$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: zvZDOA1mjsAZYEwVbqeA8KOFwYqR8olX8LnGdGfLsS4= Subject key identifier: 90:B0:40:BA:C0:4D:51:CE:4D:75:10:05:BF:79:66:EC:D4:BD:74:00 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019DE47CF9AD2ED98C2DCA193E451CCCBD7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 07A1 Signing time: Fri 01 May 2026 17:01:28 +0000 Manifest this update: Fri 01 May 2026 17:01:28 +0000 Manifest next update: Sat 02 May 2026 17:01:28 +0000 Files and hashes: 1: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 2: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: 3ZWLDBaHFwZsHOH7SXOtOWkTHirL5Chy+Df6qb4c85E=) 3: 7SwUXzEbynVOAJ41PRN1VV-DthQ.roa (hash: /HRDLDX8YtXPPm0ZzH9OOI6lge2ijM43IUSyaitp3HA=) 4: AuuFpGckEdWDmpSli6J4EvnBEFA.roa (hash: UWwZYirMViLQ4FhWk6naRNb3lf/S07gxbtcPGiaea3M=) 5: B9XWePYQjczzVhsbHCKhs1iPZEw.roa (hash: 7+H31xuyxXE8kpgGxD+OA71WfdqXR7K5DI+2X9LHglM=) 6: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 7: JRpzznWelvDGpNctUx-9YeQj91I.roa (hash: UWpK2mc+BRq0WDsXbRZApCIJ/yZuMuk8WsuIDijlk30=) 8: N8T1T4yzeC_svV7N6clN6YYuhS0.roa (hash: Zjsphs8xxbX+E2wFNgFNlo+S/FNhRonrcNCUdPBKUgo=) 9: VJhfwBMpKYGf6ops4QG8W2D9K5Y.roa (hash: BYsR2fxa81FQHh1Dxyok1UJdkjHu0vH5dq3diC+m0iI=) 10: XCau4ffd9wRsX7TYXIogzR2WqO4.roa (hash: ftqkiMajJgdI8EjDHWxMovMT410S0p0no+51o9gTIa8=) 11: YfhOPAWRkHzsFNKQodjoA2IhLKM.roa (hash: 9/L6hUhQcrkiGTuXjLMFbE6LlWLBn2NBCH2Dr2RZSJA=) 12: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 13: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 14: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 15: aHuFfSOUYXmTmBwxHlPwh-EVryM.roa (hash: 4h0lpb8Jw+MnXWrJAhTnOT+WFcvU+QMAmEsFwZdu5/k=) 16: egsOE6bZvfKQiaDurlHql4l7FQo.roa (hash: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4=) 17: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) 18: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 02 May 2026 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:e4:7c:f9:ad:2e:d9:8c:2d:ca:19:3e:45:1c:cc:bd:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: May 1 17:01:28 2026 GMT Not After : May 2 17:01:28 2026 GMT Subject: CN=90b040bac04d51ce4d751005bf7966ecd4bd7400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:f0:5a:de:75:ca:31:8f:eb:de:55:91:0a: 8a:12:c2:c0:ff:08:23:55:1f:69:01:82:e0:e7:ae: 20:b3:9b:bf:04:cf:dc:ae:a1:41:0b:31:f4:bc:fa: 54:d2:50:3b:dc:f8:39:bd:61:51:bc:eb:e7:67:48: af:00:e0:bc:49:7e:27:fa:61:16:ef:f2:31:7c:f0: 34:51:d7:b4:4e:47:eb:37:f3:0e:6c:98:a6:95:f2: 32:14:9f:0c:6b:7a:66:a6:92:08:1f:ac:16:b3:85: 