$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: wsRtmbd/bOBZ1vHqrOUNOJ3wpBESmnx/14hRUArxw6U= Subject key identifier: 84:10:C0:02:80:9E:6B:17:B9:C5:F7:5A:A4:71:34:BF:45:56:66:C7 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019DDE43DBD39503A0C46A8C842707E88C7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 18EB Signing time: Thu 30 Apr 2026 12:01:22 +0000 Manifest this update: Thu 30 Apr 2026 12:01:22 +0000 Manifest next update: Fri 01 May 2026 12:01:22 +0000 Files and hashes: 1: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=) 2: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=) 3: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=) 4: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=) 5: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=) 6: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=) 7: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=) 8: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=) 9: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=) 10: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: kwI3SjC6HEkTu/4h0fDGI3O47bH3Fs+mbXcWQIoVq5s=) 11: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=) 12: lcBaOkK9THwl0XIqZgkoB-TZsbs.roa (hash: wKKJUT7JPve5W6FxY/yzXFmsp0AF6c9Iy3VcPHnP9M4=) 13: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=) 14: r2fhwRZgDnJ42tEzYpq9QARdwNg.roa (hash: UN6m1b3Vnp+W6gqg/ChwnnprYWWgYrCXDJiUYFQZheM=) 15: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=) 16: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:de:43:db:d3:95:03:a0:c4:6a:8c:84:27:07:e8:8c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Apr 30 12:01:22 2026 GMT Not After : May 1 12:01:22 2026 GMT Subject: CN=8410c002809e6b17b9c5f75aa47134bf455666c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:bc:2a:bd:ca:25:03:29:dc:db:d3:59:4c: b1:2a:96:7c:4a:d9:df:6f:d5:4f:7a:c8:a9:c0:71: 14:6d:5f:5c:99:fb:83:f4:1f:f8:81:42:3c:18:57: 61:7a:ae:05:9b:ad:36:f0:e4:1a:84:9e:4e:4c:e2: 0d:74:28:86:86:db:b4:c1:7e:7b:7a:85:2c:e0:3e: c2:7f:eb:c9:ac:35:d6:44:e9:64:93:e1:7a:c7:97: ba:78:17:7a:cb:f2:32:c0:aa:71:a3:e8:e5:00:6b: 20:57:5c:54:54:f2:4b:7f:4d:62:ed:54:38:30:61: c7:b5:28:d7:65:76:54:d1:67:f5:65:2b:83:6d:31: d1:fd:48:b5:15:7c:cd:17:a0:06:42:71:c1:bb:b0: ac:1b:aa:36:1f:f3:d7:21:5d:09:97:34:4c:6c:c8: 5d:6f:4c:17:ba:d6:9d:eb:01:55:67:89:6a:73:2d: a7:da:ca:57:e2:5c:2d:5f:d6:78:8b:0b:a4:d4:14: c3:67:47:09:74:b2:e1:7d:40:25:24:45:b0:cc:a3: d9:a8:55:7d:a7:fd:49:33:0c:7a:74:ef:53:51:61: e5:d3:d4:97:5f:c2:00:a4:b0:cb:59:67:9f:bc:3d: 37:ba:c5:25:b6:4b:3f:eb:fa:55:a9:95:11:0e:95: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:10:C0:02:80:9E:6B:17:B9:C5:F7:5A:A4:71:34:BF:45:56:66:C7 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d2:ea:2f:d7:d2:39:4e:fd:48:19:65:7d:63:61:80:e3:19: be:9a:f3:d6:b1:49:c3:0d:51:ad:b1:ad:4a:30:51:79:07:b8: 5f:7d:83:61:62:f0:a2:ce:4b:56:6b:c1:92:81:e3:99:f6:45: b6:2e:31:18:ad:b0:ac:ef:40:bf:75:60:a5:58:14:4f:4b:2b: a9:28:a6:98:b2:6d:7c:93:d9:f0:7d:44:f7:94:34:a5:43:03: 6b:9a:f0:45:8f:1a:4d:8e:31:a2:7b:44:1d:a6:bf:2e:11:73: 36:3c:48:bf:7a:a2:01:94:c8:b1:76:71:74:f5:e2:e0:14:02: 82:ea:09:83:df:34:0f:d4:87:84:eb:a7:dc:57:95:fd:80:c4: f1:1c:f7:42:d6:0c:f0:80:9e:8a:32:bf:c0:e6:4a:49:45:3f: 55:16:0c:e1:e1:8c:26:ec:67:c1:a0:0a:c3:37:c5:6c:da:83: d2:e6:75:57:8d:76:c0:a7:46:5e:5b:ef:b8:e8:4a:9e:08:b4: d9:3b:2f:e9:45:da:f9:ce:b4:ae:4d:93:17:3d:a7:ce:97:ee: 17:18:cc:64:ca:b4:58:36:f2:0c:ab:82:fb:b3:a1:a0:48:4b: 89:68:25:5e:b3:0e:d0:c9:31:6b:38:ca:73:a5:30:e5:13:f6: 5b:08:19:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3eQ9vTlQOgxGqMhCcH6Ix9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwNDMwMTIwMTIyWhcNMjYwNTAxMTIwMTIyWjAzMTEwLwYDVQQD Eyg4NDEwYzAwMjgwOWU2YjE3YjljNWY3NWFhNDcxMzRiZjQ1NTY2NmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzka8Kr3KJQMp3NvTWUyxKpZ8Stnf b9VPesipwHEUbV9cmfuD9B/4gUI8GFdheq4Fm6028OQahJ5OTOINdCiGhtu0wX57 eoUs4D7Cf+vJrDXWROlkk+F6x5e6eBd6y/IywKpxo+jlAGsgV1xUVPJLf01i7VQ4 MGHHtSjXZXZU0Wf1ZSuDbTHR/Ui1FXzNF6AGQnHBu7CsG6o2H/PXIV0JlzRMbMhd b0wXutad6wFVZ4lqcy2n2spX4lwtX9Z4iwuk1BTDZ0cJdLLhfUAlJEWwzKPZqFV9 p/1JMwx6dO9TUWHl09SXX8IApLDLWWefvD03usUltks/6/pVqZURDpX9bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQQwAKAnmsXucX3WqRxNL9FVmbHMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9LqL9fS OU79SBllfWNhgOMZvprz1rFJww1RrbGtSjBReQe4X32DYWLwos5LVmvBkoHjmfZF ti4xGK2wrO9Av3VgpVgUT0srqSimmLJtfJPZ8H1E95Q0pUMDa5rwRY8aTY4xontE Haa/LhFzNjxIv3qiAZTIsXZxdPXi4BQCguoJg980D9SHhOun3FeV/YDE8Rz3QtYM 8ICeijK/wOZKSUU/VRYM4eGMJuxnwaAKwzfFbNqD0uZ1V412wKdGXlvvuOhKngi0 2Tsv6UXa+c60rk2TFz2nzpfuFxjMZMq0WDbyDKuC+7OhoEhLiWglXrMO0MkxazjK c6Uw5RP2WwgZ9Q== -----END CERTIFICATE-----Generated at Thu Apr 30 13:45:48 2026 by rpki-client