$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft File: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft (raw, json) Hash identifier: 2SdKYqKrp9f9lyMEqzAjDk+HrF4mP0/+KM6/kSox8RU= Subject key identifier: 91:38:07:18:D4:EA:C0:F9:D9:65:51:B7:35:16:22:5E:A2:A3:30:84 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019DD509D25920F968BA4C144E32F3EC2A2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft Manifest number: 1386 Signing time: Tue 28 Apr 2026 17:01:23 +0000 Manifest this update: Tue 28 Apr 2026 17:01:23 +0000 Manifest next update: Wed 29 Apr 2026 17:01:23 +0000 Files and hashes: 1: 00t4JlUtr46G1pEHPfG8CoCTEhg.roa (hash: SZsJbSiNkf6okAugBnwQT5cRtnNGeqe0R2EQOpPuW0s=) 2: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl (hash: 5d95vMzDCZb+r6r6HqYMJ4qH7zmuSZJysav0QsY1Hwo=) 3: 3YsQgb27UWqMlN954jmMKOEu_SM.roa (hash: MOWqK6cBdBGpbj92O0t42kX8k4E9W9yvyK9I1uW+++c=) 4: 3uJWZaSr28voCvJ3XvOZzVY97r8.roa (hash: JNQEcpLZ9GfOEBDsZ7o828ABuFDs9+kz0Q3kqrQJnzg=) 5: 5MG4H3ROi9Z_HuioIyFr8Hj8fII.roa (hash: Jk2exfePI/3H4jUbDZxVTlT7rkhDIkBPxTi1KyoHO34=) 6: DIgN1jFrT88h190mujGA-W_sLY8.roa (hash: dfAJ//9tqClZ6VrDShQWOByAfjbSoRaRLYUETj8i2rw=) 7: DwVnWS_n3oFRFU2iD-hTgfl9EFE.roa (hash: lKO0GSwPIB0MYiJPwXvuOUNFB8HjB0kL1GRgNk8PV/A=) 8: TlN565d74PyB9p0JXHH7JnDEmvE.roa (hash: r8GHTarKkex0XwFiQfJSY3kfdErHywHcCGk3qR2Tjec=) 9: U5rSDmrf4PlzCLlDWaskjjffVr0.roa (hash: vcOPT76+F+1LBT6UYH+sea2r4OZXBrlNwePW6nY/XiU=) 10: WO53TAvChGXXDpLngdjuE9kLPCg.roa (hash: t9C7935SqoAWtIKVzerLbCGooEBtDnGcFQNhviM2cFg=) 11: ZGJ8WhVJsv6_DZVx2zsNEqurhws.roa (hash: zsRDtxw8BLOr18CsA2qPwGsKzxSNIYKS0wdlcoLLn2Q=) 12: _vECo6V0OqVHvuSazkWJ0dvewy0.roa (hash: sG5pX1vWAXrVaFYMr9ZTJOYbhxs6iotv8DZ3G9v31xc=) 13: evA5C43jooCU-0KGVkbsaB2BBbU.roa (hash: eEukmHvEX3OYIrpleqcpAoYMp79go82LKu/wPivXwew=) 14: jM5XETy6HbMPiBgpmp_jnc2RKQo.roa (hash: xe+9tC5oSUg+0FmVWKdIx8uyl8eVmH5n2rzdeJX6xZI=) 15: jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa (hash: qJzUahRGOfAEVZDxyvqsA7Ss9HiymeHgWnFp8HMjVVs=) 16: kvM6A0dHjKkllZQlI3CjetRcLH0.roa (hash: 5V7o5lSXn+7yqZx8dMRj6FHd+QV+Yb+1dqEPxXIYP34=) 17: nRBwQ2Y-9OgZ7RpCVcKZAJy4sZk.roa (hash: vJGnJ09KsNCLqUU0mMe45rZ6HVT1LYGlujB5Bsrl4iE=) 18: qmM745JG5d8A72hNRLQ9llmN77k.roa (hash: oG4zT6yCNtdrlBl0ys4LHmnKeKqhudHo7676jRW7Np0=) 19: r7r1Y-kSqsjCkN5g73HGn7i1zrM.roa (hash: MQaOsov42k9jc1VrZgl0fzxtEHOrx0ZX3W8NqjTVdN0=) 20: ukQY1BD04k-4MUx-U0jvExGFr_8.roa (hash: HuqS4CCgoqnj6fxM4PKH7DEP94I/EN45blM+J9stnFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Apr 2026 14:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d5:09:d2:59:20:f9:68:ba:4c:14:4e:32:f3:ec:2a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Apr 28 17:01:23 2026 GMT Not After : Apr 29 17:01:23 2026 GMT Subject: CN=91380718d4eac0f9d96551b73516225ea2a33084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:0d:0b:e9:7c:6d:13:c9:f8:3e:9a:72:c4: ec:7b:e8:fd:68:96:41:08:86:8a:eb:7f:a8:23:41: a7:e5:64:2a:13:20:b1:f8:b2:f7:d4:e2:e0:29:7c: 