$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: AX+PhXCHgonhluzoubk9zoxXBqsT2nsttr9q7MhxKbQ= Subject key identifier: 51:1E:1D:5D:58:B8:4C:F5:B7:69:32:80:89:59:3C:20:BD:45:30:14 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019DB0213CC943422006B6310795834D6D0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 159A Signing time: Tue 21 Apr 2026 13:01:01 +0000 Manifest this update: Tue 21 Apr 2026 13:01:01 +0000 Manifest next update: Wed 22 Apr 2026 13:01:01 +0000 Files and hashes: 1: 0kXS2WjCCmGHS0asFcjHjq0ESdA.roa (hash: NcRJslp6Cst9ywqKbBrXM4eKGnOe3QAwekOYiXZ066c=) 2: 2j9VUbHTcDA1b90rifQ58Inn2f8.roa (hash: Lgs88tbxXG61dcN+ofeHaAXMJYWju9945L7ezP0hATg=) 3: 35-RC4YDZpErq0qZEtlrtSl4SMw.roa (hash: FOYizqXKHMLapyQGMwFyEz9qVvs69XW13Uh469YQNIU=) 4: 5ydN7m0EV0XPPM7hhtoPeHHLVX8.roa (hash: gqBf1pgqFhh7rC/j0y4ZMSZVouaA/LSU94XZbddNY9U=) 5: 6Q0h1IFVjAP2s57S3xJZ0Bx-aac.roa (hash: ZvSV8hzbl99f87CMpyXVOR2Av2PmKYSQfBrb7QQp5hs=) 6: 81eHHbv2rPJYI93isZ476W6B7zM.roa (hash: rilqDOE3ousOR3KDCOC0oQFrfowQVUhBVFfyKLTOWP8=) 7: ASf6KB6I7iTKPvwYMSrbI4RYa_w.roa (hash: s8FQlCGJ8w6T8qveFAz8SMQIafcx6wotEz/euqBRIUg=) 8: DNKVTDfCdlLHW9MrVOz_V6C3F8g.roa (hash: uasjkvXg+88xW1j9weGfc4+Lwe8xp4HgPIRySLA8dcs=) 9: EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa (hash: 5I3dde4Z0pGqorT+Es4EH70Wh9X5Be4WVxahJvSkgLw=) 10: JFQGAOGdlBoIozV3Kg-vDWtfVao.roa (hash: Z1+P9csIB0WjKmg8chhTuD4xrRsrTBYnir8esGAQC6M=) 11: K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa (hash: 4AJJT3KGPCqJR4OBHfMLmZzKwbu+xSqi/JOf68BFrzw=) 12: Lnwh91F-Y3oGbzapesKSQKh5khY.roa (hash: fViq177JlHqZD4IZxEVipAykPN+uot8OXNoz0m9fnZk=) 13: MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa (hash: 0v7DpVyOb9ZenfEj+uZlG8WAK7SkWOmPeuDGZI04ctc=) 14: MorRi-vslYP9hnHqziII34LBIfw.roa (hash: CIMjlR7v2eM4nTZ1oFVRk9hQ2LQU98LPD9awiwz9zSM=) 15: Nq8PoFO8FLqJKOQgUZV2jF5UqZI.roa (hash: oUSIvk6c2wK0Ghd3NBd+GqAzgT8NlNIUgVJ3tPrMvmw=) 16: PY9DCNlwLD7ejVBXpUKsZjzW_qs.roa (hash: WsUPkIgFvWT/RRRySu92Di42VU11w6gI/VSIsfWKIOw=) 17: WZWGYo1-x5iiMmTQB8f7pscBQ5Q.roa (hash: IhIWhgnItgwnoOUYHAHgKAbDJ1m2IH1w4DFw6ZTXRMU=) 18: YFKE_2_y1TuWr9IZX6ehzMIJwQw.roa (hash: frhzV5oZPaW+5HEAEtK0fcMNCl6GJAvLM0KbJvhre70=) 19: _eLosOoEd8yDU_N8Qvcrlr44u1s.roa (hash: 7dNJprnXNblqOmi4KvjwoY4AaJL/D5R6qT8hf0u15fk=) 20: