$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: M3onCZp4gwfRbCmXbyLStkQg1GuT8mPiWl7ar0gdyVQ= Subject key identifier: 4F:9B:47:45:FE:26:E2:B1:40:3C:E3:00:9F:8D:D2:B0:26:6D:22:10 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019DA94345BC96C2C81AB34F88CC49E719C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1672 Signing time: Mon 20 Apr 2026 05:00:51 +0000 Manifest this update: Mon 20 Apr 2026 05:00:51 +0000 Manifest next update: Tue 21 Apr 2026 05:00:51 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 4LTSiiIXCY2aVQheO-OK2Ks1zVc.roa (hash: /HUlN5mU4nQlfn3Lbzxe64CdVsxaFWp5WmzIr3dsQ+U=) 3: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 4: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 5: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 6: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 7: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: KiLA-XCCVQ3hp6NK0nSvvdBkVaA.roa (hash: Wrbvgs04+OV9y9FcYP+1OM/PeyM8B8+/OgsBO82HfPE=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 13: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 14: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: mO9AuLCHK5HftQtQukoPCHydtct40wZ3Tp3Wdx/igiw=) 15: dZo66_L9wh2qbij7G3JOKCs449k.roa (hash: EcfgXVOvSMiIqr4XDNVO8j7tZpRnQKNduJAQlIX28Ko=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa (hash: 8fLuiRSXi1wlRLB5+uM6MoQhKZD4VrD7fYAS5Z6UVgU=) 18: vR9E1xSnliRW9Usue4V0ADKHiho.roa (hash: S5rMh/OoVyLOT3VDLY9zfWdq9jorvnICYEBPJuWsM0s=) 19: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 20: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a9:43:45:bc:96:c2:c8:1a:b3:4f:88:cc:49:e7:19:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Apr 20 05:00:51 2026 GMT Not After : Apr 21 05:00:51 2026 GMT Subject: CN=4f9b4745fe26e2b1403ce3009f8dd2b0266d2210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:a4:28:e8:e2:a1:15:35:ef:5c:d4:7e:18: 92:25:56:ec:f3:09:93:30:7b:72:4a:02:f6:23:2a: d0:cb:25:16:55:ca:93:5c:ce:09:b5:dd:bf:59:fc: 04:42:f2:b2:56:3d:30:5b:97:9a:cf:09:21:15:94: c1:99:89:3c:e2:3a:6a:6e:36:5d:6a:cd:40:68:ff: 43:b9:3e:d0:f4:4d:04:94:92:fc:f2:ab:37:5e:01: dc:19:e6:72:41:48:45:09:17:b0:fc:c9:cb:76:18: 12:51:d3:53:3d:6e:98:81:01:74:59:f2:25:83:f5: 29:ae:20:8e:7f:ad:c4:20:11:35:01:32:91:98:4b: 03:8f:f8:9c:42:93:37:3c:ed:5a:ae:22:95:bd:b5: 8c:ee:30:00:7d:32:ff:7c:2a:b8:dc:21:d0:03:57: 3f:d2:54:7b:11:df:f8:4a:89:7f:7d:5a:7e:a7:8a: 31:a5:a6:d6:dd:69:fd:92:f1:19:0c:8d:ba:a2:12: da:c3:fe:e2:5b:39:a9:13:74:3a:30:50:81:30:35: be:e8:b2:8a:e3:d7:7d:55:f9:7f:b2:23:40:25:8a: b6:e9:58:e6:9f:53:96:fe:48:46:95:e4:6f:2f:2b: 1c:73:86:9c:8e:3d:37:d0:e8:1a:ca:04:6d:84:46: 53:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9B:47:45:FE:26:E2:B1:40:3C:E3:00:9F:8D:D2:B0:26:6D:22:10 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:22:a5:c9:21:6c:ce:94:49:79:aa:81:40:9a:a2:9d:4a:50: c0:bd:d9:67:02:f1:e9:90:4a:b3:9a:ae:18:aa:a9:54:27:95: ad:b8:70:da:8b:5e:3a:41:e7:c3:4c:68:86:f6:bd:85:fe:2c: ff:0c:20:0d:50:d4:9d:c2:32:f8:3b:9f:6a:20:8e:30:6c:96: 93:af:c9:58:7c:0e:b4:5e:62:88:30:46:c2:ef:c5:be:a9:a3: 9b:02:30:fe:6f:7c:b4:d0:46:22:72:c2:d7:a7:9d:50:62:a9: d5:bf:79:9e:01:37:0f:d5:d4:5f:80:17:02:da:d0:b6:9f:a4: cb:b7:2b:4f:e9:20:5d:5d:55:70:6e:99:18:f9:37:7a:ff:f0: b5:66:0e:11:02:b5:1f:24:ed:eb:5b:8c:41:7c:b9:ef:7b:69: 0a:27:04:38:c2:9a:6e:45:57:5a:24:ae:c1:c9:36:c3:b5:a0: d8:16:1d:65:ff:1d:d6:9b:b2:93:09:f9:09:ea:a8:5f:be:49: 57:a7:37:32:70:b9:07:ce:5e:a0:f7:3d:0f:aa:c7:ef:7d:be: dc:5d:51:6d:3f:ca:b3:31:f7:24:e2:cc:ff:5e:73:8a:5a:0d: 72:f9:2a:9d:c9:de:eb:c4:a9:4b:ca:61:c0:b5:76:61:58:e5: 76:25:a9:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2pQ0W8lsLIGrNPiMxJ5xnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwNDIwMDUwMDUxWhcNMjYwNDIxMDUwMDUxWjAzMTEwLwYDVQQD Eyg0ZjliNDc0NWZlMjZlMmIxNDAzY2UzMDA5ZjhkZDJiMDI2NmQyMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWukKOjioRU171zUfhiSJVbs8wmT MHtySgL2IyrQyyUWVcqTXM4Jtd2/WfwEQvKyVj0wW5eazwkhFZTBmYk84jpqbjZd as1AaP9DuT7Q9E0ElJL88qs3XgHcGeZyQUhFCRew/MnLdhgSUdNTPW6YgQF0WfIl g/UpriCOf63EIBE1ATKRmEsDj/icQpM3PO1ariKVvbWM7jAAfTL/fCq43CHQA1c/ 0lR7Ed/4Sol/fVp+p4oxpabW3Wn9kvEZDI26ohLaw/7iWzmpE3Q6MFCBMDW+6LKK 49d9Vfl/siNAJYq26Vjmn1OW/khGleRvLyscc4acjj030OgaygRthEZTawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+bR0X+JuKxQDzjAJ+N0rAmbSIQMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyKlySFs zpRJeaqBQJqinUpQwL3ZZwLx6ZBKs5quGKqpVCeVrbhw2oteOkHnw0xohva9hf4s /wwgDVDUncIy+DufaiCOMGyWk6/JWHwOtF5iiDBGwu/FvqmjmwIw/m98tNBGInLC 16edUGKp1b95ngE3D9XUX4AXAtrQtp+ky7crT+kgXV1VcG6ZGPk3ev/wtWYOEQK1 HyTt61uMQXy573tpCicEOMKabkVXWiSuwck2w7Wg2BYdZf8d1puykwn5CeqoX75J V6c3MnC5B85eoPc9D6rH732+3F1RbT/KszH3JOLM/15ziloNcvkqncne68SpS8ph wLV2YVjldiWpTg== -----END CERTIFICATE-----Generated at Mon Apr 20 08:33:04 2026 by rpki-client