$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft File: 02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json) Hash identifier: f2RAad3+l+DGafNMZ1hGZ24nmvQhnr/HCFdFW7bCww8= Subject key identifier: 83:13:9D:2C:31:B3:E2:F3:A7:69:4E:38:78:07:6B:F8:57:30:EB:6D Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Certificate serial: 019DD5E59C4D96C1FEB470DE5434E90034A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft Manifest number: 18F3 Signing time: Tue 28 Apr 2026 21:01:27 +0000 Manifest this update: Tue 28 Apr 2026 21:01:27 +0000 Manifest next update: Wed 29 Apr 2026 21:01:27 +0000 Files and hashes: 1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: MXjxBiW8LWeE/UlP4H6984T/0qJhIKeM8zFmil86ql4=) 2: 3KHb4LyjMb7GTQzfARliH9VGTGI.roa (hash: u+uDt3VaqBj8WsuUzznZC8YIOei+XhXe+h41yVBm6d0=) 3: 461xArYNzHoC1nVBFiDZR5u9vDk.roa (hash: 6q2TnpiTZXieMRIqi2VPrqkjbo1r/JTnD7UrhdGGs1c=) 4: 7uRg_T_oiggw4J55UfjOrhQbRRk.roa (hash: Zvntcukjv/uv2VGWPB49suxGMeRDIq3Yqb/Srhl+YdA=) 5: 8WV_PwWdGHGoltPCGvUZ5Zdt0u0.roa (hash: bgI/tjUhh3faNiwUz0lFyl3PrQvPxHShPGJ4WWbVK9U=) 6: 9uaqn-0k0V9eihEbl_1qKZiHOsI.roa (hash: lX7dZ9C+1SMN2ATw1cyM18wsI8aOAPBbMUKXBKlIvtI=) 7: EIEUE3ETjR42j8AzPFmGaM3QPUA.roa (hash: dke7pHoGAOXmMbmMcGhOKmr8OHRiGFf0Ci92knKXCs8=) 8: UPuwaOxvAn_WKqweTSAjA0k5KMc.roa (hash: 1l216jqafFRv6rwVNGY7SG/c/eKsgMl5lwtfNPrMUB4=) 9: lQGqNWtAEeW1v0ZoaLS6zM2cAKg.roa (hash: CWDgSSnIsyWB1Z7WNe/hpRHqTHPu2VcJNOHIRuOk0WE=) 10: sZ1Q72ClTj5f73HDar0G-SATsrU.roa (hash: jrtQOenli72Qacdq88MxRlE81nSBmCwOeAYmo/28Pbg=) 11: zgJ_G-9np5VpQcmCxgQMVjklSkQ.roa (hash: 5Tc0Gy3iK8Ur64lX58sfY70FGviygZFZEFyBRuvFACw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Apr 2026 14:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d5:e5:9c:4d:96:c1:fe:b4:70:de:54:34:e9:00:34:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Validity Not Before: Apr 28 21:01:27 2026 GMT Not After : Apr 29 21:01:27 2026 GMT Subject: CN=83139d2c31b3e2f3a7694e3878076bf85730eb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:16:32:cd:72:b0:16:0c:ea:b2:76:52:78: 87:46:92:db:d4:5a:0e:13:d9:93:e6:0c:26:e0:70: 4a:52:7c:7d:b8:c5:8b:9d:fa:b9:33:84:5a:ba:30: f7:a1:70:93:64:40:8f:7b:9c:32:65:f7:c7:4a:b6: a5:f8:38:95:00:fc:39:d9:37:81:96:92:b5:a3:28: dc:41:a3:35:c5:85:8c:82:eb:be:98:d0:3f:09:23: 1e:0f:8b:37:a8:94:2d:e9:bf:9d:a6:3f:cc:3f:ee: e2:9d:87:0b:da:b9:b6:58:c6:d7:ba:05:47:e2:c5: 1c:10:49:1c:7a:45:0d:e5:63:48:9d:53:30:dd:7e: 3b:9c:61:0a:d9:72:ff:43:2a:23:0f:70:46:fc:32: fb:25:3c:2f:8e:b9:74:0f:7d:0e:cb:77:32:99:81: a9:32:24:e4:74:53:db:52:f1:01:a3:b7:25:52:06: 