$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json) Hash identifier: XjaKp2y2s71g1jfMZKZ0jw1pjsRBSMCR/j0F9YcAJ0U= Subject key identifier: 6C:13:B3:01:77:10:AE:66:83:7F:10:3C:86:93:01:80:A7:A6:6B:7D Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019DCCAB050D513024D7E897CA4C77C979B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft Manifest number: 18FF Signing time: Mon 27 Apr 2026 02:00:53 +0000 Manifest this update: Mon 27 Apr 2026 02:00:53 +0000 Manifest next update: Tue 28 Apr 2026 02:00:53 +0000 Files and hashes: 1: 3qg1KGc8omoslEG7jKlx4gx_LhQ.roa (hash: TnGs+EX2f9uQeebTem+/sfQFkc/zmqJQ5dURkVKi/n4=) 2: 4KsNQpqZCzqF5DWTGMqSZIdafk4.roa (hash: LOn9PMfVYWd9yqbUArMEkf8C7kjYf3BgWxcSoG8pKwI=) 3: 6GTkHhvGaHh_ppvgJMPn5q-SDT4.roa (hash: zOLVYqNLZkRsHu25N50zDbPPg1XzLp1BrOsPiOu+9z8=) 4: 6JxXQsPP5HeOd-zrinJyzOvxbvk.roa (hash: avnYdM5iKLHNYRmn2VZGG+0Rulxb30BrgSNse/s1Stw=) 5: Lm2Fdw-4HY59cWTBR1AYmOLC0Mk.roa (hash: SNGqheW6LsNlSg4kHxkvmFfi6Fzh2bEiE379f5CYZNA=) 6: N18aROBQ19Wj6Kdi3-iQ5c6OfeA.roa (hash: ezUkbSC7P3mO/d4z+5YndvD9aLmtqZ6KOctd3R4dOws=) 7: OUOP2IJYsVbNI_PTNHQ12RVMoDI.roa (hash: BnGONzncD2wwl5KKt6nDn2hcjBqGU1Umy1qq2TndNLU=) 8: X5qhIZ7xGCMvKQfZQrbeuOZ9uf8.roa (hash: i3DUL5+61b/Yr3dFWew0V6gv0s7RuSUIeTUfltYEFJs=) 9: Zjh5y2Kd8cSRzdszQnign9Lz3l4.roa (hash: TMEeISdGQlH/KULrec6oWy2p2scTUrKdaSvlMRJx3eE=) 10: g-q-xyU0r6niX_HcUqMnHfOWVQg.roa (hash: 3EYAH+TPHIG5maEa02mmMDsDD6AUBoN3T8wtoxwbwEg=) 11: iO24D_W0B1UjBwRFlQ8CdPgIqgs.roa (hash: VKTFC+1OrvrVs+DP4mHHKFLGZKyqteGaSW/b1eEAqMs=) 12: jytqbvPB7p4L3yG-M73X311CEZM.roa (hash: OoChTy3t+Ypl0/yoHt/yN9OFfFbQL1CiSDqOkSSFy9Y=) 13: qzIbIOdweY6pocYgDw-BYpuwt2k.roa (hash: RCGDZNml0heHLSfAzhIyGN2imnWRjKRBHXZrfhyhHtA=) 14: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: mjHnxfpb4Q6tkW4oFiHNCgigxCNpizskrE3fFqE3xNw=) 15: x3SzmyzLt8OYyGIP7YYKzeSx1t0.roa (hash: aW1SwGzhZKDv9vTg+ztGzAN+MHGjx+qNx1xNIM7zvvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:ab:05:0d:51:30:24:d7:e8:97:ca:4c:77:c9:79:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Apr 27 02:00:53 2026 GMT Not After : Apr 28 02:00:53 2026 GMT Subject: CN=6c13b3017710ae66837f103c86930180a7a66b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:af:81:32:8f:03:89:04:21:d3:21:d9:8e: 9d:a1:08:7f:40:47:40:65:ec:32:bc:2c:b9:cf:41: 24:d7:4f:bc:15:0e:61:89:23:a2:8d:0e:42:32:58: 95:df:dd:52:94:a8:2a:e2:3f:53:d0:23:1b:e2:da: 8b:bd:f9:60:e1:91:90:35:e6:1a:22:e4:b9:50:60: e6:ba:d6:27:33:1a:55:68:9d:af:56:a8:37:7c:36: 85:7f:d1:ce:8f:07:9c:d1:64:55:30:78:ae:b9:86: a9:ce:48:ff:fd:63:d7:e5:5b:8a:d7:13:e4:3d:b0: 