$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: PT6T/k62ef+2HG3RefzifKRadeZ8UG4QZPBWJpv9iKk= Subject key identifier: CC:F7:30:F0:14:98:28:10:03:F4:3F:3A:34:B8:A5:68:7E:99:35:FE Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019DA59D1E0AEF072F1532F0CD75280E0779 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 10F2 Signing time: Sun 19 Apr 2026 12:00:30 +0000 Manifest this update: Sun 19 Apr 2026 12:00:30 +0000 Manifest next update: Mon 20 Apr 2026 12:00:30 +0000 Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=) 2: 8LleVlpBeH6rvTVrtdlSQo7_Krc.roa (hash: pr0ffVAFHumaLWPDJNcLOMJrBmKAb+juWG8ZwguB2Is=) 3: B3K6QLkLLN5JAQFrMvr7zHSp2iE.asa (hash: IUK/NTcpKX9eob9IkswUCrgL3y+vjVpnJDlPYvd3igU=) 4: BLxG_9aNcl61DnDRQOS-DhrV8xQ.roa (hash: LExdEQ5VC8/M9uctTrGTrEOA+lYTiyS4I7rkKa10kEA=) 5: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=) 6: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=) 7: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=) 8: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=) 9: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: ed4bBHCZP/W6kuakgtBpBFUXb27vEckqilqgnt5+sW8=) 10: jaJHGhM03pdKXU-GKkJa6RbXza8.roa (hash: Xice7TtWbhhry5l8mkNOfTIRzz6L8HFpzbJK4C0Sr3E=) 11: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a5:9d:1e:0a:ef:07:2f:15:32:f0:cd:75:28:0e:07:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Apr 19 12:00:30 2026 GMT Not After : Apr 20 12:00:30 2026 GMT Subject: CN=ccf730f01498281003f43f3a34b8a5687e9935fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:a6:b2:fe:38:9e:50:65:1d:47:3a:2d:45: f1:05:62:3c:73:88:99:5e:fc:23:df:8f:78:53:79: f7:d3:51:8e:3e:b4:f9:a2:77:25:d2:f9:63:5d:2f: 8f:4f:43:fc:7d:9b:c1:ec:25:23:e7:71:a8:5a:8f: c3:55:60:c5:e8:fa:d7:14:02:66:2a:4a:14:c7:27: 12:f4:d5:e3:a8:61:18:e6:0c:a3:48:7c:66:c4:a5: f4:3c:42:a9:b1:ef:34:57:b7:e3:82:96:1c:60:7e: 20:75:0e:13:ec:a4:ef:61:b5:3f:61:c3:53:b7:a3: 0b:2a:06:0a:63:a3:7e:35:31:53:c0:27:e1:ff:56: 33:02:8c:f0:ce:f0:e6:57:6a:5d:58:3a:86:2e:c0: f7:8f:55:4b:27:1f:8f:af:86:e6:3a:28:ab:c4:c4: 38:31:88:fc:fe:1e:6f:1f:4f:67:50:d6:85:c6:1f: f7:97:d1:bc:22:aa:53:cf:12:0b:c8:ea:69:30:93: 5b:25:11:da:a9:77:db:d3:44:88:c7:f5:41:4e:47: 82:5e:9a:2b:78:b8:3f:13:45:70:53:14:18:9a:ea: 3c:90:ee:aa:88:90:5e:6c:27:c1:2c:db:fd:36:f0: 1f:73:cf:1e:09:64:97:71:90:bd:7e:a0:7a:73:dd: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F7:30:F0:14:98:28:10:03:F4:3F:3A:34:B8:A5:68:7E:99:35:FE X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:23:42:c2:9a:87:31:10:6d:dd:13:92:53:e3:36:74:45:96: 41:52:7f:27:17:ec:fc:50:06:79:43:7f:07:26:14:b9:53:45: c4:e1:28:ab:d9:75:93:f4:ed:b5:69:41:42:78:47:e4:27:fe: c4:a6:c5:36:33:26:78:c0:ff:bc:88:b5:2c:34:3b:01:04:de: 05:34:65:1c:a9:83:c8:a3:cf:fe:c9:ed:c6:c8:c4:b0:d0:b3: cf:54:3c:36:4b:ee:62:72:b0:13:ba:b5:aa:0e:aa:22:02:80: 82:22:b2:7f:b0:c6:24:f5:e8:bd:02:fa:e7:f2:7b:37:76:62: 22:91:41:2c:08:97:0c:0d:c4:fc:28:04:63:87:23:1e:4b:6b: 1a:5f:39:0a:34:90:ec:84:1e:e2:64:1c:81:11:de:e7:44:00: 5e:9d:83:f1:14:d4:37:47:4e:c0:60:1d:3c:c6:5c:a5:fa:5e: f2:81:f9:ab:35:f4:29:6a:a3:13:45:71:d4:53:2e:74:0a:42: 6a:d4:a1:01:7d:9a:ff:8b:b3:24:d1:9b:3c:e5:12:d3:a1:30: 0b:97:6c:ec:2f:34:44:95:7b:c4:3b:0b:5b:d8:da:b5:f9:1e: 71:ed:3f:07:18:47:19:70:42:57:ee:28:d6:6f:3f:67:98:65: eb:76:23:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2lnR4K7wcvFTLwzXUoDgd5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwNDE5MTIwMDMwWhcNMjYwNDIwMTIwMDMwWjAzMTEwLwYDVQQD EyhjY2Y3MzBmMDE0OTgyODEwMDNmNDNmM2EzNGI4YTU2ODdlOTkzNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYmmsv44nlBlHUc6LUXxBWI8c4iZ Xvwj3494U3n301GOPrT5oncl0vljXS+PT0P8fZvB7CUj53GoWo/DVWDF6PrXFAJm KkoUxycS9NXjqGEY5gyjSHxmxKX0PEKpse80V7fjgpYcYH4gdQ4T7KTvYbU/YcNT t6MLKgYKY6N+NTFTwCfh/1YzAozwzvDmV2pdWDqGLsD3j1VLJx+Pr4bmOiirxMQ4 MYj8/h5vH09nUNaFxh/3l9G8IqpTzxILyOppMJNbJRHaqXfb00SIx/VBTkeCXpor eLg/E0VwUxQYmuo8kO6qiJBebCfBLNv9NvAfc88eCWSXcZC9fqB6c9186QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMz3MPAUmCgQA/Q/OjS4pWh+mTX+MB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyNCwpqH MRBt3ROSU+M2dEWWQVJ/Jxfs/FAGeUN/ByYUuVNFxOEoq9l1k/TttWlBQnhH5Cf+ xKbFNjMmeMD/vIi1LDQ7AQTeBTRlHKmDyKPP/sntxsjEsNCzz1Q8NkvuYnKwE7q1 qg6qIgKAgiKyf7DGJPXovQL65/J7N3ZiIpFBLAiXDA3E/CgEY4cjHktrGl85CjSQ 7IQe4mQcgRHe50QAXp2D8RTUN0dOwGAdPMZcpfpe8oH5qzX0KWqjE0Vx1FMudApC atShAX2a/4uzJNGbPOUS06EwC5ds7C80RJV7xDsLW9jatfkece0/BxhHGXBCV+4o 1m8/Z5hl63YjQQ== -----END CERTIFICATE-----Generated at Sun Apr 19 18:08:01 2026 by rpki-client