$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft File: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft (raw, json) Hash identifier: 8yvdeiiod72ZNUH/uilSWh7RwNWxfZGB/9bQkGqcbcc= Subject key identifier: 78:D9:15:E1:74:03:A2:8C:4D:70:2F:72:4D:5F:10:58:03:C8:83:90 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019DDB0B920609D0DC4B477D19C2B8B84E37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft Manifest number: 1953 Signing time: Wed 29 Apr 2026 21:01:01 +0000 Manifest this update: Wed 29 Apr 2026 21:01:01 +0000 Manifest next update: Thu 30 Apr 2026 21:01:01 +0000 Files and hashes: 1: 0gZfDChuJla6eM1gPCQ2Ns2axdk.roa (hash: dWlp+0ox1WU+4HrOxeX31WBVyLMqro8s5Kw4UmWvewE=) 2: 0zpkCzM_uofHYYZxFIrLXH86TtE.roa (hash: P57GZQJKHIYx63+D4T/Sc8PITT1O1syqnE0cmDkI1T8=) 3: 1-bpjYfxdVazNQDSoAaa3TfudA1c.roa (hash: +6X/Kci0HG6m/ttlyQ2vy8uDrDYFjjlfpRjMd47M2yQ=) 4: 1pTycHFkZhAwSrZcd5K7Gg55kdk.roa (hash: GgY2NMruljSgs07BzEPbVGMZRXcEfdYykwi+o1qRn2A=) 5: 1pWPsnbek_3lH938N5WkJ80jYHc.roa (hash: EIS/p7jxOSLBb0cKFHl7WgvF7bu9sWDdCzUEGa97BPg=) 6: 4byt47T9P5nk3X_gigH5gnqHF-k.roa (hash: Orh4zcSvF8oNjvR/+aqIkRi0Mad/ngDthWaNG9Uv6DM=) 7: 8IKnbz3OJkPQGL7BO-me-gJmGKs.roa (hash: Q+cWn3XILL9QJ/YCPpa3NqTQOMtscjaShmjqUuHfLwo=) 8: A5IKhFWlm11jayw8_7Bk6vj54pc.roa (hash: St8CrEKVhvq334z09p5zU/PvYhkboA1fll1gidQDoio=) 9: DZY0oEXFZsUFERTd8aRhz8EJydk.roa (hash: q0fp6UUPi9LPlZCrwxiMiifAAPc3HpSzd4FOG9KAcNs=) 10: F4NVtkunXAmQFQS2ZL2xSpqi3Gk.roa (hash: /tbUTyFNIIuITC34A226x/NRmgskkK26DecRkd3Y8Mc=) 11: G_0dJMMZRaroJ2Z3dLBl9XuXRzw.roa (hash: URYUvkqk/XK4IJ44I1fl1AgAytEkawgeO1lhTAIXDGg=) 12: GptoT_Z8Sdc2QCFhENJ0lBPqHgY.roa (hash: DL80CPM3GvfVo26n83tvKD2AYozKKWqnmUKy2gaT+nM=) 13: IqDk70cLXy5ctG1rDEeGFfF59jg.roa (hash: vafj7r3xYeztEbvYB8EHkTcY/G9sazYa9VigZ3f0jGc=) 14: KLKORJcf0nBlaG442v6MDYPpypQ.roa (hash: MEcr5qgwhoDueAlfT91o7khXfra7BXM4JSAGiiZA/f4=) 15: MbyV_YhPibyBX57GTcf0FQJ19SE.roa (hash: sJJ1aGsegDet0XWEhyWg+pz1Ah6/tKveF3pfMD4m41o=) 16: NlRpO4QfrUoFSap7HJgncUWaafI.roa (hash: Hr+yM1DjR/Eryc6an+uBXMaDDBYfS7taQVV0uaMskjM=) 17: Ns3wqnW5MkhzNfYLRhneE66Xt-Y.roa (hash: RAVJG9i5xY5vhyZoq0YeZbo3nMc7JfuZxq8CnkvhrrY=) 18: UKefcXbsOX1hzF3bSGdhWpmnR0E.roa (hash: 6q6T2oyQvBATe5oq82tfjs34M6o1q8gnelyGOqhHGH0=) 