$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: 7nEP6nAMU5zmqujpRwuKKgIIAotPT96iqxSOho6zA1A= Subject key identifier: E6:50:34:4E:0C:55:D7:56:A2:77:32:51:55:18:03:D0:36:96:E3:16 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019DCE9981FFA6349559E79510421E883EEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 18FA Signing time: Mon 27 Apr 2026 11:00:59 +0000 Manifest this update: Mon 27 Apr 2026 11:00:59 +0000 Manifest next update: Tue 28 Apr 2026 11:00:59 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 5LAgRSl9fFhy_RrY6Y4h_ItS9pw.roa (hash: 9uPoQd7e20GSb4ZNenQ4RHHLA/wWGAuknlkGqZ4eRPg=) 5: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 6: AyulhXyOhP2buicHYb4PF6awarA.roa (hash: o1jB5gIRXTUngRxBAxg2DTNhVQcSy127ziFioxQ1PVM=) 7: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 8: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 9: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 10: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 11: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 12: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 13: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 14: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 15: V1PdVFoshW1ar5HpIYyNCl-wxZg.roa (hash: 8JNuhL/a0qXG5i850tam3mN3diEt2c5ox0iX3jf8huA=) 16: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 17: XSRfDKJB1vWxhWr5_nnhi8kY_Ro.roa (hash: vbcx865viaCEEplLJzs5WTHypNQpAu7A3ivTLIG9UFw=) 18: XUBXC0DROf8_aCxS_neH8O6J0e4.roa (hash: /C5B3L/2hO5EvNBmbIy9wgx/1sbjdRkGMDg2OXb+bOM=) 19: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 20: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 21: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 22: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 23: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 24: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 25: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 26: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 27: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 28: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 29: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 30: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 31: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 32: r5EQFD61hWzkJjB7v7Y30uUhewc.roa (hash: 6ypgI1gg3G9f0KTPTcY2gQYHH5FXI074w6M2BK68aUs=) 33: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 34: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 35: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: a22bi8QBozuWRvGhUun7L0wrriz88Rw1cXLDfh4ccdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:99:81:ff:a6:34:95:59:e7:95:10:42:1e:88:3e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Apr 27 11:00:59 2026 GMT Not After : Apr 28 11:00:59 2026 GMT Subject: CN=e650344e0c55d756a2773251551803d03696e316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:58:fe:3f:49:f1:e9:82:5e:64:a9:af:27: c6:5f:48:a1:5a:9f:cd:d6:2b:0c:2a:eb:fd:f0:d5: 77:3a:ef:ec:52:af:28:84:18:d0:8b:47:e5:8a:1d: 6c:0d:23:81:1a:38:86:62:19:18:f1:9d:fe:8c:9d: ce:3d:1c:44:ba:13:4f:b6:b1:64:71:38:a4:1e:75: 60:81:11:f1:5e:ca:1b:48:03:4e:16:01:60:ec:0b: ad:bd:a6:ca:52:6c:eb:c6:5c:c5:37:1d:67:78:51: d0:3d:44:5f:55:7f:58:1e:ba:96:c7:74:f6:4b:80: ba:0a:43:97:2c:36:48:d2:de:2b:7c:3e:75:92:3f: 9e:12:5e:34:f4:e1:d3:23:61:f8:fa:a7:58:d4:7c: c7:7c:e1:53:d2:28:e0:10:e2:bf:93:fc:0d:34:32: 5e:39:30:ec:f9:e2:ed:da:2b:22:a5:f6:59:0d:f3: 88:b0:d1:fe:86:2d:df:d8:57:65:2f:5a:36:e8:2e: ad:1b:4e:79:77:b8:37:02:16:18:b3:41:73:02:62: 93:fc:60:83:f7:5f:78:8b:c7:1e:f6:54:03:d6:fd: 4a:6e:7b:66:b2:53:a2:b2:13:d4:73:e6:44:99:9a: 15:30:4f:69:77:03:1f:db:31:c8:f0:91:17:09:24: 49:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:50:34:4E:0C:55:D7:56:A2:77:32:51:55:18:03:D0:36:96:E3:16 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:cd:cc:eb:44:de:51:ca:bc:c9:b6:dd:1c:69:a6:8d:a0:48: 87:7d:fe:01:05:d5:a8:51:c8:c9:fe:77:f6:c3:9d:47:05:a6: d8:e5:e6:ab:0a:c7:21:62:66:a3:9d:c3:aa:c7:72:2d:b7:32: 54:5e:c4:08:08:ee:c4:28:cd:66:b7:f3:4c:0f:11:21:fc:6e: 09:99:29:15:da:fe:32:ee:9d:cd:b4:4b:b2:38:55:1a:9c:af: 83:9b:10:bf:db:d8:cb:10:b7:88:a6:28:fe:32:3f:ed:49:a5: b4:77:74:93:ba:be:df:a4:79:17:86:3e:ed:02:61:4d:2b:2d: ac:71:53:5d:68:1b:2f:bd:3b:d5:48:6c:d5:6e:2f:b4:41:b2: 38:dd:a2:98:de:ef:5b:57:53:74:68:fb:45:df:5b:1f:74:2f: 23:77:9c:0c:b9:10:e9:8f:0e:07:b8:97:35:ef:98:b1:40:17: c1:9e:b6:12:a6:ad:c0:48:6c:5d:06:7f:f0:fc:ad:66:dc:f0: 4e:e9:7a:23:ce:d8:fe:b1:2c:12:7f:05:83:ec:ac:59:12:b1: fe:fd:40:14:04:ee:f4:f0:7c:fd:f0:c5:be:ab:e2:8b:ae:55: 39:ab:4b:01:e1:bd:a9:07:8f:78:01:29:0d:9d:9d:1d:23:a5: 0e:fd:c0:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OmYH/pjSVWeeVEEIeiD7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwNDI3MTEwMDU5WhcNMjYwNDI4MTEwMDU5WjAzMTEwLwYDVQQD EyhlNjUwMzQ0ZTBjNTVkNzU2YTI3NzMyNTE1NTE4MDNkMDM2OTZlMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgFY/j9J8emCXmSpryfGX0ihWp/N 1isMKuv98NV3Ou/sUq8ohBjQi0flih1sDSOBGjiGYhkY8Z3+jJ3OPRxEuhNPtrFk cTikHnVggRHxXsobSANOFgFg7AutvabKUmzrxlzFNx1neFHQPURfVX9YHrqWx3T2 S4C6CkOXLDZI0t4rfD51kj+eEl409OHTI2H4+qdY1HzHfOFT0ijgEOK/k/wNNDJe OTDs+eLt2isipfZZDfOIsNH+hi3f2FdlL1o26C6tG055d7g3AhYYs0FzAmKT/GCD 9194i8ce9lQD1v1KbntmslOishPUc+ZEmZoVME9pdwMf2zHI8JEXCSRJsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZQNE4MVddWoncyUVUYA9A2luMWMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN83M60Te Ucq8ybbdHGmmjaBIh33+AQXVqFHIyf539sOdRwWm2OXmqwrHIWJmo53DqsdyLbcy VF7ECAjuxCjNZrfzTA8RIfxuCZkpFdr+Mu6dzbRLsjhVGpyvg5sQv9vYyxC3iKYo /jI/7UmltHd0k7q+36R5F4Y+7QJhTSstrHFTXWgbL7071Uhs1W4vtEGyON2imN7v W1dTdGj7Rd9bH3QvI3ecDLkQ6Y8OB7iXNe+YsUAXwZ62EqatwEhsXQZ/8PytZtzw Tul6I87Y/rEsEn8Fg+ysWRKx/v1AFATu9PB8/fDFvqvii65VOatLAeG9qQePeAEp DZ2dHSOlDv3A5g== -----END CERTIFICATE-----Generated at Mon Apr 27 14:34:49 2026 by rpki-client