$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: bZYZbEENTFEp3jm0CZ5f0nlMRn43bccyLuIcZcMOvBQ= Subject key identifier: 9B:D8:7B:6C:4B:75:B3:88:1D:1C:DC:1A:95:52:7D:1B:B2:68:0A:68 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019DA7F94A1F275E1BEF8DA52587260382E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 186B Signing time: Sun 19 Apr 2026 23:00:25 +0000 Manifest this update: Sun 19 Apr 2026 23:00:25 +0000 Manifest next update: Mon 20 Apr 2026 23:00:25 +0000 Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=) 2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=) 3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=) 4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=) 5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=) 6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=) 7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=) 8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=) 9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=) 10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=) 11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=) 12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: GSp+pDBzQSIvFLxh+dDYZo3oQGFeCBuGzU1tK/NLgFo=) 14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=) 15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=) 16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=) 17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a7:f9:4a:1f:27:5e:1b:ef:8d:a5:25:87:26:03:82:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Apr 19 23:00:25 2026 GMT Not After : Apr 20 23:00:25 2026 GMT Subject: CN=9bd87b6c4b75b3881d1cdc1a95527d1bb2680a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b2:c8:61:32:20:ac:47:34:ed:d5:90:b3:a0: 44:58:67:2f:0a:6a:2a:61:75:2e:25:e4:59:7c:52: 56:e9:d0:77:24:c1:16:15:c9:c8:e0:9d:36:a1:6f: 7b:4f:81:32:f4:b9:e8:33:24:24:19:6e:28:1d:b7: c9:33:ca:c9:6d:ea:df:4a:65:63:6c:57:5c:0b:22: 86:93:7e:a7:18:0e:f4:e4:de:91:6b:48:37:e2:94: b1:32:41:35:79:fd:af:ec:85:21:a0:d5:7d:6d:5f: 58:b7:0c:75:b5:f5:66:3c:47:ba:89:06:42:0d:35: 0e:ba:7c:52:04:68:33:d4:2e:c7:1b:68:c7:01:83: 55:42:87:59:d6:21:6a:3d:de:cf:8a:45:96:51:b6: fc:9a:70:70:8e:ec:00:93:79:0f:f5:f6:5d:63:2d: 9b:43:c0:62:b2:fd:b9:fd:c9:0c:e1:42:3a:29:84: f7:0a:49:57:7c:be:24:67:cf:2b:48:e4:4a:bc:3c: a5:d6:94:0e:c6:8a:8a:26:ac:fa:e2:00:47:d9:fc: 94:4f:93:55:a2:6a:b3:05:84:29:e8:ec:37:a9:57: fd:0b:99:fa:c6:8b:27:ab:23:f8:e1:97:47:58:01: 1a:35:0a:8f:2a:f2:b7:67:f4:7f:3f:3c:d4:45:17: 76:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D8:7B:6C:4B:75:B3:88:1D:1C:DC:1A:95:52:7D:1B:B2:68:0A:68 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2a:5d:f6:8c:cb:c5:59:9d:21:8a:db:7e:5f:70:bb:fc:4f: 5f:23:6f:24:97:0a:02:e0:be:a3:84:d2:14:d7:0b:c9:f1:4f: 3e:cc:51:fb:c1:74:0c:cb:3b:71:00:2f:9e:44:50:ed:6e:56: 26:59:1c:f7:44:c9:94:c4:ce:2e:f9:3f:3d:6f:24:73:b4:b4: d1:cc:52:5e:9b:03:48:0e:01:59:f7:d8:f5:5b:f7:dc:82:e5: 2a:a5:a5:5b:e4:22:7b:de:87:2b:e4:8f:5c:71:41:ea:9f:ff: 2a:60:9a:a8:52:e5:66:88:cf:7c:0e:f4:bb:a7:64:18:be:7b: 76:78:5f:20:ce:1a:35:79:38:8a:83:77:94:14:0c:e1:8a:0a: ed:20:ce:be:f7:8a:fb:77:67:60:01:17:71:26:e7:ae:f5:57: 3f:f0:d0:d3:56:8c:cd:5d:17:c2:23:ca:83:78:34:d2:a7:06: 34:7e:c2:7e:dc:1a:26:e1:31:d9:92:4e:9c:04:0f:ae:49:98: 72:e4:7b:37:a5:6a:01:79:6e:b7:6d:00:b1:9e:9d:5d:cb:a4: cf:85:07:2b:49:d4:c9:a1:b7:2a:44:ec:0d:42:84:3a:60:00: ad:1a:e0:d6:03:a8:b8:17:9e:b2:15:65:1a:bb:38:d1:7b:1e: 26:87:b2:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2n+UofJ14b742lJYcmA4LiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwNDE5MjMwMDI1WhcNMjYwNDIwMjMwMDI1WjAzMTEwLwYDVQQD Eyg5YmQ4N2I2YzRiNzViMzg4MWQxY2RjMWE5NTUyN2QxYmIyNjgwYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7LIYTIgrEc07dWQs6BEWGcvCmoq YXUuJeRZfFJW6dB3JMEWFcnI4J02oW97T4Ey9LnoMyQkGW4oHbfJM8rJberfSmVj bFdcCyKGk36nGA705N6Ra0g34pSxMkE1ef2v7IUhoNV9bV9Ytwx1tfVmPEe6iQZC DTUOunxSBGgz1C7HG2jHAYNVQodZ1iFqPd7PikWWUbb8mnBwjuwAk3kP9fZdYy2b Q8Bisv25/ckM4UI6KYT3CklXfL4kZ88rSORKvDyl1pQOxoqKJqz64gBH2fyUT5NV omqzBYQp6Ow3qVf9C5n6xosnqyP44ZdHWAEaNQqPKvK3Z/R/PzzURRd21QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvYe2xLdbOIHRzcGpVSfRuyaApoMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSpd9ozL xVmdIYrbfl9wu/xPXyNvJJcKAuC+o4TSFNcLyfFPPsxR+8F0DMs7cQAvnkRQ7W5W Jlkc90TJlMTOLvk/PW8kc7S00cxSXpsDSA4BWffY9Vv33ILlKqWlW+Qie96HK+SP XHFB6p//KmCaqFLlZojPfA70u6dkGL57dnhfIM4aNXk4ioN3lBQM4YoK7SDOvveK +3dnYAEXcSbnrvVXP/DQ01aMzV0XwiPKg3g00qcGNH7CftwaJuEx2ZJOnAQPrkmY cuR7N6VqAXlut20AsZ6dXcukz4UHK0nUyaG3KkTsDUKEOmAArRrg1gOouBeeshVl Grs40XseJoeyog== -----END CERTIFICATE-----Generated at Mon Apr 20 09:53:41 2026 by rpki-client