$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: RIIRMySY7OWX3C+QduOilNfgof6iq0gEd0nzQ2V3dE0= Subject key identifier: 14:19:E7:D4:1A:D0:48:7D:5A:19:C6:F7:24:B8:AB:18:4E:90:86:D7 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019DD050881540FFC51EBF99121BA0FF87DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 18FC Signing time: Mon 27 Apr 2026 19:00:31 +0000 Manifest this update: Mon 27 Apr 2026 19:00:31 +0000 Manifest next update: Tue 28 Apr 2026 19:00:31 +0000 Files and hashes: 1: 0kNz9-JWERt3abzlaJOUE4NTJO4.roa (hash: 67hyPCPSnaEobnQIj1pQT7pIpy62/SUOtS+52kq/tjI=) 2: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=) 3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=) 4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=) 5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=) 6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: 99ElU0HWZje8/KTHtJtolTE3rb85lzYj/Ls1T791PnE=) 7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=) 8: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=) 9: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=) 10: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=) 11: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d0:50:88:15:40:ff:c5:1e:bf:99:12:1b:a0:ff:87:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Apr 27 19:00:31 2026 GMT Not After : Apr 28 19:00:31 2026 GMT Subject: CN=1419e7d41ad0487d5a19c6f724b8ab184e9086d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:df:ff:90:63:c2:f9:6d:42:84:e6:1d:b5: 93:60:26:14:4a:91:1a:fb:f0:0b:ac:f1:02:48:cc: d8:67:7b:be:d1:cc:af:63:14:d7:43:ea:c2:20:1c: 6a:05:df:48:e4:df:38:66:c6:35:ff:89:0f:b0:17: e5:69:a5:33:87:b5:68:be:33:d0:4d:91:f4:9c:2d: 8e:72:7a:bd:45:b9:c5:ec:82:82:81:12:ef:86:f0: 69:e8:15:b8:a2:53:8f:b1:90:17:b3:6f:17:9a:0a: b5:9c:65:c6:1e:0c:a0:e1:53:e7:8f:7c:33:7a:d1: 3c:50:e6:65:f2:9a:42:a9:a1:b6:8c:65:3a:34:8a: 1b:64:0c:f0:90:90:ce:dc:ab:13:de:28:e8:5d:2a: 33:26:6b:c7:fa:9c:4d:4f:7b:ca:92:69:bc:72:99: 5a:63:0b:d9:2f:67:8b:d4:ee:57:dd:cd:44:af:58: 49:0c:b4:82:dc:95:1e:3a:e8:95:09:06:56:96:e8: a3:87:1e:de:2c:fa:55:41:56:89:fb:e2:ec:c1:41: 56:76:05:95:f5:20:47:5c:08:24:10:de:43:7b:d6: 4c:cb:06:e3:cf:81:b1:99:76:73:87:ed:55:78:bf: 07:66:94:0b:77:27:39:67:85:45:d0:3d:b6:95:82: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:19:E7:D4:1A:D0:48:7D:5A:19:C6:F7:24:B8:AB:18:4E:90:86:D7 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9f:0f:b4:33:16:16:bd:2d:7a:fc:d6:db:34:cd:a1:fc:81: 1b:a8:c4:9e:7a:8d:cf:7c:2a:aa:7c:58:65:d1:23:27:c6:fa: df:23:91:75:f0:cb:a7:5e:09:c8:b4:c4:37:d8:6d:89:47:7f: 66:aa:5f:0d:8c:11:98:7f:5f:1e:e7:25:22:b5:56:88:6c:75: f9:34:cc:20:7a:92:21:8c:eb:2f:b0:17:5c:52:a0:2c:f4:e7: e1:1c:06:10:3b:cf:18:ea:5d:fd:44:97:30:cd:a9:b6:1d:f0: f5:f9:1e:c8:61:02:c2:12:e5:80:d7:9c:0d:97:c6:76:ae:ad: 33:05:5d:45:e1:93:8e:35:75:1b:df:e9:4c:11:f9:3d:b0:14: 22:5b:6d:b1:f6:75:d4:a0:7d:b8:46:db:b3:f5:95:e1:d0:0e: c4:4a:83:01:60:28:e1:07:7e:e5:5b:f3:b9:e4:ce:ac:32:e9: ec:72:bc:25:32:9a:12:8d:60:06:76:a7:d3:cf:8d:7c:69:5a: 78:f3:1e:b6:b0:2f:e4:c9:ec:23:19:37:e7:3a:a0:80:f5:0d: 3b:84:b9:00:cd:d0:ce:6a:cc:86:e2:7a:92:9b:c2:1a:71:a1: dd:40:b1:35:dc:8a:06:49:68:6b:e4:5d:5a:29:69:37:85:2d: ba:5e:35:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3QUIgVQP/FHr+ZEhug/4fbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwNDI3MTkwMDMxWhcNMjYwNDI4MTkwMDMxWjAzMTEwLwYDVQQD EygxNDE5ZTdkNDFhZDA0ODdkNWExOWM2ZjcyNGI4YWIxODRlOTA4NmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtObf/5BjwvltQoTmHbWTYCYUSpEa +/ALrPECSMzYZ3u+0cyvYxTXQ+rCIBxqBd9I5N84ZsY1/4kPsBflaaUzh7VovjPQ TZH0nC2Ocnq9RbnF7IKCgRLvhvBp6BW4olOPsZAXs28Xmgq1nGXGHgyg4VPnj3wz etE8UOZl8ppCqaG2jGU6NIobZAzwkJDO3KsT3ijoXSozJmvH+pxNT3vKkmm8cpla YwvZL2eL1O5X3c1Er1hJDLSC3JUeOuiVCQZWluijhx7eLPpVQVaJ++LswUFWdgWV 9SBHXAgkEN5De9ZMywbjz4GxmXZzh+1VeL8HZpQLdyc5Z4VF0D22lYJhRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQZ59Qa0Eh9WhnG9yS4qxhOkIbXMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZ8PtDMW Fr0tevzW2zTNofyBG6jEnnqNz3wqqnxYZdEjJ8b63yORdfDLp14JyLTEN9htiUd/ ZqpfDYwRmH9fHuclIrVWiGx1+TTMIHqSIYzrL7AXXFKgLPTn4RwGEDvPGOpd/USX MM2pth3w9fkeyGECwhLlgNecDZfGdq6tMwVdReGTjjV1G9/pTBH5PbAUIlttsfZ1 1KB9uEbbs/WV4dAOxEqDAWAo4Qd+5VvzueTOrDLp7HK8JTKaEo1gBnan08+NfGla ePMetrAv5MnsIxk35zqggPUNO4S5AM3QzmrMhuJ6kpvCGnGh3UCxNdyKBkloa+Rd WilpN4Utul41nQ== -----END CERTIFICATE-----Generated at Tue Apr 28 00:06:24 2026 by rpki-client