$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: 8lXjtjLPlw75u4mt4sjQN6b137i4behcSbRHqnSKD/k= Subject key identifier: FA:64:D9:E7:1C:AB:20:2A:03:00:9A:DA:77:19:D7:4F:47:55:8A:B7 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019DCFAC7D815837952E8A424A8A44DB75FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0E42 Signing time: Mon 27 Apr 2026 16:01:21 +0000 Manifest this update: Mon 27 Apr 2026 16:01:21 +0000 Manifest next update: Tue 28 Apr 2026 16:01:21 +0000 Files and hashes: 1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=) 2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=) 3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=) 4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=) 5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=) 6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: N/o6k7KQmIwrXj4P7YKDHOfIDk0RLB9Ay6a+ypUDBco=) 7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=) 8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=) 9: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=) 10: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=) 11: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=) 12: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=) 13: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=) 14: tN-kQy8aPMBnCCMoTBdyR8g7aFY.roa (hash: ndjqvay0HNkTp1bfXurPq1sQDj2ISSXGlvnjsKWMyAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 14:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:ac:7d:81:58:37:95:2e:8a:42:4a:8a:44:db:75:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Apr 27 16:01:21 2026 GMT Not After : Apr 28 16:01:21 2026 GMT Subject: CN=fa64d9e71cab202a03009ada7719d74f47558ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:0b:e7:4d:c8:73:e2:06:39:ea:69:96:e2: f0:e1:e5:43:3c:63:9e:c8:d5:76:25:94:a9:95:05: 73:49:cd:ce:21:50:12:59:a6:49:47:24:1e:e9:e5: 9f:5d:fe:ac:e4:ae:2c:b8:2a:88:93:0a:43:f3:e4: b8:b1:49:6a:5d:88:4f:c0:c8:7b:6e:47:32:2d:5e: 45:67:d7:2e:c1:99:a7:ba:74:4b:1b:12:85:a8:c7: 6c:d3:fa:f0:b5:23:f9:58:87:73:b8:f4:6a:d5:83: 44:6d:f1:6f:cb:b9:34:80:d1:51:ac:b0:4f:7f:fb: 42:3e:e9:20:ff:aa:39:00:5e:06:82:27:ce:4d:21: dd:85:c6:7f:a9:d8:2c:2b:33:a3:50:33:b2:41:ad: a8:8b:ba:1b:e1:1b:18:1e:5d:91:84:b0:70:c3:5b: fc:ec:8a:1f:a5:ae:62:a3:b2:47:4e:8a:52:e9:87: 22:dc:d6:b7:9d:19:43:80:94:d4:a2:c6:35:21:78: 5a:39:6a:e6:c3:2b:46:d1:23:c0:f5:27:ea:11:1d: 57:2b:61:71:a2:4d:73:31:69:52:a8:60:1b:0d:cf: 78:19:60:ed:85:66:17:ea:a0:54:84:f8:f0:fa:36: df:b7:87:27:65:66:85:e1:7c:71:49:01:31:57:c1: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:D9:E7:1C:AB:20:2A:03:00:9A:DA:77:19:D7:4F:47:55:8A:B7 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d8:24:f4:f7:4f:e6:7d:80:5a:05:b5:a2:78:ec:87:77:e9: dd:97:70:68:9b:45:e0:bb:4a:06:18:c8:85:a2:bc:65:39:a3: 6a:a3:e0:05:97:15:06:c0:07:ff:e4:1b:42:fd:a4:7e:af:77: f3:a8:63:60:94:4e:39:a4:94:81:06:68:2d:50:7e:4a:b5:f0: 95:96:c3:13:b0:78:f7:ea:50:e9:f5:f7:2e:6e:c9:a6:3a:da: 43:9c:cb:3a:e8:a9:c5:da:9c:65:9a:7b:a7:19:a0:bc:37:67: 9d:9a:d9:b8:c8:b0:7f:a6:0c:b6:25:49:6e:49:20:41:36:f9: 00:b6:c5:04:b2:e3:85:c7:95:ed:63:2b:f5:54:9a:92:9c:e7: a0:1e:f0:ed:f4:d4:5c:a8:0f:89:dd:e6:d8:38:06:ed:44:ca: 16:1f:72:88:bd:f0:bd:ec:92:58:7e:7a:ef:34:60:5f:a7:3e: 7f:82:06:5a:39:6d:cd:22:52:21:b5:24:f0:01:5e:91:62:1c: 76:fe:25:94:1f:3e:bf:92:db:64:b4:d9:6d:25:a1:94:c7:6e: 43:fd:52:fd:53:09:07:fa:1b:bc:1c:0b:f5:ba:ee:10:0f:31: 96:67:89:11:5e:2f:8e:73:2c:40:18:a5:ad:4b:87:b9:2b:f2: bf:d2:fc:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PrH2BWDeVLopCSopE23X9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwNDI3MTYwMTIxWhcNMjYwNDI4MTYwMTIxWjAzMTEwLwYDVQQD EyhmYTY0ZDllNzFjYWIyMDJhMDMwMDlhZGE3NzE5ZDc0ZjQ3NTU4YWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3voL503Ic+IGOeppluLw4eVDPGOe yNV2JZSplQVzSc3OIVASWaZJRyQe6eWfXf6s5K4suCqIkwpD8+S4sUlqXYhPwMh7 bkcyLV5FZ9cuwZmnunRLGxKFqMds0/rwtSP5WIdzuPRq1YNEbfFvy7k0gNFRrLBP f/tCPukg/6o5AF4GgifOTSHdhcZ/qdgsKzOjUDOyQa2oi7ob4RsYHl2RhLBww1v8 7Iofpa5io7JHTopS6Yci3Na3nRlDgJTUosY1IXhaOWrmwytG0SPA9SfqER1XK2Fx ok1zMWlSqGAbDc94GWDthWYX6qBUhPjw+jbft4cnZWaF4XxxSQExV8GMeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpk2eccqyAqAwCa2ncZ109HVYq3MB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdgk9PdP 5n2AWgW1onjsh3fp3ZdwaJtF4LtKBhjIhaK8ZTmjaqPgBZcVBsAH/+QbQv2kfq93 86hjYJROOaSUgQZoLVB+SrXwlZbDE7B49+pQ6fX3Lm7JpjraQ5zLOuipxdqcZZp7 pxmgvDdnnZrZuMiwf6YMtiVJbkkgQTb5ALbFBLLjhceV7WMr9VSakpznoB7w7fTU XKgPid3m2DgG7UTKFh9yiL3wveySWH567zRgX6c+f4IGWjltzSJSIbUk8AFekWIc dv4llB8+v5LbZLTZbSWhlMduQ/1S/VMJB/obvBwL9bruEA8xlmeJEV4vjnMsQBil rUuHuSvyv9L81w== -----END CERTIFICATE-----Generated at Mon Apr 27 19:11:00 2026 by rpki-client