$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: ucXT5hAOyhCR0hTcPIYv8Os/W6mKoPvQ0o9EW/TkeY8= Subject key identifier: DB:A2:A9:F7:81:D5:DA:F9:D7:77:6D:2C:D1:CC:57:B8:B0:E3:75:63 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019DD0F571A3A9B5CF520F85A4165F8A0D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 18E5 Signing time: Mon 27 Apr 2026 22:00:39 +0000 Manifest this update: Mon 27 Apr 2026 22:00:39 +0000 Manifest next update: Tue 28 Apr 2026 22:00:39 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: NBsEAZUXZ7gTByUzcx9+XvoOvxK6wkMJ/ePbZhySjGc=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: JzVOn48opN5OmQw_kWDCZlB03-8.roa (hash: WnteOYQuoH/SPZnd3lWEYH6qe+d3lLK1B3+/F/zOHBo=) 8: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 12: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 13: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d0:f5:71:a3:a9:b5:cf:52:0f:85:a4:16:5f:8a:0d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Apr 27 22:00:39 2026 GMT Not After : Apr 28 22:00:39 2026 GMT Subject: CN=dba2a9f781d5daf9d7776d2cd1cc57b8b0e37563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:9c:53:55:35:05:01:c1:3c:3d:56:44:57: 80:38:d9:c1:1a:9d:26:23:12:bb:40:e1:ef:ae:37: c1:31:d8:b5:49:8d:fe:40:e0:7b:81:85:ee:25:8b: 07:94:cb:e1:1d:05:ea:7a:01:93:eb:f1:af:7b:10: 5d:15:7d:74:88:43:b9:45:6b:64:26:43:ce:9c:79: 3c:c3:70:51:cb:84:62:ee:c5:ac:2a:d9:7b:21:b7: 79:12:e1:92:bb:7c:2d:19:24:f4:8e:5a:ea:81:15: ad:38:9e:53:46:47:b3:fb:83:f6:f2:02:44:a8:e8: 9f:89:18:c9:18:a9:39:86:34:03:fa:b8:a0:d5:f9: c8:cd:68:2d:fd:1d:90:7f:2b:40:dc:ac:3b:a8:04: 01:34:b3:ff:2a:ec:da:0f:5e:9c:09:92:bb:67:a8: 3f:39:6c:85:91:f3:5e:10:72:38:70:00:6a:5b:51: 34:a2:13:c9:49:ad:c4:76:d0:0c:be:20:ab:2b:23: 59:9f:19:3f:42:f6:a4:68:e7:72:39:4d:2b:90:5a: 86:45:d8:d9:bc:96:b2:a7:46:f5:39:0d:f5:0c:e6: d5:13:49:73:41:e9:f0:11:be:10:30:f5:fb:81:99: 7c:3f:ef:26:e4:5c:37:6d:d3:91:cb:81:27:30:a8: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A2:A9:F7:81:D5:DA:F9:D7:77:6D:2C:D1:CC:57:B8:B0:E3:75:63 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:07:43:eb:34:f6:88:24:5b:68:08:6c:66:77:29:8b:bb:d5: f5:aa:38:4b:5d:da:02:a3:51:86:6c:88:22:24:a2:09:56:f6: 3a:07:57:4d:fc:02:49:bb:ab:d5:b8:3e:18:a8:23:3a:aa:86: fc:7a:e0:76:d1:39:87:1e:82:9c:cc:40:cf:af:3e:01:9b:f7: 12:f3:89:6e:46:ab:9d:9d:13:65:de:60:e8:d5:66:eb:43:57: cf:5e:95:64:3a:71:8c:a3:7a:84:8a:ab:e3:7a:2f:73:11:7d: 68:23:ec:af:7c:c8:49:60:48:96:3e:6a:1f:c8:02:19:9c:dc: f7:de:2b:b0:17:a7:1b:71:d1:5f:42:88:70:79:8c:41:c8:37: 9a:cd:5b:2d:ba:c9:f3:ae:5d:d2:19:a8:c8:76:32:65:6c:76: 3e:01:f6:87:96:f0:fc:07:1b:af:e7:32:23:51:7f:dd:c2:75: cc:ac:ee:df:a1:bf:14:f3:d1:43:ba:8e:e3:9c:d2:bd:04:6b: 73:55:85:f2:1a:ca:c2:68:15:4b:63:69:0c:ae:ab:c8:de:4b: e0:f3:6d:ce:90:eb:0b:f7:a5:20:1e:1a:dd:88:8f:f0:22:9a: ae:65:85:b8:1d:4a:77:d8:79:54:f8:89:6d:40:4f:b5:7b:b8: 51:c9:d6:06 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ3Q9XGjqbXPUg+FpBZfig2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwNDI3MjIwMDM5WhcNMjYwNDI4MjIwMDM5WjAzMTEwLwYDVQQD EyhkYmEyYTlmNzgxZDVkYWY5ZDc3NzZkMmNkMWNjNTdiOGIwZTM3NTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjGcU1U1BQHBPD1WRFeAONnBGp0m IxK7QOHvrjfBMdi1SY3+QOB7gYXuJYsHlMvhHQXqegGT6/GvexBdFX10iEO5RWtk JkPOnHk8w3BRy4Ri7sWsKtl7Ibd5EuGSu3wtGST0jlrqgRWtOJ5TRkez+4P28gJE qOifiRjJGKk5hjQD+rig1fnIzWgt/R2QfytA3Kw7qAQBNLP/KuzaD16cCZK7Z6g/ OWyFkfNeEHI4cABqW1E0ohPJSa3EdtAMviCrKyNZnxk/QvakaOdyOU0rkFqGRdjZ vJayp0b1OQ31DObVE0lzQenwEb4QMPX7gZl8P+8m5Fw3bdORy4EnMKgDfwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNuiqfeB1dr513dtLNHMV7iw43VjMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwdD 6zT2iCRbaAhsZncpi7vV9ao4S13aAqNRhmyIIiSiCVb2OgdXTfwCSbur1bg+GKgj OqqG/HrgdtE5hx6CnMxAz68+AZv3EvOJbkarnZ0TZd5g6NVm60NXz16VZDpxjKN6 hIqr43ovcxF9aCPsr3zISWBIlj5qH8gCGZzc994rsBenG3HRX0KIcHmMQcg3ms1b LbrJ865d0hmoyHYyZWx2PgH2h5bw/Acbr+cyI1F/3cJ1zKzu36G/FPPRQ7qO45zS vQRrc1WF8hrKwmgVS2NpDK6ryN5L4PNtzpDrC/elIB4a3YiP8CKarmWFuB1Kd9h5 VPiJbUBPtXu4UcnWBg== -----END CERTIFICATE-----Generated at Tue Apr 28 09:02:06 2026 by rpki-client