$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json) Hash identifier: X6WEx+RWNnWDFjVjmEYWTNXB1Unan0lbClNBYR9/WTM= Subject key identifier: F5:32:AD:E9:A2:45:FA:BD:71:40:6A:23:D8:EC:17:1E:F5:DF:A4:C9 Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019DA18A52DA481FC4E3D0D9F9DF28A7DDFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft Manifest number: 18D9 Signing time: Sat 18 Apr 2026 17:01:29 +0000 Manifest this update: Sat 18 Apr 2026 17:01:29 +0000 Manifest next update: Sun 19 Apr 2026 17:01:29 +0000 Files and hashes: 1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=) 2: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=) 3: HhO3fYlasNlXuWCWma8olPA14I8.roa (hash: an4Zb60vA9s3r5vXjNARMkYhW6HY9Hr3vQtUZ9SJwt4=) 4: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: v2TbRxq9+iuBlKL46PH77A2iZTdmrLEEnxY3/2wMVBk=) 5: Nn3zUJ51MvljRGZUCANsuFxobLs.roa (hash: LQQy9c9P03J1Z8RS2F5VsLFEyXdHr1CahLP2RpLISRc=) 6: PCnYDFn0k2F6lGuZ21llekgxV8k.roa (hash: fJn0EssGBGoeosMUZyS2a8EsGxua3RdLQsjTU4b7/0M=) 7: SELAkj7y_jr_HiZRyQnazDtoXIs.roa (hash: YIble+z1sK0lKNMgOA3cU9xF8L12qHo0kNEA6b7HNQc=) 8: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=) 9: cpNYdUNR0qVX_yJDLOulGuucF4w.roa (hash: bcKFmyBamxX/ja1miOQmH2gNmDaABRTlmdDj6Yrj/nU=) 10: ob-POfaVSw15K5Do9RLQm2YgXlw.roa (hash: ouG1N61w0Az8wGB3/0L1P2rIhuEcCaDWm5igC0250tA=) 11: ybue34jIShLMbUvaTVS8qnSvGO4.roa (hash: q32KcrvoqYDpaysBppsyjkoZqGVSy4+zYkwrKSlr12k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 17:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a1:8a:52:da:48:1f:c4:e3:d0:d9:f9:df:28:a7:dd:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Apr 18 17:01:29 2026 GMT Not After : Apr 19 17:01:29 2026 GMT Subject: CN=f532ade9a245fabd71406a23d8ec171ef5dfa4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:88:26:8a:58:31:76:6f:e2:69:f1:76:49: 84:62:82:44:73:7d:ea:cf:c2:7e:a2:79:98:95:35: f3:89:38:d4:97:a5:41:06:d1:21:14:23:25:07:35: 5b:49:cf:09:f1:34:f6:8a:fe:e1:45:09:4a:8d:77: a2:7c:77:9c:41:20:f4:3a:6e:8e:06:4e:b6:9b:bc: 49:e1:c7:b6:cf:b4:bc:11:d6:3c:64:66:9b:fa:bc: 62:5f:5d:6e:6b:6f:a7:ff:ea:e7:2d:2a:38:bc:1a: 17:5c:32:d3:90:f8:40:07:bd:c7:eb:84:64:fd:17: b2:eb:47:51:36:df:d8:2b:e6:0b:4b:48:da:3e:d2: de:0d:35:6f:0c:00:bc:fc:73:69:f7:67:cc:a4:75: f0:d6:07:31:5d:ef:01:af:ec:0f:a6:db:ef:3c:91: b4:50:2e:05:91:0e:97:99:d8:f5:94:fb:1c:85:e7: ab:02:3f:9f:6f:4d:c7:47:e4:62:fc:c1:a7:03:c5: 7b:ba:97:2f:fe:4e:56:f6:08:39:0c:1a:26:5c:38: 1d:ee:b0:3f:84:d8:69:4b:45:23:35:e6:05:f2:21: 6f:aa:0f:b6:2e:3e:ee:76:09:4a:cd:c1:e1:00:8c: 8f:60:8e:27:f9:9a:1b:4a:33:24:8a:83:51:ad:b6: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:32:AD:E9:A2:45:FA:BD:71:40:6A:23:D8:EC:17:1E:F5:DF:A4:C9 X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c5:52:66:64:d1:10:d6:77:7d:dc:55:3a:08:be:2c:9f:ed: 7f:53:98:14:37:87:b4:69:df:9f:f6:8e:c6:d7:02:3c:6e:9b: b2:19:cb:a5:a0:f6:56:e5:f8:91:34:bf:e9:d2:6d:da:ec:ac: 38:f6:d8:94:83:1a:c0:96:fe:0d:7a:e3:f3:67:5c:84:a3:b4: 25:2f:73:4a:7e:7f:ff:59:67:03:e6:0a:86:9f:27:5c:79:fd: 83:70:59:a2:ff:79:da:ef:50:5a:d1:91:ab:37:49:6a:03:d4: 78:6f:2e:1f:b9:f4:5b:dd:f7:fd:79:e2:63:55:7a:a0:70:74: dd:5b:96:ce:f3:a3:3b:db:de:6a:99:1f:6d:d7:fb:38:6f:ef: 3f:43:28:46:be:20:64:18:81:20:40:44:97:72:79:5c:c0:b6: 89:c9:dc:ab:10:c1:e1:1f:6a:49:cc:43:96:c0:f4:d9:6a:e9: 5a:65:90:42:16:ad:4e:f5:0e:48:3a:81:95:76:aa:aa:77:0b: f6:e0:4a:c3:85:65:98:2a:cb:09:5f:94:6f:6a:b9:33:8e:36: d9:03:d6:28:c3:f5:4f:98:7d:da:c3:ef:e4:f0:88:78:01:e4: aa:1c:e8:6d:dc:1f:9e:19:38:1e:e3:da:9c:4b:95:c3:0b:07: ba:07:35:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2hilLaSB/E49DZ+d8op937MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjYwNDE4MTcwMTI5WhcNMjYwNDE5MTcwMTI5WjAzMTEwLwYDVQQD EyhmNTMyYWRlOWEyNDVmYWJkNzE0MDZhMjNkOGVjMTcxZWY1ZGZhNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO6IJopYMXZv4mnxdkmEYoJEc33q z8J+onmYlTXziTjUl6VBBtEhFCMlBzVbSc8J8TT2iv7hRQlKjXeifHecQSD0Om6O Bk62m7xJ4ce2z7S8EdY8ZGab+rxiX11ua2+n/+rnLSo4vBoXXDLTkPhAB73H64Rk /Rey60dRNt/YK+YLS0jaPtLeDTVvDAC8/HNp92fMpHXw1gcxXe8Br+wPptvvPJG0 UC4FkQ6Xmdj1lPscheerAj+fb03HR+Ri/MGnA8V7upcv/k5W9gg5DBomXDgd7rA/ hNhpS0UjNeYF8iFvqg+2Lj7udglKzcHhAIyPYI4n+ZobSjMkioNRrbY66wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUyremiRfq9cUBqI9jsFx7136TJMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8VSZmTR ENZ3fdxVOgi+LJ/tf1OYFDeHtGnfn/aOxtcCPG6bshnLpaD2VuX4kTS/6dJt2uys OPbYlIMawJb+DXrj82dchKO0JS9zSn5//1lnA+YKhp8nXHn9g3BZov952u9QWtGR qzdJagPUeG8uH7n0W933/XniY1V6oHB03VuWzvOjO9veapkfbdf7OG/vP0MoRr4g ZBiBIEBEl3J5XMC2icncqxDB4R9qScxDlsD02WrpWmWQQhatTvUOSDqBlXaqqncL 9uBKw4VlmCrLCV+Ub2q5M4422QPWKMP1T5h92sPv5PCIeAHkqhzobdwfnhk4HuPa nEuVwwsHugc1vg== -----END CERTIFICATE-----Generated at Sat Apr 18 21:06:04 2026 by rpki-client