belvSv2ymqgkOlS6HkEN5vfj5ho.roa (hash: LU13OrHjOljdUA6S9iD5fD+7aTf2fhMhNqxEtC2pbhY=) 21: cxZr5WeEEoSi7bJFnkDYNQkLsRI.roa (hash: ohg/2w/+ciG+gSkKwemx/D24YI9eJ3bhnC/JUnNespU=) 22: dS2Ew5TyZLKBb0t_vYeqxiQO914.roa (hash: 18YsiLmffOrQgrZYM/cJ3pecwTIq4UqOgR0InUb+7Dg=) 23: e-D3VZHxEnpb_XDj-m8FygPLC-s.roa (hash: WK2WT9RvaBwGkJpwbeKYdSX5XZW7KaarQn4kK4Tt/3Q=) 24: e4QufroyVWdWI18YSP-xE5y8nsQ.roa (hash: D8HQMrEwK3oNuQ0az3Yjngy1UMsE6uMPy+4eRKXzeeY=) 25: f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa (hash: YnhL3R6TQw9jOlB6ezNd4A83xIKsm64Z7pwt9aESzIw=) 26: gWgAGHArAQssrrGXIRyn4VHTFXU.roa (hash: B6SPcVHep6hBRDtoMqsctR3R17FHDgKNs8lCIVE2720=) 27: h8D1gq051tBYJNb_Y4nlpSpaChc.roa (hash: 1sY2UtAw3qppMv1YMtACKA33nss4PyBDyZbo40TbUgc=) 28: nPnmVJq7YSOofBTjMXMW1s1sIkI.roa (hash: YHGS/4JRhBxlF4BWRhYlHp0ni1JeRiuacHal4axDVqI=) 29: qzMo16nmO71L2QshypR-MMDDoCo.roa (hash: l9OxB1GKfb3RigjCep1J7ekawkvlh+mNfXTsSVv2Rdo=) 30: r7ByOLP3MeukbZSE4fAZ0_Bq3eo.roa (hash: iX2pbv1iuv/av89qGOeBay93zJ5dvcN9GC/EDL+toP4=) 31: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: wP3w928QH0X1YLVr/YbeZoGD364pi6TAmhKklu07WJA=) 32: vdgqBKwQkfA76s0H0FyOtcJZzV8.roa (hash: D7lmF99Lrcwh6wlVfBPPTqd81NKZPrrGaKS7PuCJof4=) 33: zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa (hash: DJQ4yfm4mN/el8pVTO9ZIBKqMkmNeH54/xwSWHyykMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b0:21:3c:c9:43:42:20:06:b6:31:07:95:83:4d:6d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Apr 21 13:01:01 2026 GMT Not After : Apr 22 13:01:01 2026 GMT Subject: CN=511e1d5d58b84cf5b769328089593c20bd453014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:3e:5b:5f:55:13:8e:a1:ce:c5:24:33:8a: 00:59:bb:e4:4b:86:5a:76:34:c9:4f:c3:de:74:6e: a3:ed:a6:8b:f8:37:39:12:0c:00:06:c1:5b:bc:3e: 47:65:68:1f:fa:0d:9b:a4:cd:d4:9e:12:cd:8a:09: 01:24:c0:b5:3c:70:7c:77:e7:bc:87:53:1f:c5:8c: 1a:99:d1:09:dd:39:fd:f9:0f:87:6e:76:d9:ef:2e: 66:b8:c2:20:26:bb:e0:61:b5:12:18:ee:45:50:23: b9:38:49:c7:25:a2:ed:49:e6:42:49:a5:a5:7d:69: 2b:fb:a9:3d:92:ec:36:12:6b:b3:5e:46:18:fb:eb: d6:e7:e4:f7:84:43:15:8d:b7:25:4e:79:bc:61:78: 37:38:fe:8b:14:07:91:e3:e1:77:41:33:28:2b:4a: 93:a4:4b:c0:23:89:f5:54:43:cd:f9:fd:c6:91:79: d0:ab:f1:2c:5f:88:22:a6:87:76:8c:c9:65:f9:f4: 54:b4:ca:5d:0b:b3:91:e9:7f:5f:a3:47:8e:86:8e: 