$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json) Hash identifier: S0pY5D/HCvJ0JbwJBBKp3ixfwFp9vTkVhl0JbOsQgMI= Subject key identifier: 37:AD:CB:3A:B7:3F:95:A3:24:F6:F0:78:DA:09:5B:55:9D:9A:9F:10 Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16 Certificate serial: 019DCE6353FB69C6F48998EA3334E791C1D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft Manifest number: 18EA Signing time: Mon 27 Apr 2026 10:01:49 +0000 Manifest this update: Mon 27 Apr 2026 10:01:49 +0000 Manifest next update: Tue 28 Apr 2026 10:01:49 +0000 Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=) 2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=) 3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=) 4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=) 5: FKX17PHtkRiTG0VO4fdkemmP9q0.roa (hash: 46njTd7Whv8oDcKQQcq166dpo8DO+HMFvA14eGT2kvA=) 6: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=) 7: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=) 8: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: imZeUaBL8hDTQZVcfKUif8O+QbBN/9FCB1qxjtfXG0E=) 9: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=) 10: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=) 11: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:63:53:fb:69:c6:f4:89:98:ea:33:34:e7:91:c1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Validity Not Before: Apr 27 10:01:49 2026 GMT Not After : Apr 28 10:01:49 2026 GMT Subject: CN=37adcb3ab73f95a324f6f078da095b559d9a9f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:71:8e:d6:8c:b5:cd:c3:4a:3a:ff:f2:09:3a: da:71:08:95:81:c3:e0:39:b1:c8:2e:1c:04:82:3a: fd:1f:7b:c1:c0:d8:b9:43:5a:18:20:84:3f:ac:e7: 1b:a8:d2:54:92:b4:44:83:2e:64:bb:ba:74:c7:15: 6b:a5:28:73:d0:be:ff:db:f3:5e:10:7e:0c:70:d9: 74:24:ae:70:fd:e0:a8:c1:66:5c:09:21:6c:b4:e6: ee:48:84:bd:52:dd:d9:84:9e:18:3c:43:e3:a8:07: c3:d8:16:cc:57:6c:5d:b3:1c:1e:ef:05:1e:ea:75: bd:9c:25:c5:6e:17:b9:31:f6:d3:07:7f:b8:47:12: 0a:84:05:69:fd:23:eb:e5:0b:14:fc:1b:2e:8c:28: d8:4a:16:ea:66:6b:f6:c5:86:2f:86:9d:64:62:c5: 18:3c:1c:2f:49:bc:58:b6:47:b2:e3:f1:0c:25:72: c3:8d:84:ac:d4:ec:83:83:c3:ce:10:fc:62:d7:54: d1:ca:c6:ee:fb:9a:a4:8a:56:45:ef:67:13:47:51: cc:e8:22:e3:7a:7b:eb:5d:b0:33:cf:61:1b:9c:6d: d7:93:0f:ae:ab:24:ba:d2:cb:3c:c3:96:e6:d1:b1: 70:58:26:10:b3:a3:3c:2e:8f:bc:b6:6f:4c:14:50: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AD:CB:3A:B7:3F:95:A3:24:F6:F0:78:DA:09:5B:55:9D:9A:9F:10 X509v3 Authority Key Identifier: keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d0:ca:7d:6e:58:bf:97:ba:19:58:1b:8b:0a:7f:2c:32:7f: 70:b6:bc:1b:8d:6e:3a:d8:d9:dd:ea:36:62:21:f2:07:03:89: d7:61:5f:80:d7:7e:7d:d5:56:54:03:b1:b2:df:a6:4a:34:bb: eb:01:84:71:27:4b:58:6c:3f:e6:28:69:74:fb:45:38:bf:fe: fb:2f:f3:9e:58:5d:75:0b:0a:2b:bd:d7:5d:c5:c2:ee:e3:69: e3:e8:7b:71:eb:c0:40:2f:ee:19:e8:fe:4b:37:ad:18:85:13: 8c:24:88:4c:d4:9b:8b:5d:74:65:77:e3:cd:59:ba:81:4d:72: e1:35:b8:1d:a6:0d:d7:6d:2a:36:79:11:89:59:f9:5a:b5:26: b0:cf:8a:30:b5:23:db:78:09:f6:bd:ae:d2:ef:73:73:ed:eb: 75:5e:95:fb:8f:48:d6:01:9e:57:a3:6e:30:ef:42:f6:36:19: 15:68:92:34:0e:0d:81:a1:7b:2c:74:b7:bd:dc:42:42:aa:dc: ca:0d:a8:06:dc:d4:2a:a7:ea:04:92:33:d5:6e:61:8a:21:4b: d2:48:b2:6b:35:44:61:2d:9f:72:83:64:d8:79:01:6f:47:0e: 3e:5b:b8:be:f9:db:66:46:08:76:2e:04:54:fb:c9:b8:b4:b2: 4f:f0:79:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OY1P7acb0iZjqMzTnkcHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx MGRlMTYwHhcNMjYwNDI3MTAwMTQ5WhcNMjYwNDI4MTAwMTQ5WjAzMTEwLwYDVQQD EygzN2FkY2IzYWI3M2Y5NWEzMjRmNmYwNzhkYTA5NWI1NTlkOWE5ZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nGO1oy1zcNKOv/yCTracQiVgcPg ObHILhwEgjr9H3vBwNi5Q1oYIIQ/rOcbqNJUkrREgy5ku7p0xxVrpShz0L7/2/Ne EH4McNl0JK5w/eCowWZcCSFstObuSIS9Ut3ZhJ4YPEPjqAfD2BbMV2xdsxwe7wUe 6nW9nCXFbhe5MfbTB3+4RxIKhAVp/SPr5QsU/BsujCjYShbqZmv2xYYvhp1kYsUY PBwvSbxYtkey4/EMJXLDjYSs1OyDg8POEPxi11TRysbu+5qkilZF72cTR1HM6CLj envrXbAzz2EbnG3Xkw+uqyS60ss8w5bm0bFwWCYQs6M8Lo+8tm9MFFBzuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDetyzq3P5WjJPbweNoJW1Wdmp8QMB8GA1UdIwQY MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt YmMwZGJhOTMyYjM1LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1 LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdDKfW5Y v5e6GVgbiwp/LDJ/cLa8G41uOtjZ3eo2YiHyBwOJ12FfgNd+fdVWVAOxst+mSjS7 6wGEcSdLWGw/5ihpdPtFOL/++y/znlhddQsKK73XXcXC7uNp4+h7cevAQC/uGej+ SzetGIUTjCSITNSbi110ZXfjzVm6gU1y4TW4HaYN120qNnkRiVn5WrUmsM+KMLUj 23gJ9r2u0u9zc+3rdV6V+49I1gGeV6NuMO9C9jYZFWiSNA4NgaF7LHS3vdxCQqrc yg2oBtzUKqfqBJIz1W5hiiFL0kiyazVEYS2fcoNk2HkBb0cOPlu4vvnbZkYIdi4E VPvJuLSyT/B5/A== -----END CERTIFICATE-----Generated at Mon Apr 27 14:34:49 2026 by rpki-client