84:08:75:92:76:0b:2d:41:0f:b1:3f:b8:43:26:86: 5a:d0:72:f8:e8:d9:aa:37:e4:1b:33:b1:33:42:02: ec:6f:c4:75:a5:e3:39:6a:98:bc:1e:af:1a:e9:09: 6c:26:92:b0:ad:ca:cb:39:e3:f8:b5:71:65:3e:c5: 9b:8a:4b:1e:08:a1:c4:a8:09:0e:ea:a6:e2:58:6b: 6d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:13:9D:2C:31:B3:E2:F3:A7:69:4E:38:78:07:6B:F8:57:30:EB:6D X509v3 Authority Key Identifier: keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:95:dd:d0:20:4b:2f:11:f2:48:bb:9c:ed:43:b7:84:7b:99: 15:52:6c:ff:b4:20:d1:b3:44:96:15:f5:46:88:8b:03:3e:b8: 60:83:fb:71:fa:3b:da:5e:cf:fe:85:be:ab:2e:63:a6:a6:35: 4e:4a:1b:01:25:06:8b:e6:36:f6:ea:4d:05:9e:96:c6:39:56: 84:4f:d9:04:a0:d6:5e:37:90:0a:55:0a:d2:76:68:48:44:f6: bc:f7:2f:d6:08:1b:76:d6:c4:5c:91:6e:9c:ec:2e:88:78:d8: 0e:dc:1d:51:67:2c:b4:ac:48:56:1b:e9:6c:29:30:38:25:aa: 1d:3f:f8:a5:34:a3:5e:db:50:cf:fc:11:21:95:b4:ac:a2:3a: c4:ba:15:68:ae:d9:33:e4:5a:b6:d5:8e:94:89:8e:a5:93:59: ee:ee:97:45:6e:b9:05:45:11:64:14:32:e2:42:cb:f3:65:f6: ef:e9:9f:a5:02:80:90:e0:fd:90:59:2a:0c:8f:af:6c:8f:8c: f8:b7:e3:ca:44:b0:5f:f6:d3:c5:32:d2:bb:60:cf:37:c6:86: e7:45:cb:16:36:69:db:45:71:32:1b:28:ad:1c:50:16:55:86: 66:71:57:54:12:34:f2:97:3c:e8:de:49:b0:18:61:70:f6:51: 1f:6b:42:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3V5ZxNlsH+tHDeVDTpADSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx ZDNjYTUwHhcNMjYwNDI4MjEwMTI3WhcNMjYwNDI5MjEwMTI3WjAzMTEwLwYDVQQD Eyg4MzEzOWQyYzMxYjNlMmYzYTc2OTRlMzg3ODA3NmJmODU3MzBlYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH4WMs1ysBYM6rJ2UniHRpLb1FoO E9mT5gwm4HBKUnx9uMWLnfq5M4RaujD3oXCTZECPe5wyZffHSral+DiVAPw52TeB lpK1oyjcQaM1xYWMguu+mNA/CSMeD4s3qJQt6b+dpj/MP+7inYcL2rm2WMbXugVH 4sUcEEkcekUN5WNInVMw3X47nGEK2XL/QyojD3BG/DL7JTwvjrl0D30Oy3cymYGp MiTkdFPbUvEBo7clUgaECHWSdgstQQ+xP7hDJoZa0HL46NmqN+QbM7EzQgLsb8R1 peM5api8Hq8a6QlsJpKwrcrLOeP4tXFlPsWbikseCKHEqAkO6qbiWGttWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMTnSwxs+Lzp2lOOHgHa/hXMOttMB8GA1UdIwQY MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt MWM2ODBhZGY3YTI2LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2 LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZXd0CBL LxHySLuc7UO3hHuZFVJs/7Qg0bNElhX1RoiLAz64YIP7cfo72l7P/oW+qy5jpqY1 TkobASUGi+Y29upNBZ6WxjlWhE/ZBKDWXjeQClUK0nZoSET2vPcv1ggbdtbEXJFu nOwuiHjYDtwdUWcstKxIVhvpbCkwOCWqHT/4pTSjXttQz/wRIZW0rKI6xLoVaK7Z M+RattWOlImOpZNZ7u6XRW65BUURZBQy4kLL82X27+mfpQKAkOD9kFkqDI+vbI+M +LfjykSwX/bTxTLSu2DPN8aG50XLFjZp20VxMhsorRxQFlWGZnFXVBI08pc86N5J sBhhcPZRH2tC0A== -----END CERTIFICATE-----Generated at Tue Apr 28 23:59:16 2026 by rpki-client