61:1f:cd:73:42:3a:a1:b2:a7:af:d6:5f:eb:e7:49: db:b4:3b:38:38:3c:9f:91:30:f7:5f:56:6e:10:de: b1:45:c0:18:53:44:a9:42:f0:80:73:e6:c3:ef:cb: b5:c5:f9:8d:dd:ba:9b:e1:a9:17:49:00:6c:6c:ea: 71:c3:3a:82:16:4a:cc:2e:68:93:1f:5c:cd:e8:89: 84:50:94:55:ff:77:d7:f0:67:e0:84:f1:6b:c0:2a: 33:00:d3:87:4e:07:ab:d8:20:09:33:8e:4a:4a:5f: 64:fc:f3:a0:c8:3f:62:70:af:38:e3:dd:4a:3c:52: 72:93:66:4a:50:22:07:ad:c8:09:0b:ea:09:49:db: 9f:d6:de:3f:88:23:24:30:0f:6d:26:65:f0:b6:a5: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B0:40:BA:C0:4D:51:CE:4D:75:10:05:BF:79:66:EC:D4:BD:74:00 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c5:75:20:3e:bc:2f:3c:8d:cc:1c:7c:82:04:56:a8:dc:a2: da:6c:3e:e5:bf:fa:4d:2b:3a:e0:2d:5c:3e:1e:20:6c:0a:a5: c4:29:7d:1a:0d:87:ab:97:a3:73:11:08:94:eb:15:ca:ff:d7: e3:c6:86:fc:6f:2b:19:ea:ac:cc:31:ea:08:8d:ef:21:7c:94: 93:91:6c:e7:79:09:95:44:fa:93:41:3e:47:d4:1e:98:1b:78: 68:3d:c0:d3:9f:1f:bc:44:e3:4d:78:83:a3:87:b7:14:46:1e: 07:15:c2:b1:f5:01:97:a8:71:58:21:2b:5d:10:22:45:9c:df: b1:16:2a:3d:a0:6c:9a:b6:30:22:df:56:eb:fb:6a:f6:54:a9: d9:71:31:fb:2c:05:01:10:a9:aa:a1:04:d9:0e:d3:37:ad:9d: cd:a8:5c:53:a3:44:dc:d4:36:1c:20:86:de:fc:e9:3d:5e:6c: e1:88:81:22:80:54:33:32:91:44:1c:7a:26:e3:d3:d1:77:be: a0:a5:24:14:80:5f:ff:81:c1:dd:e7:e3:03:e9:16:3b:af:5a: f2:4c:35:96:a5:0e:ac:91:ca:e9:60:b7:55:b4:0e:8e:dc:ec: 98:1e:f7:47:26:7d:01:98:e6:4b:73:08:89:6c:31:ce:ad:4d: cf:c8:bf:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3kfPmtLtmMLcoZPkUczL17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwNTAxMTcwMTI4WhcNMjYwNTAyMTcwMTI4WjAzMTEwLwYDVQQD Eyg5MGIwNDBiYWMwNGQ1MWNlNGQ3NTEwMDViZjc5NjZlY2Q0YmQ3NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSnwWt51yjGP695VkQqKEsLA/wgj VR9pAYLg564gs5u/BM/crqFBCzH0vPpU0lA73Pg5vWFRvOvnZ0ivAOC8SX4n+mEW 7/IxfPA0Ude0TkfrN/MObJimlfIyFJ8Ma3pmppIIH6wWs4VhH81zQjqhsqev1l/r 50nbtDs4ODyfkTD3X1ZuEN6xRcAYU0SpQvCAc+bD78u1xfmN3bqb4akXSQBsbOpx wzqCFkrMLmiTH1zN6ImEUJRV/3fX8GfghPFrwCozANOHTger2CAJM45KSl9k/POg yD9icK84491KPFJyk2ZKUCIHrcgJC+oJSduf1t4/iCMkMA9tJmXwtqVMxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCwQLrATVHOTXUQBb95ZuzUvXQAMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8V1ID68 LzyNzBx8ggRWqNyi2mw+5b/6TSs64C1cPh4gbAqlxCl9Gg2Hq5ejcxEIlOsVyv/X 48aG/G8rGeqszDHqCI3vIXyUk5Fs53kJlUT6k0E+R9QemBt4aD3A058fvETjTXiD o4e3FEYeBxXCsfUBl6hxWCErXRAiRZzfsRYqPaBsmrYwIt9W6/tq9lSp2XEx+ywF ARCpqqEE2Q7TN62dzahcU6NE3NQ2HCCG3vzpPV5s4YiBIoBUMzKRRBx6JuPT0Xe+ oKUkFIBf/4HB3efjA+kWO69a8kw1lqUOrJHK6WC3VbQOjtzsmB73RyZ9AZjmS3MI iWwxzq1Nz8i/NQ== -----END CERTIFICATE-----Generated at Fri May 1 23:02:42 2026 by rpki-client