$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: LX+V6OhNOMjmRaopXvjN1BeSMPj9p8/EvzSxAykNodw= Subject key identifier: 4A:19:A1:87:B1:90:49:B3:9F:28:86:4A:5A:03:C2:70:AF:B4:17:56 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019D99CFCCA178FCE99C3414D3F71723C611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 18CA Signing time: Fri 17 Apr 2026 05:00:25 +0000 Manifest this update: Fri 17 Apr 2026 05:00:25 +0000 Manifest next update: Sat 18 Apr 2026 05:00:25 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: C0UXfIu57h29i0D6K3lKNOInv4R/odd2hrnbJMDedtE=) 2: 8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa (hash: UZQldaFo6xwnQkumeQ30d5+3aDGt7jMCik6EMuRJupg=) 3: AA4leRD0fxCP27pMiyTWgt1l_rg.roa (hash: 7SvYjkQmEnHNW0Fizpa0BEm4+FNoAcLpGmBVskPF0pY=) 4: AnJCTd7AgRSldDmx71BvWIQlsjc.roa (hash: VFBhkSbr4RUTAOsdzP+CuaTF7y4EenVQsmWrwQQVwpM=) 5: D9vysDJ6akM7Z66wywlmqWF3jxM.roa (hash: +6sSHR1vJhbnSV1+bNKy86Yi96WvoRkEvwudcBXDAQg=) 6: ES-7aSo6ovYXFf1ggrOgufF4HXU.roa (hash: oBAEPOe3qVf8emRhcuSX1FU4S9ycxaYKQRzrtaIuUZQ=) 7: dBEozjZ87taP7CwFVSXV3w6pkxQ.roa (hash: Q0IadO2WrRqgDE01zeYb4r27Fa+c+ppGgdLscaUKNKk=) 8: kLGlFczsrbvI1LLNYABL3V31uw4.roa (hash: PyJOpPlpidMPg9tlr0wrxczB6f3WILsayIOfBgsOza4=) 9: lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa (hash: qocUAMn7M/1zyYPDlsc7BcT51RuGObx2kW5wM3NnVyE=) 10: rDXd_OZlN4Uiv52rfRn8xHDUy80.roa (hash: 91Ja2DiUDudi8VvOpGDDJuXajBkTzaFVadsjPhZfAy8=) 11: xVvAeAbjAnywjqQvLFjnqGabFzo.roa (hash: MHe3EjYa15PyEjrwN5cSdo1Ogd8ywELYCfO8/S46e2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:cf:cc:a1:78:fc:e9:9c:34:14:d3:f7:17:23:c6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Apr 17 05:00:25 2026 GMT Not After : Apr 18 05:00:25 2026 GMT Subject: CN=4a19a187b19049b39f28864a5a03c270afb41756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:71:4e:96:f4:ce:d8:fa:6d:9d:3d:45:00: a6:b0:11:e6:04:9c:f4:1a:a5:4d:51:f5:cc:06:89: 50:9d:f8:c6:02:1b:d4:32:08:93:8c:9f:69:9d:34: 6f:74:4a:4f:b2:9a:00:4d:2d:1a:d8:42:2e:90:87: b1:12:c8:26:6a:4d:a4:ce:4c:c1:6c:41:d7:5e:cf: 5e:78:4e:5b:34:ea:3f:7c:9b:ad:b5:b4:20:34:bd: 69:5b:5b:ce:f9:29:42:44:8c:84:d2:54:fa:ee:ca: 76:00:fd:96:41:1c:5c:50:1f:35:75:0f:dc:66:19: e5:ad:ad:86:de:43:39:78:fd:17:9e:18:26:2f:04: 9d:90:72:cd:ab:b2:ed:69:73:21:fb:a8:f1:8e:3b: 8b:0c:50:fe:1d:06:a3:a1:e7:46:7a:55:e2:d5:d3: 07:fc:d3:62:04:8e:61:9a:10:28:36:56:03:16:0d: 