$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: yuPqSywp//Cvd6lMTzLY7l07DBeMWwK2K+AdMoQ0VwY= Subject key identifier: 79:30:2B:02:AB:6B:5C:3C:B8:C5:F3:92:50:71:60:AA:16:39:A1:7B Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019D9B50C4F3B4C87E78DD561EAEE1653C4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 1691 Signing time: Fri 17 Apr 2026 12:00:54 +0000 Manifest this update: Fri 17 Apr 2026 12:00:54 +0000 Manifest next update: Sat 18 Apr 2026 12:00:54 +0000 Files and hashes: 1: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (hash: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc=) 2: 6yY85OHD-46vFhP-wtPZWs3MeCY.roa (hash: hOno4SiXgMirUzFVpAXsEoPlI4QIn/ikV8WWQvXsoXg=) 3: 8McrGRfEqcovWnRSpklEmiBGADA.roa (hash: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY=) 4: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (hash: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M=) 5: Dib_4B7-59g2qlFon4U52XelorA.roa (hash: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY=) 6: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (hash: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI=) 7: Td85PzLGixLgYgdBT3GS17rfwTQ.roa (hash: ZtLYgrcf2o9oO80ckMCQ8oe+MvEY9qGa8/wSqJ2K4VY=) 8: bpUtIFcpj0wFmx0CClP1L0TgIfY.roa (hash: JpwXWXow0nu1gKjNId4RQPrmV9a8gFVj5DrvmpBJ7Ac=) 9: dkSZC1vcgEsyqm56yAJmonI1P1E.roa (hash: Wn8sFewfyDAMaX3VNG1l/GCgIijws7/FwmZlH3//5Vk=) 10: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (hash: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: Efwjdku256Iqh5MXqFnCGnvJji667EDeCa0Ccp5oczE=) 12: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (hash: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:50:c4:f3:b4:c8:7e:78:dd:56:1e:ae:e1:65:3c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Apr 17 12:00:54 2026 GMT Not After : Apr 18 12:00:54 2026 GMT Subject: CN=79302b02ab6b5c3cb8c5f392507160aa1639a17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:07:6a:7e:3d:17:ed:8c:59:9e:3c:a7:53: 98:e0:40:dd:94:70:a5:ca:95:ef:70:01:6f:05:92: 18:64:31:34:d4:ad:6e:d7:d2:bb:0a:09:60:f0:cd: 61:a4:66:1d:8d:5f:29:80:26:62:06:44:56:fb:f9: 49:73:92:bb:c5:ad:c8:e1:a7:bc:38:b3:cc:62:38: 3b:30:7e:14:94:f1:10:4a:ca:75:f7:cf:e3:b4:e5: 25:ad:1a:1e:f6:c2:bf:dc:4c:f8:f0:8f:bc:a1:c6: d6:2a:8c:20:ab:35:3a:d8:68:20:db:55:dd:9d:59: f4:09:e3:09:70:4b:b2:5d:7e:fe:1e:ba:8d:5c:98: 2f:93:3a:90:69:38:80:80:68:3b:bc:82:1a:73:dd: de:a0:56:ee:26:99:e5:68:e3:6b:5f:b3:f4:58:94: cf:d6:4b:3f:4a:b9:c6:4e:31:c9:3d:da:ed:a6:1f: 9f:ac:41:5a:d8:da:0a:ea:bd:98:cf:43:7c:08:84: 2d:4d:96:70:af:3b:69:e8:78:16:6e:83:f2:e6:2f: 4c:72:b6:64:d4:6b:98:f0:3d:7a:25:4b:e8:d4:93: 9c:dd:35:61:87:95:d8:4d:a1:09:c0:e9:fd:00:5f: 4c:c6:dc:7a:80:24:ae:79:da:76:f5:27:2e:65:f0: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:30:2B:02:AB:6B:5C:3C:B8:C5:F3:92:50:71:60:AA:16:39:A1:7B X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7a:97:7c:0b:87:3b:04:f6:c1:a4:99:1d:af:13:4a:60:1f: 81:dd:18:04:4e:6b:ec:f4:c2:76:6d:4d:58:41:3e:69:b5:aa: 25:41:34:a7:a2:ae:e8:92:79:00:d0:92:6f:81:f4:dc:91:26: a3:d7:ad:8c:28:76:77:c6:39:6b:82:79:50:08:b6:14:cd:b0: f7:ce:11:19:99:01:61:08:a8:62:4b:3b:13:28:34:17:57:f9: 3c:64:c4:4c:50:4b:0c:7d:0e:f8:c8:79:b9:40:7e:a2:a9:61: c8:e3:01:28:e3:64:4e:9f:a0:e7:02:6e:6a:d4:e2:5d:40:87: d0:e0:dc:92:b3:81:42:b5:63:d3:81:8d:24:e8:dc:8a:0a:ac: 03:72:0f:78:85:30:b1:ba:39:9b:f2:5f:e3:ce:bb:8b:a8:c8: 13:6a:0e:14:d3:41:2a:a8:09:b4:16:96:28:54:11:89:1d:15: a8:da:17:23:a9:a9:ea:33:a2:44:2e:75:22:3d:c5:5c:60:6d: 3b:ed:5e:21:8c:33:9e:d6:ce:cc:e8:14:06:15:3c:68:c9:05: 3e:9b:ba:2c:6d:a3:c0:85:e0:97:dc:51:91:bf:1d:f2:5d:ae: b3:a4:77:30:b1:6a:4b:27:94:cb:77:8d:0b:94:c8:8c:40:63: 09:28:77:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bUMTztMh+eN1WHq7hZTxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwNDE3MTIwMDU0WhcNMjYwNDE4MTIwMDU0WjAzMTEwLwYDVQQD Eyg3OTMwMmIwMmFiNmI1YzNjYjhjNWYzOTI1MDcxNjBhYTE2MzlhMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTgHan49F+2MWZ48p1OY4EDdlHCl ypXvcAFvBZIYZDE01K1u19K7Cglg8M1hpGYdjV8pgCZiBkRW+/lJc5K7xa3I4ae8 OLPMYjg7MH4UlPEQSsp198/jtOUlrRoe9sK/3Ez48I+8ocbWKowgqzU62Ggg21Xd nVn0CeMJcEuyXX7+HrqNXJgvkzqQaTiAgGg7vIIac93eoFbuJpnlaONrX7P0WJTP 1ks/SrnGTjHJPdrtph+frEFa2NoK6r2Yz0N8CIQtTZZwrztp6HgWboPy5i9McrZk 1GuY8D16JUvo1JOc3TVhh5XYTaEJwOn9AF9Mxtx6gCSuedp29ScuZfDVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkwKwKra1w8uMXzklBxYKoWOaF7MB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3qXfAuH OwT2waSZHa8TSmAfgd0YBE5r7PTCdm1NWEE+abWqJUE0p6Ku6JJ5ANCSb4H03JEm o9etjCh2d8Y5a4J5UAi2FM2w984RGZkBYQioYks7Eyg0F1f5PGTETFBLDH0O+Mh5 uUB+oqlhyOMBKONkTp+g5wJuatTiXUCH0ODckrOBQrVj04GNJOjcigqsA3IPeIUw sbo5m/Jf4867i6jIE2oOFNNBKqgJtBaWKFQRiR0VqNoXI6mp6jOiRC51Ij3FXGBt O+1eIYwzntbOzOgUBhU8aMkFPpu6LG2jwIXgl9xRkb8d8l2us6R3MLFqSyeUy3eN C5TIjEBjCSh3BA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:44:41 2026 by rpki-client