$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: vuYknENyQjneBC+urhpYOGfR3JLSoBlLnJPrCl43veE= Subject key identifier: CE:12:08:32:DC:51:87:E9:75:11:7B:5E:6D:F0:0B:6D:FF:F1:68:A6 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019DB2EB81F70E5DB0D69B174514AF4688D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 1408 Signing time: Wed 22 Apr 2026 02:01:11 +0000 Manifest this update: Wed 22 Apr 2026 02:01:11 +0000 Manifest next update: Thu 23 Apr 2026 02:01:11 +0000 Files and hashes: 1: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (hash: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=) 2: 1RkuJiMIA6c-YKXkOiXgVUr3tk0.roa (hash: VMbTIDUnS0rJprZQrwM8fOUQBhB/Ygv1jHJEt/ApBqE=) 3: 6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (hash: NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=) 4: 94VCH5-yUsBwicojbjgImHgRoJA.roa (hash: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc=) 5: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (hash: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww=) 6: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (hash: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0=) 7: GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (hash: hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=) 8: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (hash: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=) 9: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (hash: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478=) 10: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (hash: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M=) 11: Tx9FMpngkKKRbOgn_YsDb4v7X18.roa (hash: BOevx6RbQLerHQQRMHC1Yu0hT6Exer/t3dYk9fLXFik=) 12: XpQW9Vko4NnnhhqSe6YnUmv4WzE.roa (hash: 1hl0BmRk0nZLkQjPQnXw86SjORpjVK0UnQhzFB2uADI=) 13: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (hash: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI=) 14: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (hash: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4=) 15: bjtqDJXlOz7pCpEjOBsxaBiuwec.roa (hash: NF7IuS5ng6fRX6mAKKyUm5b/IR1xDvuUmKt4bVjV978=) 16: c585sEb31KrksO5MlyuNt-hfuHU.roa (hash: fJ78hp+mIYgaOdDbv0g//N4rP8oKIJRANU6rLFZmpT4=) 17: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (hash: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE=) 18: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (hash: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc=) 19: qOxZbeQcH3nmMujSCPVKvHl_hII.asa (hash: ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=) 20: qu9muxyupj11J0vkCGd6UL4_YU8.asa (hash: ma8CUett5NKo6WA/WUa9lgNux61RUdveClhcObpC3iI=) 21: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: 7NJ75AbY5sM+yMiTM/qUIq28tHvEb2vg5RwiOuUJhfw=) 22: xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa (hash: f2x35r/ZRXZy2klzCvK8jZiQ1j2C+y+64vR3ljojbc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 21:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b2:eb:81:f7:0e:5d:b0:d6:9b:17:45:14:af:46:88:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Apr 