$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: gF3Q+ksUCp87raZ0iYZxO7PIBBAVZ6eNyN1dYWRC4nc= Subject key identifier: C1:F5:88:20:29:FC:02:47:CA:9F:5D:A8:99:FD:EE:B7:DE:5F:6D:64 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019DCCAAE5A811508EAE4151CCA3934C8F54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0B11 Signing time: Mon 27 Apr 2026 02:00:45 +0000 Manifest this update: Mon 27 Apr 2026 02:00:45 +0000 Manifest next update: Tue 28 Apr 2026 02:00:45 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: 3BiFJRb8C4S2Rb8jurvNA7eCfuKelUvgi6uWet8ls7U=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 8: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 9: S3LSGjrV7uABu8qEE_ahYBI7SkU.roa (hash: X5ME7tz1ZHkzkoANVkGErwtBAD9pTrBBL5KsvqoJ5Yo=) 10: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 11: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 12: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 13: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 14: k4m5uF6d86bKxXryYJZgXjvW8I0.roa (hash: H2jNyKD+HmfBkpz7JaRABFyLsbIlNp19F4CUBAdQu10=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:aa:e5:a8:11:50:8e:ae:41:51:cc:a3:93:4c:8f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Apr 27 02:00:45 2026 GMT Not After : Apr 28 02:00:45 2026 GMT Subject: CN=c1f5882029fc0247ca9f5da899fdeeb7de5f6d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:6d:55:ac:5e:56:d7:b7:bb:ea:e2:0d:c6: 25:4d:e4:1e:fe:a4:da:a3:81:1c:6b:83:11:f1:45: e2:d0:b0:cb:7f:5f:d9:7f:3b:4b:2e:fc:8d:37:61: bd:e8:1e:57:bb:06:8a:bc:7c:1b:c9:0d:2a:6e:e2: 57:61:52:f7:a4:f1:71:17:f6:07:14:3b:70:a9:d9: 3d:88:bb:27:44:8b:a1:3e:96:f5:7a:bc:ff:ef:18: 7d:40:14:91:a1:ee:61:0a:f8:95:e8:3f:69:4e:1b: 57:32:da:fa:28:95:36:ce:a3:5f:a0:07:16:9e:66: a2:d5:0a:f9:b1:d5:b2:c5:93:cd:79:4c:37:28:88: 76:52:97:f8:68:3a:41:61:8d:7a:f8:bd:60:d3:04: 2a:2c:08:f3:4d:d6:23:c5:32:60:44:aa:b3:3b:7f: d4:cc:1a:6f:65:e7:d2:2b:7a:11:55:13:b1:6d:0d: bd:d5:73:ff:1d:54:85:c7:47:4f:e2:e9:36:69:d0: 12:b2:81:70:0f:10:80:9f:1c:d5:24:95:b7:45:07: 94:7c:08:5f:ab:d5:46:e4:37:21:24:b1:b1:f1:05: 89:15:70:b0:48:cf:8b:9f:f5:d9:c3:f3:4a:7b:d1: c6:1d:6f:e8:af:a4:9e:77:63:25:bc:93:cb:9c:b1: 43:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F5:88:20:29:FC:02:47:CA:9F:5D:A8:99:FD:EE:B7:DE:5F:6D:64 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:cf:09:22:29:1a:f4:ba:05:f0:cc:2e:9f:f7:7e:e0:7d:07: 59:bf:7d:46:7c:97:33:ae:7d:5e:0d:0e:73:8c:48:d5:4b:03: 59:64:06:44:39:7a:7c:f8:9a:17:9f:34:a5:d3:3a:8f:46:ab: 90:94:2f:7b:dc:6d:83:fd:40:1e:7b:b2:fd:e7:51:f0:70:66: b3:fc:a6:a5:83:f8:ab:34:28:c2:fc:b6:f2:b3:86:76:09:a7: 53:97:c6:57:53:ff:f4:ce:f6:a9:b9:51:10:53:64:d9:66:72: 39:a2:78:27:8a:31:f7:39:b4:94:ff:8f:3b:d4:bb:a3:34:59: f9:6a:d2:b6:68:a6:c9:11:8e:57:15:f1:16:fd:79:c8:c3:d9: 04:bf:07:94:1a:76:c5:88:23:43:ba:a1:e6:0b:6e:b2:09:a6: ec:41:7c:fe:5c:72:fb:ca:8a:14:d9:0a:ab:6f:0f:fd:41:11: c7:bb:59:ab:a5:ba:6c:d1:4d:e5:7c:02:af:63:ea:d2:fd:b5: 70:47:1a:d0:a5:4a:cb:6a:b1:44:3e:37:3d:00:46:f1:f9:5b: f6:58:27:81:5a:40:ab:83:6b:57:ca:29:48:15:8f:ae:2b:3e: 1f:0e:34:fb:2b:66:e0:cc:ca:14:b9:3b:fe:f3:27:b4:6b:44: 79:d4:ce:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MquWoEVCOrkFRzKOTTI9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwNDI3MDIwMDQ1WhcNMjYwNDI4MDIwMDQ1WjAzMTEwLwYDVQQD EyhjMWY1ODgyMDI5ZmMwMjQ3Y2E5ZjVkYTg5OWZkZWViN2RlNWY2ZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVptVaxeVte3u+riDcYlTeQe/qTa o4Eca4MR8UXi0LDLf1/ZfztLLvyNN2G96B5XuwaKvHwbyQ0qbuJXYVL3pPFxF/YH FDtwqdk9iLsnRIuhPpb1erz/7xh9QBSRoe5hCviV6D9pThtXMtr6KJU2zqNfoAcW nmai1Qr5sdWyxZPNeUw3KIh2Upf4aDpBYY16+L1g0wQqLAjzTdYjxTJgRKqzO3/U zBpvZefSK3oRVROxbQ291XP/HVSFx0dP4uk2adASsoFwDxCAnxzVJJW3RQeUfAhf q9VG5DchJLGx8QWJFXCwSM+Ln/XZw/NKe9HGHW/or6Sed2MlvJPLnLFDkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMH1iCAp/AJHyp9dqJn97rfeX21kMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq88JIika 9LoF8Mwun/d+4H0HWb99RnyXM659Xg0Oc4xI1UsDWWQGRDl6fPiaF580pdM6j0ar kJQve9xtg/1AHnuy/edR8HBms/ympYP4qzQowvy28rOGdgmnU5fGV1P/9M72qblR EFNk2WZyOaJ4J4ox9zm0lP+PO9S7ozRZ+WrStmimyRGOVxXxFv15yMPZBL8HlBp2 xYgjQ7qh5gtusgmm7EF8/lxy+8qKFNkKq28P/UERx7tZq6W6bNFN5XwCr2Pq0v21 cEca0KVKy2qxRD43PQBG8flb9lgngVpAq4NrV8opSBWPris+Hw40+ytm4MzKFLk7 /vMntGtEedTOLQ== -----END CERTIFICATE-----Generated at Mon Apr 27 09:15:55 2026 by rpki-client