$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft File: RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft (raw, json) Hash identifier: 2fjjN/r+IcBtVNAkouL6eJdFB1Si0cIsiNNJcjeREys= Subject key identifier: 19:56:05:97:CA:A7:F4:8A:28:14:9A:51:3E:E3:A7:B0:CC:5B:D4:47 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019DAFE9FA2F92601F9F7635D0C536554891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft Manifest number: 19B8 Signing time: Tue 21 Apr 2026 12:00:39 +0000 Manifest this update: Tue 21 Apr 2026 12:00:39 +0000 Manifest next update: Wed 22 Apr 2026 12:00:39 +0000 Files and hashes: 1: 2K2LRFKVS5G4UBpi02aIHEwaYbo.roa (hash: vp6Q5byh4sOxsLn6+xnbICkzt50Gu7I9DJlz9grAs68=) 2: 4EHQchkmRvw4hrIZwKVmoTVrXcE.roa (hash: KpqMiHj1SwCn1wHf9cbF+sIlJ2SNrDY7ghIe8T7leBk=) 3: 5Z3398bPjFZnkQuZgIZdGWDznRY.roa (hash: xmJ4QribTdZo3tMhYvYOnwRRxONh8dhYrIwoBT29TpE=) 4: 60n7OcQD1rVkRE8LPW3kEfdX9gw.roa (hash: N0mQsLvGMMdhDPTL/se4j6fwbJ89Tgbu/0d6LhVYRLs=) 5: 7wjZdZfOK--9J0iW5gkpY4jz3Vs.roa (hash: wQ+RvHew1IVetOV7JWzo86gEVS8H0+zXRGq3DJBrmWc=) 6: 9iM7YuqWIbTP1jDWJnvJ3Bq7Q0Q.roa (hash: fsZlnOQR9nRVkMGwqtj0xSg8Xg6dl3hOvSIpUTk2D6w=) 7: Ca0jUIwklC0eyPP5hzRAn17FR80.roa (hash: fAEP7LfFj7fDAZrrdBBsvg+Mn25B+1e7F/BBuqO131w=) 8: FN70esTZXn5X2vP3ZcEnYIks9AM.roa (hash: 1ow9uwWZ1DORgXwnTVw8JvTT23AJVzQa+9quYRVEN6M=) 9: Kq7QJSlg_4QY0R7RaYj4Ti58qcw.roa (hash: bBRpWE7OiUMYeqNpou2p2Wpdx4ns4UHX64/R4Kr6c+U=) 10: Ku0mjmxusSrMXfgvlmL_Kh5j0kI.roa (hash: zSTvo+JocKBb5Nbg9XIvSqJL+1z6V1E34a4hrkcK8t0=) 11: PNU5dT-FRZhCGuEDnFsX7GuO8MU.roa (hash: 5nuXPVsdc9izSwCCuB+1KPJnkougYuwEFE0ABa/v1lw=) 12: RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl (hash: sLbO60VC7K4ADlUillQE9f0G2OfHaO7/63ZfH1cTmR4=) 13: S7h5Fby9bbpxdXYmDtza_SDSYtg.roa (hash: IOxFJnKliiuzpHTvfCVgOBtXgnXsZ5cTLcWr06Mhmmg=) 14: ShGZf2KqimtbKzToWYg54Tsrrwo.roa (hash: I51c/DNMfjZlsvQm5k/7jwF4EguCQj/kTUTXhZ80zs8=) 15: UGZ3vMnUVhnMHprA-js3vspKmwo.roa (hash: n4uZoakF4GvbWWZaqJL1srzglcS0eKby+fyHBjJ5GXk=) 16: WIe_yXnGz2qxmkA-Jl4unhtVXd8.roa (hash: JDWlYllOoFXRzwvexL0+Z+xQJXmvy5W2gSffNKHemAA=) 17: WL6q68-uoJAeV1AkxAgPdtwWoyc.roa (hash: f7/E+EUbjnh6BcH/3q+PZzjcsDtZuhmuT+6PSPvWfAM=) 18: Wy81KMy0DL_6tpJOi6ANUYyTUv4.roa (hash: d27KgsDg+KuUKh7rpBYfZ/yBm4hBx4SDfoftiDo2y/8=) 19: XMvIwzGddWBUba0mwiNnnHTZWm4.roa (hash: UWvDZc48OJ09VWHD0leBJU7x8wfw++aUQp2Q26I26MM=) 