$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: cIzZ1fl8HKrq2IlVATCkZZJsMb9M9IfgfSFQ9xdwvTc= Subject key identifier: 9F:3A:EF:4A:6F:F4:3B:8A:A9:A7:FD:D5:D3:66:C4:73:12:67:2D:6A Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019DA754E78CCDE218BAFF481D3DDFC29EB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 147D Signing time: Sun 19 Apr 2026 20:00:52 +0000 Manifest this update: Sun 19 Apr 2026 20:00:52 +0000 Manifest next update: Mon 20 Apr 2026 20:00:52 +0000 Files and hashes: 1: 0ZP8S6iuoWh8xgt74BfX9FsiWUE.roa (hash: 3Aof+qdhL+cCGNe+hdtvcBXfSgz4KVlL9GS8+nK3Uo0=) 2: 1-zo-vu3H5BPZZ7kya3z7KQG-O8M.roa (hash: wO9W+0kJ3rqdKQX4KDV5BoK4htjNlrERtnZ8OUi4AyI=) 3: 3ln1x2g8OU-tXC-DrXz9jW0X1gU.roa (hash: 2zWvHVgpKzwH8CHKZuYT/C7gjaJxfSRA4wNx6aFsjNQ=) 4: 6WfI7AreDwm37Fgy62Hm_HjVPIM.roa (hash: G4TpNMLm1OunCQZoJ8h7rE+E9esfv1Zs5yi2Rv7QUx0=) 5: 7wD1oRCmZXrFXjZnMMZWrRNlm6Y.roa (hash: YZBs16iKlLfkU00p98dwcKgUDfk2zmtTaKgJhdaLtt0=) 6: B4wYxFww_X_iDCxVsYXjZhIjnK4.roa (hash: zX0gMbFt42KJdtED5J978ZIE/4qbULnV//fheUtafIs=) 7: E4moO9CLoHXgoV6vrJXJQ_jxi14.roa (hash: FEDRVix5XZV3UfT/XzbBUvsMscccpO5HTNPW06itXAo=) 8: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: edJexjkgm3Adc6FBQX7dQ7/JaVw7wjHIOpB5znUN/hE=) 9: Gyy1MCCByROZBRXIY7QoJ1Lfx2Y.roa (hash: AjP6dUUnXVUHe2mbkVU2A0GKTeThVmR/SN82MGw/Wog=) 10: IazmGoMrfFtTUWHrMtD4VT_a5xM.roa (hash: mmhAv5nf447caUzE6DBRCP1tjF3/Qt3PMJlp3sCBJV0=) 11: SmOl0GvV5DsT7QCJ4G9S0D2y9JI.roa (hash: wO3PQDBi84MCPWOqSTZR9XqT3nmvEoAZ3UZDvn9zyIY=) 12: Zn2F_GITaJUFXYczVsLI2VOyKdU.roa (hash: CEg2vq6S7OzyDS7MVIrVNzF15tpZ2z6WrwU8c/VyAWA=) 13: aojI_JsDEIxXnOz4PZxsAnlJa3o.roa (hash: PJic4it1tGPs9tX49/CnUprlHognZespLJ+dZ7W4/TY=) 14: bCOP39p472Lk-lkmW7HPI2seXtc.roa (hash: LFvAsIyeBJmUq7QEzxWZPznh8Eot8p72RV5zfPuvMYU=) 15: dPcC6P2Ub94KhMYnU4O-c5682vk.roa (hash: g/ztEAIPkKUjRwwmBVeCjJEZxo+DRe9x5QOVITmEu/0=) 16: kWyXBWjveVIBD274IP6i2S9A5WM.roa (hash: UoPeRMZqRLh+CIxXNiVoDISvNXjjlQGF+QNTNPN07As=) 17: mpo6uqeFJcVEymYhbokwncZAxQ0.roa (hash: xDX+hEEq/OpgZ8TV5s5BRRtgICwL0x2s9KNTGmjZNUA=) 18: vrcNcGLKzc4126aByqCn10xR7hw.roa (hash: BJLHLu3Ei5L0mbo/lskPrmlmi+TRNkPtsukA9ptks7A=) 19: wLYTFgarc0-ql_9yDw0jet-6cdU.roa (hash: p6vpMWbNqzC01Ai5TEGReU7vIhGcrJ1tvziK4csCWpE=) 20: zh_Jy2MqKKarC-MDKrza1hiz6Ck.roa (hash: YXMs2R7ig2C7zGo2CvCc44PcqUIofxwBlRKFLyt5A3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a7:54:e7:8c:cd:e2:18:ba:ff:48:1d:3d:df:c2:9e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Apr 19 20:00:52 2026 GMT Not After : Apr 20 20:00:52 2026 GMT Subject: CN=9f3aef4a6ff43b8aa9a7fdd5d366c47312672d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:ab:ce:4f:3c:1d:c5:e3:53:62:bb:76:49: 8d:62:3a:b9:a0:55:f2:ed:5f:ce:5b:b5:a0:a1:85: d3:81:dc:48:61:73:b7:06:f3:69:50:06:cc:18:55: 21:b3:91:89:0c:63:6c:54:5a:de:8f:78:84:19:26: a3:c1:d6:d9:c1:ae:3d:14:59:d7:7e:13:68:04:e1: af:61:fc:d5:16:1a:ac:ea:20:78:67:e8:16:5e:4d: 07:a5:f2:f5:ce:12:a8:72:74:af:39:a8:fc:db:eb: 1d:a6:53:82:04:21:53:00:d0:15:ef:8d:cc:19:ca: 53:13:55:c4:6c:0f:c0:9c:a8:10:ab:9c:92:6e:08: 45:e5:39:61:b4:bc:72:bc:2f:d5:72:53:28:b1:32: bf:ab:22:f8:2b:43:af:6a:a0:ea:03:73:5d:a1:f9: 97:32:b6:9d:d2:90:3c:f1:80:82:59:52:18:b7:f8: 4b:83:7c:97:68:b2:ed:81:7c:b6:85:c6:50:d5:23: 6f:fc:ea:5a:29:c9:1c:22:cc:d4:5f:81:a9:09:44: 90:a9:12:90:94:b1:51:be:0a:10:68:6c:3c:cc:d1: 46:7c:90:b0:9a:c5:28:83:a8:b6:b2:2a:04:f8:91: a2:17:18:6e:c2:c4:9f:f6:5a:9f:86:5f:e5:b5:e6: da:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3A:EF:4A:6F:F4:3B:8A:A9:A7:FD:D5:D3:66:C4:73:12:67:2D:6A X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:da:45:97:5a:3e:21:28:85:e8:f4:a5:40:9e:c6:d3:0a:16: d6:ab:16:46:f8:05:23:59:cf:7f:cc:f5:47:fb:5c:cd:25:f1: 22:a3:fe:5d:1d:6e:50:49:79:d6:5c:c2:e1:57:a0:15:5b:48: ca:5d:bb:35:d2:88:31:0a:e9:f7:93:11:21:21:66:77:f2:c5: f3:49:df:ba:47:33:85:f4:73:fe:8d:0c:e1:b9:8a:ff:ba:5d: e6:79:5c:1c:79:8c:3c:ec:99:8a:61:64:97:6d:49:7b:55:5e: da:f7:ba:9e:ab:84:01:66:1a:84:33:6a:fa:81:24:ed:19:a1: 84:a6:d0:77:3a:d9:23:ea:cc:a6:a0:5c:38:d7:d3:b9:c8:eb: 11:ae:a8:d0:27:7c:0a:22:f7:77:40:d7:6a:78:00:18:68:70: 2a:56:00:68:83:8f:c4:56:f1:98:d8:96:ee:d3:b1:da:63:59: 59:fb:72:81:a9:2c:bb:ba:01:92:1d:1d:09:0b:37:d3:58:5c: 37:ee:56:cf:5e:d8:4d:c8:c8:c3:88:df:0f:d2:85:cf:cd:b2: 6c:ca:a8:d3:86:be:79:0a:23:f2:2a:cc:a0:b5:45:3b:74:af: 7a:e5:c0:89:47:39:05:09:a4:f2:d4:90:32:cf:78:f0:0b:79: 32:35:b3:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2nVOeMzeIYuv9IHT3fwp61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwNDE5MjAwMDUyWhcNMjYwNDIwMjAwMDUyWjAzMTEwLwYDVQQD Eyg5ZjNhZWY0YTZmZjQzYjhhYTlhN2ZkZDVkMzY2YzQ3MzEyNjcyZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkamrzk88HcXjU2K7dkmNYjq5oFXy 7V/OW7WgoYXTgdxIYXO3BvNpUAbMGFUhs5GJDGNsVFrej3iEGSajwdbZwa49FFnX fhNoBOGvYfzVFhqs6iB4Z+gWXk0HpfL1zhKocnSvOaj82+sdplOCBCFTANAV743M GcpTE1XEbA/AnKgQq5ySbghF5TlhtLxyvC/VclMosTK/qyL4K0OvaqDqA3NdofmX Mrad0pA88YCCWVIYt/hLg3yXaLLtgXy2hcZQ1SNv/OpaKckcIszUX4GpCUSQqRKQ lLFRvgoQaGw8zNFGfJCwmsUog6i2sioE+JGiFxhuwsSf9lqfhl/ltebagwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8670pv9DuKqaf91dNmxHMSZy1qMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtpFl1o+ ISiF6PSlQJ7G0woW1qsWRvgFI1nPf8z1R/tczSXxIqP+XR1uUEl51lzC4VegFVtI yl27NdKIMQrp95MRISFmd/LF80nfukczhfRz/o0M4bmK/7pd5nlcHHmMPOyZimFk l21Je1Ve2ve6nquEAWYahDNq+oEk7RmhhKbQdzrZI+rMpqBcONfTucjrEa6o0Cd8 CiL3d0DXangAGGhwKlYAaIOPxFbxmNiW7tOx2mNZWftygaksu7oBkh0dCQs301hc N+5Wz17YTcjIw4jfD9KFz82ybMqo04a+eQoj8irMoLVFO3SveuXAiUc5BQmk8tSQ Ms948At5MjWz6g== -----END CERTIFICATE-----Generated at Mon Apr 20 03:26:47 2026 by rpki-client