$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: ynyu8zrHfdfRGQTxhJPrFvxEsvMxcsHsH/6gDKrnTqo= Subject key identifier: 09:58:C1:39:CC:36:AB:7C:F0:87:AB:38:DB:7E:74:35:8C:4F:6F:D0 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019DA3E6C8B9EC54994C4CF98279AD18E536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1924 Signing time: Sun 19 Apr 2026 04:01:44 +0000 Manifest this update: Sun 19 Apr 2026 04:01:44 +0000 Manifest next update: Mon 20 Apr 2026 04:01:44 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 7: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 8: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 9: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 10: E7gVR0qJHj_FrMEXG4Yo1G8ig-8.roa (hash: cyGASec5FeaBbarjWYsO54pBqOVobPBGS0ac9+UHUHc=) 11: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 12: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 13: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 14: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 15: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 16: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 17: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 18: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 19: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 20: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 21: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 22: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: 4KEEomxrzWEZHH4q0wSWSc2tcq6847XZ11uj8bJyPWs=) 23: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 24: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 25: hf-LXtiPSASNfLU-opAc0imYKDc.roa (hash: PJYOakcn0oxNr7y/9yoGBcKD4KrbPhwTqw8RW0ojmKE=) 26: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 27: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 28: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 29: pe68YeSBz3e5uy7r7bbOmGgL7EE.roa (hash: w8rsCAdGW4/9JqYBKY1otlqFhCY3uTORdfSVn2mblPE=) 30: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:e6:c8:b9:ec:54:99:4c:4c:f9:82:79:ad:18:e5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Apr 19 04:01:44 2026 GMT Not After : Apr 20 04:01:44 2026 GMT Subject: CN=0958c139cc36ab7cf087ab38db7e74358c4f6fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:98:d2:6b:1e:42:1c:25:8e:e8:18:28:20: 5f:a8:68:39:53:95:56:18:ef:6d:11:50:86:e2:0d: 50:17:ed:85:ea:31:21:2f:63:3b:ed:d9:26:bf:ce: b7:3c:bc:ce:94:d3:95:82:8c:18:10:da:d3:70:92: b0:56:0e:a7:62:c5:16:5c:12:0d:19:26:06:b7:b3: 9b:82:f8:98:07:fd:4e:98:3c:e9:eb:38:55:8d:e3: 9e:0d:da:5b:d0:87:2c:19:4c:f1:ab:79:7d:93:49: b9:96:70:d4:18:10:ef:68:f4:e4:ae:0c:bb:89:81: 4e:92:f8:20:68:ce:83:8f:92:90:c3:03:44:96:c3: e3:37:2c:b0:28:57:63:07:01:d0:e5:3b:41:2e:00: 4d:ba:3c:d0:e8:fd:bf:a6:7c:30:f3:a4:fc:ba:e6: 4d:e2:e3:71:a5:c3:db:45:03:19:3d:a0:3d:6a:64: 0d:6e:5b:c7:e2:16:49:0b:46:6b:18:b1:0e:a3:56: ea:ff:df:11:e0:88:f2:35:3e:55:6a:bd:ba:2e:a3: 60:ab:23:be:7d:fd:c3:87:76:00:bd:43:e2:56:31: a4:48:ba:92:95:7a:b7:0d:54:e0:30:38:d3:24:3d: 58:09:02:0c:9f:16:e4:06:00:83:ce:d1:ac:bd:e3: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:58:C1:39:CC:36:AB:7C:F0:87:AB:38:DB:7E:74:35:8C:4F:6F:D0 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:30:97:b7:86:81:02:69:7e:10:38:a0:27:c2:4d:6c:64:4e: fb:e0:e8:16:c6:77:c8:08:42:d4:80:46:73:bc:31:41:39:ad: e5:0d:92:09:1d:07:f3:15:4c:1a:59:72:6c:a2:7b:07:6d:e5: 08:91:9e:92:46:7e:17:0f:08:75:e7:8c:ec:3f:42:7c:70:d9: 0e:8e:f5:bd:24:99:44:f8:79:14:c1:81:11:d1:37:d8:6d:cd: 26:80:bb:8b:48:4c:88:d0:dc:47:4e:fa:f4:e6:30:1b:7f:bb: 12:c6:c4:9e:2f:bd:5b:30:2c:f7:49:fc:11:14:63:59:8c:21: 4a:47:0b:bf:70:c1:61:be:c0:48:83:f0:a5:a2:01:9f:ab:a9: 30:d7:ef:4e:31:08:f4:a5:33:0a:16:85:56:3c:ec:ea:a6:41: 1b:a6:fb:40:11:6b:17:76:7f:48:52:a4:48:23:4e:19:7f:1c: 7e:37:42:f2:a4:82:be:f8:fc:f0:3d:44:5c:7d:11:e6:bb:92: 2d:ef:ab:c2:28:75:5c:a8:63:2b:92:0b:8f:a5:53:9f:1f:3b: 4a:3c:ab:82:83:a0:c7:ac:e8:f5:05:79:e8:d9:e1:6f:33:6c: ed:12:6f:1d:76:ff:44:16:27:d6:99:7a:39:f5:a6:5f:50:dc: a9:7f:7a:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2j5si57FSZTEz5gnmtGOU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwNDE5MDQwMTQ0WhcNMjYwNDIwMDQwMTQ0WjAzMTEwLwYDVQQD EygwOTU4YzEzOWNjMzZhYjdjZjA4N2FiMzhkYjdlNzQzNThjNGY2ZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArymY0mseQhwljugYKCBfqGg5U5VW GO9tEVCG4g1QF+2F6jEhL2M77dkmv863PLzOlNOVgowYENrTcJKwVg6nYsUWXBIN GSYGt7ObgviYB/1OmDzp6zhVjeOeDdpb0IcsGUzxq3l9k0m5lnDUGBDvaPTkrgy7 iYFOkvggaM6Dj5KQwwNElsPjNyywKFdjBwHQ5TtBLgBNujzQ6P2/pnww86T8uuZN 4uNxpcPbRQMZPaA9amQNblvH4hZJC0ZrGLEOo1bq/98R4IjyNT5Var26LqNgqyO+ ff3Dh3YAvUPiVjGkSLqSlXq3DVTgMDjTJD1YCQIMnxbkBgCDztGsveOoFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlYwTnMNqt88IerONt+dDWMT2/QMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjCXt4aB Aml+EDigJ8JNbGRO++DoFsZ3yAhC1IBGc7wxQTmt5Q2SCR0H8xVMGllybKJ7B23l CJGekkZ+Fw8IdeeM7D9CfHDZDo71vSSZRPh5FMGBEdE32G3NJoC7i0hMiNDcR076 9OYwG3+7EsbEni+9WzAs90n8ERRjWYwhSkcLv3DBYb7ASIPwpaIBn6upMNfvTjEI 9KUzChaFVjzs6qZBG6b7QBFrF3Z/SFKkSCNOGX8cfjdC8qSCvvj88D1EXH0R5ruS Le+rwih1XKhjK5ILj6VTnx87SjyrgoOgx6zo9QV56NnhbzNs7RJvHXb/RBYn1pl6 OfWmX1DcqX96rw== -----END CERTIFICATE-----Generated at Sun Apr 19 08:41:05 2026 by rpki-client