22 02:01:11 2026 GMT Not After : Apr 23 02:01:11 2026 GMT Subject: CN=ce120832dc5187e975117b5e6df00b6dfff168a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:7b:1c:8c:2f:d5:86:1d:f6:f9:0e:a3:3a: d8:b4:28:78:20:8c:70:c3:d1:ce:82:5a:c8:22:3d: e5:18:7d:32:52:ab:ac:b4:62:58:bb:0c:19:02:f1: 37:42:52:7f:77:5d:5f:09:93:e9:5b:38:f6:c5:b5: 46:26:f6:43:a7:bb:cf:b2:54:99:52:20:f2:8e:e5: b0:30:ff:47:26:16:e2:79:6b:ed:74:1a:ec:54:c9: b9:6f:8a:5d:0b:b9:a3:71:38:cf:19:38:bb:55:40: f4:91:a7:3a:91:e6:d2:d2:04:61:31:e1:5a:31:13: 4a:67:5b:74:38:bf:60:03:fb:6a:39:c1:6f:a5:85: 49:08:85:f6:43:86:56:98:b2:e6:9d:7f:5c:e4:61: b8:b5:54:7d:33:2f:10:d9:d4:f3:f7:e7:2e:40:fb: 3d:c7:8f:70:9a:db:57:01:f4:82:e6:25:47:5b:46: c0:be:42:75:25:d5:8e:bb:3d:ea:c2:6d:39:04:c0: b2:cb:50:ad:fd:de:fb:ee:7a:ea:44:2e:b8:93:1b: ff:8d:85:9a:c1:f3:ae:a9:2e:13:d4:36:bf:ca:56: 1e:7a:aa:13:ad:c1:03:03:71:d0:a6:20:77:d5:66: 9a:02:67:ad:67:50:d9:08:62:ce:a0:ba:37:ea:35: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:12:08:32:DC:51:87:E9:75:11:7B:5E:6D:F0:0B:6D:FF:F1:68:A6 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f4:1c:da:63:45:79:19:78:86:67:9a:f2:3b:0c:22:bc:11: 3a:3b:f7:b0:48:ac:b8:25:cb:4e:59:72:aa:82:7c:f6:95:11: 8f:1c:0b:65:42:da:07:65:46:e6:62:96:7a:c2:29:80:18:da: e1:a0:60:ea:03:3d:ba:6b:da:31:8e:03:c3:db:1e:65:d3:59: f3:0c:c3:1c:ef:74:45:34:96:41:a9:9a:6b:93:7a:c8:3d:11: 95:0a:20:73:58:43:7f:fa:79:95:ae:3b:ce:54:d3:ce:0b:16: 6f:6a:ce:63:8b:2c:3f:db:56:f0:37:a1:d3:1e:e8:5a:6e:62: 5d:cf:c6:a2:1a:ea:fa:34:df:6d:44:34:62:d3:f4:e9:aa:c1: b0:b5:b6:94:64:67:8a:68:81:1f:03:a0:b3:84:f4:d3:5e:90: 7c:06:a2:3d:19:22:dc:36:53:83:85:55:46:54:6b:54:86:74: 64:82:9c:9b:ef:78:7c:31:1e:63:d7:ad:79:63:01:5d:02:fc: 46:c9:12:d9:1f:5b:a1:b0:aa:ba:94:ec:17:f4:04:bc:c5:5a: d1:ac:6a:0b:c9:2e:ca:8c:54:5c:d5:c8:83:6d:ff:bd:ec:84: 5d:bc:1e:c1:b8:38:81:7e:f1:d2:9f:68:4e:36:74:a7:92:da: 1c:7f:42:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2y64H3Dl2w1psXRRSvRojYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwNDIyMDIwMTExWhcNMjYwNDIzMDIwMTExWjAzMTEwLwYDVQQD EyhjZTEyMDgzMmRjNTE4N2U5NzUxMTdiNWU2ZGYwMGI2ZGZmZjE2OGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fJ7HIwv1YYd9vkOozrYtCh4IIxw w9HOglrIIj3lGH0yUqustGJYuwwZAvE3QlJ/d11fCZPpWzj2xbVGJvZDp7vPslSZ UiDyjuWwMP9HJhbieWvtdBrsVMm5b4pdC7mjcTjPGTi7VUD0kac6kebS0gRhMeFa MRNKZ1t0OL9gA/tqOcFvpYVJCIX2Q4ZWmLLmnX9c5GG4tVR9My8Q2dTz9+cuQPs9 x49wmttXAfSC5iVHW0bAvkJ1JdWOuz3qwm05BMCyy1Ct/d777nrqRC64kxv/jYWa wfOuqS4T1Da/ylYeeqoTrcEDA3HQpiB31WaaAmetZ1DZCGLOoLo36jVzhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4SCDLcUYfpdRF7Xm3wC23/8WimMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPQc2mNF eRl4hmea8jsMIrwROjv3sEisuCXLTllyqoJ89pURjxwLZULaB2VG5mKWesIpgBja 4aBg6gM9umvaMY4Dw9seZdNZ8wzDHO90RTSWQamaa5N6yD0RlQogc1hDf/p5la47 zlTTzgsWb2rOY4ssP9tW8Deh0x7oWm5iXc/Gohrq+jTfbUQ0YtP06arBsLW2lGRn imiBHwOgs4T0016QfAaiPRki3DZTg4VVRlRrVIZ0ZIKcm+94fDEeY9eteWMBXQL8 RskS2R9bobCqupTsF/QEvMVa0axqC8kuyoxUXNXIg23/veyEXbwewbg4gX7x0p9o TjZ0p5LaHH9CoA== -----END CERTIFICATE-----Generated at Wed Apr 22 06:31:57 2026 by rpki-client