$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: ZXa7IIYUzKG+0NoY1jmmXVd6ZaBNlUUoRuD8vq3RB98= Subject key identifier: 07:2A:F9:9B:F2:F7:AB:22:8E:84:BC:86:C4:F9:43:D0:27:A9:49:AF Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019DCF079E634C9D427B228BB79352A9F5D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 18FC Signing time: Mon 27 Apr 2026 13:01:15 +0000 Manifest this update: Mon 27 Apr 2026 13:01:15 +0000 Manifest next update: Tue 28 Apr 2026 13:01:15 +0000 Files and hashes: 1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: YcXkNCavCukQx8WdZIgAgu07NHA0/TC1q2v9IVMZqDE=) 2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=) 3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=) 4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=) 5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=) 6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=) 7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=) 8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=) 9: MAbKsaJixjU16-YxviDdUW3E9O0.roa (hash: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0=) 10: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=) 11: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=) 12: a4e-5HcXuyyRW82YjyXKassrVo8.roa (hash: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg=) 13: gjhjBLir8IRFlK670wG4nH4oaXk.roa (hash: cv4ygh/KOqNvTQ/oTMBYXfBkQ2u91AyKM5PUQ/5gKm8=) 14: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:07:9e:63:4c:9d:42:7b:22:8b:b7:93:52:a9:f5:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Apr 27 13:01:15 2026 GMT Not After : Apr 28 13:01:15 2026 GMT Subject: CN=072af99bf2f7ab228e84bc86c4f943d027a949af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a9:50:51:80:ee:32:85:54:63:47:fc:90:6f: 92:dc:67:04:fe:98:a6:6b:50:a8:31:c9:0f:6f:bf: 80:c4:7f:70:89:e0:55:91:2b:e8:0a:53:10:f9:fd: 28:32:17:6d:6d:f5:80:b7:c1:54:62:0e:e6:f1:c8: a3:71:43:98:dd:40:b6:56:21:13:3e:16:72:c7:16: 03:c0:c6:22:a7:0f:e3:17:7a:b5:55:b0:97:2c:e5: 8d:2c:f5:1c:ca:ae:5f:22:c5:a5:93:9c:2e:23:3e: c3:ff:af:9d:6b:8a:16:29:d7:bd:a6:b1:4f:8e:f7: 04:a4:0a:0d:66:85:e1:92:51:0d:e4:b8:29:69:13: f1:b5:02:38:bd:a3:73:27:75:33:1d:15:52:ec:85: 97:22:57:a9:36:23:33:d4:6c:5f:56:41:55:b5:72: b6:7e:b8:26:09:10:e4:db:af:12:84:77:d4:75:15: 81:f7:9a:f0:7e:e1:5c:55:44:3d:79:96:fa:6f:c7: b0:03:bc:cb:a6:bf:0e:9e:40:a4:76:f5:90:e4:d7: 18:60:cf:42:fc:3b:4f:a5:74:27:6d:d9:01:54:6a: b0:3a:2a:df:88:06:9f:ae:b0:5d:3c:0c:d3:c2:02: 7e:49:23:fe:fb:74:cd:8d:da:dc:20:06:25:60:d9: 79:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2A:F9:9B:F2:F7:AB:22:8E:84:BC:86:C4:F9:43:D0:27:A9:49:AF X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e4:86:b2:b4:c2:4b:12:b6:90:41:00:65:cd:99:80:28:f4: 98:b4:8a:52:99:20:a0:8d:30:d5:e2:8d:c7:68:6c:25:96:8b: 58:28:b0:93:88:7b:16:8d:54:ea:07:3c:d7:13:38:4a:ac:20: 2f:56:11:39:59:02:cc:d5:fb:3c:55:48:71:48:33:33:e7:0d: c8:0e:72:a9:d8:03:08:93:5d:24:53:55:26:33:0a:9b:24:3a: 7b:9e:f5:8e:ca:fa:61:74:cf:33:c1:d6:f6:5b:36:d4:53:df: ff:2e:bc:8c:c5:46:cb:e8:f0:98:95:9b:76:50:e3:fa:4a:5a: ac:35:7c:a9:70:af:31:0e:e3:a1:c2:65:ad:e4:9f:74:e7:ae: ab:a2:96:b2:2e:ec:74:86:0a:dd:17:aa:93:56:c0:bd:58:b6: c3:f2:f6:98:71:e8:d1:2c:c1:3e:1b:d9:8a:d4:f0:98:1b:e3: 4f:ac:f7:25:58:b9:68:3e:91:74:22:fd:17:06:c8:10:54:18: 3c:69:f6:d7:08:cc:34:37:5a:eb:64:58:78:72:db:d2:01:a7: fa:7c:41:51:7b:b4:dd:25:ab:9b:fd:80:b4:8a:ea:a0:a1:0e: 4c:88:fe:21:16:32:a3:2f:cc:19:49:ac:0f:74:c5:22:2f:a1: 61:4b:8a:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PB55jTJ1CeyKLt5NSqfXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwNDI3MTMwMTE1WhcNMjYwNDI4MTMwMTE1WjAzMTEwLwYDVQQD EygwNzJhZjk5YmYyZjdhYjIyOGU4NGJjODZjNGY5NDNkMDI3YTk0OWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKlQUYDuMoVUY0f8kG+S3GcE/pim a1CoMckPb7+AxH9wieBVkSvoClMQ+f0oMhdtbfWAt8FUYg7m8cijcUOY3UC2ViET PhZyxxYDwMYipw/jF3q1VbCXLOWNLPUcyq5fIsWlk5wuIz7D/6+da4oWKde9prFP jvcEpAoNZoXhklEN5LgpaRPxtQI4vaNzJ3UzHRVS7IWXIlepNiMz1GxfVkFVtXK2 frgmCRDk268ShHfUdRWB95rwfuFcVUQ9eZb6b8ewA7zLpr8OnkCkdvWQ5NcYYM9C /DtPpXQnbdkBVGqwOirfiAafrrBdPAzTwgJ+SSP++3TNjdrcIAYlYNl5wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcq+Zvy96sijoS8hsT5Q9AnqUmvMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuSGsrTC SxK2kEEAZc2ZgCj0mLSKUpkgoI0w1eKNx2hsJZaLWCiwk4h7Fo1U6gc81xM4Sqwg L1YROVkCzNX7PFVIcUgzM+cNyA5yqdgDCJNdJFNVJjMKmyQ6e571jsr6YXTPM8HW 9ls21FPf/y68jMVGy+jwmJWbdlDj+kparDV8qXCvMQ7jocJlreSfdOeuq6KWsi7s dIYK3Reqk1bAvVi2w/L2mHHo0SzBPhvZitTwmBvjT6z3JVi5aD6RdCL9FwbIEFQY PGn21wjMNDda62RYeHLb0gGn+nxBUXu03SWrm/2AtIrqoKEOTIj+IRYyoy/MGUms D3TFIi+hYUuKoA== -----END CERTIFICATE-----Generated at Mon Apr 27 16:06:08 2026 by rpki-client