$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: EXlQMOpDZmcE4dfbssmUyQ5OCFU/Pd4VcA74aBkXzHk= Subject key identifier: 3D:16:DE:49:9D:2F:FE:7E:25:9F:04:0A:9A:19:40:3F:33:5F:6F:4F Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019DA7F9923E6E6597D63A82B6AD11AE3552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 18D0 Signing time: Sun 19 Apr 2026 23:00:44 +0000 Manifest this update: Sun 19 Apr 2026 23:00:44 +0000 Manifest next update: Mon 20 Apr 2026 23:00:44 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: easLUP56Qys2E7/LdbEykzPpLw90qg+nk324Cavugtk=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a7:f9:92:3e:6e:65:97:d6:3a:82:b6:ad:11:ae:35:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Apr 19 23:00:44 2026 GMT Not After : Apr 20 23:00:44 2026 GMT Subject: CN=3d16de499d2ffe7e259f040a9a19403f335f6f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:27:0e:0a:1a:61:2a:63:41:88:14:d6:90: 15:66:be:9e:bf:c5:25:26:b7:44:2f:f6:b1:23:09: 33:92:87:60:f4:3a:ce:58:f8:65:fc:2b:e5:a4:d5: 1f:4e:6b:e8:6e:fb:2e:58:b0:08:22:5a:72:ee:a5: 83:b1:21:12:30:1e:00:7d:bf:6c:93:ba:09:02:bf: 93:80:0b:e0:ee:72:fc:14:17:12:65:0a:27:a0:af: b1:18:cb:97:c0:3c:ca:1c:65:9f:63:37:fa:bb:10: 4f:99:6c:f4:c1:26:b3:e4:ae:44:c7:cd:54:b6:17: c3:37:f3:73:ad:31:d3:7d:fb:31:96:f1:62:86:e2: 6a:ec:a5:c0:b5:00:9f:55:26:70:cb:87:74:b2:52: 56:81:22:d5:b3:c4:c6:b4:7c:56:68:cf:1f:db:cd: b3:d9:5f:e9:13:1d:3f:64:05:fc:00:ee:c6:d2:50: e1:c4:af:1b:0e:3e:bb:81:0d:ef:b3:3b:63:50:ad: 19:55:c2:df:77:4e:39:d5:4b:ff:49:a2:3a:22:52: cd:3d:f9:6e:06:9a:06:e8:bb:63:e9:28:fd:0c:35: 9f:0e:88:fd:51:10:6f:c6:d7:f6:e8:eb:cd:73:af: d4:84:7f:13:99:e6:d1:90:b9:24:b3:07:7c:e4:fd: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:16:DE:49:9D:2F:FE:7E:25:9F:04:0A:9A:19:40:3F:33:5F:6F:4F X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2e:14:2f:e5:05:56:59:f0:55:50:ba:a5:f0:f1:25:73:0e: 59:67:9c:8e:5d:8a:4e:e2:58:89:a7:69:62:a7:4d:99:a9:dd: 01:5b:02:35:1f:91:43:d6:cc:54:28:30:82:04:be:89:ba:41: d8:95:99:24:1a:fd:dc:d8:db:50:7b:28:73:6d:ec:30:27:14: be:9f:39:1d:40:42:a9:bb:1b:a5:6d:54:16:54:d0:8c:ad:b5: 9b:7b:26:96:07:2e:e3:b6:d4:27:72:cb:c9:39:3b:1c:fb:e1: f6:ae:38:3c:b2:27:bc:9e:8a:51:13:9f:d5:fc:03:82:33:1e: fe:7c:bf:5f:de:b2:ea:7e:e0:26:7a:36:e5:a1:ca:93:99:df: e6:73:64:18:8c:b6:08:79:f1:4f:ac:ab:27:08:c5:75:f4:79: 29:8c:80:ae:6e:58:30:9e:59:79:19:ba:82:af:92:ce:f9:b3: 45:a7:42:e8:37:ba:8d:fd:64:dc:79:92:78:59:82:7f:a3:e0: 51:d9:24:31:5a:4d:27:5b:2f:cd:1e:d5:55:05:9e:f4:ad:0f: 7b:6a:06:2b:d2:41:66:73:51:df:01:24:8a:2b:3c:c5:34:25: 67:88:47:2c:40:a6:f4:ad:d9:28:43:29:23:3d:28:15:e5:31: de:9e:b8:03 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ2n+ZI+bmWX1jqCtq0RrjVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwNDE5MjMwMDQ0WhcNMjYwNDIwMjMwMDQ0WjAzMTEwLwYDVQQD EygzZDE2ZGU0OTlkMmZmZTdlMjU5ZjA0MGE5YTE5NDAzZjMzNWY2ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/cnDgoaYSpjQYgU1pAVZr6ev8Ul JrdEL/axIwkzkodg9DrOWPhl/CvlpNUfTmvobvsuWLAIIlpy7qWDsSESMB4Afb9s k7oJAr+TgAvg7nL8FBcSZQonoK+xGMuXwDzKHGWfYzf6uxBPmWz0wSaz5K5Ex81U thfDN/NzrTHTffsxlvFihuJq7KXAtQCfVSZwy4d0slJWgSLVs8TGtHxWaM8f282z 2V/pEx0/ZAX8AO7G0lDhxK8bDj67gQ3vsztjUK0ZVcLfd0451Uv/SaI6IlLNPflu BpoG6Ltj6Sj9DDWfDoj9URBvxtf26OvNc6/UhH8TmebRkLkkswd85P0dbwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFD0W3kmdL/5+JZ8ECpoZQD8zX29PMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATy4U L+UFVlnwVVC6pfDxJXMOWWecjl2KTuJYiadpYqdNmandAVsCNR+RQ9bMVCgwggS+ ibpB2JWZJBr93NjbUHsoc23sMCcUvp85HUBCqbsbpW1UFlTQjK21m3smlgcu47bU J3LLyTk7HPvh9q44PLInvJ6KUROf1fwDgjMe/ny/X96y6n7gJno25aHKk5nf5nNk GIy2CHnxT6yrJwjFdfR5KYyArm5YMJ5ZeRm6gq+SzvmzRadC6De6jf1k3HmSeFmC f6PgUdkkMVpNJ1svzR7VVQWe9K0Pe2oGK9JBZnNR3wEkiis8xTQlZ4hHLECm9K3Z KEMpIz0oFeUx3p64Aw== -----END CERTIFICATE-----Generated at Mon Apr 20 03:28:44 2026 by rpki-client