3b:a4:b1:c1:19:32:68:6b:b7:75: 77:47:99:16:2e:ef:ce:13:40:4d:f6:dd:5e:9a:c9: 08:0a:83:a3:02:fc:c5:e7:c1:34:3b:b7:b1:b1:8a: 80:fb:23:ba:2b:7f:d9:ca:57:20:79:ed:95:a0:58: d6:04:a9:b1:a9:96:ef:b2:28:e6:3e:4c:26:94:46: 23:bf:4e:a2:19:84:ee:8b:d5:03:18:9e:9a:2b:19: a3:e3:e4:48:2a:4a:a1:ab:47:0a:16:d4:1e:71:2d: 77:3f:e1:d7:4f:d3:fd:c5:c8:4a:5a:09:e5:b0:36: 39:fd:89:e5:4c:9d:ae:68:b4:e4:62:d0:6c:48:58: 64:21:c3:ba:58:4f:ba:e7:90:c3:d9:94:cb:d3:e8: b0:31:23:09:7c:42:e5:58:8d:88:11:6d:be:0f:e5: 88:d8:55:bb:89:bb:3f:9b:3e:0f:66:76:c8:59:49: 3a:50:34:ee:cf:51:9f:32:08:65:3c:32:f8:2f:3b: e3:22:a8:f8:b3:2f:ff:d1:34:70:9d:a5:76:5e:6a: 61:4d:4c:66:e8:82:e5:f8:0e:6d:71:0d:63:f7:f2: 44:9c:79:8d:38:30:c4:d7:5f:de:a7:7b:dc:68:20: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D8:70:84:92:2C:47:C7:7A:F7:F0:54:7B:0B:BD:24:F8:BC:35:35 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:51:7b:39:fa:77:88:b0:18:69:0a:e9:7e:99:32:13:b8:3f: f2:95:a4:37:33:a9:12:8a:4c:40:73:e2:9a:54:91:0b:77:42: ca:9e:a7:60:04:18:3c:38:50:6a:53:8e:92:d4:37:4f:4e:08: 76:fb:32:1b:83:0f:8f:ab:07:cd:94:47:5f:30:36:5c:c1:b7: 9d:b3:70:e0:dc:25:ef:29:bd:22:ca:d9:ee:cf:87:60:3c:c6: 15:44:27:cf:61:13:08:73:de:d2:24:49:bb:c2:3f:75:0e:b3: ec:c2:bd:b0:8f:91:04:13:c4:64:43:8e:5e:c6:9d:de:c7:1f: 04:00:ef:aa:60:35:74:b2:ad:46:48:f2:48:85:89:8a:a5:67: e8:31:a7:0d:05:6f:67:5c:15:e7:09:f7:12:bf:15:b2:2d:fd: f3:75:53:7c:2e:97:fd:01:68:27:c6:32:98:41:eb:25:5c:08: 50:58:b3:53:0e:b1:23:79:17:23:c1:f0:c0:c8:b4:9f:59:53: 2a:5a:2f:3c:8b:c5:fa:61:d8:ef:74:4a:50:f9:69:1e:77:3c: 07:d4:04:a2:22:57:d3:72:f8:8b:32:61:3a:f9:1b:bc:c7:67: 25:b5:9f:5b:1b:5d:23:fc:7e:12:94:91:31:c9:6d:13:4c:67: c0:a9:62:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmWRYKolJiPxSNtAzi9VvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwNDE3MDQwMDU5WhcNMjYwNDE4MDQwMDU5WjAzMTEwLwYDVQQD Eyg0ZmQ4NzA4NDkyMmM0N2M3N2FmN2YwNTQ3YjBiYmQyNGY4YmMzNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcaRn0Tskf71BnuazFDKtGM+Yjuk scEZMmhrt3V3R5kWLu/OE0BN9t1emskICoOjAvzF58E0O7exsYqA+yO6K3/Zylcg ee2VoFjWBKmxqZbvsijmPkwmlEYjv06iGYTui9UDGJ6aKxmj4+RIKkqhq0cKFtQe cS13P+HXT9P9xchKWgnlsDY5/YnlTJ2uaLTkYtBsSFhkIcO6WE+655DD2ZTL0+iw MSMJfELlWI2IEW2+D+WI2FW7ibs/mz4PZnbIWUk6UDTuz1GfMghlPDL4LzvjIqj4 sy//0TRwnaV2XmphTUxm6ILl+A5tcQ1j9/JEnHmNODDE11/ep3vcaCDG3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/YcISSLEfHevfwVHsLvST4vDU1MB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFF7Ofp3 iLAYaQrpfpkyE7g/8pWkNzOpEopMQHPimlSRC3dCyp6nYAQYPDhQalOOktQ3T04I dvsyG4MPj6sHzZRHXzA2XMG3nbNw4Nwl7ym9IsrZ7s+HYDzGFUQnz2ETCHPe0iRJ u8I/dQ6z7MK9sI+RBBPEZEOOXsad3scfBADvqmA1dLKtRkjySIWJiqVn6DGnDQVv Z1wV5wn3Er8Vsi3983VTfC6X/QFoJ8YymEHrJVwIUFizUw6xI3kXI8HwwMi0n1lT KlovPIvF+mHY73RKUPlpHnc8B9QEoiJX03L4izJhOvkbvMdnJbWfWxtdI/x+EpSR McltE0xnwKlivQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:17:58 2026 by rpki-client