$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: PixL8TE3hcsX7sjgYUOCVTO+ij11SfRDPvOq1nl9nhg= Subject key identifier: 58:CD:E7:DA:B9:62:18:D2:3C:35:16:78:66:D3:A4:05:69:99:AC:5D Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019D99625DF0A56CD64BB628596CF2508655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 18E7 Signing time: Fri 17 Apr 2026 03:00:53 +0000 Manifest this update: Fri 17 Apr 2026 03:00:53 +0000 Manifest next update: Sat 18 Apr 2026 03:00:53 +0000 Files and hashes: 1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=) 2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=) 3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=) 4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=) 5: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: /jE1zpeuX93dGnPUuRGKerP+WO53OFlWlblAZRl6NRQ=) 6: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=) 7: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=) 8: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=) 9: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=) 10: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=) 11: xrlQxD2aCilEx5MBkW5ICdMkjmI.roa (hash: XyJhHEW8YK45zRLRx/h09ilca39SOfBBhQAfbZq7s3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:5d:f0:a5:6c:d6:4b:b6:28:59:6c:f2:50:86:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Apr 17 03:00:53 2026 GMT Not After : Apr 18 03:00:53 2026 GMT Subject: CN=58cde7dab96218d23c35167866d3a4056999ac5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:74:e1:04:e1:3e:80:d4:28:29:92:59:f7:23: 74:83:3f:fd:03:51:9c:93:bf:d6:a7:b7:69:b6:20: 88:2a:b3:02:8c:dc:e7:3d:1a:fc:ea:b1:59:90:c4: d1:bb:1d:d4:c6:d4:0f:9c:dc:7a:51:d4:35:9b:89: fd:7e:5e:5a:46:16:d3:63:bc:54:5b:54:1a:fa:16: d4:3d:b2:6f:c8:48:03:f9:a5:5a:09:50:cc:a4:2c: 9e:7a:a8:e4:78:45:ff:31:0b:d1:30:ae:71:71:66: df:1f:f6:bd:4d:d9:ca:a6:a7:01:ba:0b:be:35:12: 83:3f:34:95:b7:b5:4a:a1:9c:d4:bb:ee:a9:05:70: 6e:0a:d4:8b:c5:c8:c1:59:82:b6:76:7a:76:fd:80: 4f:f9:10:03:22:4a:9e:4b:8d:41:32:30:2a:5d:62: e4:6b:3e:e0:8f:77:49:aa:16:8c:6c:32:44:de:68: 92:04:34:8e:9d:4b:a1:f1:b3:43:74:df:f9:a1:0c: e9:c3:df:e5:cf:c6:a9:14:98:da:e4:bd:93:23:9d: 6e:67:a8:0a:73:31:da:8a:0d:65:ab:f3:7c:46:e4: af:8c:8f:f6:c9:81:10:32:27:f4:f5:15:d8:7f:7c: 75:d3:f0:45:5b:8a:e9:99:46:04:03:45:eb:4b:ff: 4e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:E7:DA:B9:62:18:D2:3C:35:16:78:66:D3:A4:05:69:99:AC:5D X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c3:b3:92:23:8e:96:18:39:a5:a6:54:99:40:c4:5e:47:d2: 48:7a:8f:61:bc:5f:1c:ff:26:f0:e3:f1:0b:a4:ad:1b:b8:5a: e3:ca:d0:37:25:dd:e6:35:cd:6b:53:a8:07:fb:a2:af:d8:e5: c7:21:20:80:32:ab:72:b2:17:fb:91:6c:a5:1a:e8:8b:c8:96: 6a:76:52:c5:3c:a6:f0:56:25:0f:5e:c1:dc:b7:2e:fa:03:da: 3c:3e:7b:5d:85:6f:3b:19:09:d8:e5:5b:4c:6e:7a:48:ab:5d: 34:99:78:e4:d4:ff:8f:08:00:47:08:93:a3:37:67:bd:3c:4b: 8f:c0:b1:09:f6:2d:a3:95:86:73:93:25:4c:0d:a9:ea:88:ac: f1:3c:a4:87:0a:2c:e0:a4:4a:c1:31:3b:cc:70:b1:a2:5f:ca: 36:34:7c:60:af:c3:9e:74:43:61:7c:83:7a:13:1b:ff:1d:c5: 6e:1d:cf:ad:49:fa:8c:ba:50:9d:d0:a5:98:44:a7:7f:a7:31: f1:bc:a4:51:6f:32:19:1e:04:8b:39:5c:90:5a:72:20:fa:7a: de:c6:51:61:d1:45:29:eb:83:4f:2c:ce:e1:99:76:f9:82:3b: 46:31:99:f2:5a:e8:57:3e:55:c0:71:ed:26:e2:4e:11:e9:ae: 2c:b4:80:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYl3wpWzWS7YoWWzyUIZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwNDE3MDMwMDUzWhcNMjYwNDE4MDMwMDUzWjAzMTEwLwYDVQQD Eyg1OGNkZTdkYWI5NjIxOGQyM2MzNTE2Nzg2NmQzYTQwNTY5OTlhYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XThBOE+gNQoKZJZ9yN0gz/9A1Gc k7/Wp7dptiCIKrMCjNznPRr86rFZkMTRux3UxtQPnNx6UdQ1m4n9fl5aRhbTY7xU W1Qa+hbUPbJvyEgD+aVaCVDMpCyeeqjkeEX/MQvRMK5xcWbfH/a9TdnKpqcBugu+ NRKDPzSVt7VKoZzUu+6pBXBuCtSLxcjBWYK2dnp2/YBP+RADIkqeS41BMjAqXWLk az7gj3dJqhaMbDJE3miSBDSOnUuh8bNDdN/5oQzpw9/lz8apFJja5L2TI51uZ6gK czHaig1lq/N8RuSvjI/2yYEQMif09RXYf3x10/BFW4rpmUYEA0XrS/9OUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjN59q5YhjSPDUWeGbTpAVpmaxdMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsOzkiOO lhg5paZUmUDEXkfSSHqPYbxfHP8m8OPxC6StG7ha48rQNyXd5jXNa1OoB/uir9jl xyEggDKrcrIX+5FspRroi8iWanZSxTym8FYlD17B3Lcu+gPaPD57XYVvOxkJ2OVb TG56SKtdNJl45NT/jwgARwiTozdnvTxLj8CxCfYto5WGc5MlTA2p6ois8Tykhwos 4KRKwTE7zHCxol/KNjR8YK/DnnRDYXyDehMb/x3Fbh3PrUn6jLpQndClmESnf6cx 8bykUW8yGR4EizlckFpyIPp63sZRYdFFKeuDTyzO4Zl2+YI7RjGZ8lroVz5VwHHt JuJOEemuLLSAMQ== -----END CERTIFICATE-----Generated at Fri Apr 17 04:59:00 2026 by rpki-client