$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: lYvLAdDvLG0sggdxe6eTuu3LETxv9iCRNX7EQyRkgHA= Subject key identifier: AF:93:C1:5B:EA:11:56:5A:DD:AF:BB:8E:28:B6:0D:A8:77:2C:1B:EA Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019D9A74B3941A4047963014382E3BCCBDE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 191E Signing time: Fri 17 Apr 2026 08:00:32 +0000 Manifest this update: Fri 17 Apr 2026 08:00:32 +0000 Manifest next update: Sat 18 Apr 2026 08:00:32 +0000 Files and hashes: 1: 3_yk5eFrwBov3U-c2HIugxbMWSI.roa (hash: kKYQPtwtsyFnBnK/TTMNwaIGIt9OfuH8gl7hmRir+s0=) 2: 5aufIPquq3w8czdEJb_x03ID0ok.roa (hash: SXHv0uNnbQMrAAz38TkQXV7mhkcxZQRjdTnk2ZFMJ+Q=) 3: 6NnumjbLaK5uH21Kvrb7OjjLMWI.roa (hash: 7pnfS7LcH0iQhlqpTMUeGOkYaMziCcKZ9vKU4S2fblw=) 4: C5KHI6RHNe-c2_yE7mE0xFRL3gk.roa (hash: +jtxc9DRUocKwAVf35hRGVq2koZLjGVbE1XT/GiZZ2w=) 5: FOMPy_BK9Fi89Du1DiZYEnZuYqY.roa (hash: cvZrm+ar43YelQ09ZwBvqrLgjuizfADCJwzl9al2n74=) 6: OT8ciThviWG76oS0x4VT1DU7_CM.roa (hash: z/3tt6KD2m+nhRRFPABZHX2/tqaQ7t/vcbTbJ5OkeGs=) 7: RaSDCVs_3yb1Ag2Siqma7OPDTfI.roa (hash: 1BDwjFvUC8jAom6YokpKMPw9vBJY33AEAijvzVkLCbY=) 8: Y7bbNd_D_GJxw7w73h3QtuIaUD0.roa (hash: 6H7OQcEN2pqdM3pakr5EUmL8sOX3gH9g5VYKISR0rPs=) 9: _JStqxohmn4P46Jzv1xfqnIG_sQ.roa (hash: yg2AC+9uSmhpqVYsI3pa8EbjhOZNSYHEU2+Rij7qWjo=) 10: _kSC6SxEhsOLshYqTVwsSFaNbLI.roa (hash: KB6xLUsnETAFSWCWhqb4kG0B7HnLwgn6REmfOJuSowg=) 11: bIbo_daevEia3FzSMEis2R2yTQE.roa (hash: 2f8dvTsv4PE91HZTf97I67YVmPlzEU+5RlZeN9O2YSM=) 12: dWDpJgjgHWUUxlAFcGw9oho9DCA.roa (hash: EeKrlvmSYyhLjmugOgYr/BAu9l1QdnUK48FOOPpwoHE=) 13: ixD-Arj77LHgfX3zc7lJeNIlCF0.roa (hash: IZQY7H0KoOl6mudSH5mbC7Fo+cS244qdxxA31tTlbtI=) 14: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: OZPCmPyCWt04/Dxh7uvfxTv9xIxqBIVd7vj7mZiAw+Q=) 15: qutDbHBwHvwdi5EGALlPGyrMVYQ.roa (hash: cMdSXzsofITh70yCwGq+Cbopm8wIcWBaikFgYr1Fwsg=) 16: viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa (hash: wxGAEO+n9Vh6k1iK9Pba4O/c6CbkZthcZ5GK3ng4+Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:74:b3:94:1a:40:47:96:30:14:38:2e:3b:cc:bd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Apr 17 08:00:32 2026 GMT Not After : Apr 18 08:00:32 2026 GMT Subject: CN=af93c15bea11565addafbb8e28b60da8772c1bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:8c:2a:df:37:5b:51:4f:a3:48:57:e3:08: 12:03:f7:77:55:63:fc:63:96:33:69:d5:da:9b:bb: ce:e6:8b:c8:7c:a6:18:75:ed:b6:78:f6:aa:0f:39: d0:7a:18:4d:5a:8b:fc:21:9b:ad:61:f3:d6:89:37: 09:45:59:10:65:08:23:be:ed:fe:f6:ab:0d:0f:12: 15:9e:44:b8:e1:d4:dd:e9:7f:76:1a:f5:da:32:51: d5:c1:c6:21:7c:0d:33:a7:e6:eb:64:9a:0e:63:43: 