$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: NK2sryS8Qo/U3rAQKtE5lUSGoT6FtoXQfKGuUUPt8Tg= Subject key identifier: C3:87:E1:3A:F0:E0:3C:37:52:C8:19:BC:6B:8B:92:9D:27:B1:F8:F7 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019D98F53BACA16A2081E08ADE85810C38C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 18E8 Signing time: Fri 17 Apr 2026 01:01:41 +0000 Manifest this update: Fri 17 Apr 2026 01:01:41 +0000 Manifest next update: Sat 18 Apr 2026 01:01:41 +0000 Files and hashes: 1: 0D14gN2WiBa54cFbuKlrQUOrf8M.roa (hash: 2wB51bMRZ+T+HK/B9Edc9OpYAvR825v+i0duj5mr6/E=) 2: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=) 3: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=) 4: Go3pOTuap2_fsOG2Cy2Y4VT2pN0.roa (hash: 0oyx4eIX+vmWlDNgh2kGWbDg44/BIpYISvXYVe/lRmI=) 5: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=) 6: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=) 7: axdSVqIzRJIZuL4bUaXgsCZR0GA.roa (hash: o1y1RiYLt8sTd8RRJ89cjZcmfxt/0UhXCW4mXlZ2wPw=) 8: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=) 9: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: gtlF5ZBYUi5rhtRcHHmXzt5q7327frB0x4wNpM0DPT0=) 10: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=) 11: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=) 12: qtFUd8UrHAjg1CQzxCUVYh49r34.roa (hash: zeOnhH1WA+57cINQaOKMw3j5q8bJlC2Ele92zkBPv4I=) 13: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=) 14: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=) 15: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:f5:3b:ac:a1:6a:20:81:e0:8a:de:85:81:0c:38:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Apr 17 01:01:41 2026 GMT Not After : Apr 18 01:01:41 2026 GMT Subject: CN=c387e13af0e03c3752c819bc6b8b929d27b1f8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:f6:d4:99:fe:9b:24:5d:3d:29:71:40:41: 35:eb:75:b7:e5:a9:68:9d:4a:77:47:f5:78:20:dd: 2c:6d:36:f9:c9:ab:a3:32:95:93:8f:e9:20:44:e3: 9b:dc:b9:68:93:63:fc:1d:c0:3e:fb:e1:7b:4c:ef: bc:74:ae:04:82:6c:1e:b1:ac:4f:13:31:e4:be:c1: 25:ee:f1:90:f9:7e:11:21:1a:ff:8e:85:b4:e9:ff: 1c:d7:5e:1e:02:8e:92:87:61:cd:8e:2d:c2:d5:ba: 99:4e:c0:14:7f:39:78:d6:c6:a9:86:63:e7:50:b5: 2e:93:db:2f:d3:72:6c:c3:62:2a:7e:1e:6d:fb:7b: 66:da:56:bf:f0:dc:a9:5c:b2:5a:d5:e8:ec:03:bc: 64:ae:f2:97:91:b9:8c:15:8a:ef:ca:78:11:09:31: 61:66:08:87:1b:49:7d:27:e7:4e:5e:7d:33:d0:69: c3:fc:6f:a2:83:a9:b1:1b:bd:b5:f5:f4:8a:7d:4a: 28:bc:36:d4:6e:57:7e:b8:52:41:f5:b0:04:23:08: 53:5b:87:0d:7a:60:1a:66:2c:21:43:7f:07:7e:27: 93:b1:b1:7c:f0:cc:74:62:1e:49:85:ff:9f:68:af: 87:97:19:14:f2:92:16:09:f8:57:1b:cb:8c:5b:fc: 03:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:87:E1:3A:F0:E0:3C:37:52:C8:19:BC:6B:8B:92:9D:27:B1:F8:F7 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:68:8d:de:a2:a6:af:1e:e1:97:88:a5:70:0c:9e:13:2b:34: 71:cf:a5:2e:e8:48:bb:c9:a8:50:70:67:4f:3a:9b:1f:77:fe: cd:cc:23:25:9c:04:e0:02:f2:4c:0c:9b:68:ef:08:57:8b:a4: 1d:ec:28:ba:60:ca:00:48:54:dc:79:5b:d4:e0:eb:12:5a:58: 3f:8a:f4:cb:09:d1:51:00:37:f5:c0:f3:de:3f:c7:57:f2:ea: 48:e7:06:a8:d4:c6:c3:2c:03:85:3c:e2:1b:12:91:32:97:f6: cf:a0:8b:6c:dd:5f:52:f0:dc:2f:de:68:ae:64:b6:c8:b6:0b: 98:45:a3:a5:32:55:88:1a:35:72:4c:ea:44:f0:8c:0e:a5:79: 72:92:9c:b3:95:5e:69:a4:06:b6:28:9e:8c:0f:ca:90:e2:0d: d7:da:33:22:80:ed:8c:49:2b:19:14:dd:96:41:f6:fc:15:32: d6:ce:16:c3:7f:2a:9d:a5:18:77:5f:2c:78:38:77:f9:94:52: 84:dc:c3:a3:4f:e3:6e:bf:b4:a8:3a:a3:f2:f3:b1:b1:3a:54: e4:07:ad:2d:e1:06:d3:7e:e2:d0:6d:83:0d:af:c6:5d:96:e6: 98:30:51:63:eb:68:b1:ab:ad:39:f7:f6:64:78:61:96:2b:85: 2e:51:66:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Y9TusoWoggeCK3oWBDDjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjYwNDE3MDEwMTQxWhcNMjYwNDE4MDEwMTQxWjAzMTEwLwYDVQQD EyhjMzg3ZTEzYWYwZTAzYzM3NTJjODE5YmM2YjhiOTI5ZDI3YjFmOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNj21Jn+myRdPSlxQEE163W35alo nUp3R/V4IN0sbTb5yaujMpWTj+kgROOb3Llok2P8HcA+++F7TO+8dK4EgmwesaxP EzHkvsEl7vGQ+X4RIRr/joW06f8c114eAo6Sh2HNji3C1bqZTsAUfzl41saphmPn ULUuk9sv03Jsw2Iqfh5t+3tm2la/8NypXLJa1ejsA7xkrvKXkbmMFYrvyngRCTFh ZgiHG0l9J+dOXn0z0GnD/G+ig6mxG7219fSKfUoovDbUbld+uFJB9bAEIwhTW4cN emAaZiwhQ38HfieTsbF88Mx0Yh5Jhf+faK+HlxkU8pIWCfhXG8uMW/wDWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOH4Trw4Dw3UsgZvGuLkp0nsfj3MB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGiN3qKm rx7hl4ilcAyeEys0cc+lLuhIu8moUHBnTzqbH3f+zcwjJZwE4ALyTAybaO8IV4uk HewoumDKAEhU3Hlb1ODrElpYP4r0ywnRUQA39cDz3j/HV/LqSOcGqNTGwywDhTzi GxKRMpf2z6CLbN1fUvDcL95ormS2yLYLmEWjpTJViBo1ckzqRPCMDqV5cpKcs5Ve aaQGtiiejA/KkOIN19ozIoDtjEkrGRTdlkH2/BUy1s4Ww38qnaUYd18seDh3+ZRS hNzDo0/jbr+0qDqj8vOxsTpU5AetLeEG037i0G2DDa/GXZbmmDBRY+tosautOff2 ZHhhliuFLlFmOw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:27:39 2026 by rpki-client