$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: Wkw5KkrAI8VDqpOVTDc5fvzgM19mCIr5WPd59Zd2MUk= Subject key identifier: 3E:59:E3:CC:D5:8B:BC:F6:5A:09:48:5D:78:60:F6:7F:AD:9F:12:62 Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 019DCDF4D3D6CDD8BBDDC7ABD0B0472BF819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 14C6 Signing time: Mon 27 Apr 2026 08:01:07 +0000 Manifest this update: Mon 27 Apr 2026 08:01:07 +0000 Manifest next update: Tue 28 Apr 2026 08:01:07 +0000 Files and hashes: 1: 6qBOGIzy7SiE5aHoDtHWinTh2oI.roa (hash: KwYB7/zyOeuIegeDk01/5M8IIa6sVcCvAJ0ZuQL1yIE=) 2: A3dfbS-b6385QXbD4gqPyZDygnI.roa (hash: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4=) 3: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: W6vGvZs2rPMwcxjqThQn4BQP3WYpU9oQHBxD0SVPcx8=) 4: M3X3dm-8It7aMXQj1y54UfL58OM.roa (hash: 7bUApRHysWlBDgJo+0traB3WXa7dB6bicxRUCK/I0eI=) 5: RxzZhT8fBiEGIwzJcpEaVq4187g.roa (hash: hquVSPsZNeqlCDz0r9h6cmg+2UHwUyJ0mqDqk+VOViY=) 6: URKvTjDp4aRxdSZ3jqDjwv8D8go.roa (hash: 0rxLDrLwqqP9CnkuagDXnUpxuRr/vAmcV/9SQj91sog=) 7: VIoe5vtniIMNu_oPEWff-lwSqrw.roa (hash: 3k0VjZdIDMeiSnCUwM6+f+LSTU02mg7Bx1Owb60WuIE=) 8: _eOaEicMkKKbiwUmCfYmS46987o.roa (hash: BD38gTS64MApM1VCH/ZNlIeeCLbbXCbnCN+Xqd56/3o=) 9: bSb1vKlFqm6Lgoy9mUt1MbjszKU.roa (hash: 8Rm1aKWGejiopvOQal7M9IGwEZUMfEE7E/dgp4snH3E=) 10: ecI9WwfCcCzWrmDmHhs2EyFDQJM.roa (hash: F5YXv2pp9vRYKIztKcSv4xzwJ07F66Zhmicw5zjO8J8=) 11: ft0VCR9IS3VMAgUDh10GOu9PLZE.roa (hash: 2folTB1j+SZaT+1+FVh+nOf0J1JfCJxhCtpk4te0AZM=) 12: ktxPtq6QBIdiSOZ68pA9GADZGkA.roa (hash: nKwrZvWFwYhUKsU2Xr6N7bIKsHUx8g94vR6U6JSn7Rw=) 13: oDF8isOJjyEJhYEJCgEsnjBbHWk.roa (hash: 6eDaCiZYBtD9bJDiBCS6z1HiWa8aHX6Yc2oe3UfDymI=) 14: wdbxHLFVBNdWh2qGHilCZZD7-g0.roa (hash: 90fXHeqU2neAZl01CJ/fB5l+GTvQAN5HQEWOMc2pyGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:f4:d3:d6:cd:d8:bb:dd:c7:ab:d0:b0:47:2b:f8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Apr 27 08:01:07 2026 GMT Not After : Apr 28 08:01:07 2026 GMT Subject: CN=3e59e3ccd58bbcf65a09485d7860f67fad9f1262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:6a:2a:00:fa:95:00:e5:9b:75:a5:dc:63: 57:c3:8f:5d:e6:39:a7:c9:35:23:ea:e6:ed:19:51: 49:0e:61:c0:73:20:97:22:b4:23:d9:8d:2b:44:ab: 2a:9c:0f:c4:d0:bb:26:4b:83:8f:ee:84:7f:58:f5: 5a:35:a9:a3:18:69:12:cc:3c:3e:3e:f0:63:99:c0: 3c:b9:2c:fd:37:da:d3:d6:41:1c:77:43:4c:1d:63: d3:8d:14:4b:96:d3:d5:06:aa:88:bd:1c:c2:b8:8a: 08:8b:07:7e:23:4a:d8:ff:ee:fa:c2:7f:c2:45:4b: 26:72:a1:0f:c7:f4:9c:7f:ba:48:3f:9f:bc:8b:e5: 