1f:4d:91:87:2a:1c:23:d4:3c:78:bd:9d:5e:e0:fb: c9:32:8e:08:8f:7a:e3:60:64:27:90:24:b4:03:33: f9:7f:5a:77:cd:aa:c5:63:3c:9f:07:ab:58:10:06: fe:6a:d1:98:2b:36:73:f8:89:9c:87:f0:02:d2:8f: 5f:83:54:68:83:46:5e:9c:42:5f:2b:28:c1:6f:c2: 95:c9:6f:14:a3:59:7a:88:36:a1:3b:80:da:14:69: d9:26:7d:af:1f:bd:fe:de:58:95:e7:94:25:84:ee: ef:48:09:16:41:51:46:7f:d5:d4:00:6d:45:c2:4b: c0:50:92:fd:03:d7:fb:dd:58:1e:de:6f:a5:57:91: 02:95:16:c6:f3:66:06:72:36:a6:05:f4:5f:c1:fb: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:93:C1:5B:EA:11:56:5A:DD:AF:BB:8E:28:B6:0D:A8:77:2C:1B:EA X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b1:64:7b:bc:85:f9:3a:44:f1:8e:0b:b3:a1:1d:a0:b8:c8: 0e:91:5c:2a:c0:0e:24:5d:ff:4f:06:b3:97:92:95:26:5d:b4: ea:d2:e6:b9:06:87:6a:82:5a:cf:f7:40:84:1e:bd:95:17:09: 8d:f1:ef:f5:f1:2e:e7:c6:92:4d:f3:aa:f9:09:54:f2:be:85: 97:f1:30:8c:b9:67:d7:38:1f:31:a2:3f:49:35:b7:df:11:23: ec:4e:d5:de:3e:70:f3:b5:80:b2:ee:bd:3a:ba:ae:18:b0:21: b8:67:a2:9c:68:0f:c5:db:77:2e:0b:5e:24:f3:db:93:2b:d1: 6c:70:6e:4c:f4:4a:e7:6c:bf:ca:2a:b2:22:70:6a:83:b0:09: e9:f5:23:ce:8a:54:16:37:5f:1e:d4:73:d2:1e:ee:75:df:d9: 58:a0:cc:d8:b9:e7:dd:f8:b8:f6:86:16:7f:ed:43:b7:20:cc: d9:7e:ae:77:4c:19:c1:92:80:e5:ae:15:e6:a1:1b:33:a2:bf: 7e:2a:64:08:05:01:35:27:d4:af:21:76:5e:20:9a:5e:7d:11: 2d:b0:a3:97:ca:40:bd:41:c6:88:b5:f9:cf:9d:9f:5c:e8:c2: 85:6a:c0:e0:9c:86:13:ea:2a:71:b3:69:26:5d:05:29:be:d9: fd:9c:92:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adLOUGkBHljAUOC47zL3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwNDE3MDgwMDMyWhcNMjYwNDE4MDgwMDMyWjAzMTEwLwYDVQQD EyhhZjkzYzE1YmVhMTE1NjVhZGRhZmJiOGUyOGI2MGRhODc3MmMxYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytCMKt83W1FPo0hX4wgSA/d3VWP8 Y5YzadXam7vO5ovIfKYYde22ePaqDznQehhNWov8IZutYfPWiTcJRVkQZQgjvu3+ 9qsNDxIVnkS44dTd6X92GvXaMlHVwcYhfA0zp+brZJoOY0MfTZGHKhwj1Dx4vZ1e 4PvJMo4Ij3rjYGQnkCS0AzP5f1p3zarFYzyfB6tYEAb+atGYKzZz+Imch/AC0o9f g1Rog0ZenEJfKyjBb8KVyW8Uo1l6iDahO4DaFGnZJn2vH73+3liV55QlhO7vSAkW QVFGf9XUAG1FwkvAUJL9A9f73Vge3m+lV5EClRbG82YGcjamBfRfwftgiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+TwVvqEVZa3a+7jii2Dah3LBvqMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLFke7yF +TpE8Y4Ls6EdoLjIDpFcKsAOJF3/Twazl5KVJl206tLmuQaHaoJaz/dAhB69lRcJ jfHv9fEu58aSTfOq+QlU8r6Fl/EwjLln1zgfMaI/STW33xEj7E7V3j5w87WAsu69 OrquGLAhuGeinGgPxdt3LgteJPPbkyvRbHBuTPRK52y/yiqyInBqg7AJ6fUjzopU FjdfHtRz0h7udd/ZWKDM2Lnn3fi49oYWf+1DtyDM2X6ud0wZwZKA5a4V5qEbM6K/ fipkCAUBNSfUryF2XiCaXn0RLbCjl8pAvUHGiLX5z52fXOjChWrA4JyGE+oqcbNp Jl0FKb7Z/ZyStg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:55:35 2026 by rpki-client