$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: GqXVXDdDLhBzSI1dvweuo606VZ+Qg7Jke7Dni65tNpE= Subject key identifier: 78:A4:19:16:97:C4:A4:94:3A:CF:80:3F:A6:18:29:FE:75:FB:16:2C Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019DB08F1D4674A326A648526A3124B5DB93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 12B5 Signing time: Tue 21 Apr 2026 15:01:02 +0000 Manifest this update: Tue 21 Apr 2026 15:01:02 +0000 Manifest next update: Wed 22 Apr 2026 15:01:02 +0000 Files and hashes: 1: 0Mybj4rFQlGdxvZ7NznWNMzZNF4.roa (hash: izLvly3jkC64Eb5EtBveae4jjwGSamPNz65JeNhANXc=) 2: 0T_njveGDBox8dRnm6ptBU24SOE.roa (hash: MTvLZVcAf3FK4lXDgQihNVIFOil0UjLczM3XYj+vPwc=) 3: BWSIfeORL3ZaF98YJdEW_lwKSoo.roa (hash: O2KdoHsDXYMUXXkiHb3Ti5/HWYkXf5itDU8BQXurMDo=) 4: HfFxGJLVfgStnjkbuHPm0NlbD20.roa (hash: OTTBrtAbVcSgQpN0MQDDsHGVJuiE+QV/cGYKWbjIEu4=) 5: LYPFsLg-HHk-AH0q_znuAsebvZs.roa (hash: LQwpVZiG9LTd+JsGkTPK0EuyocYLkODDaDYcgGaoYoA=) 6: YHr6sMN1EVbEwUde6FetuHcueOA.roa (hash: 0BAOQ2lWNPhsH0gX4p/TlQYVZnjFg2uh0FOWf3CJEt0=) 7: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: eql01MpWRBDgdkyolVIEaC7eX0Q5GLnr96Rx8KD2kY8=) 8: cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa (hash: eKAgKSzUAMEtrHDrT7mnQsSII8a/h3K+YCAIf+FAWy8=) 9: d00ZvtrFum9P2Yp0ubsN6hUhmyM.roa (hash: 2Me5/G1Q2JvdBpJ4pZYv7LNj99NEpOku37A513+s49s=) 10: d50ryNf7AouleyVkV0KoPCj3Vbs.roa (hash: 8cb301Zu+uM5+wsIG5dakaifCIJcNQE2p9LiFv/55dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b0:8f:1d:46:74:a3:26:a6:48:52:6a:31:24:b5:db:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Apr 21 15:01:02 2026 GMT Not After : Apr 22 15:01:02 2026 GMT Subject: CN=78a4191697c4a4943acf803fa61829fe75fb162c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:48:e3:17:82:5a:8a:c3:ad:45:04:bc:6e: a4:3e:7c:fb:2d:56:9f:6a:35:6e:8f:d7:d4:e8:10: bc:5c:4b:65:06:5a:a8:ad:61:c2:6e:c8:2e:78:5b: 50:2c:ff:1b:fb:19:8a:b0:fe:03:88:24:77:fc:01: 1b:b0:59:53:5c:ec:20:55:75:17:c0:56:c3:0c:35: b9:f7:38:57:65:a0:64:77:c3:5b:98:4b:1d:d9:fc: bf:39:5f:c4:b0:2a:03:cb:4f:e7:05:e9:04:f7:2f: ce:4c:e9:e0:b4:8d:36:34:2f:cd:ac:66:95:1a:f6: 2a:0a:33:fa:e8:e5:cc:ed:31:b4:c9:e0:26:b9:e2: 9a:c6:33:d9:fa:a3:93:f9:df:79:50:67:06:be:04: 99:cc:4f:cf:9c:65:12:1f:9c:3c:71:fd:51:c0:c0: 84:ca:b3:82:1e:ae:e8:22:5e:fa:19:c6:70:f4:c9: c9:d4:9d:7b:d8:14:da:82:a1:a2:17:1d:9a:51:3c: 