20: _UKP5-Iy6wpN2oirm5XR4t6xTqQ.roa (hash: Ut2T9vsFgp66XEHsrOrD4d48x54qapDTxxF4xsDolDw=) 21: af2hi8V_6XBfDLcR66UImjT0iRs.roa (hash: kN5giEt8lpaRlzktqhTZf2jIXA6thsWMrbPgPzbcxSc=) 22: ah0jiQnxjyeZK5he6RdTUE-ipnY.roa (hash: JJj18HJFbOb1f81VJKQKUC1al7turx0OrE/9nAccLK8=) 23: ewMk8U-CtYsjt6E6j_tG33Bkeds.roa (hash: ilAg19RjRWMFfvWl4ecpGWCs1APQudEqMJ6oIH0eDTA=) 24: fmuRuMynV3t-W1T59fbCP9gm_2M.roa (hash: 6pRpct2vh79WehrYAlgUzvTdvNK24YaVVaa9iZsg5+Y=) 25: h1AkFWiuF4C5x1jcp2idszcxtwU.roa (hash: RmjmZFo+6GsCEI0vzQijS30wCaveF6IUR5KU8O6+YJY=) 26: jXJPIagQB7xJy4c-VYsshQQ5ZU8.roa (hash: LZ2zXEnHEosFY9V/e5cqBzDV0kKFDDyZWuhh0GN0XAw=) 27: lcM9VBsMX8XlCXtWIYOwxsgyfcs.roa (hash: 5oIPhkO6h+85iz0pQDQy9IOXsl5pzQuFQs9T8Q+5gKM=) 28: m3rFClN8OrN1kUgzbffmVeYXm_g.roa (hash: gTzP3qQCo24jaH53JEi/3E2xk77hA7ta7BJO9SMqoTE=) 29: oyIqohxC2y3rvRg6QPCsx91o03U.roa (hash: ZmO9aPa5rKIwE8XElV0NF7ALbzeZA2ZqKUS5cy7JHt8=) 30: ruijiG2c7OWNAbZg1DzBzUw2h9A.roa (hash: gl727KrmeoI8zfQ+pdZJ+FzEFZTT7EufSZa415R+/6E=) 31: ti7bPeHvjZr74P5AX8xhgt4EPEQ.roa (hash: eVY7BIMaC5K37OTehz4aGSdkgJfotwmNYaS0DnArTLM=) 32: wRvPE_LWNx2kIT2wAO2XbZUAglY.roa (hash: MxpajBbFFulzyH8dwfNbDFeDhL15/nETBO2IKZQO1kU=) 33: xFV6naJ395ubjh_EqiAHvE__j48.roa (hash: dsSN+lLUWUY5SoV96p6VvWfy7nH7ZF5X9LmWDzJivP0=) 34: yuafb_GLP5geRNFsOXeHzGpXUtw.roa (hash: rNqK+URhLKI6w5EH1rntR8Xc3oY7jxanp2xGnYspLAY=) 35: z5afGA7OaWu712VRFeG9Gp0k7GU.roa (hash: V5K2iL/FYfaNf2E5t5hua1uBnZXWpXH1Eus7Qaw8bpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:af:e9:fa:2f:92:60:1f:9f:76:35:d0:c5:36:55:48:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Apr 21 12:00:39 2026 GMT Not After : Apr 22 12:00:39 2026 GMT Subject: CN=19560597caa7f48a28149a513ee3a7b0cc5bd447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:fd:3b:f3:a8:90:05:fe:92:6e:aa:b0:3f: 40:64:f7:aa:95:26:fa:b4:e2:88:1f:c7:25:dd:f2: 44:0a:27:b8:ee:8e:ec:e4:7b:40:69:ca:dc:e7:19: e8:7c:88:d3:5b:f5:24:d3:00:dc:49:99:e6:b8:2e: 4b:af:31:1a:c3:4a:0e:c6:d4:f5:b4:86:7e:a9:0d: 5b:b0:21:92:82:1c:4c:e1:39:d6:c7:9b:9c:55:23: d0:d2:2c:e7:5e:4c:cf:fa:7f:a6:01:7a:e7:dc:39: 78:6d:66:af:54:8e:9c:a3:5c:fe:99:1d:ca:a0:f1: 35:6b:75:87:af:95:1d:bb:3f:0c:9c:db:fa:90:89: 93:75:18:3a:1b:ea:51:ef:7b:5f:3f:e0:f2:17:ed: b4:a9:0e:77:30:ee:a2:d6:ab:86:14:e7:57:67:0b: d6:6a:86:c0:dd:b1:61:b2:ed:96:48:0e:eb:ad:45: 09:48:72:c9:15:59:81:af:0b:f7:f3:07:81:3f:b3: