$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: LV95/h90o1Fb/rOFCWWZRsNei7415NGzeK76uWtU5EQ= Subject key identifier: A3:97:EF:B7:D9:77:41:0C:E2:33:05:24:B2:29:19:BA:56:DA:33:89 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019D9886394125E260933D056253877BE468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 18CE Signing time: Thu 16 Apr 2026 23:00:26 +0000 Manifest this update: Thu 16 Apr 2026 23:00:26 +0000 Manifest next update: Fri 17 Apr 2026 23:00:26 +0000 Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 2: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 3: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 4: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 5: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 6: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: pPbwkwsJq1BdCDc/O4Hb4DCpMJpVlr2uOKC6V5zZL+M=) 7: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 8: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 9: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 10: Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa (hash: xU544IyvXcLXM7e3JvHPAxxk8EzCmMrxrlsPcRWgF9s=) 11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 12: gvMvxN1JHVPjgshkuwfHJsKx4dU.roa (hash: VUg2txUUu1/KKURpEb7Xa9x6WRrXiOxip3ohqdUTZeY=) 13: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:86:39:41:25:e2:60:93:3d:05:62:53:87:7b:e4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Apr 16 23:00:26 2026 GMT Not After : Apr 17 23:00:26 2026 GMT Subject: CN=a397efb7d977410ce2330524b22919ba56da3389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:d6:93:cd:d6:3f:52:d8:10:fc:a1:5a:da: d6:0a:26:2d:4c:95:42:62:96:01:6a:c5:d6:fb:48: 3e:55:ac:2f:f4:c7:1b:95:ed:9a:5c:a5:38:a1:4f: a4:bb:6c:dc:bc:90:3e:4d:73:59:58:a8:e3:0e:4d: dd:11:68:de:0b:39:d9:12:90:a7:b5:ae:63:04:65: da:8c:0c:a0:3e:76:23:c7:34:68:6b:30:5e:3e:d6: cd:44:0b:67:d2:1f:e9:67:d1:8d:4a:19:46:cf:0c: d9:71:a0:e2:36:7c:f0:a0:2b:9f:3a:7f:d6:b9:c5: ea:2e:90:7b:67:81:67:b4:68:d4:f3:24:42:be:18: fa:86:be:3d:9e:89:28:e8:f8:96:04:73:b7:f9:b8: 6d:db:13:18:71:9e:41:60:6b:66:7c:d8:a4:34:01: 55:65:b5:09:1c:e1:09:f2:59:0b:81:60:4b:92:9e: 89:51:68:a1:38:c6:41:48:33:17:a3:67:3b:c1:49: a8:1d:ea:32:2d:44:d6:54:30:9a:e5:cc:c1:88:66: 90:9a:78:1c:2a:da:a7:66:45:d5:d9:80:d4:04:0d: 11:fd:72:5e:59:fc:61:45:d9:3b:67:b8:b2:fa:65: 7a:d1:04:7e:5f:72:90:72:d2:b3:5f:83:a9:3e:4e: df:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:97:EF:B7:D9:77:41:0C:E2:33:05:24:B2:29:19:BA:56:DA:33:89 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b7:ed:65:fc:1c:7a:4d:e2:74:97:85:34:bb:c3:e8:ae:87: 25:a4:91:d6:d2:37:0d:11:e3:05:45:81:f4:d3:04:45:73:0b: de:5d:e7:a7:a7:86:ef:ea:0d:bf:5c:1e:84:5c:48:05:03:b9: 7b:df:24:d3:07:2c:3a:a9:1b:0d:54:0d:b1:e7:69:b0:bd:2b: 4e:2c:1f:1a:91:5d:5d:97:81:7d:d1:30:73:c8:f7:a5:ac:c8: 96:a8:ae:20:2e:7e:bd:75:41:68:e4:d0:81:40:fb:89:0a:d0: 95:88:c3:04:30:bf:8e:9b:a4:f0:de:59:20:95:03:ef:6a:52: 99:01:2c:4a:ab:3d:9a:e6:4f:87:c6:c1:35:fb:8c:c9:50:87: de:4f:30:d3:6e:1a:be:aa:2d:ef:cb:c3:0d:d1:fb:7e:0f:18: db:75:5c:53:9c:d8:63:85:5c:4c:dd:f7:26:cf:62:b5:46:a2: 79:eb:c9:e6:0f:7a:a9:db:be:ea:ae:18:ed:67:61:01:1b:d2: 3c:4c:c8:29:28:97:62:8a:6b:d6:b6:22:65:a4:d7:05:c4:d3: 26:52:a2:eb:53:10:f9:83:ab:74:bd:df:b5:0c:3f:bf:3c:60: bb:ed:e1:79:b2:ea:f5:63:02:4c:d1:1c:3a:93:06:cc:87:27: 86:e4:9c:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YhjlBJeJgkz0FYlOHe+RoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwNDE2MjMwMDI2WhcNMjYwNDE3MjMwMDI2WjAzMTEwLwYDVQQD EyhhMzk3ZWZiN2Q5Nzc0MTBjZTIzMzA1MjRiMjI5MTliYTU2ZGEzMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpzWk83WP1LYEPyhWtrWCiYtTJVC YpYBasXW+0g+Vawv9Mcble2aXKU4oU+ku2zcvJA+TXNZWKjjDk3dEWjeCznZEpCn ta5jBGXajAygPnYjxzRoazBePtbNRAtn0h/pZ9GNShlGzwzZcaDiNnzwoCufOn/W ucXqLpB7Z4FntGjU8yRCvhj6hr49noko6PiWBHO3+bht2xMYcZ5BYGtmfNikNAFV ZbUJHOEJ8lkLgWBLkp6JUWihOMZBSDMXo2c7wUmoHeoyLUTWVDCa5czBiGaQmngc KtqnZkXV2YDUBA0R/XJeWfxhRdk7Z7iy+mV60QR+X3KQctKzX4OpPk7fUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOX77fZd0EM4jMFJLIpGbpW2jOJMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrftZfwc ek3idJeFNLvD6K6HJaSR1tI3DRHjBUWB9NMERXML3l3np6eG7+oNv1wehFxIBQO5 e98k0wcsOqkbDVQNsedpsL0rTiwfGpFdXZeBfdEwc8j3pazIlqiuIC5+vXVBaOTQ gUD7iQrQlYjDBDC/jpuk8N5ZIJUD72pSmQEsSqs9muZPh8bBNfuMyVCH3k8w024a vqot78vDDdH7fg8Y23VcU5zYY4VcTN33Js9itUaieevJ5g96qdu+6q4Y7WdhARvS PEzIKSiXYopr1rYiZaTXBcTTJlKi61MQ+YOrdL3ftQw/vzxgu+3hebLq9WMCTNEc OpMGzIcnhuSczg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:50:12 2026 by rpki-client