6d:3d:65:db:2e:4f:4e:aa:df:ab:33:f2:94:40:5c: 1a:e8:68:19:48:40:7e:8c:85:aa:08:26:ca:8d:d7: 3a:c2:bf:2f:50:7c:da:db:6a:8a:c6:59:22:14:4d: 0d:26:3f:4b:1b:cb:ad:72:a1:33:29:73:57:08:c5: 83:36:3c:a0:23:eb:d3:38:fa:a8:b2:6c:95:84:a9: 88:04:fb:28:86:42:a7:2d:a2:5d:1b:3c:5a:be:25: 7a:eb:73:d9:30:f7:34:18:f1:ad:2a:f2:bf:1c:dd: f5:02:12:a1:3e:f6:d7:f4:16:5a:34:85:b3:2e:ab: eb:ed:15:23:da:59:34:87:2a:36:43:9c:e6:59:5f: 32:3e:62:32:1c:44:a4:74:00:a1:38:a3:54:1b:f9: 62:60:b8:21:fd:04:14:69:a1:54:d6:28:a0:03:75: f0:b8:08:e6:f0:c4:4f:07:d4:1e:ed:aa:67:75:4d: 77:7a:f0:d8:9a:3a:47:34:9b:c8:74:80:9b:ad:62: 58:3a:40:ca:af:ba:7a:a6:73:01:f8:0f:99:c7:2f: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:38:07:18:D4:EA:C0:F9:D9:65:51:B7:35:16:22:5E:A2:A3:30:84 X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:dc:99:cd:51:b1:a6:a5:88:11:0e:d4:44:d4:ef:31:ce:fb: 28:e4:5e:f8:f6:e8:33:d1:4a:7a:a0:ad:57:a8:ab:f1:95:69: 0a:18:91:fa:7c:eb:62:96:bf:15:f0:6c:e0:27:e9:2d:cb:dc: 59:55:d0:aa:25:d0:24:e5:f6:07:c9:7e:7c:2e:a1:e2:eb:3a: 30:85:db:9f:0a:92:0e:36:22:16:74:3f:54:b5:34:5f:1e:d8: c6:1b:3a:e9:fd:ad:20:5a:d9:d1:09:37:c3:e1:ec:5d:50:b7: 24:e9:5a:aa:0d:ed:68:71:78:08:e2:f6:ec:39:9b:73:93:f2: 32:36:36:6c:25:1c:5f:b8:c7:b7:71:31:d3:18:0f:f8:10:a0: 4e:8e:0f:10:d3:5f:b9:70:e0:b0:af:53:b4:9c:8a:95:5d:98: 3f:8b:98:75:f3:f3:33:ec:7c:b3:1d:a2:48:81:4f:44:6a:15: da:e6:68:b7:77:34:fe:45:05:8c:c7:8b:11:90:96:7a:20:90: 02:81:76:8a:cf:fa:d3:4b:45:8b:7c:e6:da:5e:a6:e0:60:07: 67:8f:70:f2:f4:2f:f8:25:d2:0c:3f:d9:f2:9b:30:f2:46:2c: e3:49:19:1c:71:23:e6:a9:e1:e5:38:9e:da:15:5c:00:fa:78: a9:5a:c2:aa -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ3VCdJZIPloukwUTjLz7CosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwNDI4MTcwMTIzWhcNMjYwNDI5MTcwMTIzWjAzMTEwLwYDVQQD Eyg5MTM4MDcxOGQ0ZWFjMGY5ZDk2NTUxYjczNTE2MjI1ZWEyYTMzMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZENC+l8bRPJ+D6acsTse+j9aJZB CIaK63+oI0Gn5WQqEyCx+LL31OLgKXxtPWXbLk9Oqt+rM/KUQFwa6GgZSEB+jIWq CCbKjdc6wr8vUHza22qKxlkiFE0NJj9LG8utcqEzKXNXCMWDNjygI+vTOPqosmyV hKmIBPsohkKnLaJdGzxaviV663PZMPc0GPGtKvK/HN31AhKhPvbX9BZaNIWzLqvr 7RUj2lk0hyo2Q5zmWV8yPmIyHESkdAChOKNUG/liYLgh/QQUaaFU1iigA3XwuAjm 8MRPB9Qe7apndU13evDYmjpHNJvIdICbrWJYOkDKr7p6pnMB+A+Zxy8PwwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJE4BxjU6sD52WVRtzUWIl6iozCEMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk4L2IwMzIxMy01ZTgwLTQ5MzEtODFjZS1mNzUyZDgxNjA1 ZmIvMS8xLVRyR3pTSkFKSnU2WUJjZkNHNlJBY3lIeWlRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNyZ zVGxpqWIEQ7URNTvMc77KORe+PboM9FKeqCtV6ir8ZVpChiR+nzrYpa/FfBs4Cfp LcvcWVXQqiXQJOX2B8l+fC6h4us6MIXbnwqSDjYiFnQ/VLU0Xx7Yxhs66f2tIFrZ 0Qk3w+HsXVC3JOlaqg3taHF4COL27Dmbc5PyMjY2bCUcX7jHt3Ex0xgP+BCgTo4P ENNfuXDgsK9TtJyKlV2YP4uYdfPzM+x8sx2iSIFPRGoV2uZot3c0/kUFjMeLEZCW eiCQAoF2is/600tFi3zm2l6m4GAHZ49w8vQv+CXSDD/Z8psw8kYs40kZHHEj5qnh 5Tie2hVcAPp4qVrCqg== -----END CERTIFICATE-----Generated at Wed Apr 29 00:04:11 2026 by rpki-client