$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: GW0OO0SlEUrcczxWCWLbblD1NFWjPZD8nVV628w7EnY= Subject key identifier: DA:F3:88:07:B7:14:A0:34:7D:58:92:10:2C:4D:F9:D2:04:10:66:7F Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019DA83064FAF68D7A081CBA124966DFA696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 18EC Signing time: Mon 20 Apr 2026 00:00:36 +0000 Manifest this update: Mon 20 Apr 2026 00:00:36 +0000 Manifest next update: Tue 21 Apr 2026 00:00:36 +0000 Files and hashes: 1: 6gnkz6OkX6AmjbUFly1wXQMc5Hc.roa (hash: m39tlNEbvl+KvzNcowhejD0YaetaJPWZmQdZ2mQ/k74=) 2: 9mLGCobs8b6fmlZ1T_zH5qZCHLA.roa (hash: xIWAnWYQk4WbKTNaRD60lnYQAHj9+bf9KBsYFY72scI=) 3: EQZgk_3J5Fyc0bcuLI3Yx--EMu8.roa (hash: aY4YMscFsgJkzrPMKTCHKvSIl1+/sZmyY9rhoC43z2o=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: peKlj4ntWdFToKTPFjCXlDnZhgH22ndWTexQeqidr8E=) 5: FKnKoarmmi6ha7YNrynCE7-GlPM.roa (hash: oKaYSJE4mcvvEbQGIWsb5jJI9dhGriaheyAzBdZoE4M=) 6: NOfTkKQFl3ruOsCGzSg45VC6KLA.roa (hash: WoHHZtSZ2RRzNCMrx4Mo4OnnRJ/xg4jH+vJaSGSMeKQ=) 7: OYOS-7oCt8qB-IolnQtbLO6mNJs.roa (hash: chuIv7V7D8ZTIYroROKzsMh/sfUH1MBxL7TmjhgmwAY=) 8: U0jBWIMSXFd0rjWu9nHmYpEjlxY.roa (hash: 8pB3kCXDYDvqkBMxSrDg6IY/CrYSzIC1l2BK7MAfP6k=) 9: gbXhR2uRK-RKCAkCyIxBQwTU87w.roa (hash: XhuCXdBrzSTullx7dBLgYNOs79sf2A0V1FhHe7MzJH8=) 10: hvYamUzrt8l5XxKg3jQF1nquOy8.roa (hash: xNuK7FrZEwKLbPgJUKdky1f1LSPyUxxPzAOoMN9Fs90=) 11: i6gcioIk1jIxZGNq2Keg8xOkBWg.roa (hash: EYNfjU+Znmdq/oFfOoZVDk/plRE4M9DNa/cL2woqZVo=) 12: kZ63SuCSKudhTtGH6_pJGkWdSXM.roa (hash: OQrqf7NPIuBzSyIJdM7aU9Y2d/U+DEvBIbGAvAZyp2o=) 13: nQVtLPwM7Gp6ZCLT9srWcE_wr_U.roa (hash: cKQn/pyHXQYWuoLIUTT0+l/rc5/mbfiSHrwT1Q5Iikw=) 14: t-oE4oy_z3AHnCC0k6oEiP8UMXs.roa (hash: 3g70luAd5CMmu8cTIqcXY5Mx4qPSObAMdcIqmAZokIg=) 15: vCblwnfnVDcB7QAInr9wO3fWjIk.roa (hash: d2afxpid86oKujS9MPLVfD/AYLN6Tg4NNXIDg5DemP0=) 16: wYpMc3njcI8aYZhP5Vx0YCvhxuE.roa (hash: VGQsQDGB5RifV/TxzkNx5BkHOcVUKguaU5IZPPqP/2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a8:30:64:fa:f6:8d:7a:08:1c:ba:12:49:66:df:a6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Apr 20 00:00:36 2026 GMT Not After : Apr 21 00:00:36 2026 GMT Subject: CN=daf38807b714a0347d5892102c4df9d20410667f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:2e:11:da:1b:4b:1d:bc:c7:19:07:68:fb: d2:ba:cc:c0:cb:38:d4:8d:1c:d2:3b:43:a5:b4:13: 3c:a4:4e:08:10:67:9d:b9:e5:4f:e5:12:5e:56:28: a1:ee:bd:f9:fe:46:8f:7c:ae:0e:7e:54:9c:ed:00: 35:ac:de:08:5a:cc:d5:d3:42:c3:af:6c:bd:f1:fb: 3f:07:de:96:74:21:58:33:7d:06:75:14:43:3c:bf: 18:67:6a:a4:73:f1:ec:5e:66:54:5e:28:36:30:dc: f7:74:c9:0c:7f:39:bd:50:b0:d9:f7:da:b4:c9:b2: f9:81:16:f7:0b:0a:50:39:9e:3b:81:72:f4:5f:67: 07:f9:5c:41:ac:1d:11:12:3c:7b:cb:12:82:d5:07: 13:f4:27:52:02:2f:04:ad:aa:f2:90:59:2a:a0:91: a1:36:a5:60:06:4b:c3:cc:0b:5a:08:29:ae:c6:5a: be:6b:7d:2a:f8:62:10:97:7e:d7:20:9f:01:ad:8c: 16:ef:ce:1e:96:d2:f5:f6:62:fe:2d:a2:fa:c2:25: 8f:43:4f:bb:2e:6e:a8:a8:28:63:17:98:77:d8:c9: 6b:a0:80:a9:07:eb:14:cd:ee:51:31:b8:43:db:8a: 55:66:ae:af:5e:62:7b:77:41:fd:34:01:87:51:86: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F3:88:07:B7:14:A0:34:7D:58:92:10:2C:4D:F9:D2:04:10:66:7F X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e4:2d:2c:20:09:5c:6f:6e:8b:4c:ae:a0:5b:69:0d:f4:df: 81:2a:8d:2b:f8:a6:89:8d:a3:f0:70:c9:0f:06:30:ff:6d:72: fb:c4:40:31:55:87:45:e8:f5:22:88:fa:b7:f2:d0:82:45:4a: 93:0f:16:38:c0:3e:76:52:b1:36:4b:0e:78:c7:e7:10:12:49: 2b:fd:7d:c0:b7:6b:25:98:df:f5:a5:d4:9f:d9:cc:25:1d:b9: 5f:87:a2:f9:d5:53:80:90:c1:05:06:e2:54:cf:5c:16:fe:b8: 48:30:38:9c:25:91:27:cd:b1:d8:52:46:64:ae:75:61:40:ea: 9d:20:a2:ab:79:65:81:87:58:22:ca:21:ee:87:09:b4:0a:4a: 80:a6:70:06:3c:c7:5f:bf:08:7f:cd:2c:c9:06:87:82:e2:8c: e9:5a:c0:30:b9:fd:4f:f3:53:0e:22:b5:a7:e9:d5:60:ac:7c: 88:3e:2a:30:7c:76:c6:ad:d4:f3:eb:4d:c2:23:5a:68:91:b6: fd:3e:61:c8:ae:09:74:38:b6:0c:dd:7c:60:23:9a:a5:3c:3b: 29:a7:8f:4c:1c:21:ee:16:2c:2b:7d:60:17:06:44:57:92:3e: 3f:be:cc:ba:ed:c7:15:3d:40:96:af:c4:ac:ec:c4:e5:59:7c: 57:e6:89:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2oMGT69o16CBy6Eklm36aWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwNDIwMDAwMDM2WhcNMjYwNDIxMDAwMDM2WjAzMTEwLwYDVQQD EyhkYWYzODgwN2I3MTRhMDM0N2Q1ODkyMTAyYzRkZjlkMjA0MTA2NjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v0uEdobSx28xxkHaPvSuszAyzjU jRzSO0OltBM8pE4IEGedueVP5RJeViih7r35/kaPfK4OflSc7QA1rN4IWszV00LD r2y98fs/B96WdCFYM30GdRRDPL8YZ2qkc/HsXmZUXig2MNz3dMkMfzm9ULDZ99q0 ybL5gRb3CwpQOZ47gXL0X2cH+VxBrB0REjx7yxKC1QcT9CdSAi8ErarykFkqoJGh NqVgBkvDzAtaCCmuxlq+a30q+GIQl37XIJ8BrYwW784eltL19mL+LaL6wiWPQ0+7 Lm6oqChjF5h32MlroICpB+sUze5RMbhD24pVZq6vXmJ7d0H9NAGHUYbLsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrziAe3FKA0fViSECxN+dIEEGZ/MB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+QtLCAJ XG9ui0yuoFtpDfTfgSqNK/imiY2j8HDJDwYw/21y+8RAMVWHRej1Ioj6t/LQgkVK kw8WOMA+dlKxNksOeMfnEBJJK/19wLdrJZjf9aXUn9nMJR25X4ei+dVTgJDBBQbi VM9cFv64SDA4nCWRJ82x2FJGZK51YUDqnSCiq3llgYdYIsoh7ocJtApKgKZwBjzH X78If80syQaHguKM6VrAMLn9T/NTDiK1p+nVYKx8iD4qMHx2xq3U8+tNwiNaaJG2 /T5hyK4JdDi2DN18YCOapTw7KaePTBwh7hYsK31gFwZEV5I+P77Muu3HFT1Alq/E rOzE5Vl8V+aJUA== -----END CERTIFICATE-----Generated at Mon Apr 20 06:09:11 2026 by rpki-client