$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: 0/sYPKgwRn0Z7MbW9S7qYH7Wr7/DG6M+8rmR7f9XwUI= Subject key identifier: C2:DD:67:DC:E8:DB:E0:D1:7C:CC:7B:36:E6:9E:03:7A:26:64:F8:38 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019D99D0D36C290A6B60BEE7E47C5219B3C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 18D4 Signing time: Fri 17 Apr 2026 05:01:32 +0000 Manifest this update: Fri 17 Apr 2026 05:01:32 +0000 Manifest next update: Sat 18 Apr 2026 05:01:32 +0000 Files and hashes: 1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=) 5: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 6: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=) 7: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 8: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: DXoqkHaOfLzO8yDCFqxqd+Ds/BxzE85dSWOQIslgjRg=) 9: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=) 10: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=) 11: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:d0:d3:6c:29:0a:6b:60:be:e7:e4:7c:52:19:b3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Apr 17 05:01:32 2026 GMT Not After : Apr 18 05:01:32 2026 GMT Subject: CN=c2dd67dce8dbe0d17ccc7b36e69e037a2664f838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8d:e4:e0:10:bc:2b:6f:3d:ac:58:c8:c8:88: 13:49:a1:60:ae:70:cb:19:3d:64:96:90:7e:7b:de: 56:1f:a2:b4:72:76:20:fe:6a:83:66:c5:91:81:53: aa:1e:35:f3:21:b5:d2:b6:f6:0a:86:09:7e:9a:64: 61:f1:66:39:31:c5:c9:40:be:c5:e4:47:65:9d:2b: 00:17:0a:3b:b0:35:2c:e4:1b:8d:b6:6f:39:b4:2c: ea:ed:75:fd:c0:19:8f:0b:27:2e:4d:66:fe:d8:49: 7a:8e:3b:d1:66:6f:47:ce:7d:95:80:71:6a:5b:20: 29:92:9c:a7:ab:a7:61:b7:98:6d:c6:ea:16:26:b1: f2:4e:9a:e2:d4:a4:f1:a4:c9:fa:6f:fb:6a:d3:f4: 7d:af:e7:d8:a4:25:9e:ba:19:99:eb:f9:75:97:53: da:ac:8d:a4:fd:7e:0f:8e:8f:1b:94:1d:39:f8:ba: 5e:3e:8d:00:69:81:2e:3f:f1:f7:43:23:94:0e:e5: 66:a9:a2:fb:f9:52:9d:84:60:85:71:64:fe:21:81: 60:f6:b3:e0:c5:9c:64:32:8b:a2:07:bd:bb:b3:a3: 5d:db:b8:53:36:fa:be:38:c8:26:8b:4a:de:6c:56: 98:15:35:b2:63:28:0a:6b:6a:cf:d1:5f:0f:80:70: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DD:67:DC:E8:DB:E0:D1:7C:CC:7B:36:E6:9E:03:7A:26:64:F8:38 X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:bf:02:76:9f:a8:21:f6:84:bc:fd:a0:ac:c9:a0:5d:14:9c: 56:bc:ca:a2:64:ab:b1:a2:17:e0:90:ae:58:ac:a3:df:87:29: 1c:6e:eb:5c:cc:dd:fa:32:5d:5e:a4:40:bc:bf:40:17:90:30: fd:a2:a4:ae:7f:b1:63:ae:63:21:10:b3:df:3b:90:41:b9:a6: 29:46:d8:30:51:ba:b4:41:14:55:61:43:da:18:bc:8b:5a:93: 66:c3:a9:d7:0f:fa:3c:29:dc:5d:5b:5f:53:0f:00:e5:f8:83: 28:27:c5:1c:08:e3:fd:8c:77:3f:cb:79:ba:df:56:3a:c4:87: 53:1f:e2:74:8c:d9:7e:3a:f4:4c:91:0a:5c:d3:d3:0e:2d:de: 51:ec:24:c2:26:07:20:4d:b2:87:ad:81:bf:f5:30:cc:9c:47: 2d:90:5a:be:fd:e0:ab:e2:24:52:48:74:41:a4:e4:ea:70:22: 7f:49:99:c2:89:f5:c0:6c:20:8e:db:26:4e:e9:d1:b6:91:4d: 47:6e:33:c5:bf:29:1a:3d:7d:79:19:30:b0:cd:5c:1b:7a:e1: c6:cd:e8:84:b5:12:ec:1f:a3:6e:32:bb:69:45:3e:fe:56:d2: 16:31:01:ab:bb:d9:e3:34:ae:3d:79:54:d8:97:8e:c1:a6:18: cf:77:ab:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Z0NNsKQprYL7n5HxSGbPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwNDE3MDUwMTMyWhcNMjYwNDE4MDUwMTMyWjAzMTEwLwYDVQQD EyhjMmRkNjdkY2U4ZGJlMGQxN2NjYzdiMzZlNjllMDM3YTI2NjRmODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I3k4BC8K289rFjIyIgTSaFgrnDL GT1klpB+e95WH6K0cnYg/mqDZsWRgVOqHjXzIbXStvYKhgl+mmRh8WY5McXJQL7F 5EdlnSsAFwo7sDUs5BuNtm85tCzq7XX9wBmPCycuTWb+2El6jjvRZm9Hzn2VgHFq WyApkpynq6dht5htxuoWJrHyTpri1KTxpMn6b/tq0/R9r+fYpCWeuhmZ6/l1l1Pa rI2k/X4Pjo8blB05+LpePo0AaYEuP/H3QyOUDuVmqaL7+VKdhGCFcWT+IYFg9rPg xZxkMouiB727s6Nd27hTNvq+OMgmi0rebFaYFTWyYygKa2rP0V8PgHCbrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLdZ9zo2+DRfMx7NuaeA3omZPg4MB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABL8Cdp+o IfaEvP2grMmgXRScVrzKomSrsaIX4JCuWKyj34cpHG7rXMzd+jJdXqRAvL9AF5Aw /aKkrn+xY65jIRCz3zuQQbmmKUbYMFG6tEEUVWFD2hi8i1qTZsOp1w/6PCncXVtf Uw8A5fiDKCfFHAjj/Yx3P8t5ut9WOsSHUx/idIzZfjr0TJEKXNPTDi3eUewkwiYH IE2yh62Bv/UwzJxHLZBavv3gq+IkUkh0QaTk6nAif0mZwon1wGwgjtsmTunRtpFN R24zxb8pGj19eRkwsM1cG3rhxs3ohLUS7B+jbjK7aUU+/lbSFjEBq7vZ4zSuPXlU 2JeOwaYYz3erlw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:22 2026 by rpki-client