$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft File: dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json) Hash identifier: xAmyGIrDt2R/gAckJj1k+ETQUWWjkIjvOU5KFhizRTk= Subject key identifier: E5:34:C5:FD:B9:AB:98:37:A5:5F:A3:9C:B6:78:C6:D1:8C:CB:1B:10 Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 019DCE9936578A8D5069AC449F464F924D13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft Manifest number: 18F7 Signing time: Mon 27 Apr 2026 11:00:40 +0000 Manifest this update: Mon 27 Apr 2026 11:00:40 +0000 Manifest next update: Tue 28 Apr 2026 11:00:40 +0000 Files and hashes: 1: 0ZCplUocK0t7bDn-aV_dYdEIf1g.roa (hash: PhCo67AThImAAICRbSKmw/MtJm7M6upTm1QEQIqyWmM=) 2: 9CTzlnPFvIq3T_H5OTBDue8Fp_Y.roa (hash: /64m6pcbXCI/USW9luQgRTop6wq7w1tWU4vkxTTIED0=) 3: BJP-H2Zzd42uuQpoquH1ViVfils.roa (hash: s1yM80zJjReddKIgPH7xzxEKOsllacgAFVka287RRRY=) 4: C7OQreXH5XPqxZsAOPw_HJpsGo0.roa (hash: TIki96X5dEnDUKJ64GkJeMNjvAD8ackJDsoMX6jTIHg=) 5: EAUG0_EwykDP_1O4KL8M2iJjHBU.roa (hash: g92r0DDtHmH/Z605Y35/j8NfJLIT8AcNzQSnvqWv/zs=) 6: LiUFUxV8XWhTT5shfLiGfbuAMOw.roa (hash: aRDwRFjTPvq4k8j5/tgsgvtEF8G8MKbtJY2pyhjrrzI=) 7: OJGqgIdJ01gO1owrgbmqcY2GptM.roa (hash: /ZtVL1w4/auWCjNxmR/FovsgC3ZVYneYdjY7NZYxZZc=) 8: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: +WuWrPDVLbSDEOl4YI9z8+9ptqELFXZarLf2Zex7x4o=) 9: fHozs5tMz7kIjrLoS5xjOq0Zfcc.roa (hash: mgxi+ZbD7+yz67tvJMbZDZV/reH5WuncejcL1UkrxoM=) 10: kD04CUjg_MqICR0s9XTXa_0lsjE.roa (hash: GhUHdSAXykY7wB/NoCCZCZI/ZAtHhgLcQXX44IHbUsI=) 11: pUfEfBxJJ0L_zUfIbchL9AjuyKs.roa (hash: qokHZUKiXCUHjKAfZnVejSkgfD1BBB0fdWuxvKIwBrU=) 12: r5srZe-xUm0Yd0akgceKp5wi398.roa (hash: fg/QInXk+zpCLixKR8FC3dEYblIzWioFCagp25roJXU=) 13: rUQ-48pTHXQnGwITDjHNDmYKStU.roa (hash: 5rjqV6UMpYstWovN2+CGxz0WLz8A3h2zK9p4XttXPdQ=) 14: wonfwrKeB1K76TqPsMaqoDKooXU.roa (hash: SEBH6WAA2Az371IGZKWSIV+f6pZndD0Bpz9/N1ofv9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:99:36:57:8a:8d:50:69:ac:44:9f:46:4f:92:4d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Apr 27 11:00:40 2026 GMT Not After : Apr 28 11:00:40 2026 GMT Subject: CN=e534c5fdb9ab9837a55fa39cb678c6d18ccb1b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:5f:fa:6b:91:ad:d4:59:ac:6a:0d:92:a8: af:86:71:3b:55:6a:29:7d:db:89:d2:c4:ae:10:45: 5f:de:17:f6:15:53:10:8b:a0:70:88:a0:16:62:d8: 84:7c:7d:0a:d9:ed:6e:f1:81:9a:69:49:04:2c:3a: 18:6a:9b:6f:f6:31:f4:82:3a:11:8f:9e:bf:8d:cb: c6:e4:4a:be:d8:d9:c6:34:c0:b6:9e:68:34:69:7c: 64:21:33:c6:87:78:f7:7f:be:fc:3b:04:b0:53:a5: 9c:03:38:31:21:ea:64:6e:50:07:f3:07:5b:ad:48: