$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: Bp45xpVaSb+zNUoTpOhCMN9qXSzWjpDR1gI7pNWE578= Subject key identifier: 88:76:C8:BF:65:83:C3:37:04:01:05:AC:7D:68:58:6E:3D:A3:8A:32 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019DD91DE377324546F13F70B9D7E149D70E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0FA6 Signing time: Wed 29 Apr 2026 12:01:47 +0000 Manifest this update: Wed 29 Apr 2026 12:01:47 +0000 Manifest next update: Thu 30 Apr 2026 12:01:47 +0000 Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=) 2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=) 3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=) 4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=) 5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=) 6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=) 7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=) 8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: GHhwL5PmULoObNGmyvV1bt6OCFHkngQM7bo/+abc8XA=) 9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=) 10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=) 11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=) 12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 12:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d9:1d:e3:77:32:45:46:f1:3f:70:b9:d7:e1:49:d7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Apr 29 12:01:47 2026 GMT Not After : Apr 30 12:01:47 2026 GMT Subject: CN=8876c8bf6583c337040105ac7d68586e3da38a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:48:fb:22:79:d4:dc:fc:14:1f:36:61:44: 42:d2:e5:66:20:dd:45:09:51:4a:69:68:1a:1b:88: 4a:1b:c7:5d:99:b5:16:e4:21:d9:1c:36:56:c0:87: 70:42:e2:c1:04:0f:8f:8d:6e:99:fa:1b:c9:22:51: ce:3b:ca:e9:3d:6f:14:9b:91:69:8e:3d:85:3c:1b: b4:fa:e6:55:5a:38:52:24:f7:d3:a4:ba:62:ef:1b: eb:5a:62:81:13:41:a2:6e:fc:73:62:0d:9f:68:08: 86:27:82:f6:2b:9e:58:51:d0:08:6e:73:3f:78:b3: 5e:e9:a8:4e:fc:6d:8c:25:3f:e0:61:d6:f1:8e:40: 89:47:c1:b8:58:fc:6a:b4:fa:48:be:e9:14:c4:cf: a7:a5:05:c9:0e:45:3d:51:76:d5:5b:43:83:69:67: 87:9f:d8:4c:b9:47:f8:84:0e:43:14:42:3f:bf:fc: e2:5e:c2:b1:73:29:2c:cd:8a:cf:16:2d:4d:cf:74: 68:1d:28:70:30:e9:9d:2b:da:83:3e:18:09:d5:12: d2:40:64:b7:a0:d4:f3:6f:89:8e:77:6e:3b:d1:d2: c3:5a:38:11:fd:6e:86:ef:78:1f:04:ef:e3:de:f8: a9:3b:db:74:3a:8b:24:7c:ee:c1:76:b1:76:cb:e3: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:76:C8:BF:65:83:C3:37:04:01:05:AC:7D:68:58:6E:3D:A3:8A:32 X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e5:23:5c:c0:78:04:74:db:59:04:4c:ab:6f:a9:09:55:bb: 46:48:db:66:ad:33:5e:fb:3e:6d:c5:43:13:6d:13:95:11:5c: dd:ca:58:ad:21:e0:ea:4d:57:5c:c4:5a:d2:85:e5:51:f5:7f: 95:d5:46:3e:17:36:e3:da:3f:63:87:97:f4:f2:9a:d6:12:94: c7:f8:ca:71:bb:f6:76:75:91:4b:7e:81:86:dd:e7:bf:a1:cb: 08:90:b7:f4:f2:11:b4:bb:56:fe:72:7f:2b:57:13:bd:3b:ee: 3f:ae:7c:d6:d0:09:cd:a7:2a:e8:d5:10:21:32:b2:ea:0c:ee: c2:68:87:25:b6:84:d0:93:e1:b3:d0:4d:76:a0:e1:90:37:6c: 10:ea:7f:58:2e:7f:7f:46:69:54:81:87:d5:68:56:9b:d8:d3: 39:48:6d:b2:e6:99:94:88:15:36:21:5d:73:6d:6a:f2:b0:7c: a8:01:0c:68:0a:30:ae:fe:bf:5f:cc:c7:ea:c2:e1:9a:94:d7: 2e:9f:4b:38:0c:f5:24:94:c1:26:a5:f4:4e:8b:ff:62:03:19: 0e:21:ef:f3:f9:7c:3e:0f:7f:39:f9:ae:cd:3d:c1:6e:80:c3: f4:14:d8:f1:96:2b:ec:af:b9:39:30:91:5c:c2:32:03:b5:f2: fa:ce:14:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3ZHeN3MkVG8T9wudfhSdcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwNDI5MTIwMTQ3WhcNMjYwNDMwMTIwMTQ3WjAzMTEwLwYDVQQD Eyg4ODc2YzhiZjY1ODNjMzM3MDQwMTA1YWM3ZDY4NTg2ZTNkYTM4YTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+pI+yJ51Nz8FB82YURC0uVmIN1F CVFKaWgaG4hKG8ddmbUW5CHZHDZWwIdwQuLBBA+PjW6Z+hvJIlHOO8rpPW8Um5Fp jj2FPBu0+uZVWjhSJPfTpLpi7xvrWmKBE0GibvxzYg2faAiGJ4L2K55YUdAIbnM/ eLNe6ahO/G2MJT/gYdbxjkCJR8G4WPxqtPpIvukUxM+npQXJDkU9UXbVW0ODaWeH n9hMuUf4hA5DFEI/v/ziXsKxcykszYrPFi1Nz3RoHShwMOmdK9qDPhgJ1RLSQGS3 oNTzb4mOd2470dLDWjgR/W6G73gfBO/j3vipO9t0OoskfO7BdrF2y+PrVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIh2yL9lg8M3BAEFrH1oWG49o4oyMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeUjXMB4 BHTbWQRMq2+pCVW7RkjbZq0zXvs+bcVDE20TlRFc3cpYrSHg6k1XXMRa0oXlUfV/ ldVGPhc249o/Y4eX9PKa1hKUx/jKcbv2dnWRS36Bht3nv6HLCJC39PIRtLtW/nJ/ K1cTvTvuP6581tAJzacq6NUQITKy6gzuwmiHJbaE0JPhs9BNdqDhkDdsEOp/WC5/ f0ZpVIGH1WhWm9jTOUhtsuaZlIgVNiFdc21q8rB8qAEMaAowrv6/X8zH6sLhmpTX Lp9LOAz1JJTBJqX0Tov/YgMZDiHv8/l8Pg9/OfmuzT3BboDD9BTY8ZYr7K+5OTCR XMIyA7Xy+s4UxQ== -----END CERTIFICATE-----Generated at Wed Apr 29 19:47:35 2026 by rpki-client