$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: L/hKYSAb9ySjXBvNEURnQ+sDhG3OswKScTNmQuX4h9c= Subject key identifier: 8B:64:2D:79:14:ED:84:0F:4A:1B:D0:D2:38:DD:B6:69:61:6E:BC:0E Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019DCD4FE157F58CDB0860725A2F413404D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0E15 Signing time: Mon 27 Apr 2026 05:00:57 +0000 Manifest this update: Mon 27 Apr 2026 05:00:57 +0000 Manifest next update: Tue 28 Apr 2026 05:00:57 +0000 Files and hashes: 1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 3: 5vGd1hrRUgjw-VsLzTylini_B7Q.roa (hash: sg0Um8p6l1c6gl4UvV5+SwzisrScl+Xsl5xaWUIwQqQ=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (hash: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8=) 7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 8: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (hash: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: jk_vo45DTCE6Qch6NeSYYIx2UVA.roa (hash: Y3KIabgiInfNA/NNjT/XlQnKjIR2mWc9rhmGkHb5FNU=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 13: pgVasoGtiLKSu7Gip3svipxzZPk.roa (hash: 0SihNtYkT1G6gzAeawF0Zf7V1EZDtwvsDM2yXROG1dk=) 14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: PSZK8AYTjhu7kWrmU6Z29bXtIR4MRAz4c3sR32ZGyX8=) 15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:4f:e1:57:f5:8c:db:08:60:72:5a:2f:41:34:04:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Apr 27 05:00:57 2026 GMT Not After : Apr 28 05:00:57 2026 GMT Subject: CN=8b642d7914ed840f4a1bd0d238ddb669616ebc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:26:4e:e2:01:f2:50:03:2b:a1:78:83:d7:43: b5:04:5d:6a:1e:5a:2a:86:87:7e:14:c9:16:f4:f6: d3:c4:43:2b:35:dc:35:7c:85:a4:6e:44:eb:6d:1c: f0:47:9c:a2:38:8c:3e:d1:58:59:3d:ee:5f:1c:c4: 1d:fc:49:77:6e:9b:9d:8a:cf:90:1d:e0:aa:57:15: 49:16:6b:a5:78:1a:32:a8:ae:3c:c2:fa:7f:e6:47: 02:9b:91:86:11:3d:2d:d3:2b:0c:92:b3:25:75:60: 57:31:7d:a8:76:50:e0:ac:5f:7d:82:f0:34:5e:bc: b5:80:77:52:c2:f0:5f:87:00:df:b8:e8:46:bb:ee: e4:4d:82:41:ea:63:cd:04:b0:b2:40:61:dd:04:c1: fa:cd:c4:ae:23:61:7a:09:f0:29:7b:e9:d9:ee:44: 84:e5:68:85:e5:ae:67:8e:38:bf:70:fe:53:05:5e: 3e:51:c0:c9:9f:a6:b1:4d:25:c2:56:89:5a:88:6c: 0d:34:91:c4:54:1b:c8:b8:0c:a1:ef:b9:55:12:e6: de:1e:43:4e:66:ef:3c:c5:c0:8c:3d:8c:63:13:f6: 8e:ea:d6:87:32:1b:ea:60:0e:cd:10:2f:df:c0:2b: 0b:06:32:0a:16:98:d1:f4:1e:05:e8:2a:a0:13:d9: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:64:2D:79:14:ED:84:0F:4A:1B:D0:D2:38:DD:B6:69:61:6E:BC:0E X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:31:68:f4:b2:77:b7:40:08:2b:64:45:bd:69:b8:f9:ed:ae: 4a:79:5b:72:1a:a2:be:c1:ab:a2:7d:98:fa:b1:fd:6c:e3:07: 63:9d:5e:6f:c6:cc:10:53:a8:7d:27:24:f5:53:48:e4:96:bb: a2:a3:d0:cb:ad:29:25:ea:78:5d:28:fb:76:1b:ca:53:b8:1b: 31:9e:4c:3d:67:42:7d:16:7c:f3:b9:27:86:f9:e4:ee:f3:2f: 7b:46:a4:47:ae:46:ce:0c:ff:e1:71:f6:2e:fe:dd:8e:7f:bc: ad:7e:f6:92:0b:48:44:68:43:0a:d5:fa:79:26:9b:fe:2f:55: c3:8b:40:e3:72:71:28:da:6d:3f:a7:95:4a:83:47:61:42:14: e1:93:5a:b9:1e:a9:84:1e:1e:b9:00:e8:dc:0e:16:c9:e7:43: d7:44:2a:f6:3f:44:de:9d:5b:e3:bf:d7:59:51:24:fd:29:69: 71:b8:5f:df:ca:8b:54:6c:40:1a:25:05:2b:b4:05:b1:aa:34: d9:8b:47:b2:b4:8e:69:f1:1c:17:d3:74:15:c4:29:be:89:35: 28:c1:75:31:43:db:e1:a6:1c:ce:da:5c:6a:57:da:cd:56:f2: 2c:52:97:10:8e:f5:79:8c:9f:5f:62:18:3f:94:b0:3c:1c:2d: 17:af:e7:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NT+FX9YzbCGByWi9BNATXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwNDI3MDUwMDU3WhcNMjYwNDI4MDUwMDU3WjAzMTEwLwYDVQQD Eyg4YjY0MmQ3OTE0ZWQ4NDBmNGExYmQwZDIzOGRkYjY2OTYxNmViYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSZO4gHyUAMroXiD10O1BF1qHloq hod+FMkW9PbTxEMrNdw1fIWkbkTrbRzwR5yiOIw+0VhZPe5fHMQd/El3bpudis+Q HeCqVxVJFmuleBoyqK48wvp/5kcCm5GGET0t0ysMkrMldWBXMX2odlDgrF99gvA0 Xry1gHdSwvBfhwDfuOhGu+7kTYJB6mPNBLCyQGHdBMH6zcSuI2F6CfApe+nZ7kSE 5WiF5a5njji/cP5TBV4+UcDJn6axTSXCVolaiGwNNJHEVBvIuAyh77lVEubeHkNO Zu88xcCMPYxjE/aO6taHMhvqYA7NEC/fwCsLBjIKFpjR9B4F6CqgE9khuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItkLXkU7YQPShvQ0jjdtmlhbrwOMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszFo9LJ3 t0AIK2RFvWm4+e2uSnlbchqivsGron2Y+rH9bOMHY51eb8bMEFOofSck9VNI5Ja7 oqPQy60pJep4XSj7dhvKU7gbMZ5MPWdCfRZ887knhvnk7vMve0akR65Gzgz/4XH2 Lv7djn+8rX72kgtIRGhDCtX6eSab/i9Vw4tA43JxKNptP6eVSoNHYUIU4ZNauR6p hB4euQDo3A4WyedD10Qq9j9E3p1b47/XWVEk/Slpcbhf38qLVGxAGiUFK7QFsao0 2YtHsrSOafEcF9N0FcQpvok1KMF1MUPb4aYcztpcalfazVbyLFKXEI71eYyfX2IY P5SwPBwtF6/neA== -----END CERTIFICATE-----Generated at Mon Apr 27 09:15:55 2026 by rpki-client