19: UsjVmYUimm0drsapW-XTKL0zKBQ.roa (hash: HGG+2gAWcfbmDxCC22jqiaTGmzpSWs32GcJL9PTzgBE=) 20: ZAnijWxoJ_XaXw6qLrelIFm9JdQ.roa (hash: nBPCD+P8AtHwZvVmqpZjmDzPNG8dJ4f+i0dszvNJD08=) 21: dh3eaYOdnalq1Gov7Y_kdZkQVNI.roa (hash: SWCTG7i3C9cFiDz/h4XBqtkTdScHKT1nGkWMMAbzE3o=) 22: diMb0Y__C013V5wNRSDTtjcvMdc.roa (hash: 5qAFRLLRdaxy9CFb2JzhXUFWBwIKzfggOPnonYsFMt8=) 23: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl (hash: H2Ti/EsoQefpOUXQBBLO/YQpmfyKU3HdPayh61Nv3MU=) 24: j2ZX7CtuuJWr8wo8L_hboos1j9Y.roa (hash: xTrdO5r4FyPZ5Lba1cWU1gVcTYn2+afX9WbWyOXAb2k=) 25: qWe294Ei1KcP7LLF_E68t8u4v2o.roa (hash: TmWYzb/EBwItjJBOCTUphVA+ws8PNz247snlygTbJKo=) 26: rM1oICqo6l7RlZRpP7ULdNI2wDU.roa (hash: WZkea7EbZi/5SwsW3H2QbBdwsQqtdV8aUvDdiNkrivs=) 27: rZ7Qz2svopAX4PodAVm9_ouRZDw.roa (hash: VobZz1M1Ry36LvfTH1n0hCpUDzs1D/xh2au/fKvVyGk=) 28: tcAHli7McrHurKLlQpupJT4F1Eg.roa (hash: QCSEXnnY7zQrTDErUs9zw834usZizr8yuGt+j2bg9kE=) 29: tjgNOkewXtwMB18fxqlUOfpgfqw.roa (hash: qmgtem7sjQ52nwbafsv8UedM8hBXxgPbXN0VdERw+b4=) 30: wVwRBBKg_qqmE6JkJB31A40WjNE.roa (hash: OA9hvxpthES0XysRM/F/5Ylo/8d1Xr+Owhaboeq5evA=) 31: zOKA7J7Idb84Liu1iKTUjPSRWPg.roa (hash: nUIdBPbvvhQvXK5tc887xKX/fsH+TbqZkp41V9X60uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:db:0b:92:06:09:d0:dc:4b:47:7d:19:c2:b8:b8:4e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Apr 29 21:01:01 2026 GMT Not After : Apr 30 21:01:01 2026 GMT Subject: CN=78d915e17403a28c4d702f724d5f105803c88390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:97:c3:2a:39:86:48:55:bf:3f:53:ae:19: 79:c9:4a:c5:30:2c:9b:8a:61:94:5e:c1:dc:25:3b: 99:da:69:24:aa:59:0b:0a:05:74:f6:54:83:9e:22: f3:6d:32:34:4c:b3:4b:84:8a:cb:2b:c7:58:ee:c7: d8:56:a5:88:4a:9a:1e:9a:7a:38:c7:ab:8b:d0:a7: 2e:01:01:63:5b:4f:68:f2:e7:d3:4d:d6:24:af:62: d9:f7:9d:bb:13:bd:a9:64:60:61:d1:c7:80:e5:ba: de:3d:b2:b3:da:3b:85:49:b5:b2:58:fd:f1:1d:e6: 6c:59:ac:12:c8:45:fb:1d:ea:7f:47:ab:2d:35:84: cc:ec:d2:1c:db:e3:9e:90:4a:39:8f:ac:d1:cd:22: 70:3d:4e:27:17:33:3c:11:a2:10:a3:3a:7a:48:1b: 31:83:31:f3:92:51:b3:a4:a3:eb:49:db:40:4d:74: cd:fa:43:9e:cb:ff:cf:af:0c:07:ac:31:50:a2:da: b2:76:ba:97:13:45:8a:b6:ca:96:73:17:3e:88:0f: a3:95:a3:19:ca:80:42:81:7a:b2:30:4c:ec:b7:b3: 