$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: 1X/jihT2/njI4yeKWHyDa7Nr/iCpT5jo+6acj6Ysp50= Subject key identifier: 8C:8D:1E:FF:B5:F6:80:AD:F9:42:CE:97:30:9E:A8:45:CB:F0:E9:C1 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019DCD4F821A19B17DA36F0BC9FDEA61520B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 18EC Signing time: Mon 27 Apr 2026 05:00:33 +0000 Manifest this update: Mon 27 Apr 2026 05:00:33 +0000 Manifest next update: Tue 28 Apr 2026 05:00:33 +0000 Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=) 2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=) 3: 4QIM1Fqn4hNEy9kn8eJKI1AXM2Y.roa (hash: 8GhUo4SPnyakq3CpcXOgLhb5ZUAB3EKXaLNGW0+jsu8=) 4: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=) 5: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=) 6: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=) 7: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=) 8: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=) 9: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=) 10: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=) 11: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=) 12: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=) 13: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=) 14: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=) 15: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=) 16: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=) 17: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=) 18: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=) 19: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=) 20: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=) 21: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=) 22: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=) 23: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: ean+GHCjPOz+C3sF0FwESTNIAYRbXvGD1iegst+L0lI=) 25: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=) 26: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:4f:82:1a:19:b1:7d:a3:6f:0b:c9:fd:ea:61:52:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Apr 27 05:00:33 2026 GMT Not After : Apr 28 05:00:33 2026 GMT Subject: CN=8c8d1effb5f680adf942ce97309ea845cbf0e9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:83:e2:36:cb:c6:a3:f9:58:0e:67:0d:a7: 80:6f:5a:bd:e4:60:fa:10:30:6c:27:48:79:ee:e6: ab:e7:90:8f:22:01:84:01:65:e0:fd:5c:52:5e:29: e2:b7:68:0b:6a:9d:21:45:11:19:4e:f0:5a:c9:8d: 29:ad:f3:34:1f:0f:f9:3a:6d:e0:c7:21:66:23:81: e9:54:12:ab:6b:e8:ba:ff:b0:34:72:5e:c1:d0:65: c4:0e:74:a5:c5:ff:89:e9:01:da:b8:bb:8c:e2:a3: fc:34:d4:b8:d8:84:22:88:68:ad:0d:90:d0:78:d8: 07:56:dd:3a:97:7a:c4:38:f0:40:fc:48:ff:5b:91: 94:23:11:18:71:19:f6:1e:bf:94:3a:0c:db:26:a1: 99:de:30:4e:2f:8f:c1:c5:da:9a:d3:a6:15:53:60: a3:5a:2a:81:71:2f:cb:ed:9c:bd:fc:95:87:fd:49: a8:18:b0:06:50:c1:bd:1c:19:25:e8:ef:b7:76:35: 91:5c:f9:f1:b0:11:c3:a7:8e:14:d7:07:e4:0e:88: 10:d2:7c:69:a3:9c:9c:09:f1:46:8f:5a:c5:77:1a: b9:ff:e8:a8:22:c5:3f:0c:91:0d:3f:2c:3d:f9:6f: fe:b8:d4:a8:4b:d1:ef:66:b6:9c:72:5b:ec:71:83: 74:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8D:1E:FF:B5:F6:80:AD:F9:42:CE:97:30:9E:A8:45:CB:F0:E9:C1 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:fe:71:4a:be:2a:68:33:76:ab:78:ca:c6:2e:e7:f1:02:fc: 6c:dd:76:5c:c2:25:de:a6:ac:2d:ae:5a:fa:42:13:bb:d4:d2: bb:45:05:5e:77:96:ae:a0:33:df:0d:c2:8b:52:bb:cf:99:6d: e0:5e:b7:fd:06:a8:7f:31:22:ad:31:35:90:de:47:d9:b3:07: a8:2b:ea:db:f3:0d:a3:f9:11:86:b2:08:03:ba:06:14:94:45: e7:e1:93:b0:fc:d9:7b:c1:73:aa:72:5e:46:ce:e0:2b:04:95: bd:3f:9c:de:10:d7:16:2c:9a:d9:39:c5:6e:01:dd:9c:db:e3: 26:52:06:8a:24:ea:44:17:d3:9d:2a:ee:42:d3:50:a8:a4:dd: a7:6b:d3:91:4c:74:81:78:d2:e8:58:b8:3f:39:0a:3f:27:26: 61:fd:b2:86:a4:c1:0e:88:63:66:1e:1b:31:5c:21:93:24:b4: 52:b8:e9:be:c9:a0:e9:33:48:b9:d4:8f:14:eb:4c:14:81:0e: 97:62:8a:fe:25:bf:ba:8a:2a:9f:84:f3:6f:72:e9:85:81:ab: e2:7d:b8:93:2e:a3:e5:87:9c:2b:12:77:ac:b4:e0:00:a4:29: 35:e1:9c:96:c5:9e:9a:6c:c7:38:4b:30:9e:0c:00:7f:98:6b: 6c:d2:67:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NT4IaGbF9o28Lyf3qYVILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwNDI3MDUwMDMzWhcNMjYwNDI4MDUwMDMzWjAzMTEwLwYDVQQD Eyg4YzhkMWVmZmI1ZjY4MGFkZjk0MmNlOTczMDllYTg0NWNiZjBlOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoKD4jbLxqP5WA5nDaeAb1q95GD6 EDBsJ0h57uar55CPIgGEAWXg/VxSXinit2gLap0hRREZTvBayY0prfM0Hw/5Om3g xyFmI4HpVBKra+i6/7A0cl7B0GXEDnSlxf+J6QHauLuM4qP8NNS42IQiiGitDZDQ eNgHVt06l3rEOPBA/Ej/W5GUIxEYcRn2Hr+UOgzbJqGZ3jBOL4/Bxdqa06YVU2Cj WiqBcS/L7Zy9/JWH/UmoGLAGUMG9HBkl6O+3djWRXPnxsBHDp44U1wfkDogQ0nxp o5ycCfFGj1rFdxq5/+ioIsU/DJENPyw9+W/+uNSoS9HvZracclvscYN0swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyNHv+19oCt+ULOlzCeqEXL8OnBMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf5xSr4q aDN2q3jKxi7n8QL8bN12XMIl3qasLa5a+kITu9TSu0UFXneWrqAz3w3Ci1K7z5lt 4F63/QaofzEirTE1kN5H2bMHqCvq2/MNo/kRhrIIA7oGFJRF5+GTsPzZe8FzqnJe Rs7gKwSVvT+c3hDXFiya2TnFbgHdnNvjJlIGiiTqRBfTnSruQtNQqKTdp2vTkUx0 gXjS6Fi4PzkKPycmYf2yhqTBDohjZh4bMVwhkyS0Urjpvsmg6TNIudSPFOtMFIEO l2KK/iW/uooqn4Tzb3LphYGr4n24ky6j5YecKxJ3rLTgAKQpNeGclsWemmzHOEsw ngwAf5hrbNJngw== -----END CERTIFICATE-----Generated at Mon Apr 27 14:27:49 2026 by rpki-client