$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json) Hash identifier: o51IBv3nPidyQlkjcalZBKn+a+tsE/f+pWk7NrBEpDg= Subject key identifier: DE:26:31:9C:17:BE:BB:D9:44:B1:F3:AE:BA:D7:D7:B1:2F:1B:FB:88 Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019DDD9F23AFCFBAC91AD46E9F2D3821366A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft Manifest number: 190D Signing time: Thu 30 Apr 2026 09:01:27 +0000 Manifest this update: Thu 30 Apr 2026 09:01:27 +0000 Manifest next update: Fri 01 May 2026 09:01:27 +0000 Files and hashes: 1: 1-V2f5BIvAjoxWtMfXiOEdpxut6E.roa (hash: D7oyZz1oHRszroBqObV23g+p70gyyYzI6HwkfnsCOpU=) 2: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: GIsREoNfKzDCLkqLLLJjLsVJ/ry4otGii4OQWDnZxKI=) 3: 7hi7Ah4iY_QQeOlVJayptAGSNSQ.roa (hash: 91eReMLkF+2CXAAIZp2KhXfLlZYAztOnwmcmPnVUzXo=) 4: 9R90z_RXFkZAiwMA8btLrqNKc5k.roa (hash: qB3OSrsx3CWWt5hbnFdtOpLb0xWqshoihPM7A2OR0ZI=) 5: 9cn7oO0iiJOK2Jrlawx7PDY1feo.roa (hash: j5TG1qDIuGwfkqIJMBOyK7GFpL9NpA8P1Hsl6lon4S8=) 6: JDTZDW6AYWQ-yj7N5Zoenz19vXY.roa (hash: aJ6VAzk0xVWZ+1DH33f1NLSDcnI/7+vJFB3jbl7CnPc=) 7: QaR40Du4QHojtPoMdpOj--q01WU.roa (hash: eIGnLm0U97IrEJBoUThT3XNpPhCvMXo7GasLn6DQpoQ=) 8: _iw4-UbxRcpMoWsfFn6G2aiGN-s.roa (hash: 2naXiACb6/BywUEITZo6HGPyiSxLs5Zs4g1/62TMQcU=) 9: burJ78lKaBi9GwpclBHxJ1tt3J8.roa (hash: 7zKgA0U3yskpNhBj2DmX/6y6Luj79ABkwPUXMuxefqU=) 10: h2gp67O50OZSa1oqQZXjN2SNpx4.roa (hash: Pa+pjoEKIMF2XBf3tbxUYkCZYzHfL5nJuwgyvpsFLdw=) 11: mtubXUlBQXjcnE7fuf616NzQiL8.roa (hash: ZPi+7TMbUx5kPi5sDdlZQektqLQyg5jCkWs9e2Cya6g=) 12: sLcjP0MexoJKRfJdT7_XekWEx5g.roa (hash: 81Gv1gjQe+8o8rD8eLhttbKdZxs2A/IOu9hlnmcGBtM=) 13: tEVXcAqmFhkbtGLmUdbLn_80yig.roa (hash: 9MErMfs8Nn0borG1HaQK08aY1yTDK65zdP9huz/FJ9g=) 14: wFIC1mkSpA0e2UovbVVh_Scnn38.roa (hash: gvnZu9oBw0R11C5ZwnQeTQrVmEIlj6ltv4xIOtBZ5cQ=) 15: wbkCFCpGOAFv3gQa4dX5dSBrtR8.roa (hash: nYzqM3na5q/wwfaIOmk+FxvcOctc4P9IAUI7PFRpl7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:dd:9f:23:af:cf:ba:c9:1a:d4:6e:9f:2d:38:21:36:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Apr 30 09:01:27 2026 GMT Not After : May 1 09:01:27 2026 GMT Subject: CN=de26319c17bebbd944b1f3aebad7d7b12f1bfb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:b0:cc:0b:a3:58:9e:e5:25:4a:24:e7:1e: 30:b9:57:6b:36:30:6c:87:f3:9e:e5:48:42:8a:18: 2e:d2:fe:bb:0a:45:41:c1:28:12:57:42:72:07:ec: 3e:50:06:04:14:29:ba:fd:28:db:cf:f2:65:f1:a4: 92:db:4a:a1:7d:15:66:a3:2d:a6:61:ad:51:3f:73: 76:9e:53:95:2a:21:25:4f:3a:b3:61:43:25:03:a4: f2:3a:6b:0f:04:92:51:01:b4:70:f8:32:5d:f8:f7: 3d:b9:7f:11:d3:49:9b:80:c6:ee:74:c6:e2:04:87: b5:33:78:a6:5f:bf:db:c8:09:63:0e:d3:47:2c:aa: 28:85:35:3b:5c:da:9c:05:74:1b:02:c2:22:6f:9c: a0:a4:89:c0:d6:4d:a0:07:79:1c:53:0c:12:5f:56: 79:fc:4f:d0:5a:31:d9:a5:4a:c9:36:6c:52:db:8a: cf:47:47:22:60:50:1f:8b:f7:2f:ca:aa:13:19:f8: 53:f3:72:c8:70:da:3f:9f:ca:83:dc:9a:a6:4e:af: 61:5f:79:33:2e:b5:14:d0:3d:2b:cf:7d:52:f4:19: 5f:8b:46:ff:e9:22:ca:ce:47:b6:87:14:d3:49:69: 6b:5c:86:1f:aa:f3:bc:e1:be:87:34:f7:ca:4a:d3: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:26:31:9C:17:BE:BB:D9:44:B1:F3:AE:BA:D7:D7:B1:2F:1B:FB:88 X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a4:af:f1:1f:a3:68:2d:9c:95:1c:58:e2:66:61:0a:fa:80: da:99:2f:e9:42:7f:4e:94:71:db:b7:a7:54:a2:9b:f5:9f:d4: 9d:be:29:13:c3:ec:a1:10:62:ab:54:74:84:52:14:7f:69:5a: 40:1c:a3:e2:e3:0a:8f:d5:99:71:51:a1:eb:3b:5c:fe:d9:60: 05:1a:c6:ca:6f:7d:79:57:69:37:b0:5e:1c:e1:86:fb:1b:29: 51:2e:96:ca:2d:58:f7:b0:d1:bc:1b:35:7a:8f:43:8a:c3:57: 10:4f:1d:5d:87:44:90:bc:9c:4c:e3:5b:c8:44:aa:17:8f:57: 1a:37:73:42:36:93:9c:1e:b8:97:a9:a2:fe:1e:70:cf:05:51: 98:8d:f9:c2:cb:4f:df:5c:5a:ee:57:be:e7:53:f7:10:c7:ca: 73:32:ce:65:9d:2d:f7:71:f7:ef:4b:5a:12:01:21:f7:d0:19: e4:90:18:c2:8a:9b:12:a8:4d:7d:c5:51:0f:7e:08:be:6e:bf: 6d:bc:9d:75:bf:9f:76:ae:2c:bd:a3:00:9a:ca:10:40:3d:04: 8b:a5:de:35:d2:00:e6:d7:82:14:76:45:95:dd:ff:59:ca:b8: 75:19:88:f3:07:c4:ee:f4:a9:3c:b0:7b:51:1b:ce:7e:05:04: 98:63:cd:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3dnyOvz7rJGtRuny04ITZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjYwNDMwMDkwMTI3WhcNMjYwNTAxMDkwMTI3WjAzMTEwLwYDVQQD EyhkZTI2MzE5YzE3YmViYmQ5NDRiMWYzYWViYWQ3ZDdiMTJmMWJmYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFuwzAujWJ7lJUok5x4wuVdrNjBs h/Oe5UhCihgu0v67CkVBwSgSV0JyB+w+UAYEFCm6/Sjbz/Jl8aSS20qhfRVmoy2m Ya1RP3N2nlOVKiElTzqzYUMlA6TyOmsPBJJRAbRw+DJd+Pc9uX8R00mbgMbudMbi BIe1M3imX7/byAljDtNHLKoohTU7XNqcBXQbAsIib5ygpInA1k2gB3kcUwwSX1Z5 /E/QWjHZpUrJNmxS24rPR0ciYFAfi/cvyqoTGfhT83LIcNo/n8qD3JqmTq9hX3kz LrUU0D0rz31S9Blfi0b/6SLKzke2hxTTSWlrXIYfqvO84b6HNPfKStNBDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4mMZwXvrvZRLHzrrrX17EvG/uIMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKSv8R+j aC2clRxY4mZhCvqA2pkv6UJ/TpRx27enVKKb9Z/Unb4pE8PsoRBiq1R0hFIUf2la QByj4uMKj9WZcVGh6ztc/tlgBRrGym99eVdpN7BeHOGG+xspUS6Wyi1Y97DRvBs1 eo9DisNXEE8dXYdEkLycTONbyESqF49XGjdzQjaTnB64l6mi/h5wzwVRmI35wstP 31xa7le+51P3EMfKczLOZZ0t93H370taEgEh99AZ5JAYwoqbEqhNfcVRD34Ivm6/ bbyddb+fdq4svaMAmsoQQD0Ei6XeNdIA5teCFHZFld3/Wcq4dRmI8wfE7vSpPLB7 URvOfgUEmGPNOQ== -----END CERTIFICATE-----Generated at Thu Apr 30 13:47:44 2026 by rpki-client