2a:29:6d:65:b9:4e:17:17:31:79:c3:05:09:a8:7d: cd:2e:2a:fd:15:ff:74:12:25:ad:4d:68:33:03:b4: 64:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D9:15:E1:74:03:A2:8C:4D:70:2F:72:4D:5F:10:58:03:C8:83:90 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e5:4a:21:cc:55:6f:35:02:01:3a:af:be:0d:ff:17:e3:e6: 19:08:f4:9a:3e:90:49:8a:03:ae:6d:d9:94:ab:d3:d5:ac:00: 9c:79:e5:e5:39:0a:82:da:06:56:c1:39:dc:5b:5d:62:d2:5f: 5b:24:d8:23:09:5b:55:f6:3a:2b:30:57:73:ad:2b:36:51:04: f4:82:d2:6d:c0:97:af:99:5e:1f:fd:7f:af:9d:ab:c6:2e:b1: bb:88:5d:4f:84:9a:3f:b5:bc:6e:88:24:ff:73:da:70:ff:8f: c5:ed:fd:80:5b:60:fb:6e:67:27:4c:99:59:d6:80:f6:9d:34: 28:9e:7f:4e:4d:9f:dd:28:f9:4b:59:9d:dd:50:ed:fe:1b:a4: e5:ce:c7:f5:2a:7c:80:da:69:55:bc:5d:3f:df:b4:ff:4b:f0: 1a:4e:38:bc:e4:0b:a0:68:61:89:b4:94:4a:96:72:28:ad:ca: 06:98:00:fd:19:b4:45:0d:99:0d:d3:e2:3b:a0:c8:3f:d5:ce: c2:9e:43:de:8b:9e:b1:20:59:ee:87:d2:67:c9:b7:48:7c:d3: a0:e9:c8:de:3e:a9:bc:59:fd:68:d2:b1:0c:d5:6f:68:7b:44: e0:6f:3d:f9:9a:3b:d3:20:a6:47:ef:9e:3c:22:bd:e0:73:77: d1:da:b3:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3bC5IGCdDcS0d9GcK4uE43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwNDI5MjEwMTAxWhcNMjYwNDMwMjEwMTAxWjAzMTEwLwYDVQQD Eyg3OGQ5MTVlMTc0MDNhMjhjNGQ3MDJmNzI0ZDVmMTA1ODAzYzg4MzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrSXwyo5hkhVvz9Trhl5yUrFMCyb imGUXsHcJTuZ2mkkqlkLCgV09lSDniLzbTI0TLNLhIrLK8dY7sfYVqWISpoemno4 x6uL0KcuAQFjW09o8ufTTdYkr2LZ9527E72pZGBh0ceA5brePbKz2juFSbWyWP3x HeZsWawSyEX7Hep/R6stNYTM7NIc2+OekEo5j6zRzSJwPU4nFzM8EaIQozp6SBsx gzHzklGzpKPrSdtATXTN+kOey//PrwwHrDFQotqydrqXE0WKtsqWcxc+iA+jlaMZ yoBCgXqyMEzst7MqKW1luU4XFzF5wwUJqH3NLir9Ff90EiWtTWgzA7RkawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjZFeF0A6KMTXAvck1fEFgDyIOQMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeVKIcxV bzUCATqvvg3/F+PmGQj0mj6QSYoDrm3ZlKvT1awAnHnl5TkKgtoGVsE53FtdYtJf WyTYIwlbVfY6KzBXc60rNlEE9ILSbcCXr5leH/1/r52rxi6xu4hdT4SaP7W8bogk /3PacP+Pxe39gFtg+25nJ0yZWdaA9p00KJ5/Tk2f3Sj5S1md3VDt/huk5c7H9Sp8 gNppVbxdP9+0/0vwGk44vOQLoGhhibSUSpZyKK3KBpgA/Rm0RQ2ZDdPiO6DIP9XO wp5D3ouesSBZ7ofSZ8m3SHzToOnI3j6pvFn9aNKxDNVvaHtE4G89+Zo70yCmR++e PCK94HN30dqzyw== -----END CERTIFICATE-----Generated at Thu Apr 30 01:47:59 2026 by rpki-client