$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: bNh5/YMVZt5RysJfHU3MKWx6KI0I23g8Dlh49Z73j0E= Subject key identifier: 62:11:96:62:44:4F:FA:27:EB:6B:36:ED:A6:29:06:FD:BA:3B:58:16 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019DD087E9FEB6B2F31E9F1ED790EEF6B329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 18EC Signing time: Mon 27 Apr 2026 20:01:01 +0000 Manifest this update: Mon 27 Apr 2026 20:01:01 +0000 Manifest next update: Tue 28 Apr 2026 20:01:01 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: vyMlRZNFpaTnL+lvK6hp4dyHqh1njNq4r2Fr1NKl3Wg=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d0:87:e9:fe:b6:b2:f3:1e:9f:1e:d7:90:ee:f6:b3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Apr 27 20:01:01 2026 GMT Not After : Apr 28 20:01:01 2026 GMT Subject: CN=62119662444ffa27eb6b36eda62906fdba3b5816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7e:ce:94:b1:b0:a9:6d:60:25:aa:4e:e0:7c: cb:a2:fb:c4:3c:a1:1a:38:2b:d1:ca:41:3d:03:63: ed:99:9a:00:25:9f:c0:ef:35:14:f2:c7:f5:e4:94: 38:4c:9f:50:23:81:9e:29:5a:90:e9:8e:ae:0b:39: 77:a6:a1:6e:9b:f9:bb:c1:e1:eb:ea:b6:15:b4:69: 1b:41:20:1a:90:0c:e6:8a:cb:bf:9d:08:cd:4e:cf: fb:91:de:bf:f6:57:25:4f:85:ba:6b:b2:2a:91:3b: 19:f7:e7:f7:35:4a:96:b6:3f:ec:f0:03:34:a3:74: e4:0c:71:b4:74:af:27:92:74:61:5d:f2:84:c9:bd: a6:8d:14:e9:18:4d:36:5e:8b:28:97:7e:cc:f2:0c: 1a:41:cc:f9:95:83:96:d5:13:6a:d2:00:31:b2:68: b3:65:41:4c:24:f5:7c:23:79:5d:3c:6b:dc:39:9a: 06:fe:a5:7e:90:45:27:34:f6:41:dc:4a:ce:bd:11: b3:57:cc:43:28:8b:53:b6:f6:9c:a2:45:bf:e7:cf: cf:6d:b5:7c:ff:cf:b7:9f:4a:98:d0:a6:3f:60:3e: 0e:7e:7a:0d:0b:c3:f5:d1:13:78:bb:18:3a:4e:dd: 6d:b4:65:74:88:c0:44:48:a1:b4:9d:b5:8f:68:15: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:11:96:62:44:4F:FA:27:EB:6B:36:ED:A6:29:06:FD:BA:3B:58:16 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f3:ca:7a:d1:65:ab:50:92:7c:36:c2:09:d4:57:47:cd:ee: 16:f2:15:8f:ac:96:21:16:14:08:1e:e5:83:7e:c3:46:bb:aa: 43:6d:23:d2:3a:20:55:ca:60:a9:21:71:59:3e:67:bc:5e:ba: 6e:d2:1e:59:89:3b:1b:89:6e:e2:8a:78:7b:1e:53:26:97:8f: 65:4e:7a:9b:bc:68:72:2c:9b:a6:ac:1d:60:e4:62:85:2f:ca: e8:2b:c5:62:43:ec:80:2f:0c:e3:81:85:9d:df:bf:25:63:40: c9:13:0f:3a:0b:0c:d0:0d:c6:1b:3e:21:32:81:40:22:3b:e2: 5b:3f:00:e5:89:68:d6:70:86:92:59:77:99:a3:f6:62:76:51: b1:41:cd:19:2c:30:0d:0b:cb:59:b6:70:60:77:6f:c5:b0:2b: 08:0e:42:e7:69:92:a6:b8:6a:a9:c2:e4:fa:b9:05:09:1e:56: 4b:68:75:7d:b3:2a:54:a1:a3:90:35:fa:72:7a:67:8c:1e:bd: d8:ed:4f:db:f7:ad:d1:48:0a:17:ad:f6:2d:72:f4:7d:f2:5e: 97:b0:7d:25:9d:c5:62:cd:96:f4:d6:10:2a:8d:94:e5:40:8d: 33:ce:8f:43:65:ce:9c:72:d9:18:94:f6:b7:c1:c7:cc:9d:97: 5c:ef:99:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3Qh+n+trLzHp8e15Du9rMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwNDI3MjAwMTAxWhcNMjYwNDI4MjAwMTAxWjAzMTEwLwYDVQQD Eyg2MjExOTY2MjQ0NGZmYTI3ZWI2YjM2ZWRhNjI5MDZmZGJhM2I1ODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8X7OlLGwqW1gJapO4HzLovvEPKEa OCvRykE9A2PtmZoAJZ/A7zUU8sf15JQ4TJ9QI4GeKVqQ6Y6uCzl3pqFum/m7weHr 6rYVtGkbQSAakAzmisu/nQjNTs/7kd6/9lclT4W6a7IqkTsZ9+f3NUqWtj/s8AM0 o3TkDHG0dK8nknRhXfKEyb2mjRTpGE02Xosol37M8gwaQcz5lYOW1RNq0gAxsmiz ZUFMJPV8I3ldPGvcOZoG/qV+kEUnNPZB3ErOvRGzV8xDKItTtvacokW/58/PbbV8 /8+3n0qY0KY/YD4OfnoNC8P10RN4uxg6Tt1ttGV0iMBESKG0nbWPaBU3WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIRlmJET/on62s27aYpBv26O1gWMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfPKetFl q1CSfDbCCdRXR83uFvIVj6yWIRYUCB7lg37DRruqQ20j0jogVcpgqSFxWT5nvF66 btIeWYk7G4lu4op4ex5TJpePZU56m7xociybpqwdYORihS/K6CvFYkPsgC8M44GF nd+/JWNAyRMPOgsM0A3GGz4hMoFAIjviWz8A5Ylo1nCGkll3maP2YnZRsUHNGSww DQvLWbZwYHdvxbArCA5C52mSprhqqcLk+rkFCR5WS2h1fbMqVKGjkDX6cnpnjB69 2O1P2/et0UgKF632LXL0ffJel7B9JZ3FYs2W9NYQKo2U5UCNM86PQ2XOnHLZGJT2 t8HHzJ2XXO+ZYw== -----END CERTIFICATE-----Generated at Mon Apr 27 23:18:28 2026 by rpki-client