$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: a/ahjxJk/2Zg3wXnxNdWvH2ly3jfhQzIxkbvg9T1Cd4= Subject key identifier: E1:D2:18:60:13:0F:84:46:48:FA:4A:A3:26:99:BA:7F:06:51:34:FF Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019DD2AD962934C7E9B190480411AAFC2A9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 12AD Signing time: Tue 28 Apr 2026 06:01:24 +0000 Manifest this update: Tue 28 Apr 2026 06:01:24 +0000 Manifest next update: Wed 29 Apr 2026 06:01:24 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: mtDuoLlLNj0/Q9/k8AkNEnpuZ9LnT1eBSTETAH0BJr0=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Apr 2026 02:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d2:ad:96:29:34:c7:e9:b1:90:48:04:11:aa:fc:2a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Apr 28 06:01:24 2026 GMT Not After : Apr 29 06:01:24 2026 GMT Subject: CN=e1d21860130f844648fa4aa32699ba7f065134ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:72:cc:bb:cc:3c:52:6b:ea:27:72:a7:30: f7:27:79:f1:d0:d5:3c:c3:f0:2b:d4:7a:b2:b1:ce: c0:85:7e:95:37:29:0d:93:cc:b5:24:0e:0a:b8:79: ba:68:80:c7:fe:e1:96:17:84:09:f6:cc:2c:ca:2a: 7b:df:5a:64:a0:ae:e4:26:e8:50:8a:c1:29:e6:bb: 5a:42:bf:39:4b:11:76:50:64:e8:5f:c3:91:ed:9b: 0d:d9:6f:35:4f:3f:95:96:f3:29:3f:58:bd:da:e3: a2:4b:f6:1d:de:d8:4c:27:6f:a1:f8:4d:ac:3f:38: bb:d1:41:12:9a:55:5d:e7:b3:4f:17:47:b1:01:ea: f2:89:34:e1:de:de:c1:df:03:10:da:6e:98:3a:d0: f7:0c:90:c8:6d:ab:4f:d8:71:43:6d:1c:76:98:97: 0a:0c:22:9c:00:ce:d4:f7:76:ba:a1:69:f2:b4:68: 4b:e1:35:45:56:a2:94:51:75:ba:85:ac:fb:a2:fa: 33:5e:00:4f:6d:6f:52:0d:b2:d0:3f:71:7d:95:a0: 6f:d9:77:aa:aa:74:fd:c6:ef:6e:3d:00:e0:7d:8b: 94:ad:40:43:a3:01:42:bc:b5:f6:9e:50:70:14:57: 54:c3:5c:fd:f6:1a:d9:73:8e:fc:4b:87:d1:20:e3: 50:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D2:18:60:13:0F:84:46:48:FA:4A:A3:26:99:BA:7F:06:51:34:FF X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:cc:d7:43:8d:cd:41:81:04:3e:6a:e7:32:47:36:13:ed:60: 48:bb:39:44:3e:e1:99:0f:64:c5:4b:3d:5d:4c:36:c6:43:c3: e6:6f:99:96:38:ba:34:29:ec:6a:bb:0a:b0:12:c3:86:84:2f: 59:78:7a:3f:83:ec:34:d6:20:96:da:f4:e5:41:6b:b6:9a:82: 31:22:eb:59:3a:1f:96:57:51:67:32:ac:f0:55:cb:2d:85:e6: de:09:79:02:c1:34:f3:29:13:cb:29:8e:a7:03:c1:6d:7d:43: f7:98:4b:87:a9:a7:c2:db:02:c9:ae:51:fc:31:aa:9c:42:2c: cf:96:ec:bf:66:20:1d:e3:c6:a4:b3:b8:38:b1:67:88:2c:2a: 58:e8:7a:e0:7c:88:9f:c4:0f:d8:f3:24:b0:35:e9:3d:b3:f3: 8f:48:f0:4e:08:56:95:c1:a8:ed:cd:7a:08:77:f2:5c:69:f7: 17:a8:9d:60:04:ae:43:5a:f7:58:e0:b7:9e:e9:17:a9:0f:1e: 5c:aa:6a:26:2b:1a:8a:4c:40:24:0d:a0:61:53:d4:25:1a:7b: 36:dc:66:eb:26:a8:8c:f1:73:01:8d:bd:ea:ca:04:91:2e:ca: 89:d9:bb:b7:1c:55:05:84:30:94:ca:18:94:73:1d:03:78:74: 48:ab:55:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3SrZYpNMfpsZBIBBGq/CqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwNDI4MDYwMTI0WhcNMjYwNDI5MDYwMTI0WjAzMTEwLwYDVQQD EyhlMWQyMTg2MDEzMGY4NDQ2NDhmYTRhYTMyNjk5YmE3ZjA2NTEzNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnZyzLvMPFJr6idypzD3J3nx0NU8 w/Ar1Hqysc7AhX6VNykNk8y1JA4KuHm6aIDH/uGWF4QJ9swsyip731pkoK7kJuhQ isEp5rtaQr85SxF2UGToX8OR7ZsN2W81Tz+VlvMpP1i92uOiS/Yd3thMJ2+h+E2s Pzi70UESmlVd57NPF0exAeryiTTh3t7B3wMQ2m6YOtD3DJDIbatP2HFDbRx2mJcK DCKcAM7U93a6oWnytGhL4TVFVqKUUXW6haz7ovozXgBPbW9SDbLQP3F9laBv2Xeq qnT9xu9uPQDgfYuUrUBDowFCvLX2nlBwFFdUw1z99hrZc478S4fRIONQUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHSGGATD4RGSPpKoyaZun8GUTT/MB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcszXQ43N QYEEPmrnMkc2E+1gSLs5RD7hmQ9kxUs9XUw2xkPD5m+Zlji6NCnsarsKsBLDhoQv WXh6P4PsNNYgltr05UFrtpqCMSLrWToflldRZzKs8FXLLYXm3gl5AsE08ykTyymO pwPBbX1D95hLh6mnwtsCya5R/DGqnEIsz5bsv2YgHePGpLO4OLFniCwqWOh64HyI n8QP2PMksDXpPbPzj0jwTghWlcGo7c16CHfyXGn3F6idYASuQ1r3WOC3nukXqQ8e XKpqJisaikxAJA2gYVPUJRp7Ntxm6yaojPFzAY296soEkS7Kidm7txxVBYQwlMoY lHMdA3h0SKtVMQ== -----END CERTIFICATE-----Generated at Tue Apr 28 11:54:09 2026 by rpki-client