$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: tBwDcfJ5MZRpdGoCp20HkvEEqYGSFU+v25rLk7qMi+A= Subject key identifier: 4E:3A:00:9A:62:62:03:10:7E:32:A1:32:95:DD:46:C0:4E:55:C4:A7 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019DB058298AC997475FEAF6CFF9A853A4ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 168D Signing time: Tue 21 Apr 2026 14:01:00 +0000 Manifest this update: Tue 21 Apr 2026 14:01:00 +0000 Manifest next update: Wed 22 Apr 2026 14:01:00 +0000 Files and hashes: 1: 5izoM-ae0viPYeMa8vG_OMdcCFM.roa (hash: TwuLhMgA2SHR4gXSc9/RCEg/7dBujziBPA56lp4yzpw=) 2: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=) 3: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=) 4: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=) 5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: Qmxu1lpqoFT3es6Ak4gIvYyNqilBleTtkMxN5fgbheM=) 6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=) 7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=) 8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=) 9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=) 10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=) 11: qJOi4zVPIJeiBz6kzCUQLpwMngk.roa (hash: vqduf5OrqJ9boER+M0PF82VqTnPYijX9elPDZEa03wo=) 12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=) 13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=) 14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b0:58:29:8a:c9:97:47:5f:ea:f6:cf:f9:a8:53:a4:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Apr 21 14:01:00 2026 GMT Not After : Apr 22 14:01:00 2026 GMT Subject: CN=4e3a009a626203107e32a13295dd46c04e55c4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:16:a1:70:bb:22:68:42:83:7f:67:20:a9: 4f:4d:4b:f5:39:34:c0:33:ac:fd:b6:34:19:d7:20: 50:48:2b:62:db:28:fd:29:85:12:d1:71:83:28:b1: f3:08:ff:af:e7:ef:5d:cf:17:41:09:b3:6e:c6:1f: d0:44:0c:07:6c:72:88:e5:e6:8a:f4:a8:f1:6c:24: f7:66:ce:3c:c0:76:e9:8f:4f:b5:46:f0:c4:5b:4d: 0d:fe:2f:0b:61:a4:ac:6f:df:2d:ee:7e:54:b2:2a: e5:f2:5a:a0:85:ec:7e:bd:e6:bd:08:03:25:f9:b3: 73:66:c4:8a:a2:c6:c1:f3:04:6e:57:05:2c:ad:ad: df:9c:2f:9d:57:4c:16:1e:64:4b:10:3b:40:1c:ba: 96:f6:7d:5a:83:e9:05:37:84:ec:88:40:eb:6d:b9: 95:e0:be:34:d9:7e:d9:7d:47:9a:b2:3c:0e:b1:95: a2:b3:1a:2c:64:69:82:59:fe:44:44:9e:7d:d0:cf: c7:0d:2d:a7:64:80:e9:c7:bf:ca:41:6c:c8:a9:55: 85:e5:76:fc:3b:6b:b4:bb:43:5d:13:77:e1:41:03: 0b:27:97:e5:b6:91:f8:fe:06:4a:82:aa:cc:fd:3f: 50:e0:ba:13:15:a8:92:6e:de:83:b8:c1:2e:78:8a: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:00:9A:62:62:03:10:7E:32:A1:32:95:DD:46:C0:4E:55:C4:A7 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a4:d2:29:05:00:fe:e8:be:32:a8:2a:03:85:b8:43:04:89: cd:ca:e2:9a:b8:62:ea:8a:ed:57:25:da:81:49:38:e3:13:43: 62:05:92:4e:a1:bc:32:f8:0b:06:ab:9f:95:59:21:d1:7a:fd: b2:fb:85:43:87:22:da:04:18:e7:6d:65:c2:7d:c2:17:7c:16: 6d:e3:70:e3:0b:97:40:da:a3:ce:5a:ef:df:77:f4:54:c2:24: 6a:e9:12:d5:21:e3:f1:7f:96:f6:24:7a:87:b6:5f:a6:dc:c3: d3:4b:2a:aa:48:c7:43:cb:ed:e5:6c:03:e7:29:e8:4c:b3:dd: 44:11:1b:b5:50:ec:72:62:ae:fd:e2:a0:c1:a3:40:c8:ec:5d: 0a:01:30:ba:2b:88:fa:83:95:a9:a1:87:3f:a4:99:72:cf:11: f4:85:a3:f1:ab:3f:f4:12:4e:ad:7c:3b:d0:8a:9b:69:ff:e3: 73:6b:99:74:a4:fb:29:a8:c0:98:8d:ca:db:3c:da:b4:85:1b: 95:df:d6:d0:fd:2d:f3:6c:42:94:cb:58:8b:38:f4:65:e3:e8: 74:b1:e6:8d:c8:8c:c0:9b:6a:02:21:d9:84:6a:1d:c0:41:36: d7:75:88:f2:65:2e:ce:50:3d:bf:bd:b9:06:23:ed:28:90:f0: 87:b1:d2:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2wWCmKyZdHX+r2z/moU6TtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwNDIxMTQwMTAwWhcNMjYwNDIyMTQwMTAwWjAzMTEwLwYDVQQD Eyg0ZTNhMDA5YTYyNjIwMzEwN2UzMmExMzI5NWRkNDZjMDRlNTVjNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPcWoXC7ImhCg39nIKlPTUv1OTTA M6z9tjQZ1yBQSCti2yj9KYUS0XGDKLHzCP+v5+9dzxdBCbNuxh/QRAwHbHKI5eaK 9KjxbCT3Zs48wHbpj0+1RvDEW00N/i8LYaSsb98t7n5Usirl8lqghex+vea9CAMl +bNzZsSKosbB8wRuVwUsra3fnC+dV0wWHmRLEDtAHLqW9n1ag+kFN4TsiEDrbbmV 4L402X7ZfUeasjwOsZWisxosZGmCWf5ERJ590M/HDS2nZIDpx7/KQWzIqVWF5Xb8 O2u0u0NdE3fhQQMLJ5fltpH4/gZKgqrM/T9Q4LoTFaiSbt6DuMEueIp94wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE46AJpiYgMQfjKhMpXdRsBOVcSnMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqTSKQUA /ui+MqgqA4W4QwSJzcrimrhi6ortVyXagUk44xNDYgWSTqG8MvgLBquflVkh0Xr9 svuFQ4ci2gQY521lwn3CF3wWbeNw4wuXQNqjzlrv33f0VMIkaukS1SHj8X+W9iR6 h7ZfptzD00sqqkjHQ8vt5WwD5ynoTLPdRBEbtVDscmKu/eKgwaNAyOxdCgEwuiuI +oOVqaGHP6SZcs8R9IWj8as/9BJOrXw70Iqbaf/jc2uZdKT7KajAmI3K2zzatIUb ld/W0P0t82xClMtYizj0ZePodLHmjciMwJtqAiHZhGodwEE213WI8mUuzlA9v725 BiPtKJDwh7HSeA== -----END CERTIFICATE-----Generated at Wed Apr 22 00:26:33 2026 by rpki-client