$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: xLzXMnkfx6mWhLPZ/9jy9296ujqjP2Zhg66kgGxEdTo= Subject key identifier: 6A:92:9B:12:C8:51:EB:8F:DA:3B:B7:B0:CA:BF:48:B9:2F:2B:91:D9 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019DAA1EBB105DBB101C4EB89696220D2375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 04C8 Signing time: Mon 20 Apr 2026 09:00:33 +0000 Manifest this update: Mon 20 Apr 2026 09:00:33 +0000 Manifest next update: Tue 21 Apr 2026 09:00:33 +0000 Files and hashes: 1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: 1ErHsGUf/FKK/bTkDREN+eQjqLIFOm6fwuBkEh7g5Cw=) 3: 4vxZx7uBqQQ6FyEF2MVBFY1WSaQ.roa (hash: yT8MYmQtVQnTBHZPhbP/WPtpcUBRa3XEcKCSlPgpz98=) 4: AfpxLvj3BiyLwMcA6kKVrdFgW6Y.roa (hash: KKSEdsLLrws/RATwLIqwcq742JLEElRzqndIEau2IyI=) 5: H4L-qt_BxEvihq_o1Xaqz-fkvFE.roa (hash: VEe/jw2PB8S6n9CGD2VAh3zIwGdGkRNshlPXiJ7ysA0=) 6: QxbU9vvhcA75ENS1lZHkpNyfErk.roa (hash: yv8oGh8GGZWvW+9jiR8h6piajHrkuA5egN2MppGfk+w=) 7: R-5w2OhY85ahLOn9d9XARIf0WJE.roa (hash: ZrntMgUNbnCcVCqd80hEXtJhbHPgRihn20AF29/vEO8=) 8: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 9: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 10: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 11: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=) 12: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 13: lF-NQYjHwP7LXQFX0OJCARB0Jts.roa (hash: YQcmPFpdxVDION1toykp/aMiRv2UpsJ26lx7u41JNkI=) 14: mnp_uzPNuPiUK3TrUmFNgiNmNY8.roa (hash: 9S7aILwvPQVBbceAkPURmV9yU8Bufrpsa3/9WSfefOI=) 15: nmunvZ8NjUAQxyXLc7q3E6asADA.roa (hash: bcuDcNnBDq7F5VI75bQ3a3MYz4yXIjZXvHo8ZRs1H3g=) 16: tUYOdiUxF4HxrSVOg847WMoBqws.roa (hash: N6nWp89HDr0pIhLLPi1oB+mkzKMLsBnFNGgdLRBYN30=) 17: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) 18: xOtKmGFOQ0Si4ry-DnEnpbMZzfw.roa (hash: uloNgiaPX4XD2hk6wXEnVMKHkzySU+UwLh3IKRIIyAY=) 19: xUHiwbmdxyG7zhauG_jIHmi1gno.roa (hash: 03dvwh0NeW2YpGtwR7ObeLzcikhW32DldU3aMDZzsfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:aa:1e:bb:10:5d:bb:10:1c:4e:b8:96:96:22:0d:23:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Apr 20 09:00:33 2026 GMT Not After : Apr 21 09:00:33 2026 GMT Subject: CN=6a929b12c851eb8fda3bb7b0cabf48b92f2b91d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:52:59:07:6d:51:07:6c:21:6a:7b:09:3b: bf:be:19:f3:44:aa:66:df:92:f7:7f:ed:49:00:0d: 47:d9:e1:16:3d:40:4d:50:99:cc:e8:20:81:c0:b7: e5:5f:b4:28:bb:27:07:8e:26:09:8e:b5:4f:cb:2c: 21:1d:49:29:12:42:5e:8f:c8:1c:9c:54:34:5c:38: f7:35:e0:f8:4b:62:81:f1:f4:77:8f:d1:06:99:98: eb:96:60:fb:14:c4:07:e1:7b:b7:f1:c8:23:59:49: 