$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: 0RhGlgS3EV0CvOcjR4gdoCmbnq/zBNcq/BAip9bEWkM= Subject key identifier: DC:89:80:6C:6C:E2:80:3E:3F:5B:57:3D:A4:4D:4B:02:C0:96:D9:58 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019DD49C3F82212625FD5A21409B63F845D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 18ED Signing time: Tue 28 Apr 2026 15:01:42 +0000 Manifest this update: Tue 28 Apr 2026 15:01:42 +0000 Manifest next update: Wed 29 Apr 2026 15:01:42 +0000 Files and hashes: 1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: GN3w7KDSUqEQSO6spJMioJQmTTbvxomGLAX80su20co=) 3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=) 4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=) 5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=) 6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=) 7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=) 8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=) 9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=) 10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=) 11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=) 12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=) 13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=) 14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=) 15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=) 16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=) 17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=) 18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=) 19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Apr 2026 14:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d4:9c:3f:82:21:26:25:fd:5a:21:40:9b:63:f8:45:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Apr 28 15:01:42 2026 GMT Not After : Apr 29 15:01:42 2026 GMT Subject: CN=dc89806c6ce2803e3f5b573da44d4b02c096d958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:32:82:32:7d:6d:7f:bb:63:0c:e1:f5:06: 0e:37:7f:75:5a:15:3b:45:13:75:24:ac:ad:3f:60: 5f:4f:76:fd:c0:50:90:ed:d5:5f:11:b8:e4:fd:13: a6:da:8b:e1:aa:78:e4:32:a2:75:23:23:cf:22:69: f6:85:e7:0f:2e:a1:e3:de:71:47:33:10:39:55:1d: 92:7a:bd:45:b6:12:77:5a:17:b5:17:1d:2d:7c:9f: b6:f3:07:bd:81:79:84:64:36:2c:0b:e0:bd:90:f7: 46:13:b8:de:58:7b:86:00:d8:f3:98:2d:11:27:3d: 4a:49:4d:7b:92:a9:63:be:65:01:65:b4:4a:5c:6e: 3c:27:aa:52:c8:1e:9e:51:bd:fe:55:e9:d1:93:9c: df:60:85:74:06:d9:37:d7:e3:f1:c4:14:a2:5a:a7: a2:a0:b4:38:fd:0f:37:72:87:53:9e:cc:5e:61:79: d4:ea:3b:4c:e5:03:cb:2e:72:d0:68:df:e1:26:ea: ac:f9:e3:a6:f5:6b:71:0e:15:aa:ae:38:e3:1a:d8: e5:65:64:29:2c:fe:77:41:21:01:eb:ff:f4:df:63: ba:59:4f:a6:8f:55:b3:d2:b2:f8:9e:31:ac:07:fc: 6d:50:f9:c7:32:86:77:19:22:57:ae:04:d8:5c:2b: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:80:6C:6C:E2:80:3E:3F:5B:57:3D:A4:4D:4B:02:C0:96:D9:58 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ab:72:8c:cb:4d:7d:73:b1:6a:0a:62:dd:75:a6:be:d5:5f: f4:88:5d:6e:e9:3f:d8:60:c9:d9:cb:c0:6f:70:ba:b4:e6:b7: 24:a7:37:2c:f1:6c:dd:9a:0f:33:1d:75:c1:ef:6f:45:ce:8a: ff:e4:f5:01:7a:e4:ba:a0:a7:70:b2:a9:a3:3d:16:da:91:99: cb:f4:34:c1:bf:18:64:f9:31:f3:e2:f4:56:62:2f:4a:dd:1f: dd:09:bf:a3:1a:e2:bd:ea:08:50:70:1f:de:e3:bd:57:96:c7: 8e:4e:90:d7:74:24:82:a7:1e:70:9b:f3:53:a5:df:6b:81:c8: c3:de:1a:1f:ce:f6:e0:97:4e:32:15:6e:b2:a6:0b:da:d9:56: 7e:44:90:1c:80:d0:84:ac:97:6a:55:8a:48:93:51:f6:e7:14: 17:30:41:9d:dd:48:f5:9d:c2:37:5a:e4:dd:50:f8:ac:bb:ba: a7:21:d3:5a:a6:e8:91:72:0d:93:21:08:cf:97:37:fb:ac:71: 52:44:53:31:23:6d:3a:fe:1d:ee:b8:27:85:70:d6:3f:29:0d: c3:31:aa:89:38:c7:dc:cb:09:93:b6:c7:77:69:2f:c0:fa:a6: 86:b9:8b:c9:5c:be:90:41:86:4a:2f:2a:c9:6b:6c:df:5f:b7: c9:a7:89:2e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ3UnD+CISYl/VohQJtj+EXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwNDI4MTUwMTQyWhcNMjYwNDI5MTUwMTQyWjAzMTEwLwYDVQQD EyhkYzg5ODA2YzZjZTI4MDNlM2Y1YjU3M2RhNDRkNGIwMmMwOTZkOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0MygjJ9bX+7Ywzh9QYON391WhU7 RRN1JKytP2BfT3b9wFCQ7dVfEbjk/ROm2ovhqnjkMqJ1IyPPImn2hecPLqHj3nFH MxA5VR2Ser1FthJ3Whe1Fx0tfJ+28we9gXmEZDYsC+C9kPdGE7jeWHuGANjzmC0R Jz1KSU17kqljvmUBZbRKXG48J6pSyB6eUb3+VenRk5zfYIV0Btk31+PxxBSiWqei oLQ4/Q83codTnsxeYXnU6jtM5QPLLnLQaN/hJuqs+eOm9WtxDhWqrjjjGtjlZWQp LP53QSEB6//032O6WU+mj1Wz0rL4njGsB/xtUPnHMoZ3GSJXrgTYXCuCMQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNyJgGxs4oA+P1tXPaRNSwLAltlYMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6ty jMtNfXOxagpi3XWmvtVf9Ihdbuk/2GDJ2cvAb3C6tOa3JKc3LPFs3ZoPMx11we9v Rc6K/+T1AXrkuqCncLKpoz0W2pGZy/Q0wb8YZPkx8+L0VmIvSt0f3Qm/oxriveoI UHAf3uO9V5bHjk6Q13QkgqcecJvzU6Xfa4HIw94aH8724JdOMhVusqYL2tlWfkSQ HIDQhKyXalWKSJNR9ucUFzBBnd1I9Z3CN1rk3VD4rLu6pyHTWqbokXINkyEIz5c3 +6xxUkRTMSNtOv4d7rgnhXDWPykNwzGqiTjH3MsJk7bHd2kvwPqmhrmLyVy+kEGG Si8qyWts31+3yaeJLg== -----END CERTIFICATE-----Generated at Wed Apr 29 00:00:58 2026 by rpki-client