$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: 4Tcn9TYqVWWYoGHWRY2Ul9vCLOLs6DBThGkFLNdjNHs= Subject key identifier: 15:6B:9B:7F:03:61:09:9A:98:4C:E1:07:24:3E:0D:97:23:84:F7:4A Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019DCCAB0F76F3E7562B6A1A506173B19B5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 197A Signing time: Mon 27 Apr 2026 02:00:55 +0000 Manifest this update: Mon 27 Apr 2026 02:00:55 +0000 Manifest next update: Tue 28 Apr 2026 02:00:55 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: psCyaoUF6VJLRCKg2BOszJkDsaC3kIqztEMxLi9wCps=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 6: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 7: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 8: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 9: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 10: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 11: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 12: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 13: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 14: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 15: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 16: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 17: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 18: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 19: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 20: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 21: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 22: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 23: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 24: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 25: c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa (hash: Q4DNvIlUJ8XVj3rmssf9V95x20ibWTrUMeHs2DCLCj8=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:ab:0f:76:f3:e7:56:2b:6a:1a:50:61:73:b1:9b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Apr 27 02:00:55 2026 GMT Not After : Apr 28 02:00:55 2026 GMT Subject: CN=156b9b7f0361099a984ce107243e0d972384f74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:df:f6:01:bc:a2:8b:39:8d:d5:62:61:6a: fa:74:83:0c:83:e1:f2:f7:2e:85:5d:57:e9:54:5c: b0:16:7e:c8:58:87:b6:f8:c7:a1:b3:fe:a6:82:db: 98:6a:ce:f9:e2:d2:44:f6:c8:90:72:fe:3e:d9:c5: 49:10:0e:a1:7f:1e:4f:e9:ea:4f:17:63:93:b0:b6: b3:ed:09:c8:57:f0:aa:8b:ab:00:f7:1b:74:80:6b: 02:85:f5:48:5e:a4:73:8f:68:b6:8c:fa:01:83:46: 09:a4:36:14:79:16:a6:7d:73:a3:96:b5:51:d8:e6: 63:ca:b8:cb:08:bb:90:ae:89:a9:93:99:62:6a:9f: 8f:ef:e5:55:15:26:16:74:15:f0:68:8c:5c:6d:11: ac:85:04:d7:16:67:84:02:2f:28:76:2d:58:b1:9a: 3f:bd:b9:a5:6c:8f:f7:50:26:c8:9f:3a:21:34:6f: 79:0f:7a:bb:86:ea:7e:d1:ba:44:cf:fc:db:50:ec: db:64:1e:25:ed:ca:ab:77:4c:94:e9:70:78:66:e2: 89:2c:41:6c:e0:53:b9:b2:47:29:aa:fc:ba:25:f0: 13:46:4b:5a:df:ac:c4:40:c5:16:2e:b1:1f:f7:ac: 28:fb:13:5f:14:c3:7f:df:84:61:d8:4e:62:6b:87: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6B:9B:7F:03:61:09:9A:98:4C:E1:07:24:3E:0D:97:23:84:F7:4A X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:49:3f:b0:6e:57:d2:6d:0d:ee:df:77:3b:e3:63:b8:f4:47: 76:45:08:b0:ac:76:0e:84:e5:b7:f9:9b:ff:94:11:6a:85:5d: 67:8e:2f:fb:9e:6b:a7:94:01:71:0e:8b:84:ab:59:ed:9c:00: c9:2e:ec:a2:a1:21:a5:23:03:bd:ef:06:3b:90:1b:79:8f:a9: 01:46:c9:68:9f:fc:bf:87:a5:ed:26:8f:69:63:f7:2d:be:63: 44:62:46:a2:26:4b:ef:5c:1e:e5:0c:f8:c5:6e:aa:84:1b:93: f8:18:8c:f3:99:3a:94:1d:ac:44:de:b5:e3:8e:36:5e:d9:81: 22:59:48:75:31:f0:b2:b7:4d:1f:13:fd:f3:ac:42:da:d5:1f: c0:26:9d:99:17:01:4d:bb:fd:33:61:ce:99:bc:f5:58:7d:a4: 16:79:08:f2:07:21:91:6c:14:13:34:a4:8f:ec:42:c5:85:42: 42:ce:82:23:4f:22:61:8a:ec:8b:cb:17:eb:c6:05:cc:c7:33: 8d:d5:45:bd:aa:e0:8e:6b:f6:d4:62:6c:54:10:29:59:34:ba: 75:71:fb:37:ca:d1:11:2e:4b:cb:84:57:3b:bb:e0:7e:ce:a0: 67:6d:2d:70:f1:5c:11:dc:78:17:9e:34:68:63:7e:0e:b5:13: 47:58:f9:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3Mqw928+dWK2oaUGFzsZtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNDI3MDIwMDU1WhcNMjYwNDI4MDIwMDU1WjAzMTEwLwYDVQQD EygxNTZiOWI3ZjAzNjEwOTlhOTg0Y2UxMDcyNDNlMGQ5NzIzODRmNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsXf9gG8oos5jdViYWr6dIMMg+Hy 9y6FXVfpVFywFn7IWIe2+Mehs/6mgtuYas754tJE9siQcv4+2cVJEA6hfx5P6epP F2OTsLaz7QnIV/Cqi6sA9xt0gGsChfVIXqRzj2i2jPoBg0YJpDYUeRamfXOjlrVR 2OZjyrjLCLuQrompk5liap+P7+VVFSYWdBXwaIxcbRGshQTXFmeEAi8odi1YsZo/ vbmlbI/3UCbInzohNG95D3q7hup+0bpEz/zbUOzbZB4l7cqrd0yU6XB4ZuKJLEFs 4FO5skcpqvy6JfATRkta36zEQMUWLrEf96wo+xNfFMN/34Rh2E5ia4fHEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVrm38DYQmamEzhByQ+DZcjhPdKMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEk/sG5X 0m0N7t93O+NjuPRHdkUIsKx2DoTlt/mb/5QRaoVdZ44v+55rp5QBcQ6LhKtZ7ZwA yS7soqEhpSMDve8GO5AbeY+pAUbJaJ/8v4el7SaPaWP3Lb5jRGJGoiZL71we5Qz4 xW6qhBuT+BiM85k6lB2sRN614442XtmBIllIdTHwsrdNHxP986xC2tUfwCadmRcB Tbv9M2HOmbz1WH2kFnkI8gchkWwUEzSkj+xCxYVCQs6CI08iYYrsi8sX68YFzMcz jdVFvargjmv21GJsVBApWTS6dXH7N8rRES5Ly4RXO7vgfs6gZ20tcPFcEdx4F540 aGN+DrUTR1j55g== -----END CERTIFICATE-----Generated at Mon Apr 27 04:17:01 2026 by rpki-client