$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: XIYIjLpxItkfr5ePLjdUitM8MAaE4ZFyBBYiPjL0x1g= Subject key identifier: 78:DD:F9:C1:0E:B6:98:58:15:D0:B9:07:13:A3:11:9B:11:19:C3:FC Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019DA378E7D5DBE88F86CEDD731937688FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 18D9 Signing time: Sun 19 Apr 2026 02:01:43 +0000 Manifest this update: Sun 19 Apr 2026 02:01:43 +0000 Manifest next update: Mon 20 Apr 2026 02:01:43 +0000 Files and hashes: 1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=) 5: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 6: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=) 7: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 8: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: cV+TLakezYLHa4fvz+NbYEQs6QgwOAdvWw16LBTRxiE=) 9: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=) 10: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=) 11: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:78:e7:d5:db:e8:8f:86:ce:dd:73:19:37:68:8f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Apr 19 02:01:43 2026 GMT Not After : Apr 20 02:01:43 2026 GMT Subject: CN=78ddf9c10eb6985815d0b90713a3119b1119c3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ed:5f:d2:44:80:94:eb:ee:60:b0:3d:83:80: e0:2d:18:a6:db:ce:04:a4:05:b9:25:4f:f6:24:41: f9:cf:a6:13:53:46:11:5b:16:fc:62:e6:d1:ae:9b: 61:5b:48:a7:76:ad:ae:3e:35:d2:ec:6f:d6:fa:39: 5c:e3:d1:93:13:a7:1b:9f:ca:fb:0a:1a:62:02:d8: 91:f7:cc:5f:00:da:f8:6c:a1:60:74:db:bc:70:2a: a3:f9:f7:b5:a9:28:a6:63:c7:aa:86:3b:d5:9a:50: 15:a4:42:94:8e:a2:38:9d:e7:55:f9:83:15:8f:9c: 4b:8b:07:0f:50:96:81:54:2c:1c:94:dd:3f:79:9a: 62:af:2e:8b:5c:41:9d:93:c1:f3:c0:02:d4:b3:51: 11:54:0d:2b:b1:6f:4e:9c:d8:91:7f:03:4e:b1:7d: d1:34:73:5a:9c:65:64:ca:d9:21:a2:f3:ea:68:2e: 48:07:57:86:3e:a9:59:9f:f0:8e:ff:c0:16:bb:76: d8:67:96:cb:67:54:5a:f4:00:64:5c:3b:ff:da:93: 37:63:c7:f8:e4:4e:f2:ee:26:73:2a:82:b3:21:90: 3c:f1:00:64:75:bc:84:9d:fe:06:1c:f8:63:87:26: c2:2f:5f:07:4c:7e:b8:53:45:16:9c:28:ce:10:94: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DD:F9:C1:0E:B6:98:58:15:D0:B9:07:13:A3:11:9B:11:19:C3:FC X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:76:97:4c:c0:db:dd:05:59:38:94:0f:27:18:56:06:07:ad: 54:c5:57:2b:2d:71:43:44:b7:d5:d7:3a:0c:86:a0:95:6c:60: 2f:09:5d:cb:c6:07:cf:df:87:d1:59:be:55:99:1c:0d:82:e4: 64:60:d6:b9:52:64:db:f0:25:64:81:25:78:99:80:cf:69:bb: c3:37:cb:ae:f3:f6:a4:c4:87:5a:39:4d:8b:e3:9d:2e:9c:b1: 65:9f:a6:3a:a0:de:00:07:43:a6:af:6a:2f:18:3a:ef:5a:35: 93:16:3b:4b:04:fc:44:c3:a2:da:fb:e8:25:ae:14:88:db:3b: 9b:82:c4:0a:fa:db:50:c4:97:9b:39:e3:82:44:5c:ea:dd:3b: 31:a3:2c:27:a8:62:da:f6:a1:0a:2d:88:b1:bd:35:75:92:f9: 8b:1a:c5:6c:5d:f1:e2:1e:53:91:85:b0:90:00:44:d0:d9:66: 82:97:dd:c1:d2:82:22:77:fe:47:aa:f8:4e:28:c2:eb:a4:74: 46:3a:d5:9d:5a:bc:07:d2:5d:43:fc:c0:2e:5a:72:b9:ac:cd: 3d:f5:41:74:9f:66:54:63:6e:2d:07:84:32:a8:61:12:d1:74: d8:89:e4:3d:e3:9a:c2:0c:78:e1:7a:73:f3:52:4a:88:cc:7f: 1b:1a:4d:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jeOfV2+iPhs7dcxk3aI++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwNDE5MDIwMTQzWhcNMjYwNDIwMDIwMTQzWjAzMTEwLwYDVQQD Eyg3OGRkZjljMTBlYjY5ODU4MTVkMGI5MDcxM2EzMTE5YjExMTljM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e1f0kSAlOvuYLA9g4DgLRim284E pAW5JU/2JEH5z6YTU0YRWxb8YubRrpthW0indq2uPjXS7G/W+jlc49GTE6cbn8r7 ChpiAtiR98xfANr4bKFgdNu8cCqj+fe1qSimY8eqhjvVmlAVpEKUjqI4nedV+YMV j5xLiwcPUJaBVCwclN0/eZpiry6LXEGdk8HzwALUs1ERVA0rsW9OnNiRfwNOsX3R NHNanGVkytkhovPqaC5IB1eGPqlZn/CO/8AWu3bYZ5bLZ1Ra9ABkXDv/2pM3Y8f4 5E7y7iZzKoKzIZA88QBkdbyEnf4GHPhjhybCL18HTH64U0UWnCjOEJToDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjd+cEOtphYFdC5BxOjEZsRGcP8MB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHaXTMDb 3QVZOJQPJxhWBgetVMVXKy1xQ0S31dc6DIaglWxgLwldy8YHz9+H0Vm+VZkcDYLk ZGDWuVJk2/AlZIEleJmAz2m7wzfLrvP2pMSHWjlNi+OdLpyxZZ+mOqDeAAdDpq9q Lxg671o1kxY7SwT8RMOi2vvoJa4UiNs7m4LECvrbUMSXmznjgkRc6t07MaMsJ6hi 2vahCi2Isb01dZL5ixrFbF3x4h5TkYWwkABE0NlmgpfdwdKCInf+R6r4TijC66R0 RjrVnVq8B9JdQ/zALlpyuazNPfVBdJ9mVGNuLQeEMqhhEtF02InkPeOawgx44Xpz 81JKiMx/GxpN+w== -----END CERTIFICATE-----Generated at Sun Apr 19 08:52:22 2026 by rpki-client