$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json) Hash identifier: CsgVC+v5rySIjMv96G1B+78+LP7gnvwgD4NofKg4qGo= Subject key identifier: F4:07:B9:C7:CB:8C:35:51:D6:01:48:8D:5A:37:DE:B7:8C:25:73:79 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019DB08F030818AC534F4D0912CDC5EE2CE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft Manifest number: 1655 Signing time: Tue 21 Apr 2026 15:00:55 +0000 Manifest this update: Tue 21 Apr 2026 15:00:55 +0000 Manifest next update: Wed 22 Apr 2026 15:00:55 +0000 Files and hashes: 1: 3UvEih8-gDgZZkcxbDbZU_-xI6E.roa (hash: VuzKrkhER2kIA+fzK85yXqMS//LI0xMOk1j2vnId0Ds=) 2: 5lLrPkobYapeH_YEkj_cgVZiTl4.roa (hash: LA0ccb3eiNozv6xRtPbB9Y5+Y/meBI91YyWfOeIXed4=) 3: 5o5yOlT5KWJLrkgldZ97edML4GU.roa (hash: +3UdFZfWiCIe+RhRbxox53Z+4srFMvwoePbRQm25M3w=) 4: 8ReEJPFMNr7qTteX6qv8unFvcBU.roa (hash: cnOyPdf7KV5827HwqHxHTqoHFSaE73rzQ8nd7uy59YE=) 5: BQ0RNeEd2nooqfArADd8yM6I_Io.roa (hash: ZaT427CaBzYZ0RQvh3ehzT3L35vHp5zYW9kBnpxxtjQ=) 6: EGT7w7ccRY_aHsT2waQrmkTQOg0.roa (hash: G3orlxt1QVzhu0rMV7kl3OzYV++O6Mm3e1uJ14Jtm3Q=) 7: JUsZAIzpUGjx6jJRW74wD5KYdxw.roa (hash: ubfqsLxf7jUqaeE1zzMD7BbyJ0T6FgVrCwi7fEcPsdA=) 8: NSXspG9pQJvmWYLKS70532E0Tr8.roa (hash: MrTONSRvxrXJDrrYRMbIis/UbxqsqX2KcYYn/ZlA2eI=) 9: NpjviyQAS6_HknYxw1olcKmnvXI.roa (hash: VIzxjlCiF2jjE0tWzV91pKiUApwrcpjktcqi5cnltaI=) 10: QovdBxZFYO8Le-cS-a1JwRjgfQk.roa (hash: XGPaVXCFvuqE5pmLKAAz2EcSfvcufVPb2RTZtwJD+x4=) 11: _Okbnr80Rq7ww8R4v3_ggcisub4.roa (hash: /xX2WGNlLNgbJPvCfzjtPTr4JvfPghmXqeSRioLiEAY=) 12: cDJOpXY5IOe_jLTdJ-OS8qr6SvE.roa (hash: 6iAur4FsqXDOBKEZajqm+YOOYdc6UHHVGhnROwWKxXk=) 13: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: DXIJBam07nr3AUvXgBpPJRpYKMbrbrZVliBWFEtsp6I=) 14: qOuuE7ncVWyhAoaRCylJZLvt_Qs.roa (hash: 9Ei/7J8FyQdTzS+N+w6NNcYG9fQPW4NA4XNB1+d11Aw=) 15: tK4p7XOY-9eMCfT41rNfDvMz8ZQ.roa (hash: +PzSpSLby2pKNdEalpx88bV8TrjpZ7AoJpGeiQ6ta/I=) 16: yGCnvxgCyXwx49hD9VXIdTQinr4.roa (hash: R0GWLFctuLdH9pM10rtgW4/R6oZFjcxyRhEiFyXt+X0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 14:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b0:8f:03:08:18:ac:53:4f:4d:09:12:cd:c5:ee:2c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Apr 21 15:00:55 2026 GMT Not After : Apr 22 15:00:55 2026 GMT Subject: CN=f407b9c7cb8c3551d601488d5a37deb78c257379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:be:13:cb:87:5b:18:c0:b9:07:99:89:88: 82:f3:d5:5f:07:07:a4:0b:ee:76:eb:2e:02:86:30: 22:c7:70:70:58:8a:c8:a6:1a:6b:65:2a:21:bd:31: d3:63:a5:62:4d:99:9d:60:77:be:5c:82:15:3b:c2: 29:7f:26:75:53:89:12:54:59:c2:aa:4c:4b:ea:02: a0:d0:10:c6:2c:d6:89:43:a7:54:07:e8:d0:26:ba: f3:66:e1:03:89:68:c4:c9:df:15:54:4c:cc:e8:8b: c6:3f:88:78:10:db:51:04:40:05:b3:83:0e:0e:90: 58:5b:ed:9b:db:cd:80:bf:4f:71:fb:cf:11:f9:e1: 33:c6:5e:56:4f:b3:4a:da:67:d1:79:49:9e:95:db: 62:6f:f8:45:52:0c:be:a2:cb:c2:6e:5c:01:67:b2: 94:29:53:08:1e:f3:08:97:5f:35:80:52:63:ea:aa: 06:9c:7a:6f:47:77:33:0b:f4:e5:86:38:dd:d2:8f: 12:6f:3e:9a:79:1a:1d:8a:6a:0a:37:38:0f:31:ff: 8d:84:45:82:16:74:33:8b:1e:9f:b8:a8:b2:40:30: 21:30:92:a7:5d:76:7a:2e:28:74:bf:81:51:c1:68: d8:56:75:9e:24:e4:88:eb:74:40:94:b3:b5:a4:e8: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:07:B9:C7:CB:8C:35:51:D6:01:48:8D:5A:37:DE:B7:8C:25:73:79 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3d:64:14:05:77:9f:ae:1a:71:17:af:8e:94:55:9d:12:55: 78:09:71:14:0e:07:3a:73:53:05:13:fd:e0:25:56:d5:52:62: 92:73:48:20:48:fa:ea:88:ac:c2:27:39:93:cc:35:7c:49:e0: f2:49:82:d1:3a:32:02:56:4d:e5:8f:95:8d:1b:9d:4e:93:76: 80:a9:d1:03:4a:46:34:41:98:ec:cb:cf:3f:fa:95:9a:17:50: 4a:0c:7d:f8:c9:67:09:f3:51:83:99:5c:6d:f4:64:c8:67:39: 80:7c:e8:a1:f7:08:38:37:d1:be:fa:97:37:4e:a0:db:10:69: 4b:0a:87:1f:61:56:a6:fd:f4:bc:4f:be:78:cf:1a:e9:d7:6f: d6:b4:81:65:c5:1c:d4:c2:82:3f:7b:a8:8d:72:6c:3f:f3:34: 8b:87:54:b5:32:d2:26:de:7e:45:d8:37:ab:7a:b8:d2:ed:06: 19:a2:61:49:7e:24:72:f8:5b:6a:39:f2:97:63:ab:34:9d:7a: d2:46:5e:41:31:a4:2c:d3:c0:f4:5e:79:47:62:d4:5f:1a:2e: e9:5c:90:ee:ce:a4:3e:f3:19:af:23:35:2e:4a:97:1b:68:d3: ee:33:86:f2:bb:91:3e:fc:47:89:3d:25:e6:ee:f3:b2:29:7b: f7:56:7c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2wjwMIGKxTT00JEs3F7izoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwNDIxMTUwMDU1WhcNMjYwNDIyMTUwMDU1WjAzMTEwLwYDVQQD EyhmNDA3YjljN2NiOGMzNTUxZDYwMTQ4OGQ1YTM3ZGViNzhjMjU3Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKi+E8uHWxjAuQeZiYiC89VfBwek C+526y4ChjAix3BwWIrIphprZSohvTHTY6ViTZmdYHe+XIIVO8IpfyZ1U4kSVFnC qkxL6gKg0BDGLNaJQ6dUB+jQJrrzZuEDiWjEyd8VVEzM6IvGP4h4ENtRBEAFs4MO DpBYW+2b282Av09x+88R+eEzxl5WT7NK2mfReUmeldtib/hFUgy+osvCblwBZ7KU KVMIHvMIl181gFJj6qoGnHpvR3czC/Tlhjjd0o8Sbz6aeRodimoKNzgPMf+NhEWC FnQzix6fuKiyQDAhMJKnXXZ6Lih0v4FRwWjYVnWeJOSI63RAlLO1pOg8XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQHucfLjDVR1gFIjVo33reMJXN5MB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMj1kFAV3 n64acRevjpRVnRJVeAlxFA4HOnNTBRP94CVW1VJiknNIIEj66oiswic5k8w1fEng 8kmC0ToyAlZN5Y+VjRudTpN2gKnRA0pGNEGY7MvPP/qVmhdQSgx9+MlnCfNRg5lc bfRkyGc5gHzoofcIODfRvvqXN06g2xBpSwqHH2FWpv30vE++eM8a6ddv1rSBZcUc 1MKCP3uojXJsP/M0i4dUtTLSJt5+Rdg3q3q40u0GGaJhSX4kcvhbajnyl2OrNJ16 0kZeQTGkLNPA9F55R2LUXxou6VyQ7s6kPvMZryM1LkqXG2jT7jOG8ruRPvxHiT0l 5u7zsil791Z8qA== -----END CERTIFICATE-----Generated at Tue Apr 21 18:01:47 2026 by rpki-client