$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: WDvWfVdsnaovQ0ubW3xKIX0PDh7UCaZPQoJlfw9lQHI= Subject key identifier: EC:A5:3A:8A:1F:28:66:28:A4:ED:91:E2:CC:46:D5:BC:2A:60:FB:7D Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019DCE6291A9B8424799A790A37DE2629817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 16D7 Signing time: Mon 27 Apr 2026 10:00:59 +0000 Manifest this update: Mon 27 Apr 2026 10:00:59 +0000 Manifest next update: Tue 28 Apr 2026 10:00:59 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=) 3: DdZL2Ei2USqI1D8JQatISOxbCY0.roa (hash: A+x4OgPFDFV1yfcXqtt93yKXONOhfjjQIV2HOaMfwnQ=) 4: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=) 5: HOso74W1VokYtKvyq7cUzsjtneE.asa (hash: XkgHTIUgOHbFT9e9eq8+M1TVv1ndaqq7zAajOmv3wN8=) 6: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 7: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=) 8: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 9: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=) 10: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 11: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=) 12: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=) 13: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: iHRFmerqJ5/LfsKcrE9KKR3tGwgem9T7TPBkb53S9Ww=) 15: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 16: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 17: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) 18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:62:91:a9:b8:42:47:99:a7:90:a3:7d:e2:62:98:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Apr 27 10:00:59 2026 GMT Not After : Apr 28 10:00:59 2026 GMT Subject: CN=eca53a8a1f286628a4ed91e2cc46d5bc2a60fb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:b0:18:b0:a9:4a:63:fe:c8:07:b0:4a:f0: a5:cc:67:8d:67:43:da:b3:86:80:18:af:34:f2:7d: 95:91:37:3e:d2:1e:46:59:a0:8e:dc:b9:8e:da:cd: 0b:a2:97:fe:19:86:da:55:4e:90:1b:ab:f6:55:d7: a4:6c:91:9d:0c:87:e5:69:7d:73:ca:ca:e0:f0:c5: 2d:b3:d6:07:a1:24:be:90:6d:a1:4e:0c:72:b7:c5: b1:ed:c4:01:5d:53:bb:64:0c:93:cd:3c:39:10:89: a4:ac:00:fa:75:9c:02:8d:52:00:cc:c8:50:5b:f1: b9:3f:3e:a0:84:a6:9c:e8:13:df:ec:a5:3e:16:db: ad:a1:e0:e5:e8:91:c2:a0:7f:15:23:83:f0:a8:18: 16:d7:fe:ff:45:40:56:df:3e:7a:a4:3b:4f:a9:63: fc:6f:d8:f5:ed:71:e5:07:34:d5:39:30:98:15:98: 1c:a0:1c:a1:eb:b6:14:37:7c:71:f6:7e:96:e7:ad: 26:78:01:9f:0b:3a:63:50:a4:04:6d:69:d3:e9:53: 4f:df:99:f6:5d:14:70:a5:7b:19:4a:97:29:c8:61: b1:f6:6b:3e:18:a6:f5:ca:7a:cc:15:06:78:fa:a6: b3:b8:b1:2b:ef:9d:ba:51:4f:d0:20:9f:5c:b0:3c: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A5:3A:8A:1F:28:66:28:A4:ED:91:E2:CC:46:D5:BC:2A:60:FB:7D X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b1:02:7e:71:02:f1:d9:88:d0:86:51:3c:e8:b4:c1:8d:f4: 1a:2a:33:5e:c2:8f:49:90:38:ff:92:0d:7a:1e:64:9d:86:7f: 89:57:e2:29:84:74:05:eb:2c:5c:69:c8:ab:e1:1e:b2:84:76: b9:56:36:e6:ea:a0:cd:69:6d:c0:b5:f3:00:dd:c1:23:5b:78: 62:6c:3b:c7:82:f3:d9:78:d8:f9:ba:40:89:2a:41:23:c7:bf: 7b:10:0d:c6:93:0e:88:2f:c6:79:c1:73:39:63:b5:7c:23:72: cb:a7:21:b1:bd:42:21:50:d1:f6:70:b1:95:70:c4:ff:c1:d5: 09:c4:53:66:1c:79:d5:46:69:b5:d0:a0:77:1e:d7:a8:ce:df: 26:6e:41:f6:5e:7d:2d:2d:69:34:bb:db:5e:45:41:70:df:29: 45:50:fd:dd:bf:fc:48:0a:11:bc:77:2d:19:c7:f5:59:58:1e: 92:d6:ec:a9:18:f6:87:e0:44:d1:50:b2:36:92:fb:0a:31:5d: 50:ec:92:57:9c:c8:bd:77:7b:4a:98:df:37:8a:29:32:80:8a: a3:3f:89:b9:5f:48:89:18:18:1f:eb:7a:1d:2c:45:02:38:12: 9d:e4:dc:b2:63:ae:30:3e:30:6d:0c:e7:70:89:4e:76:75:17: db:81:c7:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OYpGpuEJHmaeQo33iYpgXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwNDI3MTAwMDU5WhcNMjYwNDI4MTAwMDU5WjAzMTEwLwYDVQQD EyhlY2E1M2E4YTFmMjg2NjI4YTRlZDkxZTJjYzQ2ZDViYzJhNjBmYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvCwGLCpSmP+yAewSvClzGeNZ0Pa s4aAGK808n2VkTc+0h5GWaCO3LmO2s0Lopf+GYbaVU6QG6v2VdekbJGdDIflaX1z ysrg8MUts9YHoSS+kG2hTgxyt8Wx7cQBXVO7ZAyTzTw5EImkrAD6dZwCjVIAzMhQ W/G5Pz6ghKac6BPf7KU+FtutoeDl6JHCoH8VI4PwqBgW1/7/RUBW3z56pDtPqWP8 b9j17XHlBzTVOTCYFZgcoByh67YUN3xx9n6W560meAGfCzpjUKQEbWnT6VNP35n2 XRRwpXsZSpcpyGGx9ms+GKb1ynrMFQZ4+qazuLEr7526UU/QIJ9csDxI+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOylOoofKGYopO2R4sxG1bwqYPt9MB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArECfnEC 8dmI0IZRPOi0wY30GiozXsKPSZA4/5INeh5knYZ/iVfiKYR0BessXGnIq+EesoR2 uVY25uqgzWltwLXzAN3BI1t4Ymw7x4Lz2XjY+bpAiSpBI8e/exANxpMOiC/GecFz OWO1fCNyy6chsb1CIVDR9nCxlXDE/8HVCcRTZhx51UZptdCgdx7XqM7fJm5B9l59 LS1pNLvbXkVBcN8pRVD93b/8SAoRvHctGcf1WVgektbsqRj2h+BE0VCyNpL7CjFd UOySV5zIvXd7SpjfN4opMoCKoz+JuV9IiRgYH+t6HSxFAjgSneTcsmOuMD4wbQzn cIlOdnUX24HHFg== -----END CERTIFICATE-----Generated at Mon Apr 27 19:07:48 2026 by rpki-client