9e:c2:cb:0c:92:3b:66:ca:6a:d8:f9:fe:ba:62:1b: 44:da:9c:36:0b:e4:2a:46:41:1d:b3:d0:fa:f2:69: 16:31:f6:a0:24:5b:d0:2f:85:cd:bd:23:b9:d2:d7: 0f:ff:8e:0f:d8:7f:69:a2:ab:aa:c5:e9:e7:7a:5c: 7b:d0:f9:9e:ad:10:1a:6e:9a:c8:c7:d3:9b:28:79: a5:d3:87:b7:9a:05:92:2d:28:d5:6c:67:be:24:d4: 7c:84:3b:6c:27:cc:2d:48:34:9e:b9:ed:7e:7b:f1: ec:0f:3b:ec:b4:26:52:58:30:44:c0:e4:7c:e3:58: 82:75:fa:2e:73:bd:bd:ad:2f:b0:27:54:07:f3:6e: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:13:B3:01:77:10:AE:66:83:7F:10:3C:86:93:01:80:A7:A6:6B:7D X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:75:76:cb:53:39:2a:2a:09:72:f7:39:07:33:e7:f5:6b:f8: cb:ae:e2:2e:a1:05:2d:62:c9:3f:1f:80:22:c9:4b:f8:8e:8f: b8:8a:b3:4b:fb:a5:aa:d0:1d:b2:b0:3b:0f:1f:32:2c:c2:09: 5b:2e:1a:0a:6b:16:b0:f7:55:08:89:15:18:6f:02:25:50:6c: 0f:88:87:22:07:fd:79:ac:6f:36:a6:ba:12:73:10:6f:98:3b: 0d:48:1e:16:6b:87:1d:f1:38:31:f2:c9:e6:dd:26:65:19:c4: 1a:d2:4d:16:1a:2b:83:08:03:51:70:0b:4b:ef:7b:9a:c6:98: ec:d1:5e:ec:e4:dc:73:bd:ed:75:6f:14:a9:50:bf:87:1f:31: 2b:aa:1e:38:f5:d6:51:83:c9:df:8d:fb:ad:76:a9:4a:77:5e: 17:69:c4:26:fd:e3:93:69:b9:2e:6b:76:90:89:2a:38:f1:c6: 19:a9:6e:ec:31:b9:69:90:ba:7f:32:82:d5:26:a4:ad:17:83: eb:de:42:f1:e1:2b:48:a3:e7:8f:69:52:89:93:86:a0:ae:ff: cf:5e:8b:a8:d2:28:b5:2c:00:3f:ce:28:49:b1:2e:67:e2:09: aa:73:ec:44:e5:f6:e2:fe:90:e8:68:b0:e6:2b:a2:7b:bc:78: d0:67:7a:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MqwUNUTAk1+iXykx3yXm4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjYwNDI3MDIwMDUzWhcNMjYwNDI4MDIwMDUzWjAzMTEwLwYDVQQD Eyg2YzEzYjMwMTc3MTBhZTY2ODM3ZjEwM2M4NjkzMDE4MGE3YTY2YjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq72vgTKPA4kEIdMh2Y6doQh/QEdA ZewyvCy5z0Ek10+8FQ5hiSOijQ5CMliV391SlKgq4j9T0CMb4tqLvflg4ZGQNeYa IuS5UGDmutYnMxpVaJ2vVqg3fDaFf9HOjwec0WRVMHiuuYapzkj//WPX5VuK1xPk PbCewssMkjtmymrY+f66YhtE2pw2C+QqRkEds9D68mkWMfagJFvQL4XNvSO50tcP /44P2H9poquqxennelx70PmerRAabprIx9ObKHml04e3mgWSLSjVbGe+JNR8hDts J8wtSDSeue1+e/HsDzvstCZSWDBEwOR841iCdfouc729rS+wJ1QH827yqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwTswF3EK5mg38QPIaTAYCnpmt9MB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXV2y1M5 KioJcvc5BzPn9Wv4y67iLqEFLWLJPx+AIslL+I6PuIqzS/ulqtAdsrA7Dx8yLMIJ Wy4aCmsWsPdVCIkVGG8CJVBsD4iHIgf9eaxvNqa6EnMQb5g7DUgeFmuHHfE4MfLJ 5t0mZRnEGtJNFhorgwgDUXALS+97msaY7NFe7OTcc73tdW8UqVC/hx8xK6oeOPXW UYPJ3437rXapSndeF2nEJv3jk2m5Lmt2kIkqOPHGGalu7DG5aZC6fzKC1SakrReD 695C8eErSKPnj2lSiZOGoK7/z16LqNIotSwAP84oSbEuZ+IJqnPsROX24v6Q6Giw 5iuie7x40Gd68w== -----END CERTIFICATE-----Generated at Mon Apr 27 09:16:04 2026 by rpki-client