$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json) Hash identifier: XnbzHgK4NYDZfmRRY3DnsX87qJy7vpvQduIMJ1T7VEw= Subject key identifier: FD:76:45:50:97:4B:1B:13:5B:63:0D:79:E2:70:02:F8:E0:19:55:56 Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 019D95865DB6CF31752C9E18D01621CD8DA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft Manifest number: 19C7 Signing time: Thu 16 Apr 2026 09:01:44 +0000 Manifest this update: Thu 16 Apr 2026 09:01:44 +0000 Manifest next update: Fri 17 Apr 2026 09:01:44 +0000 Files and hashes: 1: 0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa (hash: NXuZo/nEKglyJiMys1lOF8MOKYcVQUjHhjrhGVTXb8w=) 2: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: diZ+AsGDnzcK57BtavUegzaKWYNTk7cE/XTJIMEjxQw=) 3: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=) 4: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=) 5: RiCeGoLJLFsyXLs4imgog-X_h40.roa (hash: m5IiGNSxjj3YSYsLMUU0YB0kkycBv85oeXqVJ5P7/kM=) 6: X5_OOiiCcGiXKcGALlcB_hscUHs.roa (hash: Qj/ZlInW3VgI1VUQwqxEhpwqlf4BE1RLFh2kkgSMtX4=) 7: _3kzqKok3z7fQDLrnmIfOGBMWpE.roa (hash: vrsV62/+f0qeXZvSNXU86WQluWpB748JDnGujS/D0TU=) 8: e2U74Wo9T3YCzSJFGWJq0ntWGdA.roa (hash: fmX+hMzoHmNWcgJ18DKX0V/ojjbl4PtEDN7WPeMNpVc=) 9: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=) 10: tHjnEW1gSy8LpfV8dtlWNDuRD6o.roa (hash: llNfnwQqKzEi3ZZlgOQcRw22Kzn2aDpgpRDWdbx/s+o=) 11: ycPOYoC5EGigYRPsY5jd06bUctI.roa (hash: 0z4I48mSoM+33E5faSNq5zd4kWbj90tYgYiQSwWbs+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 07:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:95:86:5d:b6:cf:31:75:2c:9e:18:d0:16:21:cd:8d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: Apr 16 09:01:44 2026 GMT Not After : Apr 17 09:01:44 2026 GMT Subject: CN=fd764550974b1b135b630d79e27002f8e0195556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:9d:4a:ff:3f:fa:aa:27:46:2d:cf:34:36: d7:09:17:fe:80:87:e0:ee:91:1d:f8:e4:26:54:6b: 0e:40:87:1d:73:45:53:c3:11:dc:07:0c:d7:c9:55: 3a:f8:2f:53:03:85:46:6b:78:a6:89:6a:bb:5f:38: f1:d1:50:67:93:37:f3:4a:a6:cd:1d:d3:ff:33:31: ff:ce:bf:63:26:4a:71:87:81:4b:3f:5d:85:37:f6: 10:41:41:d8:92:74:3e:fd:55:8a:9d:5f:75:b3:3f: b4:be:a5:62:c3:89:7b:4f:4d:83:4a:9c:cf:c7:7b: 99:6b:37:b2:b1:f2:b1:75:82:42:b1:8f:9d:7d:1e: 12:ed:80:38:95:dc:a0:0d:d6:e9:14:7d:b9:49:74: 55:f3:6f:96:76:42:53:5f:f6:41:b8:4d:82:c6:f1: 2e:05:23:9d:92:41:fb:19:d7:53:d5:da:2d:bf:7f: 