$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: vfOIt5qVFcsTTVZYw/m1xZR5pBu0PJI70Rcf2lDhwpw= Subject key identifier: BC:89:19:C3:81:88:CC:3F:AD:87:11:4A:C9:BE:98:06:BC:3D:54:4C Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019DDCF9E5E6134914DF98EDDEFD3254A18A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 18F3 Signing time: Thu 30 Apr 2026 06:00:57 +0000 Manifest this update: Thu 30 Apr 2026 06:00:57 +0000 Manifest next update: Fri 01 May 2026 06:00:57 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 6: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 7: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: 0R8hpX4ZUJZTOmhCot8lnTzMK1GSupHu7AB44WSS9gg=) 8: cYY9JWownI4dxUC113BsmeB-bPg.asa (hash: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4=) 9: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 10: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 11: iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (hash: Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=) 12: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (hash: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE=) 13: z8lBi3aAEOzIA4rjFoQW2NBYnGI.roa (hash: WkLdmUjUmDG0OM0nogJaG3cgrVGCp28qMqMnj28ytDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:dc:f9:e5:e6:13:49:14:df:98:ed:de:fd:32:54:a1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Apr 30 06:00:57 2026 GMT Not After : May 1 06:00:57 2026 GMT Subject: CN=bc8919c38188cc3fad87114ac9be9806bc3d544c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:5e:82:70:aa:f6:ec:6d:12:c4:85:60:f1: 49:5c:fb:b4:32:1c:a2:ce:df:db:a0:af:0c:da:b6: 55:30:98:a1:be:bd:98:e4:3a:40:f2:b3:df:45:75: 95:61:63:66:85:3e:05:a1:58:2e:44:1c:c9:7a:ec: c1:a5:b0:e8:40:ae:1f:04:4d:b6:17:b7:de:51:8a: d1:4f:bb:ec:03:79:49:fe:d8:b0:61:89:e2:1a:b7: 01:ae:e5:47:02:db:03:f1:5f:51:8b:74:11:af:68: cb:b3:97:8f:30:4c:7b:fc:e8:d2:8e:dd:ca:f3:e6: a0:9d:95:fd:61:48:a3:86:ad:cd:28:ae:a9:6d:af: d8:6f:6e:e0:ae:64:70:0e:ac:3f:f1:4d:e8:c8:ed: bf:73:12:07:6e:c1:41:ed:6d:05:52:97:12:cb:3e: 84:9d:64:0d:0b:a5:22:7c:ef:c2:ae:b5:96:66:ca: 1c:f6:46:f7:f9:82:2e:ad:7b:00:81:be:85:f1:3d: 73:d8:8b:42:00:22:ac:f0:12:4b:88:1a:52:e7:93: d6:57:6d:63:eb:09:71:77:b4:69:bf:8f:c5:17:97: c7:72:a9:fe:4a:ab:44:a7:40:62:10:b4:32:38:62: 64:5b:92:ad:7e:3b:50:b9:61:66:d1:44:69:c3:78: 5a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:89:19:C3:81:88:CC:3F:AD:87:11:4A:C9:BE:98:06:BC:3D:54:4C X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:12:4d:6f:48:c3:e9:2d:6f:a3:9c:de:d4:c9:17:e4:a7:52: 71:25:ca:8a:a2:ac:2c:ea:e5:a6:77:dc:2f:c2:e5:35:6e:71: 50:fc:78:6d:e6:97:13:a8:a0:f0:3f:54:37:b9:18:fa:78:c5: 8c:4e:ce:35:ce:cb:3c:43:83:26:08:fa:e4:15:8a:45:ee:db: ba:a8:06:aa:92:c6:38:65:fc:1e:bd:4f:bb:d1:34:ed:f3:0e: 49:72:0a:ae:6a:d2:67:c3:e8:e7:00:01:ee:58:37:3f:7f:d7: e9:0c:8c:ec:47:49:0f:f2:4f:b1:c0:a2:6b:b8:ed:0c:18:75: 6f:b1:b4:e1:1d:e3:7d:f0:81:54:b7:c5:a8:55:7b:10:d2:7c: 4d:1f:b8:92:cc:12:f2:1c:28:75:67:55:c1:9b:96:aa:60:df: 31:55:9f:18:2a:eb:da:a0:ff:f5:ad:7a:9a:8c:5a:0c:cb:65: f5:b9:c3:1e:d5:77:05:62:f1:2e:66:01:52:a3:85:0c:07:25: e3:89:cc:88:5f:b9:1d:c5:d3:bb:03:98:31:d3:4e:f4:0f:c4: 11:68:5d:e0:83:f6:99:67:f8:0f:2b:39:40:bf:09:fd:06:94: 28:c8:d9:32:3f:f8:4a:eb:08:d9:9f:23:41:2e:f1:19:82:c1: 41:f7:51:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3c+eXmE0kU35jt3v0yVKGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwNDMwMDYwMDU3WhcNMjYwNTAxMDYwMDU3WjAzMTEwLwYDVQQD EyhiYzg5MTljMzgxODhjYzNmYWQ4NzExNGFjOWJlOTgwNmJjM2Q1NDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X9egnCq9uxtEsSFYPFJXPu0Mhyi zt/boK8M2rZVMJihvr2Y5DpA8rPfRXWVYWNmhT4FoVguRBzJeuzBpbDoQK4fBE22 F7feUYrRT7vsA3lJ/tiwYYniGrcBruVHAtsD8V9Ri3QRr2jLs5ePMEx7/OjSjt3K 8+agnZX9YUijhq3NKK6pba/Yb27grmRwDqw/8U3oyO2/cxIHbsFB7W0FUpcSyz6E nWQNC6UifO/CrrWWZsoc9kb3+YIurXsAgb6F8T1z2ItCACKs8BJLiBpS55PWV21j 6wlxd7Rpv4/FF5fHcqn+SqtEp0BiELQyOGJkW5KtfjtQuWFm0URpw3hacwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyJGcOBiMw/rYcRSsm+mAa8PVRMMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhJNb0jD 6S1vo5ze1MkX5KdScSXKiqKsLOrlpnfcL8LlNW5xUPx4beaXE6ig8D9UN7kY+njF jE7ONc7LPEODJgj65BWKRe7buqgGqpLGOGX8Hr1Pu9E07fMOSXIKrmrSZ8Po5wAB 7lg3P3/X6QyM7EdJD/JPscCia7jtDBh1b7G04R3jffCBVLfFqFV7ENJ8TR+4kswS 8hwodWdVwZuWqmDfMVWfGCrr2qD/9a16moxaDMtl9bnDHtV3BWLxLmYBUqOFDAcl 44nMiF+5HcXTuwOYMdNO9A/EEWhd4IP2mWf4Dys5QL8J/QaUKMjZMj/4SusI2Z8j QS7xGYLBQfdROA== -----END CERTIFICATE-----Generated at Thu Apr 30 12:51:42 2026 by rpki-client