$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: qx2TZ+U43Wj3vUuKuxMPATJby8QxS0Cw508lw5p1WhE= Subject key identifier: 47:F7:13:8D:34:61:09:E0:0A:79:DF:77:08:2B:3A:75:CE:07:A0:3A Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019DA678C8BFDE6A570AEF8E586AEB2A276F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 1297 Signing time: Sun 19 Apr 2026 16:00:26 +0000 Manifest this update: Sun 19 Apr 2026 16:00:26 +0000 Manifest next update: Mon 20 Apr 2026 16:00:26 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 3: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 4: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 5: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 6: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 7: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 8: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 9: hd0YhlJ9IDoyXw3U8pgJ3ceuKRI.roa (hash: /lIMMHgK4zk88anoXyRyBTEvoIowJEiVJJvaW0LTkSw=) 10: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: BA9xYgO+4qZTPtyJwlWy1mMXN00dAtTd1mRLEKoNzQE=) 11: ran8AN3AZ4R2r49zo9zOMgljp88.roa (hash: VSrPvf3ym2RdveR02NWlYwS27b6vZOatiWbKlgNRz08=) 12: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) 13: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 16:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a6:78:c8:bf:de:6a:57:0a:ef:8e:58:6a:eb:2a:27:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Apr 19 16:00:26 2026 GMT Not After : Apr 20 16:00:26 2026 GMT Subject: CN=47f7138d346109e00a79df77082b3a75ce07a03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:34:12:ce:b9:f8:fb:9f:94:6d:fc:65:73: 07:12:95:3c:b1:cf:6e:30:1c:dd:17:9f:f1:bc:d1: 9d:49:4b:7f:64:88:58:62:f3:25:48:5e:42:e8:96: d6:f2:73:db:a3:4f:9e:9a:d0:bb:d5:da:41:a8:75: fa:5a:50:5d:a7:b3:36:74:06:7c:c1:8e:e7:2e:5d: 0b:d7:ea:bc:2b:55:7b:e2:af:e0:c1:d5:95:07:f6: 97:8e:cb:2b:c6:a7:62:88:ca:d0:3b:e2:bd:b1:03: e3:1f:48:3f:41:81:a1:ca:f4:20:19:e6:e3:42:49: 6e:37:c8:20:fc:c4:81:91:13:c2:3f:4d:5d:cd:20: df:e0:79:b4:61:5a:eb:9d:a2:3e:41:75:b1:22:22: 39:5a:58:20:a9:29:b6:d4:38:b7:84:ef:88:ef:d2: 9b:23:ba:00:c1:8e:0b:4a:20:6b:92:c8:5a:2a:5d: a5:d4:54:98:72:4e:f0:f6:b8:98:2d:0b:34:0e:0a: 43:ab:4c:d1:6f:8d:10:16:33:f8:c8:f3:03:7e:96: 11:b4:92:7b:9d:69:40:fa:d6:ce:5f:e5:89:4c:3f: a9:f8:f8:1c:d0:29:93:ad:c5:4a:3f:75:21:f6:f0: dd:21:75:df:ff:c6:a2:7d:b5:6f:8a:64:6f:03:5f: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F7:13:8D:34:61:09:E0:0A:79:DF:77:08:2B:3A:75:CE:07:A0:3A X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c5:44:28:77:17:d5:77:2c:e0:14:ca:20:08:54:22:54:f1: 6a:ce:36:51:d0:ca:20:64:67:25:14:03:02:b1:39:58:db:29: 4b:07:55:d0:2e:d3:b8:3c:07:fd:c5:bd:54:89:d5:1b:13:38: f2:1c:7a:8a:12:ca:1c:de:06:38:8b:7b:72:22:e5:6d:01:19: b2:30:ad:c4:28:59:0e:4e:ea:a6:02:f0:37:cb:09:0c:ab:e7: ef:98:d0:13:ef:14:64:1d:f1:af:21:65:d4:61:1a:c6:aa:09: 6f:28:0d:0f:55:9d:67:8a:a5:d9:af:f0:b8:df:00:e1:45:e7: 44:7b:7f:c1:94:ac:a8:83:9d:cc:8f:71:21:e6:c7:a2:f5:2e: 80:73:71:5d:a5:ae:ac:a8:7f:79:6d:c4:21:11:6e:3b:44:53: 40:92:b1:0e:11:0a:dc:ec:2f:ea:48:f4:ce:3e:dc:51:f6:59: e4:bf:64:51:31:15:c7:69:4c:96:54:8e:c9:27:73:e8:b6:59: 23:c9:da:b9:1f:87:d9:82:ff:d9:d9:b7:da:69:9e:7d:6f:af: 93:c1:90:28:5a:f1:f5:69:d7:49:66:6f:2f:c9:f1:d3:06:1c: 00:f1:99:1a:17:49:ec:11:d8:e8:d7:c9:67:74:a5:e0:01:3b: 8b:a8:ae:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2meMi/3mpXCu+OWGrrKidvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwNDE5MTYwMDI2WhcNMjYwNDIwMTYwMDI2WjAzMTEwLwYDVQQD Eyg0N2Y3MTM4ZDM0NjEwOWUwMGE3OWRmNzcwODJiM2E3NWNlMDdhMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYk0Es65+PuflG38ZXMHEpU8sc9u MBzdF5/xvNGdSUt/ZIhYYvMlSF5C6JbW8nPbo0+emtC71dpBqHX6WlBdp7M2dAZ8 wY7nLl0L1+q8K1V74q/gwdWVB/aXjssrxqdiiMrQO+K9sQPjH0g/QYGhyvQgGebj QkluN8gg/MSBkRPCP01dzSDf4Hm0YVrrnaI+QXWxIiI5WlggqSm21Di3hO+I79Kb I7oAwY4LSiBrkshaKl2l1FSYck7w9riYLQs0DgpDq0zRb40QFjP4yPMDfpYRtJJ7 nWlA+tbOX+WJTD+p+Pgc0CmTrcVKP3Uh9vDdIXXf/8aifbVvimRvA1+HEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEf3E400YQngCnnfdwgrOnXOB6A6MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8VEKHcX 1Xcs4BTKIAhUIlTxas42UdDKIGRnJRQDArE5WNspSwdV0C7TuDwH/cW9VInVGxM4 8hx6ihLKHN4GOIt7ciLlbQEZsjCtxChZDk7qpgLwN8sJDKvn75jQE+8UZB3xryFl 1GEaxqoJbygND1WdZ4ql2a/wuN8A4UXnRHt/wZSsqIOdzI9xIebHovUugHNxXaWu rKh/eW3EIRFuO0RTQJKxDhEK3Owv6kj0zj7cUfZZ5L9kUTEVx2lMllSOySdz6LZZ I8nauR+H2YL/2dm32mmefW+vk8GQKFrx9WnXSWZvL8nx0wYcAPGZGhdJ7BHY6NfJ Z3Sl4AE7i6iuFA== -----END CERTIFICATE-----Generated at Mon Apr 20 03:26:55 2026 by rpki-client