9b:89:b8:86:99:fa:6c:8e:d6:08:77:19:28:d8:5a: ca:e0:99:7a:97:05:b2:54:8d:70:f0:bf:09:96:17: 69:c6:ae:6a:12:c2:4d:3b:c5:71:9d:df:fc:b0:55: da:69:d4:ea:db:f8:bc:75:41:42:c1:2a:bf:1c:a5: ec:84:36:ea:ee:74:55:95:64:70:ce:8e:e1:58:d1: 78:bd:41:a6:f9:81:f9:39:0a:57:41:60:b9:63:7c: d6:35:fd:02:21:5e:a5:24:24:e2:08:50:c1:ef:4b: 6e:d3:8a:c6:88:18:45:77:3d:08:ee:63:ca:dd:f3: fb:75:cd:70:7d:4f:ec:c2:b6:8c:f5:64:41:80:29: 0f:17:b8:2b:0c:05:ea:6f:0b:16:aa:36:37:6d:f0: 99:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:92:9B:12:C8:51:EB:8F:DA:3B:B7:B0:CA:BF:48:B9:2F:2B:91:D9 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1c:f5:1c:4e:3b:89:63:6e:0b:f1:28:30:9b:18:2f:4d:47: 71:dc:cc:dc:0c:c6:5c:d9:bf:2e:8c:42:c8:7e:fb:be:55:cf: fa:46:e1:aa:e2:dc:95:2b:ce:1d:93:3a:c9:42:e1:ff:af:3a: 8b:c7:32:09:b0:43:b0:f3:14:e9:52:fd:01:a2:3d:02:33:57: 88:09:c7:c6:5a:cc:17:be:7a:5d:c6:d3:f4:91:17:27:a8:83: 34:7c:e7:69:1e:46:23:f5:57:b6:f1:79:a3:c6:33:3e:96:7a: 5d:37:b5:87:61:37:bf:bc:f4:6b:90:85:2e:60:16:a4:70:ca: ea:d8:5b:8c:b4:3a:ce:bb:15:05:ac:04:64:90:bc:fd:3f:d2: 38:16:65:eb:c2:97:7a:6c:19:55:7b:07:83:ab:2b:3a:bd:34: 9c:57:c3:23:aa:8e:6b:bc:f4:f8:a5:26:77:a8:4b:1b:3c:12: ae:93:68:6f:16:1e:23:50:2e:86:3e:a1:68:97:b1:64:2e:41: 1a:c4:d5:10:ba:50:3f:d9:2f:40:01:78:4e:5a:e8:84:88:c9: 07:15:39:cf:25:9c:dc:f0:f6:84:95:3b:e8:7a:f5:c3:97:0d: 25:23:39:f9:ce:2a:67:a2:c2:0a:d6:2f:17:e8:83:7d:f5:38: 38:98:d2:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2qHrsQXbsQHE64lpYiDSN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwNDIwMDkwMDMzWhcNMjYwNDIxMDkwMDMzWjAzMTEwLwYDVQQD Eyg2YTkyOWIxMmM4NTFlYjhmZGEzYmI3YjBjYWJmNDhiOTJmMmI5MWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgtSWQdtUQdsIWp7CTu/vhnzRKpm 35L3f+1JAA1H2eEWPUBNUJnM6CCBwLflX7QouycHjiYJjrVPyywhHUkpEkJej8gc nFQ0XDj3NeD4S2KB8fR3j9EGmZjrlmD7FMQH4Xu38cgjWUmbibiGmfpsjtYIdxko 2FrK4Jl6lwWyVI1w8L8Jlhdpxq5qEsJNO8Vxnd/8sFXaadTq2/i8dUFCwSq/HKXs hDbq7nRVlWRwzo7hWNF4vUGm+YH5OQpXQWC5Y3zWNf0CIV6lJCTiCFDB70tu04rG iBhFdz0I7mPK3fP7dc1wfU/swraM9WRBgCkPF7grDAXqbwsWqjY3bfCZZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqSmxLIUeuP2ju3sMq/SLkvK5HZMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxz1HE47 iWNuC/EoMJsYL01HcdzM3AzGXNm/LoxCyH77vlXP+kbhquLclSvOHZM6yULh/686 i8cyCbBDsPMU6VL9AaI9AjNXiAnHxlrMF756XcbT9JEXJ6iDNHznaR5GI/VXtvF5 o8YzPpZ6XTe1h2E3v7z0a5CFLmAWpHDK6thbjLQ6zrsVBawEZJC8/T/SOBZl68KX emwZVXsHg6srOr00nFfDI6qOa7z0+KUmd6hLGzwSrpNobxYeI1Auhj6haJexZC5B GsTVELpQP9kvQAF4TlrohIjJBxU5zyWc3PD2hJU76Hr1w5cNJSM5+c4qZ6LCCtYv F+iDffU4OJjS7w== -----END CERTIFICATE-----Generated at Mon Apr 20 13:05:47 2026 by rpki-client