$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: 0F0xLve81+qwAlqeGvfUrfablnxT4Ac2+jm2igwxxbc= Subject key identifier: F8:B5:A6:54:09:4F:47:E7:A4:F3:FA:A8:59:77:BF:B9:A3:70:08:10 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019DB3C7A301F9BD25632220125FE3A186C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 19D3 Signing time: Wed 22 Apr 2026 06:01:38 +0000 Manifest this update: Wed 22 Apr 2026 06:01:38 +0000 Manifest next update: Thu 23 Apr 2026 06:01:38 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: ZZcGzN7aCdUYkQff28Ay20M55xzkP5WYDCgA47E6Gao=) 3: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 4: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 5: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 6: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 7: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 8: EQGugxJGZZhy7ULlXu2xf-8SXLU.roa (hash: UznnK9y+/YnAzmFCMUsWlBbf7xpLU6GolAvI0bvVwdE=) 9: FKKjc28_cZwUJO1xCAUbMduAXKU.roa (hash: 9j1ZvxIboMGFHG2XPsMZZrpotaMyXcob7hVQ+vW8T/E=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 15: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 16: wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (hash: 7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Apr 2026 06:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b3:c7:a3:01:f9:bd:25:63:22:20:12:5f:e3:a1:86:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Apr 22 06:01:38 2026 GMT Not After : Apr 23 06:01:38 2026 GMT Subject: CN=f8b5a654094f47e7a4f3faa85977bfb9a3700810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cd:ef:c8:bf:42:a5:f5:14:79:17:82:db:fe: aa:6a:fc:c0:ec:0f:2a:47:71:f0:49:40:df:73:1b: 96:e8:86:c1:60:cc:f5:f3:5d:4e:84:c1:9e:c0:40: 15:c8:26:f5:d1:de:a7:dd:de:c1:59:8c:1e:47:d3: 93:69:df:0f:9c:d5:ce:76:fd:72:2e:e4:c0:e0:e5: 4a:5e:cf:56:99:68:88:1c:5f:cc:11:cc:5f:7f:e8: 36:52:8a:d9:09:5b:6b:f9:14:11:47:ad:47:4d:7c: 79:72:78:cd:3b:aa:e4:f6:62:3f:16:e6:2a:32:0b: 00:e6:aa:bd:c6:a6:db:0a:20:da:d1:bc:79:07:27: a7:4c:72:88:b1:ee:16:ab:7a:22:7d:42:fb:19:16: ac:9d:fc:3f:de:53:57:4b:4f:e0:e1:1a:54:e3:39: 9a:63:06:4c:93:fe:7a:40:4b:11:cf:54:ee:53:bf: 10:23:e1:87:97:42:4d:82:0b:1f:ee:af:ce:cb:03: 53:54:7b:3f:12:1e:fe:33:61:85:55:2a:53:c0:af: 62:c0:49:65:d8:a6:d4:b9:83:d3:7f:d7:04:25:1b: 0f:a9:54:2f:6d:75:f4:df:ea:72:65:a3:ee:06:d3: eb:d9:ff:f4:78:73:b9:aa:8b:ae:36:84:a6:03:32: 85:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B5:A6:54:09:4F:47:E7:A4:F3:FA:A8:59:77:BF:B9:A3:70:08:10 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c7:98:79:03:5a:8d:8f:28:75:5b:6e:d6:a7:0c:5a:99:db: bb:ac:f4:b3:69:34:5c:fa:b6:ef:79:3b:ab:fd:66:61:2f:d5: b2:a1:b4:d0:45:96:c0:cf:95:55:34:85:44:02:49:2e:04:a2: e4:20:25:26:7e:be:2a:95:80:82:91:e6:8e:71:a7:8e:b3:e1: 0d:fb:ce:86:70:4c:f8:a7:82:f4:de:db:bb:30:7d:ad:51:44: 33:3e:d0:6b:74:ab:c2:cd:d0:0b:bf:12:56:19:ae:69:a5:da: 0e:0b:bb:17:d4:7c:d7:41:81:a9:bc:7d:66:1e:67:3f:68:a2: b5:2a:dd:4f:9f:3c:11:4f:32:6e:5f:e0:30:6e:28:e4:d4:70: 83:77:42:dc:74:1d:9f:71:18:5a:cc:c1:e6:48:32:02:96:be: 56:cc:eb:b0:7e:ef:99:05:85:13:70:fc:8a:9b:f4:1f:07:ee: b6:3e:df:a1:5b:9a:23:0f:d3:51:92:62:eb:87:96:b9:3c:1d: e0:f9:ef:ac:04:98:15:3a:8c:86:37:ee:7e:67:27:05:5b:61: 65:4e:84:23:85:e2:62:bd:49:7b:57:d9:f7:dc:ea:91:f3:90: 92:fd:6b:a9:77:5d:83:26:ea:39:55:08:a5:4d:a3:28:7c:d1: 10:d1:dd:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2zx6MB+b0lYyIgEl/joYbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwNDIyMDYwMTM4WhcNMjYwNDIzMDYwMTM4WjAzMTEwLwYDVQQD EyhmOGI1YTY1NDA5NGY0N2U3YTRmM2ZhYTg1OTc3YmZiOWEzNzAwODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv83vyL9CpfUUeReC2/6qavzA7A8q R3HwSUDfcxuW6IbBYMz1811OhMGewEAVyCb10d6n3d7BWYweR9OTad8PnNXOdv1y LuTA4OVKXs9WmWiIHF/MEcxff+g2UorZCVtr+RQRR61HTXx5cnjNO6rk9mI/FuYq MgsA5qq9xqbbCiDa0bx5ByenTHKIse4Wq3oifUL7GRasnfw/3lNXS0/g4RpU4zma YwZMk/56QEsRz1TuU78QI+GHl0JNggsf7q/OywNTVHs/Eh7+M2GFVSpTwK9iwEll 2KbUuYPTf9cEJRsPqVQvbXX03+pyZaPuBtPr2f/0eHO5qouuNoSmAzKFGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi1plQJT0fnpPP6qFl3v7mjcAgQMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQseYeQNa jY8odVtu1qcMWpnbu6z0s2k0XPq273k7q/1mYS/VsqG00EWWwM+VVTSFRAJJLgSi 5CAlJn6+KpWAgpHmjnGnjrPhDfvOhnBM+KeC9N7buzB9rVFEMz7Qa3Srws3QC78S VhmuaaXaDgu7F9R810GBqbx9Zh5nP2iitSrdT588EU8ybl/gMG4o5NRwg3dC3HQd n3EYWszB5kgyApa+VszrsH7vmQWFE3D8ipv0Hwfutj7foVuaIw/TUZJi64eWuTwd 4PnvrASYFTqMhjfufmcnBVthZU6EI4XiYr1Je1fZ99zqkfOQkv1rqXddgybqOVUI pU2jKHzRENHdEg== -----END CERTIFICATE-----Generated at Wed Apr 22 11:47:30 2026 by rpki-client