$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: kBhe1Dz2ZPR3k5oIrNL9GvIaB7dayzmSlv8SbTlzpq0= Subject key identifier: 40:CE:74:3D:1C:A2:7F:C8:EF:85:DB:97:F8:01:3A:DD:27:CD:DC:BF Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019DCB2A9FC5B85A1ADC71323D22E2C61631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 1921 Signing time: Sun 26 Apr 2026 19:01:01 +0000 Manifest this update: Sun 26 Apr 2026 19:01:01 +0000 Manifest next update: Mon 27 Apr 2026 19:01:01 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: ZJU0PCxAx0xD8Hke09McldiwPEWm7LN+1eMkmQhk8Qk=) 2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=) 3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=) 4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=) 5: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (hash: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=) 6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=) 7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=) 8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=) 9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=) 10: CT3vMjevN0fYRTlNcJsck0hB60Y.roa (hash: 85AL/YEBSQNN6+KYNgUrlSLsBbfZxOy5uaLrLJGec+M=) 11: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=) 12: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=) 13: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (hash: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=) 14: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=) 15: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=) 16: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=) 17: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=) 18: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (hash: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=) 19: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=) 20: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=) 21: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=) 22: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=) 23: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cb:2a:9f:c5:b8:5a:1a:dc:71:32:3d:22:e2:c6:16:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Apr 26 19:01:01 2026 GMT Not After : Apr 27 19:01:01 2026 GMT Subject: CN=40ce743d1ca27fc8ef85db97f8013add27cddcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:8c:34:66:cd:0c:80:fb:e4:f0:01:b8:9c: 5d:7a:20:71:b7:64:a0:37:a8:e6:14:c1:e8:d4:1d: 5f:0d:ba:08:b5:3c:6a:ca:aa:61:16:ca:cb:76:14: 1f:8c:03:06:4d:bb:7d:0f:dd:4b:8d:86:38:9e:d7: 4b:b6:97:f6:6c:79:81:a2:6c:76:f8:cd:8a:94:d6: 34:c0:93:98:cc:8d:f5:b0:e1:f5:8a:21:29:10:76: 74:73:0d:44:c0:04:bd:e0:ca:cf:b1:be:d9:c6:ba: e8:44:e2:0f:0b:28:37:6e:0c:92:3d:3b:22:a9:5a: fc:1b:92:ec:0a:57:d3:2a:0e:d1:02:4e:98:52:ca: e6:e3:6e:1a:56:b2:4c:da:d1:4f:8a:4e:08:22:54: 1a:64:2a:0e:5d:ac:23:8d:00:05:d8:d5:7f:84:65: 98:51:f1:59:0c:ea:ad:2e:26:9e:29:61:f2:47:b6: 2b:0d:be:48:b1:0e:43:08:39:d2:93:b8:72:28:69: e3:c3:67:6a:57:da:9d:32:96:d0:68:5f:c0:a1:f9: 0e:89:1e:da:ca:48:11:f0:d0:c9:f4:d9:27:3f:11: 4a:42:f1:e6:f4:56:29:d7:eb:12:ba:e3:01:0a:5d: 0b:c1:9d:73:e1:e5:2f:3f:3b:a8:a2:8d:4a:1b:bd: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CE:74:3D:1C:A2:7F:C8:EF:85:DB:97:F8:01:3A:DD:27:CD:DC:BF X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:59:7d:00:4a:ee:33:3d:43:f4:35:b6:00:93:72:1c:8c:16: b8:00:26:ea:3a:78:a6:66:f0:b8:51:b3:ef:a3:a4:74:22:f7: 02:14:ef:5d:45:11:6b:5f:76:9b:0c:77:ac:5a:53:4c:c9:4e: 49:1c:15:c5:a7:f6:48:d3:1f:ad:53:61:55:34:c6:ba:86:a7: 6d:6d:8b:62:04:44:7d:10:48:fc:e8:bc:ed:9f:1f:c8:09:6c: 81:b0:fe:11:63:fb:94:10:f0:69:b5:ad:fd:72:7e:81:b1:c2: 9d:4a:3a:3f:ae:a2:14:91:fb:56:1e:39:9d:b8:b1:de:c8:bf: 94:3c:c2:59:95:8c:b3:28:19:42:0f:5a:5c:e5:73:ad:14:38: a3:6a:10:0c:ed:da:aa:14:f8:e3:10:29:56:fb:a1:1b:b2:f4: c0:0e:c5:9b:88:ff:ed:45:61:f0:d6:53:fd:b4:c6:f9:f9:10: 26:48:22:66:8d:33:b3:72:1d:6e:47:ca:c1:4a:18:4c:85:08: c5:96:3b:c0:4e:00:40:bb:da:63:18:84:67:75:34:3f:50:01: ee:c9:b6:28:5d:18:97:72:aa:83:48:ba:2c:0a:3a:7c:43:b8: 66:c6:f0:1f:af:9e:a2:a9:f1:e3:5f:9b:8a:98:4e:bc:e9:79: 18:47:8a:0b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ3LKp/FuFoa3HEyPSLixhYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjYwNDI2MTkwMTAxWhcNMjYwNDI3MTkwMTAxWjAzMTEwLwYDVQQD Eyg0MGNlNzQzZDFjYTI3ZmM4ZWY4NWRiOTdmODAxM2FkZDI3Y2RkY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPiMNGbNDID75PABuJxdeiBxt2Sg N6jmFMHo1B1fDboItTxqyqphFsrLdhQfjAMGTbt9D91LjYY4ntdLtpf2bHmBomx2 +M2KlNY0wJOYzI31sOH1iiEpEHZ0cw1EwAS94MrPsb7ZxrroROIPCyg3bgySPTsi qVr8G5LsClfTKg7RAk6YUsrm424aVrJM2tFPik4IIlQaZCoOXawjjQAF2NV/hGWY UfFZDOqtLiaeKWHyR7YrDb5IsQ5DCDnSk7hyKGnjw2dqV9qdMpbQaF/AofkOiR7a ykgR8NDJ9NknPxFKQvHm9FYp1+sSuuMBCl0LwZ1z4eUvPzuooo1KG73nSQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEDOdD0con/I74Xbl/gBOt0nzdy/MB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1l9 AEruMz1D9DW2AJNyHIwWuAAm6jp4pmbwuFGz76OkdCL3AhTvXUURa192mwx3rFpT TMlOSRwVxaf2SNMfrVNhVTTGuoanbW2LYgREfRBI/Oi87Z8fyAlsgbD+EWP7lBDw abWt/XJ+gbHCnUo6P66iFJH7Vh45nbix3si/lDzCWZWMsygZQg9aXOVzrRQ4o2oQ DO3aqhT44xApVvuhG7L0wA7Fm4j/7UVh8NZT/bTG+fkQJkgiZo0zs3IdbkfKwUoY TIUIxZY7wE4AQLvaYxiEZ3U0P1AB7sm2KF0Yl3Kqg0i6LAo6fEO4ZsbwH6+eoqnx 41+biphOvOl5GEeKCw== -----END CERTIFICATE-----Generated at Mon Apr 27 02:07:02 2026 by rpki-client