$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: +ZlM14AgiYP86sWIGvbIAHdRZfv6Wt7++jQ6fTgf8VE= Subject key identifier: 0A:A2:BB:D0:0D:C2:A3:14:B6:F3:C6:86:55:7D:5E:D4:DB:04:3B:6E Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019DCF077368790C8673A70472A82AF5ABA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 15BC Signing time: Mon 27 Apr 2026 13:01:05 +0000 Manifest this update: Mon 27 Apr 2026 13:01:05 +0000 Manifest next update: Tue 28 Apr 2026 13:01:05 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=) 4: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 5: KOWxSmH0_bapiUsF2I5NvMk2mAE.roa (hash: qlla291EA5iael/7BwH1F/97Ya9GRn26shYvkPQjZ4Q=) 6: OYUqnwa8yQK0vig2w6Um7A1Wcg4.roa (hash: vSXWDq1SS7TbMrb96ytcbFUS3oNQ6vxE3t+U54lGeWc=) 7: _qefhBTX4GrLHAKY0SuGouHYv88.roa (hash: ZZ2WFS7hoXoz7ExsxVHk1ghS6uAk+/8jwy793fgoALQ=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: cYegkqTDRQkQYBG0QAGLC43ERoE.roa (hash: Jj0rGclcjFrkbXAtvfPBQZbVxQ41VQry0fjFc8pn/lw=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: exZQrKOTujMda/t9bI5brDyLpM3yqEtDhsoQHNFnK+0=) 12: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=) 13: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 14: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:07:73:68:79:0c:86:73:a7:04:72:a8:2a:f5:ab:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Apr 27 13:01:05 2026 GMT Not After : Apr 28 13:01:05 2026 GMT Subject: CN=0aa2bbd00dc2a314b6f3c686557d5ed4db043b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:59:9e:58:a5:17:4a:1b:1f:1c:e7:4b:68: 58:2b:f3:4e:56:14:0c:8f:23:3c:b2:ec:fd:44:c3: 4f:56:5c:4f:09:10:e8:05:e4:03:57:3d:e5:ad:62: 50:14:5f:99:dd:bb:c4:ba:1a:3e:ef:cc:0f:20:bb: 8f:3f:f4:29:75:3d:d7:c6:a9:f3:a4:11:71:9b:16: 89:af:4f:f7:4d:a9:f5:7a:52:07:0a:66:37:3c:9b: f5:56:e4:16:33:9f:be:16:d3:19:f6:2f:76:5c:c9: 60:b4:41:2d:45:9a:de:06:4d:75:04:73:c6:1f:22: a5:d0:90:55:fa:f3:6e:22:a5:16:b1:39:96:fe:74: 5f:96:54:2b:73:68:92:ed:48:b6:bd:1b:b7:e8:75: a5:7d:0d:ea:06:2c:1c:f1:6f:59:8f:02:39:8b:e3: 04:0b:e2:ff:1d:68:1b:ae:ec:f5:98:f2:0d:f4:fe: 4a:d7:be:6a:59:a7:6c:53:d7:f2:66:79:12:f0:39: 84:f7:a9:da:44:dd:65:3b:3e:fb:51:51:c5:18:78: dc:f4:1a:f0:33:e6:de:53:7e:10:61:8c:84:02:38: 45:99:b1:7e:1b:46:73:16:b9:3f:a7:77:4f:28:85: 66:d8:9a:c6:a8:ae:86:d6:04:4e:e2:ba:f3:d2:f6: 38:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A2:BB:D0:0D:C2:A3:14:B6:F3:C6:86:55:7D:5E:D4:DB:04:3B:6E X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:66:0c:aa:7b:a4:e8:59:35:55:31:cd:24:27:6a:c5:33:87: 15:44:39:d6:f4:c8:51:e6:9d:67:45:af:1c:47:f5:9b:16:45: 94:d6:1f:b2:17:2c:d1:27:8a:ea:66:98:4b:52:d6:25:7a:8a: f4:4d:89:be:ad:13:35:db:4a:77:7e:95:b3:ae:dd:25:17:f7: 98:d4:2a:c9:2f:99:9f:d5:f5:3f:e4:14:3e:55:6c:32:47:0d: d9:2f:32:b5:ef:8b:f7:f4:d1:1e:17:21:ed:10:59:c3:83:d8: 6f:0a:45:e6:dd:61:c4:b2:b8:dc:2a:3d:da:53:99:89:2d:90: b9:9d:d5:4b:cc:19:f0:6f:de:bb:21:ef:55:69:ad:fa:2d:53: 69:65:96:ec:27:6c:5d:e5:b2:60:b2:fe:0c:76:68:64:70:96: 44:40:06:91:5b:d4:55:9c:f2:9c:99:a6:71:dd:c7:8e:aa:3d: 1e:f4:39:f0:e6:31:69:3e:68:05:67:76:7b:dd:a6:83:b5:6d: 84:e6:c3:25:e1:8d:8c:77:f9:fc:a0:cb:be:89:a3:71:45:27: 7e:c4:2b:fd:85:60:ad:1e:2b:e2:e1:c7:dc:34:2b:32:0a:91: ab:27:0e:68:b9:06:8d:b6:ba:56:4c:31:0f:d7:a2:75:bb:39: 5a:e4:47:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PB3NoeQyGc6cEcqgq9aumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwNDI3MTMwMTA1WhcNMjYwNDI4MTMwMTA1WjAzMTEwLwYDVQQD EygwYWEyYmJkMDBkYzJhMzE0YjZmM2M2ODY1NTdkNWVkNGRiMDQzYjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscBZnlilF0obHxznS2hYK/NOVhQM jyM8suz9RMNPVlxPCRDoBeQDVz3lrWJQFF+Z3bvEuho+78wPILuPP/QpdT3Xxqnz pBFxmxaJr0/3Tan1elIHCmY3PJv1VuQWM5++FtMZ9i92XMlgtEEtRZreBk11BHPG HyKl0JBV+vNuIqUWsTmW/nRfllQrc2iS7Ui2vRu36HWlfQ3qBiwc8W9ZjwI5i+ME C+L/HWgbruz1mPIN9P5K175qWadsU9fyZnkS8DmE96naRN1lOz77UVHFGHjc9Brw M+beU34QYYyEAjhFmbF+G0ZzFrk/p3dPKIVm2JrGqK6G1gRO4rrz0vY4oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqiu9ANwqMUtvPGhlV9XtTbBDtuMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmYMqnuk 6Fk1VTHNJCdqxTOHFUQ51vTIUeadZ0WvHEf1mxZFlNYfshcs0SeK6maYS1LWJXqK 9E2Jvq0TNdtKd36Vs67dJRf3mNQqyS+Zn9X1P+QUPlVsMkcN2S8yte+L9/TRHhch 7RBZw4PYbwpF5t1hxLK43Co92lOZiS2QuZ3VS8wZ8G/euyHvVWmt+i1TaWWW7Cds XeWyYLL+DHZoZHCWREAGkVvUVZzynJmmcd3Hjqo9HvQ58OYxaT5oBWd2e92mg7Vt hObDJeGNjHf5/KDLvomjcUUnfsQr/YVgrR4r4uHH3DQrMgqRqycOaLkGjba6Vkwx D9eidbs5WuRHjA== -----END CERTIFICATE-----Generated at Mon Apr 27 19:47:37 2026 by rpki-client