27:d4:02:41:1a:f3:8f:61:53:df:f0:6d:a0:85:cf: ee:62:86:be:a2:5d:2d:61:59:22:cd:d7:0b:06:ef: 69:b5:f2:d7:17:58:6e:33:d2:47:4f:d4:a1:24:62: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1E:1D:5D:58:B8:4C:F5:B7:69:32:80:89:59:3C:20:BD:45:30:14 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:76:1b:10:02:83:02:a4:c0:df:e8:b0:c0:ac:f0:33:5c:89: 5d:9e:79:90:a1:0e:1d:69:01:a2:0f:d6:0d:91:c2:7c:4a:8f: 49:e3:e7:b3:c3:1f:58:33:8b:ed:30:1e:a5:68:6c:63:7e:6e: 9a:de:4a:9e:24:90:fa:9e:09:c5:c5:cc:bb:b7:b6:f2:cb:2b: 89:f7:6c:94:a7:e1:11:d1:d0:ad:2c:c6:47:c7:fe:c7:2b:89: 2a:70:e5:e3:c7:3c:d2:56:77:95:63:27:2b:0f:5b:b4:d4:35: 63:c1:9a:0b:5a:81:11:c5:4d:13:8b:7e:aa:e1:72:41:b2:b1: 5d:e5:05:23:1e:f2:3b:51:73:ed:b9:0d:ea:7b:2d:2b:0c:6c: 51:84:3a:95:9a:d8:51:18:2f:eb:32:e2:21:77:9b:0d:e9:40: 2c:63:ef:d2:8e:a8:df:d5:6b:ee:9f:7b:91:9b:de:92:ad:5f: e7:1b:b9:a3:b7:ec:bc:3e:2a:b2:63:99:02:32:79:ff:ac:70: 41:96:69:b1:fb:41:87:d8:5f:41:26:ce:f1:84:7d:3e:b0:32: d5:e5:98:60:f0:3a:36:1d:c5:af:9e:c4:b0:22:b0:05:60:c0: 9f:c7:2e:5e:41:3b:c7:88:cf:3a:1c:9a:b6:15:cb:d0:7c:7e: 1a:c3:a8:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2wITzJQ0IgBrYxB5WDTW0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwNDIxMTMwMTAxWhcNMjYwNDIyMTMwMTAxWjAzMTEwLwYDVQQD Eyg1MTFlMWQ1ZDU4Yjg0Y2Y1Yjc2OTMyODA4OTU5M2MyMGJkNDUzMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqo+W19VE46hzsUkM4oAWbvkS4Za djTJT8PedG6j7aaL+Dc5EgwABsFbvD5HZWgf+g2bpM3UnhLNigkBJMC1PHB8d+e8 h1MfxYwamdEJ3Tn9+Q+HbnbZ7y5muMIgJrvgYbUSGO5FUCO5OEnHJaLtSeZCSaWl fWkr+6k9kuw2EmuzXkYY++vW5+T3hEMVjbclTnm8YXg3OP6LFAeR4+F3QTMoK0qT pEvAI4n1VEPN+f3GkXnQq/EsX4gipod2jMll+fRUtMpdC7OR6X9fo0eOho4n1AJB GvOPYVPf8G2ghc/uYoa+ol0tYVkizdcLBu9ptfLXF1huM9JHT9ShJGIsqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEeHV1YuEz1t2kygIlZPCC9RTAUMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4nYbEAKD AqTA3+iwwKzwM1yJXZ55kKEOHWkBog/WDZHCfEqPSePns8MfWDOL7TAepWhsY35u mt5KniSQ+p4JxcXMu7e28ssrifdslKfhEdHQrSzGR8f+xyuJKnDl48c80lZ3lWMn Kw9btNQ1Y8GaC1qBEcVNE4t+quFyQbKxXeUFIx7yO1Fz7bkN6nstKwxsUYQ6lZrY URgv6zLiIXebDelALGPv0o6o39Vr7p97kZvekq1f5xu5o7fsvD4qsmOZAjJ5/6xw QZZpsftBh9hfQSbO8YR9PrAy1eWYYPA6Nh3Fr57EsCKwBWDAn8cuXkE7x4jPOhya thXL0Hx+GsOo3w== -----END CERTIFICATE-----Generated at Tue Apr 21 16:02:14 2026 by rpki-client