$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: oeahNIBI/j4srL+seFsdzvBMjEz5KZ0+oOFP/UNTE5Y= Subject key identifier: 66:D3:81:09:F2:1E:FE:97:86:70:23:38:2E:49:E8:68:BB:60:13:56 Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019DCC06FBDD61959F7E2A5FF86107F80F98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 1409 Signing time: Sun 26 Apr 2026 23:01:42 +0000 Manifest this update: Sun 26 Apr 2026 23:01:42 +0000 Manifest next update: Mon 27 Apr 2026 23:01:42 +0000 Files and hashes: 1: 604DVjW89FcTF-J3OlDY0xygtP0.roa (hash: DEfDKsdOogNIkUL8SOV8s+auFLI8n9dOB4Wep4bTTqg=) 2: 8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa (hash: rEMwOO6lSnO1YlEyeJow58wL/2TfCKPn4IBjRuIkc0Y=) 3: 8lPmNR8kC5qE5Lxt_zKmkqCnA_M.roa (hash: Ik4QED5F6sI3OJklEdpUYZ0TKdybSr6g6ZurSavfP2U=) 4: EIJhIjJtEMnHVUQ212bTckjgB0I.roa (hash: EybXD780CwAqGIpHjiQwUZRlhbfLzk1+eybY/uGp/io=) 5: G25W8rWynHVqOw08BsNDQCX7r4k.roa (hash: lP+BuX9RXuXg15DfmgethXUeCq5zgrMORumyH2g7dwI=) 6: LDiAx4mH-l2McqHvkuEwEg3VQmo.roa (hash: hHjSOBQ7GK7UhrCnhltMggAjTsVyGTTWQh8ZK+1z/d8=) 7: RZ7OjE_uz9kQm_N05glcQaVKBCI.roa (hash: FZSwjKnEe/WNTvIFtlBH2t2jJQlqscx5RYqxrilnkJM=) 8: Wt9ypheec9GpOk_86DTL3w6D2tk.roa (hash: aRWLUqX5vTU61VSd9AOD3yJeqO5wgKqFkxtzxw3VLKA=) 9: b1C5tQPSDgyOYMEa2vtiHCVTu3w.roa (hash: m+CwEMaGPey4t5aVnMPNBJGIOj9PYMcxJas6I4mb38c=) 10: ci2RBJP7wBZT9607Ek93x3v-DJg.roa (hash: rQsPZOnMLyTQdUIKObokqHCmODTdjtz2irzXClA4KLY=) 11: ezjdknW8yKvW_oPzf0czr_SHPos.roa (hash: Ke5tCHtNlbJY4VFVoI0K+8QDexK6VL6V1j/4AYy554g=) 12: jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa (hash: yPSwJ7BnVd6OtmjXkcMdWkJgliiWudINiSFU9FCJQiQ=) 13: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: iBYs9uH5Ddh1umpK+yt0AHOCDgaT0OfbDTc7uiYsK5g=) 14: xeKu-YZxEc8ydQI0uzpgttKRF9s.roa (hash: OIvXQcQeayjejLI4847MVkofRUX3vV1PuAUvz7Z84Jc=) 15: yYo92JwdAK0Yb36h4od0SkR-8PQ.roa (hash: UkVRpXuv1yNCqqHU2bi8PbnwrwXCTcNm+/wk+zbOQNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:06:fb:dd:61:95:9f:7e:2a:5f:f8:61:07:f8:0f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Apr 26 23:01:42 2026 GMT Not After : Apr 27 23:01:42 2026 GMT Subject: CN=66d38109f21efe97867023382e49e868bb601356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:9b:45:77:5d:07:45:ee:20:2d:62:41:59: 0e:ac:fb:85:aa:6f:63:45:19:80:9b:b1:8d:92:0f: f4:f7:28:44:d5:fe:12:48:ff:00:36:6b:b5:44:2e: cd:f2:a6:f2:34:4e:19:be:c9:eb:74:c7:d1:d3:83: c0:de:96:29:7c:6f:9c:f3:d5:44:5b:d3:13:09:c7: 5a:07:cf:6c:15:9a:7f:c4:32:b5:36:c2:6f:66:ef: 79:e9:24:21:47:b2:56:87:77:1d:fb:43:f2:48:0e: 9c:57:c1:34:83:e4:e6:df:55:0e:18:c4:d5:cb:e4: 