$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: J5gYr8JsZW+rsrDe04PF13aJQmUk1c8PFQO+NRFtbXE= Subject key identifier: B6:7D:0E:70:0D:85:32:4E:96:79:B8:2B:DF:0A:A3:2B:10:6F:55:EF Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019D992B3D9681A79A09003FF4A7072B54F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 1921 Signing time: Fri 17 Apr 2026 02:00:40 +0000 Manifest this update: Fri 17 Apr 2026 02:00:40 +0000 Manifest next update: Sat 18 Apr 2026 02:00:40 +0000 Files and hashes: 1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=) 2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=) 3: 5UPZqCFDlJ5D1iQwuO7Whotg5SI.roa (hash: FxbZPuvP2Ml6gGQGICNHacA5M1J8tjtnjSqNFBDSXLU=) 4: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=) 5: KQn12ky7VJ-tAtskwp7iCPXzI1k.roa (hash: zGzNyPJigVx6eOde+xN7bw20k8KV75kMtISB9OstCUU=) 6: Mk0-N7mvZ3KWAly3iF5fwB7VcZE.roa (hash: NYmNk/By4ADW250NalqgvyLYgyA79aFXrC+VO1jjeiQ=) 7: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=) 8: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=) 9: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=) 10: ZyA6A8hV0zM49VV7xyYtthPMkaA.roa (hash: 4hnr85KkktbCdiv0+nrobzAzkgTUeLCigCfWsa4QZNA=) 11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: anDS0Uzp6qYzWFf++KA3mayNKHNHGcj0ZtvzKm1/9rs=) 12: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=) 13: eTIL1VK4_PVdXFi5gF5woEPQkG8.roa (hash: NczJzTK4m8r22rHAsuaTAYefyiahprGtNN7PoBZHmEM=) 14: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (hash: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U=) 15: nwyoORHnVLqfYrksvB0f6CfIa6k.roa (hash: e9CYwkBaqUibsyMU/gzh+rV4KhbNY883umfRTcrBM0Y=) 16: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:3d:96:81:a7:9a:09:00:3f:f4:a7:07:2b:54:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Apr 17 02:00:40 2026 GMT Not After : Apr 18 02:00:40 2026 GMT Subject: CN=b67d0e700d85324e9679b82bdf0aa32b106f55ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:bc:99:e3:ce:b9:e9:f1:ea:00:74:f3:c5: 95:b7:f5:63:ef:b3:86:79:6d:01:2c:d6:fc:2d:43: f4:07:9e:7f:88:ab:a9:27:a5:f9:7b:6b:35:5c:fd: e7:c2:d8:37:6c:6f:4e:6f:0a:53:2b:53:ce:c0:e1: 9a:e6:a7:f2:2d:18:a1:61:5b:51:e9:59:e0:5d:52: 2a:df:2a:66:00:48:a7:30:62:a1:7c:9f:5c:47:fa: 8f:03:3b:91:7d:7d:96:c2:59:1e:a3:2b:7d:13:a4: 80:34:e3:2b:f0:dd:35:41:51:b7:fb:62:66:35:fb: 5c:0e:e7:e4:cb:f1:df:01:45:29:61:3e:7d:1b:34: ee:74:54:7f:e6:95:2b:e7:28:49:f4:8c:a9:f1:b1: 