44:23:97:e3:55:44:49:6a:8d:37:03:ba:31:ff:d4: 6d:eb:50:93:96:5e:e9:d7:2d:88:34:b7:30:ea:6f: d1:78:bc:e3:33:02:43:68:9e:f1:16:88:be:92:42: 8d:d3:6a:9b:d7:b4:cf:95:9e:16:31:1a:1f:91:8d: 86:ac:5d:4a:9f:9c:9c:a0:e1:3f:20:74:c3:0e:bc: 7a:41:e2:ab:20:a9:c5:40:2d:ca:d6:4a:b6:08:4c: a5:d5:d7:5d:f0:25:38:6e:ea:53:22:73:7f:32:45: 7b:53:47:a0:f7:e6:a4:de:95:8d:95:01:a2:f7:9e: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:59:E3:CC:D5:8B:BC:F6:5A:09:48:5D:78:60:F6:7F:AD:9F:12:62 X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:05:ae:d7:c5:10:d5:22:b2:03:27:49:5b:c0:3f:3b:ee:61: d8:b2:ab:74:1d:e4:81:31:eb:ba:2e:23:80:25:79:b0:7a:54: 91:7f:78:fa:90:85:e6:02:b1:68:77:d9:ee:c8:dc:17:e2:c1: b0:ac:07:21:26:36:99:66:29:38:33:df:db:90:cf:52:32:3b: 26:dd:ed:cd:33:57:5b:90:0b:92:1f:2b:2a:38:89:18:91:24: 9c:cf:2b:b3:ec:5e:a6:ee:a7:5c:3e:cd:8f:c1:1a:c1:43:d3: 06:d9:9f:37:98:78:8a:7c:f8:d7:6e:05:a8:4d:5e:23:99:d8: ce:a4:6c:28:eb:53:0d:6e:d7:8a:3c:c3:45:c7:0d:e4:b7:35: 9f:f6:08:7a:a6:4e:3f:a3:bb:be:61:22:af:85:bd:6b:4a:aa: cb:fe:0c:20:a6:2a:0b:9d:ee:cc:28:43:8e:27:4e:d0:f9:bc: b5:60:b5:ff:a3:22:60:73:ab:3f:1d:d4:24:a4:04:db:e6:76: 21:24:83:56:fc:8b:91:4b:9d:74:9c:d0:c1:32:35:aa:e3:f2: 50:c8:c4:95:f5:cd:fd:a4:9e:11:d5:5b:3b:bb:c2:63:96:c0: 55:ff:c2:c5:c3:0d:88:40:12:aa:39:32:25:8e:0e:7a:ba:d5: f6:31:f5:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3N9NPWzdi73cer0LBHK/gZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjYwNDI3MDgwMTA3WhcNMjYwNDI4MDgwMTA3WjAzMTEwLwYDVQQD EygzZTU5ZTNjY2Q1OGJiY2Y2NWEwOTQ4NWQ3ODYwZjY3ZmFkOWYxMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscZqKgD6lQDlm3Wl3GNXw49d5jmn yTUj6ubtGVFJDmHAcyCXIrQj2Y0rRKsqnA/E0LsmS4OP7oR/WPVaNamjGGkSzDw+ PvBjmcA8uSz9N9rT1kEcd0NMHWPTjRRLltPVBqqIvRzCuIoIiwd+I0rY/+76wn/C RUsmcqEPx/Scf7pIP5+8i+VEI5fjVURJao03A7ox/9Rt61CTll7p1y2INLcw6m/R eLzjMwJDaJ7xFoi+kkKN02qb17TPlZ4WMRofkY2GrF1Kn5ycoOE/IHTDDrx6QeKr IKnFQC3K1kq2CEyl1ddd8CU4bupTInN/MkV7U0eg9+ak3pWNlQGi956PmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5Z48zVi7z2WglIXXhg9n+tnxJiMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwWu18UQ 1SKyAydJW8A/O+5h2LKrdB3kgTHrui4jgCV5sHpUkX94+pCF5gKxaHfZ7sjcF+LB sKwHISY2mWYpODPf25DPUjI7Jt3tzTNXW5ALkh8rKjiJGJEknM8rs+xepu6nXD7N j8EawUPTBtmfN5h4inz4124FqE1eI5nYzqRsKOtTDW7XijzDRccN5Lc1n/YIeqZO P6O7vmEir4W9a0qqy/4MIKYqC53uzChDjidO0Pm8tWC1/6MiYHOrPx3UJKQE2+Z2 ISSDVvyLkUuddJzQwTI1quPyUMjElfXN/aSeEdVbO7vCY5bAVf/CxcMNiEASqjky JY4OerrV9jH1jg== -----END CERTIFICATE-----Generated at Mon Apr 27 11:03:59 2026 by rpki-client