5c:c6:4e:86:fd:da:20:46:eb:06:3e:22:59:aa:d9: 1a:da:06:f0:67:81:50:e3:ad:58:ff:c1:59:65:e3: eb:f3:36:29:9d:b0:42:c9:ab:c3:51:39:4a:29:8a: f0:ee:6a:fe:7b:b5:65:9d:39:96:ea:0f:37:f5:17: fa:49:fd:f3:e8:0a:6b:4d:32:e6:91:92:21:c5:09: 67:5b:b4:c7:01:4a:f5:1d:57:b3:c1:13:4e:3c:d9: 00:03:33:ce:c7:27:17:3a:56:69:ed:c4:4c:bf:17: 57:bc:1c:51:4b:52:78:c9:02:23:5a:05:95:57:fa: fd:01:64:b7:ba:e1:38:99:e4:90:5f:16:26:08:8a: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D3:81:09:F2:1E:FE:97:86:70:23:38:2E:49:E8:68:BB:60:13:56 X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:20:14:44:3d:56:72:b1:aa:4d:d3:b5:2c:e9:d6:99:ad:57: 2b:4b:12:f1:33:e0:43:14:2f:1f:e4:8b:0b:eb:1f:5a:48:e5: 19:f7:c1:a3:7d:0f:34:12:b4:a7:77:59:50:46:47:b7:c2:c9: 67:7f:20:0b:7b:be:32:ee:64:ed:ff:25:c6:f6:7e:73:1d:85: 70:8f:08:11:dd:e9:7a:6e:22:ef:57:03:8e:d8:a3:ad:b6:8a: 5f:b0:2e:dd:59:8b:4b:ab:72:2f:0c:00:94:16:93:90:58:40: ba:e2:9a:ca:c6:93:1b:9b:72:5e:cc:a3:92:e2:45:52:7f:ac: 71:cd:3b:61:62:06:b2:10:c9:92:77:e0:fd:fe:79:99:5c:9a: e4:ab:74:8a:7d:af:c2:d7:39:a3:06:f1:c8:fe:fe:c0:e0:da: d6:02:4b:0f:c3:39:66:46:22:41:b3:93:7a:ca:94:3b:3c:98: 54:b8:ee:21:64:b2:96:78:2b:ac:6e:78:28:ab:df:0e:e5:ed: f4:8f:ad:72:3b:3f:77:5f:d0:0a:c3:10:da:88:67:fe:2f:0f: 7f:98:6c:05:c9:1d:05:c9:7f:a6:ff:aa:e2:8e:45:b8:1a:47: 68:e1:69:90:20:f3:42:43:5f:12:c7:be:76:c0:c4:49:41:19: 23:31:0e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MBvvdYZWffipf+GEH+A+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjYwNDI2MjMwMTQyWhcNMjYwNDI3MjMwMTQyWjAzMTEwLwYDVQQD Eyg2NmQzODEwOWYyMWVmZTk3ODY3MDIzMzgyZTQ5ZTg2OGJiNjAxMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxebRXddB0XuIC1iQVkOrPuFqm9j RRmAm7GNkg/09yhE1f4SSP8ANmu1RC7N8qbyNE4ZvsnrdMfR04PA3pYpfG+c89VE W9MTCcdaB89sFZp/xDK1NsJvZu956SQhR7JWh3cd+0PySA6cV8E0g+Tm31UOGMTV y+Rcxk6G/dogRusGPiJZqtka2gbwZ4FQ461Y/8FZZePr8zYpnbBCyavDUTlKKYrw 7mr+e7VlnTmW6g839Rf6Sf3z6AprTTLmkZIhxQlnW7THAUr1HVezwRNOPNkAAzPO xycXOlZp7cRMvxdXvBxRS1J4yQIjWgWVV/r9AWS3uuE4meSQXxYmCIpzHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbTgQnyHv6XhnAjOC5J6Gi7YBNWMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSAURD1W crGqTdO1LOnWma1XK0sS8TPgQxQvH+SLC+sfWkjlGffBo30PNBK0p3dZUEZHt8LJ Z38gC3u+Mu5k7f8lxvZ+cx2FcI8IEd3pem4i71cDjtijrbaKX7Au3VmLS6tyLwwA lBaTkFhAuuKaysaTG5tyXsyjkuJFUn+scc07YWIGshDJknfg/f55mVya5Kt0in2v wtc5owbxyP7+wODa1gJLD8M5ZkYiQbOTesqUOzyYVLjuIWSylngrrG54KKvfDuXt 9I+tcjs/d1/QCsMQ2ohn/i8Pf5hsBckdBcl/pv+q4o5FuBpHaOFpkCDzQkNfEse+ dsDESUEZIzEOyQ== -----END CERTIFICATE-----Generated at Mon Apr 27 09:16:27 2026 by rpki-client