$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: uIaz59nrS+ZTKlNVuMoEpH21PyeBez4K0QI9xLqWlAE= Subject key identifier: 84:E4:5B:1D:16:85:10:2A:10:BB:57:24:2B:F0:00:23:9C:E2:96:70 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019D97E190AED46C0E84E22CDC6D6E4FCE1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 09F3 Signing time: Thu 16 Apr 2026 20:00:35 +0000 Manifest this update: Thu 16 Apr 2026 20:00:35 +0000 Manifest next update: Fri 17 Apr 2026 20:00:35 +0000 Files and hashes: 1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=) 2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=) 3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=) 4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=) 5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=) 6: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=) 7: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=) 8: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=) 9: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=) 10: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: Exposo8urg+wS2eoHmcOgVJnD0pdCMOigV19GJkZV68=) 11: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=) 12: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=) 13: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=) 14: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=) 15: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=) 16: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=) 17: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=) 18: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:e1:90:ae:d4:6c:0e:84:e2:2c:dc:6d:6e:4f:ce:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Apr 16 20:00:35 2026 GMT Not After : Apr 17 20:00:35 2026 GMT Subject: CN=84e45b1d1685102a10bb57242bf000239ce29670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:26:02:2a:48:98:8f:fb:bd:fa:e5:8a:e7: 7d:3d:7e:30:65:bf:c3:7d:a5:87:e9:6c:27:05:45: d6:b7:24:ab:de:75:2d:8d:3b:76:9a:19:59:26:be: a9:7c:df:8b:8b:60:3b:91:54:81:ae:c5:2d:c8:5d: c0:ce:ee:c1:bf:3d:ab:18:da:e8:42:6e:6c:80:64: 5e:58:f4:b8:09:42:f4:2b:9f:d4:c4:f5:31:44:14: 9f:ce:72:ae:49:57:61:67:b8:b6:99:08:0e:18:52: cd:0b:d5:a0:9a:81:dc:c1:3d:ef:b4:72:21:fa:9e: 4b:ed:91:3d:d5:ad:04:f1:cb:a2:3c:0f:d8:c5:58: 26:07:49:b7:eb:65:18:48:ab:4e:09:c0:dc:c2:b4: 8e:a9:4c:56:2e:f3:aa:a7:22:09:0e:8e:6e:b3:5d: 88:5f:5c:81:6a:a1:d6:10:7a:bb:e5:ba:7a:fc:76: 5d:54:ab:6a:33:85:c4:03:ff:4e:20:9e:21:fc:64: 2c:3a:38:b7:70:64:b4:2f:b3:4a:45:9d:19:04:a1: 3e:46:dc:a1:40:08:35:33:2b:03:a4:2c:a0:e1:be: 3c:64:33:53:c0:a7:a3:4b:af:05:42:8f:40:17:01: 75:c2:6c:90:80:3c:8d:aa:5d:b4:ae:c7:ce:0d:b4: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E4:5B:1D:16:85:10:2A:10:BB:57:24:2B:F0:00:23:9C:E2:96:70 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ea:ce:e2:f2:fc:43:74:1c:48:5a:58:9e:2d:dc:ef:66:4b: 7e:25:c1:2f:a2:74:11:8f:db:4d:3c:1a:b2:74:5f:1b:ac:31: 5a:e7:43:25:09:9c:da:a5:97:79:a4:bd:20:31:d6:7a:63:3e: 5f:d0:ec:a6:3e:77:44:06:6c:75:6f:6c:53:65:b3:f8:c0:cd: 1f:55:f0:96:f2:ce:c4:b2:5c:4f:fc:7c:86:45:3f:cc:3c:8f: d0:3d:a2:05:29:92:39:df:f8:c7:30:0a:8d:92:c3:0a:41:83: 00:35:dd:25:26:fa:89:57:19:c8:44:d0:15:dc:b7:68:64:e7: af:5f:c1:05:96:ad:86:2d:c1:7f:8d:b7:84:b0:90:17:ff:4d: 71:46:39:33:28:41:1e:de:2d:3f:6a:c1:8b:f4:3a:e1:85:9c: 3c:b5:21:f4:a9:ec:3d:b9:5a:9d:9a:01:f9:73:00:62:f3:01: ad:d8:aa:fc:57:56:90:14:f1:fb:95:a6:83:07:d3:85:39:71: bc:15:47:5f:25:8e:a6:2d:9f:85:13:aa:2e:1c:fa:75:ab:a0: 62:2c:fb:2b:0f:b9:dd:27:5c:b1:37:3b:4a:c9:3d:aa:c4:36: f5:2e:f6:02:71:94:0f:85:2e:47:1e:bb:0d:93:bf:2d:56:7e: c4:8d:56:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2X4ZCu1GwOhOIs3G1uT84bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwNDE2MjAwMDM1WhcNMjYwNDE3MjAwMDM1WjAzMTEwLwYDVQQD Eyg4NGU0NWIxZDE2ODUxMDJhMTBiYjU3MjQyYmYwMDAyMzljZTI5NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e8mAipImI/7vfrliud9PX4wZb/D faWH6WwnBUXWtySr3nUtjTt2mhlZJr6pfN+Li2A7kVSBrsUtyF3Azu7Bvz2rGNro Qm5sgGReWPS4CUL0K5/UxPUxRBSfznKuSVdhZ7i2mQgOGFLNC9WgmoHcwT3vtHIh +p5L7ZE91a0E8cuiPA/YxVgmB0m362UYSKtOCcDcwrSOqUxWLvOqpyIJDo5us12I X1yBaqHWEHq75bp6/HZdVKtqM4XEA/9OIJ4h/GQsOji3cGS0L7NKRZ0ZBKE+Rtyh QAg1MysDpCyg4b48ZDNTwKejS68FQo9AFwF1wmyQgDyNql20rsfODbQZRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITkWx0WhRAqELtXJCvwACOc4pZwMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeerO4vL8 Q3QcSFpYni3c72ZLfiXBL6J0EY/bTTwasnRfG6wxWudDJQmc2qWXeaS9IDHWemM+ X9Dspj53RAZsdW9sU2Wz+MDNH1XwlvLOxLJcT/x8hkU/zDyP0D2iBSmSOd/4xzAK jZLDCkGDADXdJSb6iVcZyETQFdy3aGTnr1/BBZathi3Bf423hLCQF/9NcUY5MyhB Ht4tP2rBi/Q64YWcPLUh9KnsPblanZoB+XMAYvMBrdiq/FdWkBTx+5WmgwfThTlx vBVHXyWOpi2fhROqLhz6daugYiz7Kw+53SdcsTc7Ssk9qsQ29S72AnGUD4UuRx67 DZO/LVZ+xI1WSw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:59:55 2026 by rpki-client