$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: +Do7B4sGkrfLmEN0j7zqi6uxFrwyc6w5AkLm5wlHEhw= Subject key identifier: 16:23:D8:52:50:73:31:1E:40:51:10:AD:C8:88:FA:96:80:D3:A7:02 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019DBE13FA5380AD9466B394456BDACA66A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 12E2 Signing time: Fri 24 Apr 2026 06:01:13 +0000 Manifest this update: Fri 24 Apr 2026 06:01:13 +0000 Manifest next update: Sat 25 Apr 2026 06:01:13 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: gTuhGVRZcQdIZfkXC5dKGppT+a8AfL5D5MB6q5wEbOY=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 10: dTBGT4Dz5-wcMADCAN8Dzj6ZXv8.roa (hash: rcN80U9U7QHYeIDWjMRA3gFyjUfMjCbe/cw0PAtszSs=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Apr 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:be:13:fa:53:80:ad:94:66:b3:94:45:6b:da:ca:66:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Apr 24 06:01:13 2026 GMT Not After : Apr 25 06:01:13 2026 GMT Subject: CN=1623d8525073311e405110adc888fa9680d3a702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:16:bd:11:92:21:95:d6:9f:3a:97:92:d3: 94:ee:e5:f2:a6:95:2a:57:5b:e2:7e:10:57:9b:80: 40:95:d1:34:c4:58:b1:2f:55:17:10:09:e2:c2:12: 1d:eb:d4:cf:d4:cc:a7:27:bf:03:ad:57:d6:c8:f1: 84:da:48:62:15:d7:09:ea:cc:2e:76:f0:7c:b0:75: 6e:25:ec:6d:bc:b9:6f:c5:e3:0d:14:4f:77:60:71: 10:fc:ea:c5:03:8e:d8:5e:3e:d1:0a:c0:28:87:15: a1:3f:bc:67:79:68:da:f2:4f:24:4b:d3:8b:85:bc: 17:24:c4:30:25:59:c8:0e:0e:30:7f:5b:30:59:68: 4c:49:dd:b7:0a:83:f4:cb:8e:90:40:9b:ad:33:60: 98:ab:d0:82:00:0b:90:94:0e:68:44:62:81:ef:29: 2e:3b:60:a8:2e:9b:47:38:25:5f:62:29:cb:e6:80: 0d:b1:7e:20:a9:31:5d:50:3e:6b:99:56:f5:44:66: d8:98:3f:9f:be:76:15:f1:fc:52:a0:8c:e9:36:4c: b7:83:c0:4c:a8:4b:57:3c:2b:fb:dd:5c:a5:5d:7b: 71:04:3c:f2:5b:af:99:1c:d9:50:7a:e6:c1:74:6b: 74:32:73:3f:fb:a7:ff:ed:e6:17:dd:2b:b1:64:fa: 4a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:23:D8:52:50:73:31:1E:40:51:10:AD:C8:88:FA:96:80:D3:A7:02 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:31:1b:b6:8c:52:58:38:c0:04:1b:4a:cf:97:91:fa:1b:b6: 86:6d:70:b1:d2:bf:55:41:30:44:17:08:18:cf:22:a8:64:ee: 10:a6:1e:0a:1d:d4:b9:85:32:05:c0:78:98:de:3e:31:73:0e: 0f:ca:a3:df:90:e9:c5:b3:2b:80:1d:0e:74:07:73:b9:f5:cc: b3:d0:b3:b5:7f:a8:e3:9b:1c:45:ca:fe:85:20:22:ca:67:15: a3:30:77:72:bc:24:e5:c5:65:70:77:d6:b9:ec:a4:9f:fa:b9: d4:26:82:47:f3:dd:7c:4b:71:c5:54:ed:51:9f:99:27:53:ee: 45:10:67:f6:0f:1f:6a:25:cb:c4:ee:1c:4c:d5:58:0e:aa:dd: 30:df:64:38:2f:63:b4:e4:85:a0:c9:76:7d:24:a5:d7:c1:2a: a7:da:34:5a:3a:d9:97:2b:b4:86:f9:e0:5b:d3:37:b2:fb:27: ab:bc:c4:45:b3:49:98:a4:62:b2:d8:bc:55:de:b9:06:7f:43: de:67:7e:52:51:7a:68:e6:73:3d:16:22:40:ae:e0:c8:9d:a4: c4:65:2a:ee:49:e5:02:07:11:b0:e4:28:2e:86:f1:08:b0:e5: c8:44:6a:7a:3b:5f:e3:fe:4c:f2:d4:53:3c:a7:c3:41:f2:ae: 07:a1:7d:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2+E/pTgK2UZrOURWvaymahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwNDI0MDYwMTEzWhcNMjYwNDI1MDYwMTEzWjAzMTEwLwYDVQQD EygxNjIzZDg1MjUwNzMzMTFlNDA1MTEwYWRjODg4ZmE5NjgwZDNhNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bUWvRGSIZXWnzqXktOU7uXyppUq V1vifhBXm4BAldE0xFixL1UXEAniwhId69TP1MynJ78DrVfWyPGE2khiFdcJ6swu dvB8sHVuJextvLlvxeMNFE93YHEQ/OrFA47YXj7RCsAohxWhP7xneWja8k8kS9OL hbwXJMQwJVnIDg4wf1swWWhMSd23CoP0y46QQJutM2CYq9CCAAuQlA5oRGKB7yku O2CoLptHOCVfYinL5oANsX4gqTFdUD5rmVb1RGbYmD+fvnYV8fxSoIzpNky3g8BM qEtXPCv73VylXXtxBDzyW6+ZHNlQeubBdGt0MnM/+6f/7eYX3SuxZPpKrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYj2FJQczEeQFEQrciI+paA06cCMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDEbtoxS WDjABBtKz5eR+hu2hm1wsdK/VUEwRBcIGM8iqGTuEKYeCh3UuYUyBcB4mN4+MXMO D8qj35DpxbMrgB0OdAdzufXMs9CztX+o45scRcr+hSAiymcVozB3crwk5cVlcHfW ueykn/q51CaCR/PdfEtxxVTtUZ+ZJ1PuRRBn9g8faiXLxO4cTNVYDqrdMN9kOC9j tOSFoMl2fSSl18Eqp9o0WjrZlyu0hvngW9M3svsnq7zERbNJmKRisti8Vd65Bn9D 3md+UlF6aOZzPRYiQK7gyJ2kxGUq7knlAgcRsOQoLobxCLDlyERqejtf4/5M8tRT PKfDQfKuB6F9QQ== -----END CERTIFICATE-----Generated at Fri Apr 24 15:36:52 2026 by rpki-client