be:24:11:50:09:eb:dc:26:8b:74:a2:ff:af:da:ba: 7b:bf:e8:b1:1e:c5:e8:84:37:b1:d1:14:94:3c:56: dd:01:5e:28:1a:85:e1:c0:ba:d7:a8:12:13:ff:f3: 59:49:83:a4:59:eb:b3:4a:5d:f1:9e:5b:1c:b6:87: 21:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:56:05:97:CA:A7:F4:8A:28:14:9A:51:3E:E3:A7:B0:CC:5B:D4:47 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:54:72:00:a8:fb:9d:7b:8e:80:c4:3f:f2:13:99:ff:31:84: 93:3d:2f:6d:48:98:41:73:66:c7:a7:85:f4:8d:ce:ff:9c:3f: ce:91:ca:36:6a:97:c8:2c:a6:a0:48:97:4e:23:2a:e3:0f:6c: ab:04:39:8e:50:6d:0b:48:15:ef:9d:59:d9:bd:50:a8:29:83: 8e:88:1e:f4:4a:27:1b:f7:3a:0b:54:fb:83:a5:f2:c2:98:36: 04:b7:08:af:ac:8b:2b:e1:21:60:89:5c:62:33:e6:fa:20:a1: b7:18:b5:36:88:c8:6a:d9:d6:5d:a6:f7:1c:b6:62:41:69:50: ad:0f:10:46:86:d1:a3:b2:b8:b5:63:97:a0:36:92:86:04:2c: 80:25:43:2e:f1:5c:e6:5a:8e:d9:1c:c7:76:a8:5a:6a:40:fc: 38:35:c1:19:c0:cc:47:6d:3b:d1:e0:e1:4a:c3:84:79:fd:1e: 8a:80:fe:64:7d:47:b6:60:7d:17:27:db:e6:45:75:25:93:fe: 67:fb:19:63:1c:88:32:a3:a6:cb:e6:ee:d6:0b:6f:a7:1c:b4: cb:0d:f6:78:81:9f:85:2c:66:71:d4:06:76:0a:56:05:d5:43: f8:1c:b4:15:3b:bc:77:41:73:2b:c4:ee:9b:c7:a1:e7:a2:c7: 57:bb:54:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2v6fovkmAfn3Y10MU2VUiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwNDIxMTIwMDM5WhcNMjYwNDIyMTIwMDM5WjAzMTEwLwYDVQQD EygxOTU2MDU5N2NhYTdmNDhhMjgxNDlhNTEzZWUzYTdiMGNjNWJkNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsT9O/OokAX+km6qsD9AZPeqlSb6 tOKIH8cl3fJECie47o7s5HtAacrc5xnofIjTW/Uk0wDcSZnmuC5LrzEaw0oOxtT1 tIZ+qQ1bsCGSghxM4TnWx5ucVSPQ0iznXkzP+n+mAXrn3Dl4bWavVI6co1z+mR3K oPE1a3WHr5Uduz8MnNv6kImTdRg6G+pR73tfP+DyF+20qQ53MO6i1quGFOdXZwvW aobA3bFhsu2WSA7rrUUJSHLJFVmBrwv38weBP7O+JBFQCevcJot0ov+v2rp7v+ix HsXohDex0RSUPFbdAV4oGoXhwLrXqBIT//NZSYOkWeuzSl3xnlsctoch+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlWBZfKp/SKKBSaUT7jp7DMW9RHMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVRyAKj7 nXuOgMQ/8hOZ/zGEkz0vbUiYQXNmx6eF9I3O/5w/zpHKNmqXyCymoEiXTiMq4w9s qwQ5jlBtC0gV751Z2b1QqCmDjoge9EonG/c6C1T7g6Xywpg2BLcIr6yLK+EhYIlc YjPm+iChtxi1NojIatnWXab3HLZiQWlQrQ8QRobRo7K4tWOXoDaShgQsgCVDLvFc 5lqO2RzHdqhaakD8ODXBGcDMR2070eDhSsOEef0eioD+ZH1HtmB9Fyfb5kV1JZP+ Z/sZYxyIMqOmy+bu1gtvpxy0yw32eIGfhSxmcdQGdgpWBdVD+By0FTu8d0FzK8Tu m8eh56LHV7tUsw== -----END CERTIFICATE-----Generated at Tue Apr 21 17:24:32 2026 by rpki-client