77:03:19:32:95:3b:e2:90:91:73:f2:17:ed:77:21: 18:62:5d:33:d2:ba:38:81:da:81:ce:6f:0e:26:6e: 7a:f8:53:5c:49:dd:ab:0c:d8:a9:fd:4e:b9:c5:ee: a1:37:0b:31:0c:0d:4c:5e:b4:de:94:19:eb:07:39: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A4:19:16:97:C4:A4:94:3A:CF:80:3F:A6:18:29:FE:75:FB:16:2C X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:df:51:e0:b3:2e:60:bb:04:1c:9f:20:2c:37:8d:a2:4f:48: fc:25:ef:28:dd:8e:8d:73:af:f6:83:58:a2:fc:78:49:d2:e5: fd:bc:e5:85:c2:8c:c1:57:66:d1:e2:66:1b:13:7f:40:80:c7: 47:d5:a7:c1:3d:35:ee:b9:ae:b5:1c:20:e9:eb:4e:54:bc:bb: dc:a3:b0:c6:b2:a8:49:0e:f0:91:34:d9:fe:21:5b:a8:98:e4: 3d:d6:58:26:0d:3d:74:06:29:7a:44:14:02:ba:5f:4c:01:51: ab:a5:f8:d3:75:be:96:f7:b1:58:31:2b:83:ce:bc:ad:09:b5: 68:2e:f5:2e:c8:26:28:a0:e4:29:7b:4b:f4:46:f0:e6:53:64: 07:9a:b0:c7:90:15:98:05:52:ef:58:4c:5d:00:3b:ec:70:41: 81:da:55:98:f2:ad:4f:c3:33:c2:0c:48:f4:9d:b7:8c:e8:87: 48:80:8c:a1:77:4f:3d:c9:d4:e6:b6:d4:f4:55:53:57:d9:ea: aa:1d:0f:86:ed:97:7c:b7:b5:7e:7a:55:99:a4:b9:60:5d:e5: f8:a8:57:88:6c:30:e7:1d:d1:21:df:6d:41:6c:17:34:10:2d: 7b:1a:1d:b2:6e:7b:a4:bf:a5:3b:b0:d6:a9:d7:b5:41:ca:1e: 79:e0:02:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2wjx1GdKMmpkhSajEktduTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjYwNDIxMTUwMTAyWhcNMjYwNDIyMTUwMTAyWjAzMTEwLwYDVQQD Eyg3OGE0MTkxNjk3YzRhNDk0M2FjZjgwM2ZhNjE4MjlmZTc1ZmIxNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRdI4xeCWorDrUUEvG6kPnz7LVaf ajVuj9fU6BC8XEtlBlqorWHCbsgueFtQLP8b+xmKsP4DiCR3/AEbsFlTXOwgVXUX wFbDDDW59zhXZaBkd8NbmEsd2fy/OV/EsCoDy0/nBekE9y/OTOngtI02NC/NrGaV GvYqCjP66OXM7TG0yeAmueKaxjPZ+qOT+d95UGcGvgSZzE/PnGUSH5w8cf1RwMCE yrOCHq7oIl76GcZw9MnJ1J172BTagqGiFx2aUTx3AxkylTvikJFz8hftdyEYYl0z 0ro4gdqBzm8OJm56+FNcSd2rDNip/U65xe6hNwsxDA1MXrTelBnrBzmGkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHikGRaXxKSUOs+AP6YYKf51+xYsMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5d9R4LMu YLsEHJ8gLDeNok9I/CXvKN2OjXOv9oNYovx4SdLl/bzlhcKMwVdm0eJmGxN/QIDH R9WnwT017rmutRwg6etOVLy73KOwxrKoSQ7wkTTZ/iFbqJjkPdZYJg09dAYpekQU ArpfTAFRq6X403W+lvexWDErg868rQm1aC71LsgmKKDkKXtL9Ebw5lNkB5qwx5AV mAVS71hMXQA77HBBgdpVmPKtT8MzwgxI9J23jOiHSICMoXdPPcnU5rbU9FVTV9nq qh0Phu2XfLe1fnpVmaS5YF3l+KhXiGww5x3RId9tQWwXNBAtexodsm57pL+lO7DW qde1QcoeeeACew== -----END CERTIFICATE-----Generated at Wed Apr 22 01:44:37 2026 by rpki-client