d8:5a:12:47:36:ce:97:8d:d9:5f:fc:ca:eb:65:73: c2:4d:fd:9c:6a:b1:2a:97:3c:e5:99:b6:8f:f4:7e: c6:ca:ef:36:77:96:15:7f:5e:02:e7:57:38:77:48: 60:6c:2d:fc:d3:90:81:01:c7:bb:47:48:0d:ea:48: 89:fa:d3:c4:18:78:37:86:6c:20:70:bc:5f:9e:16: 6b:af:d2:82:60:ee:77:33:2f:2f:d8:68:ac:e7:69: f7:fb:c0:a1:6c:4f:d6:7e:60:77:38:1d:a0:89:b5: a4:58:84:92:2d:4e:7f:fa:94:a5:01:bb:a0:bf:44: 18:71:c2:c3:d7:28:50:fd:cd:43:09:45:8e:4b:30: 90:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:34:C5:FD:B9:AB:98:37:A5:5F:A3:9C:B6:78:C6:D1:8C:CB:1B:10 X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:db:7a:96:5a:5c:f7:0f:37:63:16:57:9a:52:f0:d5:46:a3: 9d:da:95:6c:bb:4a:63:34:c8:3f:1f:7b:2a:71:68:ee:2d:f6: 03:8a:46:fa:d6:2c:e7:8f:52:a4:f5:1f:34:1f:c3:2a:ae:59: 7e:9b:f1:10:bb:02:61:19:77:3f:fc:cc:95:9e:13:96:5f:86: 9e:b9:a2:99:18:6f:ef:81:ab:e9:bb:87:e0:62:89:ca:64:34: 5d:2b:03:41:64:ec:fd:36:26:f1:59:bd:60:54:e4:50:41:50: 20:67:7f:80:e2:db:55:01:40:91:19:f5:94:5a:34:21:03:1c: 59:2d:bf:e9:af:a0:71:b2:6c:16:45:7e:b1:a9:56:fe:5e:3d: 55:b4:da:c2:9c:f7:58:4e:60:29:2d:70:05:46:97:57:89:ec: f0:99:e7:c0:d0:13:6f:99:e7:06:51:83:17:c4:21:3f:8b:20: ec:f5:02:bc:f8:63:0a:09:e0:b7:be:66:a4:e4:84:2a:15:b9: 96:6a:25:95:74:69:3f:02:0c:38:98:7c:fc:6e:22:62:69:b3: 32:1f:35:43:0c:81:34:0d:c5:17:66:9c:8b:cf:10:f2:30:98: c5:76:d8:df:42:fb:17:41:93:87:6b:b4:dd:c0:f7:c4:16:a4: a1:ea:9a:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OmTZXio1QaaxEn0ZPkk0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjYwNDI3MTEwMDQwWhcNMjYwNDI4MTEwMDQwWjAzMTEwLwYDVQQD EyhlNTM0YzVmZGI5YWI5ODM3YTU1ZmEzOWNiNjc4YzZkMThjY2IxYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYJf+muRrdRZrGoNkqivhnE7VWop fduJ0sSuEEVf3hf2FVMQi6BwiKAWYtiEfH0K2e1u8YGaaUkELDoYaptv9jH0gjoR j56/jcvG5Eq+2NnGNMC2nmg0aXxkITPGh3j3f778OwSwU6WcAzgxIepkblAH8wdb rUjYWhJHNs6Xjdlf/MrrZXPCTf2carEqlzzlmbaP9H7Gyu82d5YVf14C51c4d0hg bC3805CBAce7R0gN6kiJ+tPEGHg3hmwgcLxfnhZrr9KCYO53My8v2Gis52n3+8Ch bE/WfmB3OB2gibWkWISSLU5/+pSlAbugv0QYccLD1yhQ/c1DCUWOSzCQeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU0xf25q5g3pV+jnLZ4xtGMyxsQMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydt6llpc 9w83YxZXmlLw1UajndqVbLtKYzTIPx97KnFo7i32A4pG+tYs549SpPUfNB/DKq5Z fpvxELsCYRl3P/zMlZ4Tll+GnrmimRhv74Gr6buH4GKJymQ0XSsDQWTs/TYm8Vm9 YFTkUEFQIGd/gOLbVQFAkRn1lFo0IQMcWS2/6a+gcbJsFkV+salW/l49VbTawpz3 WE5gKS1wBUaXV4ns8JnnwNATb5nnBlGDF8QhP4sg7PUCvPhjCgngt75mpOSEKhW5 lmollXRpPwIMOJh8/G4iYmmzMh81QwyBNA3FF2aci88Q8jCYxXbY30L7F0GTh2u0 3cD3xBakoeqaYg== -----END CERTIFICATE-----Generated at Mon Apr 27 14:31:00 2026 by rpki-client