4a:17:32:5b:b0:60:8a:b6:56:46:9a:64:4d:e7:63: e1:28:b8:c8:dd:89:db:71:24:55:fb:36:e6:4f:4c: fb:9b:d4:91:12:60:2d:06:fb:b6:16:b2:85:46:2f: 7f:29:45:fa:1e:44:f6:03:7c:b8:dd:b0:74:af:56: 43:4f:7d:84:02:d2:cd:3e:7e:fd:7f:41:21:91:c2: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:76:45:50:97:4B:1B:13:5B:63:0D:79:E2:70:02:F8:E0:19:55:56 X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c2:1b:7b:d9:41:9c:2e:21:57:71:32:9c:22:4a:27:da:bb: 84:23:de:eb:b0:6f:6f:8a:1f:c9:75:f8:6a:33:68:cd:63:b4: 9c:3f:61:94:e8:c8:77:18:96:0e:0f:26:4c:3d:58:cb:50:0a: bb:b9:3c:42:33:88:f4:7d:0b:93:37:b5:95:1e:4f:4e:16:ef: 9a:90:4a:b0:50:11:4a:cc:ad:42:bf:26:35:52:87:01:e3:8e: 9b:a6:91:9a:7b:c3:7d:55:ae:d9:4d:c6:26:dd:45:cc:87:5e: 2f:83:e7:c7:c3:22:8b:c0:25:4c:da:4f:c1:df:04:22:74:b9: b2:c1:e8:20:dd:33:c1:92:1e:25:3f:50:ef:6b:42:5f:62:ff: 36:a9:9c:42:38:d9:cf:1a:35:cb:30:62:8d:75:ad:94:38:70: 8e:7c:04:ed:8b:bf:63:d3:33:bf:14:54:5c:b1:05:65:81:27: a0:e5:27:03:ad:47:3b:09:14:ea:8c:94:de:93:61:f4:4b:e9: 85:81:2c:8b:55:da:f2:b3:e0:1e:0c:86:a1:ea:ba:56:59:8f: 57:54:9b:83:e7:85:36:bf:05:6e:0d:b7:c4:50:4e:28:75:fc: cf:cc:e4:7e:db:4a:95:af:29:9c:80:cf:88:8d:e9:e6:f0:f8: d1:a3:60:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Vhl22zzF1LJ4Y0BYhzY2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjYwNDE2MDkwMTQ0WhcNMjYwNDE3MDkwMTQ0WjAzMTEwLwYDVQQD EyhmZDc2NDU1MDk3NGIxYjEzNWI2MzBkNzllMjcwMDJmOGUwMTk1NTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYidSv8/+qonRi3PNDbXCRf+gIfg 7pEd+OQmVGsOQIcdc0VTwxHcBwzXyVU6+C9TA4VGa3imiWq7Xzjx0VBnkzfzSqbN HdP/MzH/zr9jJkpxh4FLP12FN/YQQUHYknQ+/VWKnV91sz+0vqViw4l7T02DSpzP x3uZazeysfKxdYJCsY+dfR4S7YA4ldygDdbpFH25SXRV82+WdkJTX/ZBuE2CxvEu BSOdkkH7GddT1dotv39KFzJbsGCKtlZGmmRN52PhKLjI3YnbcSRV+zbmT0z7m9SR EmAtBvu2FrKFRi9/KUX6HkT2A3y43bB0r1ZDT32EAtLNPn79f0EhkcKUyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP12RVCXSxsTW2MNeeJwAvjgGVVWMB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcIbe9lB nC4hV3EynCJKJ9q7hCPe67Bvb4ofyXX4ajNozWO0nD9hlOjIdxiWDg8mTD1Yy1AK u7k8QjOI9H0Lkze1lR5PThbvmpBKsFARSsytQr8mNVKHAeOOm6aRmnvDfVWu2U3G Jt1FzIdeL4Pnx8Mii8AlTNpPwd8EInS5ssHoIN0zwZIeJT9Q72tCX2L/NqmcQjjZ zxo1yzBijXWtlDhwjnwE7Yu/Y9MzvxRUXLEFZYEnoOUnA61HOwkU6oyU3pNh9Evp hYEsi1Xa8rPgHgyGoeq6VlmPV1Sbg+eFNr8Fbg23xFBOKHX8z8zkfttKla8pnIDP iI3p5vD40aNgow== -----END CERTIFICATE-----Generated at Thu Apr 16 13:57:44 2026 by rpki-client