8a:87:a4:59:e7:a8:43:00:f2:c1:6e:0d:33:a0:ae: ac:93:05:a8:61:50:de:9c:e3:1f:5e:3c:f5:15:e3: 80:43:a3:c5:f4:59:d6:15:cf:46:a4:7d:cb:ac:f3: 74:82:29:a6:65:0b:e1:57:e5:80:f3:de:a3:44:c7: a1:cf:68:6f:79:16:84:b3:e1:96:69:19:2e:79:80: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:19:A1:87:B1:90:49:B3:9F:28:86:4A:5A:03:C2:70:AF:B4:17:56 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7f:06:51:cc:4b:ac:79:d6:a1:83:73:e0:05:c7:ff:76:b8: 10:15:c9:6b:21:6c:c7:0c:9d:04:2b:b1:99:02:e1:e0:c2:a2: 42:7d:02:67:0d:23:c3:9a:e8:c5:ca:69:1a:05:ce:77:27:20: cf:6d:fe:2c:a3:12:2a:ba:d3:34:08:ef:ae:95:62:45:c0:2e: 8b:f9:bb:33:34:93:59:21:03:65:2a:2d:f6:e5:bd:62:54:1e: 7e:9f:e5:2d:4a:95:ca:53:98:a2:73:a9:76:21:6b:cf:b7:c7: 07:61:59:0e:4d:b7:ac:37:5a:1e:06:6c:d0:2a:08:86:b6:49: a2:21:b5:df:e3:ac:f8:7e:be:11:1b:a3:c6:4d:90:31:06:34: 02:48:72:94:22:c9:1f:17:58:d3:c0:fc:c3:b5:03:5d:4d:ea: 06:2f:fe:0e:eb:cd:f1:2f:f3:53:24:ad:57:ef:64:b1:52:fb: 8c:a6:23:f0:b4:e2:c8:38:6f:8d:1d:91:39:84:73:04:5c:03: 63:93:c8:a8:d9:c3:a1:e4:af:c8:fc:ce:6d:8a:1a:44:9e:a7: c8:7d:82:cf:2b:b8:a1:f5:cd:65:65:62:6a:39:0a:b1:14:1c: f8:8a:ab:cf:d7:1a:38:93:0a:39:d1:9d:8c:90:b3:6a:ff:83: dd:28:fe:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Zz8yhePzpnDQU0/cXI8YRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjYwNDE3MDUwMDI1WhcNMjYwNDE4MDUwMDI1WjAzMTEwLwYDVQQD Eyg0YTE5YTE4N2IxOTA0OWIzOWYyODg2NGE1YTAzYzI3MGFmYjQxNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY9xTpb0ztj6bZ09RQCmsBHmBJz0 GqVNUfXMBolQnfjGAhvUMgiTjJ9pnTRvdEpPspoATS0a2EIukIexEsgmak2kzkzB bEHXXs9eeE5bNOo/fJuttbQgNL1pW1vO+SlCRIyE0lT67sp2AP2WQRxcUB81dQ/c Zhnlra2G3kM5eP0XnhgmLwSdkHLNq7LtaXMh+6jxjjuLDFD+HQajoedGelXi1dMH /NNiBI5hmhAoNlYDFg2Kh6RZ56hDAPLBbg0zoK6skwWoYVDenOMfXjz1FeOAQ6PF 9FnWFc9GpH3LrPN0gimmZQvhV+WA896jRMehz2hveRaEs+GWaRkueYD5UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoZoYexkEmznyiGSloDwnCvtBdWMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIn8GUcxL rHnWoYNz4AXH/3a4EBXJayFsxwydBCuxmQLh4MKiQn0CZw0jw5roxcppGgXOdycg z23+LKMSKrrTNAjvrpViRcAui/m7MzSTWSEDZSot9uW9YlQefp/lLUqVylOYonOp diFrz7fHB2FZDk23rDdaHgZs0CoIhrZJoiG13+Os+H6+ERujxk2QMQY0AkhylCLJ HxdY08D8w7UDXU3qBi/+DuvN8S/zUyStV+9ksVL7jKYj8LTiyDhvjR2ROYRzBFwD Y5PIqNnDoeSvyPzObYoaRJ6nyH2Czyu4ofXNZWViajkKsRQc+Iqrz9caOJMKOdGd jJCzav+D3Sj+7Q== -----END CERTIFICATE-----Generated at Fri Apr 17 10:05:49 2026 by rpki-client