$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: sUs1IW9towIgR9bgg1bdN+6Khbjdt9JrcHIuKoLGZFY= Subject key identifier: B1:5B:A4:CC:E0:2B:52:B0:51:BD:5F:2E:3F:D1:3E:BB:74:71:67:D1 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019DA41C88F152AD4E7300B8E9AF10200191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 18D4 Signing time: Sun 19 Apr 2026 05:00:26 +0000 Manifest this update: Sun 19 Apr 2026 05:00:26 +0000 Manifest next update: Mon 20 Apr 2026 05:00:26 +0000 Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 2: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 3: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 4: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 5: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 6: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: aqTULsSqW3TfRtCjzYXs8D3P4437gt/ZKqtC6A1StCI=) 7: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 8: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 9: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 10: Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa (hash: xU544IyvXcLXM7e3JvHPAxxk8EzCmMrxrlsPcRWgF9s=) 11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 12: gvMvxN1JHVPjgshkuwfHJsKx4dU.roa (hash: VUg2txUUu1/KKURpEb7Xa9x6WRrXiOxip3ohqdUTZeY=) 13: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:1c:88:f1:52:ad:4e:73:00:b8:e9:af:10:20:01:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Apr 19 05:00:26 2026 GMT Not After : Apr 20 05:00:26 2026 GMT Subject: CN=b15ba4cce02b52b051bd5f2e3fd13ebb747167d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:98:41:77:c6:84:73:86:e2:62:fc:06:73: 6b:a5:59:3d:4e:11:e7:63:6f:0d:45:e2:9e:9f:39: 61:fa:57:17:f2:32:e5:23:2b:c2:d8:09:fa:b7:49: 61:b1:df:85:0f:56:29:77:ee:e0:a6:29:21:1a:d3: e0:ac:bd:40:53:ba:f2:22:95:ed:fd:57:a6:b9:1a: a5:0d:34:82:3b:7b:43:82:cf:2b:80:38:29:5e:fe: 21:e9:f2:f8:9c:ee:7f:31:dc:e4:84:03:27:00:9d: b7:de:2a:a3:d6:2f:a1:21:45:63:4a:a0:0d:61:ee: be:a8:c4:f6:e1:22:18:22:ec:83:51:c1:ca:83:73: 37:54:47:5e:08:61:92:a1:95:b0:c9:04:0b:80:b6: 6f:01:5c:04:91:f8:9d:d8:03:e9:9a:c6:c9:b7:52: 30:0c:00:08:64:d1:a9:c5:59:fd:d6:1f:a7:49:cd: fb:e5:16:d2:fd:df:38:7f:ea:0a:c6:19:47:1e:6a: 43:ab:2e:48:c2:83:51:85:bf:11:ac:78:16:14:0c: f9:5c:49:06:9e:40:48:d6:ee:7e:37:c3:17:51:3a: 8a:9a:81:dd:d9:64:1b:8f:20:b6:17:98:04:fb:66: 60:73:7f:64:f4:91:7d:68:77:64:d4:7b:f3:68:92: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5B:A4:CC:E0:2B:52:B0:51:BD:5F:2E:3F:D1:3E:BB:74:71:67:D1 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:87:dd:4a:8d:91:a0:b0:cf:c3:4e:29:00:31:9d:a5:fe:a4: 7a:dd:5a:c0:c8:e6:f1:44:86:54:36:35:16:15:0f:ba:98:cc: 82:9c:74:90:31:08:28:05:4b:f0:16:01:c1:80:72:85:58:cd: 95:58:0f:3c:dd:a7:f9:e3:47:0c:2b:24:c1:61:cd:b6:9e:fd: 1b:8b:cf:f6:e6:46:b4:20:e4:18:6d:e8:46:cb:12:81:c0:92: e4:44:0a:81:75:d2:7f:23:17:c5:b5:9f:52:77:35:67:e0:62: 10:5c:62:97:da:16:46:6d:76:47:c0:b1:06:58:e3:62:7c:86: 8d:26:2e:06:57:ed:38:4b:6f:17:14:d4:11:d2:57:6b:b4:e4: 27:c6:29:bf:86:ba:81:e2:da:3b:7f:12:35:c8:3f:9f:0a:c2: 7b:7f:ed:cb:89:e7:6d:25:4c:6e:50:3c:c3:89:16:cf:92:d8: 77:9d:5c:cb:1b:b4:78:39:b9:ba:fa:b2:15:b0:94:70:6a:3d: 34:80:20:49:af:4d:26:94:09:47:4b:97:a4:e9:89:74:6b:53: 2b:d6:df:c6:a2:25:67:db:01:46:ad:e7:61:19:d0:c0:0b:92: b8:c2:92:0b:ca:f9:52:6a:60:f4:5d:b5:b5:50:ce:25:6a:6e: 1c:bb:83:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kHIjxUq1OcwC46a8QIAGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwNDE5MDUwMDI2WhcNMjYwNDIwMDUwMDI2WjAzMTEwLwYDVQQD EyhiMTViYTRjY2UwMmI1MmIwNTFiZDVmMmUzZmQxM2ViYjc0NzE2N2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfaYQXfGhHOG4mL8BnNrpVk9ThHn Y28NReKenzlh+lcX8jLlIyvC2An6t0lhsd+FD1Ypd+7gpikhGtPgrL1AU7ryIpXt /VemuRqlDTSCO3tDgs8rgDgpXv4h6fL4nO5/MdzkhAMnAJ233iqj1i+hIUVjSqAN Ye6+qMT24SIYIuyDUcHKg3M3VEdeCGGSoZWwyQQLgLZvAVwEkfid2APpmsbJt1Iw DAAIZNGpxVn91h+nSc375RbS/d84f+oKxhlHHmpDqy5IwoNRhb8RrHgWFAz5XEkG nkBI1u5+N8MXUTqKmoHd2WQbjyC2F5gE+2Zgc39k9JF9aHdk1HvzaJI5AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFbpMzgK1KwUb1fLj/RPrt0cWfRMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYfdSo2R oLDPw04pADGdpf6ket1awMjm8USGVDY1FhUPupjMgpx0kDEIKAVL8BYBwYByhVjN lVgPPN2n+eNHDCskwWHNtp79G4vP9uZGtCDkGG3oRssSgcCS5EQKgXXSfyMXxbWf Unc1Z+BiEFxil9oWRm12R8CxBljjYnyGjSYuBlftOEtvFxTUEdJXa7TkJ8Ypv4a6 geLaO38SNcg/nwrCe3/ty4nnbSVMblA8w4kWz5LYd51cyxu0eDm5uvqyFbCUcGo9 NIAgSa9NJpQJR0uXpOmJdGtTK9bfxqIlZ9sBRq3nYRnQwAuSuMKSC8r5Umpg9F21 tVDOJWpuHLuDkg== -----END CERTIFICATE-----Generated at Sun Apr 19 09:31:58 2026 by rpki-client