57:9b:00:02:a8:ff:b7:aa:a1:84:2e:70:09:5b:ef: 73:61:a6:4d:47:17:b9:57:87:f0:66:c1:f4:61:48: 6e:ba:45:6a:ab:fa:1b:49:76:88:2d:98:0e:cb:62: 8c:ae:aa:24:67:bf:6d:ee:fd:c7:97:2e:81:5a:48: 9a:84:38:e0:ef:e7:5b:90:6b:0e:00:45:ef:83:41: ab:05:83:e8:60:2c:1e:b2:e7:74:c3:6e:df:19:5c: fe:2b:8a:b1:bd:21:36:c6:77:b3:c7:4f:73:d5:32: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7D:0E:70:0D:85:32:4E:96:79:B8:2B:DF:0A:A3:2B:10:6F:55:EF X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:66:65:90:43:b7:f1:2c:3a:2a:08:5b:44:60:e5:9a:b4:82: ed:61:2a:97:67:b5:78:28:72:22:05:32:29:74:71:55:25:dd: f0:6f:50:b2:c1:b3:f8:ba:f3:ad:d1:7e:4e:74:6d:3f:3b:d8: 8c:10:48:96:ba:79:fa:a2:0e:33:8a:37:54:16:48:29:a8:10: dc:dd:0f:31:0f:3a:05:71:0c:02:42:11:00:96:55:b0:81:c0: 4c:64:25:54:ae:40:0c:7f:59:67:14:bf:66:96:3a:cc:cd:bb: db:cc:91:34:de:aa:62:53:12:72:2a:09:ea:54:dd:71:3c:2f: 93:2e:40:91:38:34:c9:cd:6e:f9:35:c6:72:9f:ab:40:6d:23: 9d:48:a2:1d:9c:20:ce:3c:19:c7:7e:9c:c4:96:46:84:a4:2f: cb:08:ad:af:47:78:eb:5b:b0:83:28:d6:c0:2d:f0:f7:18:c9: 07:f1:d1:7b:99:83:b0:60:8a:b6:83:34:b4:30:36:c0:81:5a: 99:18:ce:6f:77:b8:01:2e:26:bd:1c:a4:49:f3:44:8d:f6:04: 64:57:51:c1:a9:13:54:dc:57:2d:32:b5:1d:2c:79:55:b8:75: 78:1a:79:04:81:08:e9:85:16:42:c1:b2:5c:77:00:83:ca:1f: 6c:3a:c3:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZKz2WgaeaCQA/9KcHK1T1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwNDE3MDIwMDQwWhcNMjYwNDE4MDIwMDQwWjAzMTEwLwYDVQQD EyhiNjdkMGU3MDBkODUzMjRlOTY3OWI4MmJkZjBhYTMyYjEwNmY1NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB28mePOuenx6gB088WVt/Vj77OG eW0BLNb8LUP0B55/iKupJ6X5e2s1XP3nwtg3bG9ObwpTK1POwOGa5qfyLRihYVtR 6VngXVIq3ypmAEinMGKhfJ9cR/qPAzuRfX2Wwlkeoyt9E6SANOMr8N01QVG3+2Jm NftcDufky/HfAUUpYT59GzTudFR/5pUr5yhJ9Iyp8bFXmwACqP+3qqGELnAJW+9z YaZNRxe5V4fwZsH0YUhuukVqq/obSXaILZgOy2KMrqokZ79t7v3Hly6BWkiahDjg 7+dbkGsOAEXvg0GrBYPoYCwesud0w27fGVz+K4qxvSE2xnezx09z1TLg5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZ9DnANhTJOlnm4K98KoysQb1XvMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6mZlkEO3 8Sw6KghbRGDlmrSC7WEql2e1eChyIgUyKXRxVSXd8G9QssGz+LrzrdF+TnRtPzvY jBBIlrp5+qIOM4o3VBZIKagQ3N0PMQ86BXEMAkIRAJZVsIHATGQlVK5ADH9ZZxS/ ZpY6zM2728yRNN6qYlMScioJ6lTdcTwvky5AkTg0yc1u+TXGcp+rQG0jnUiiHZwg zjwZx36cxJZGhKQvywitr0d461uwgyjWwC3w9xjJB/HRe5mDsGCKtoM0tDA2wIFa mRjOb3e4AS4mvRykSfNEjfYEZFdRwakTVNxXLTK1HSx5Vbh1eBp5BIEI6YUWQsGy XHcAg8ofbDrD8w== -----END CERTIFICATE-----Generated at Fri Apr 17 08:00:34 2026 by rpki-client