$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json) Hash identifier: v9Bk4Lmxaq0bB4/BM+s7M2a9SZH1x0Z03UqieNS7JoY= Subject key identifier: 65:7C:11:CE:A5:D0:A5:E4:61:7A:D8:6F:51:94:5B:0E:D5:89:BC:5C Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019DCE6323C206900F3F9A9B91DF35B3BD08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft Manifest number: 19C2 Signing time: Mon 27 Apr 2026 10:01:36 +0000 Manifest this update: Mon 27 Apr 2026 10:01:36 +0000 Manifest next update: Tue 28 Apr 2026 10:01:36 +0000 Files and hashes: 1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=) 2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=) 3: 1b8pXJj7x0TOWFRoeZjRnOReobM.roa (hash: XrB9mwl96CQ4ZJuMI/6y0WXMFuDor7G7Y6ifr6Zhj3k=) 4: 1bmj8GONQQBKMf3s4Oxc-ZlfsBM.roa (hash: wkPtMNp/SGcXYDsb9VbL+hkba8hGwB+mm04x9jIVPQo=) 5: 3aSHn_j8RtFjPkxGx5eiI0L5zXY.roa (hash: nBPyAA0DKhBkjVysZ8vABPe+cEvgn6LLEUpiFGRroy0=) 6: 41CnWU7PjEAFuw792t5A517Sn7Y.roa (hash: zvVh+bIH1zp58GW8FaRNQSHYWUI+hp/KhdCSLTbP6t8=) 7: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=) 8: 7Vw5tZJdatJ5lnnSgTifYQstE2g.roa (hash: 9A1oAxQlRS1oQXh5DOH9cq5ShbOMvKunx3RdrubZ+64=) 9: Ckbmwdo69uWZLFdhnIqi1EVx-As.roa (hash: 0See61yjqZJwFH53PpcLw3mYiFIVA0D2E4nf89wyg+A=) 10: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=) 11: Guoxwahp0mrpH83oscuF3StmgL4.roa (hash: b9u9ODGvV7E1dMwdtXwMfxsCLt+neWPY0Xa0Njg/95g=) 12: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=) 13: MJaBHnPBPoiX26U_szdp7RvWUtQ.roa (hash: qFctKJR4yu14bDLmMuycFB3M33Jqb8VwTlP3l9MF2n4=) 14: QnL2C3-KGaekq-1q87fzI7-f6vg.roa (hash: g47Y6ZOFMFnPYe8Q7Dl4VLnyKH5AOEhgtWJJzN6BsaY=) 15: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=) 16: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=) 17: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: wqvJWPIQXfyPc7euPi70bty4ImpI40Ac3jG5+uUMA2M=) 18: UrvAOW6o1x_xUPe2Wpq5O5rgNdk.roa (hash: xOELlwPlmGC0KfJ4SLs0ytNPaAK/tDksySoDWj3wbS8=) 19: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=) 20: X_ZY7bhlCimk4A4rT1m_7ox1lpA.roa (hash: Te4JGy7suNJwGqJ4fGrVMOQc/VeF1iQInhbVnodspgc=) 21: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (hash: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=) 22: brIJhXE127mnZSH-sgVgPTdMriQ.roa (hash: OPHDQPDKv2sbNbcG8M/if1+Q1GQUEy9nOuk2NkDBWwk=) 23: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=) 24: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=) 25: lXi2CpWk0uX1PD09wOxdn3LPCk8.roa (hash: A6e1oKqDntw3FBNRZExtqdaDdknBbCGaGLLQW8KzQ/s=) 26: mGU_ZM8C_67y-U_MSCItqM-7NVs.roa (hash: /prGVdEgBVD01uVKzuuRhV754d4P2Vo6sa25WVn4UwQ=) 27: mR2VgpUeIkByOi-FP_fIKjS95bg.roa (hash: gSSQQUWvAuuJj9LKju1G38u/ekMfsk5jiPCrwLLkZ7I=) 28: oMbkLubRHpA6QKVm4O5LMWLQtSY.roa (hash: E8qozcbC+2Ne/l2gvjBAhkNeL30d9qDBiZcSfFbFzUk=) 29: ojsjf-NPcJu8YOAiwCABNHClj8A.roa (hash: BdxisMsqcak0dRALeB9HUtxCYiTxxK6VVobdUh42wjM=) 30: pGeq0B-Mzg0q4NmMgPUNvpE-lTI.roa (hash: cINCKzd3dIf/VdNxQaJ9bIeKFH1cTlbmZ9wu/VN+feI=) 31: q1K3mBP6tAwWbGS6T7xJBkYKSz8.roa (hash: wr5HNzjC8IUzrQZPy+nMV2gYW00yPWdfWqjJEkjh148=) 32: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=) 33: suovzHsoDlN0Hb2AdeewhUysXlk.roa (hash: DecZNdwPz60RPQKYYm+RGNe+i+BUh+N2BaGtnkWEt/U=) 34: vfcIEd89w7RHFNMpkDPFKdiuSXU.roa (hash: ixlqDv1r7we5MxrflT22tc1tM+oGVmsMKCPwwcmUkV0=) 35: vjx6049Oaq-tndl18g_6Bm9j2C8.roa (hash: BVltqq8LZ1DeA64vexnQtov2krYYu5gv3DiEiBbiaVU=) 36: wi1RA5BI8oNacbRgbyfKdEiybII.roa (hash: sssybe7+qI8tKgzrVZFsNOeNSc0N+lx3VRgqvv5wBeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:63:23:c2:06:90:0f:3f:9a:9b:91:df:35:b3:bd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Apr 27 10:01:36 2026 GMT Not After : Apr 28 10:01:36 2026 GMT Subject: CN=657c11cea5d0a5e4617ad86f51945b0ed589bc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e6:49:fa:02:1c:8f:79:ad:23:b2:b1:e1:9f: 94:98:a9:5d:eb:29:10:bc:e3:9b:bb:0f:9e:ac:86: 0c:1e:c0:99:b3:59:e4:05:e6:ab:33:64:64:c3:16: 16:d0:b8:99:e8:d0:27:91:3d:8e:f5:93:80:33:cc: 31:49:43:f7:f6:2c:c3:38:df:08:c0:46:24:a2:16: 1d:26:57:d3:a6:5c:a1:12:42:9c:4a:8c:56:16:db: 4b:ec:92:b9:2d:91:5e:13:7f:10:c3:85:e4:1c:5f: ad:a8:11:88:be:b4:89:db:fc:44:19:f8:58:19:45: e1:42:dc:6c:46:07:fc:ca:9d:28:3b:7c:9e:cb:7a: 7e:ae:e4:a8:84:aa:b5:e2:57:4b:5d:40:ef:78:da: 35:87:f3:80:5b:09:2e:3b:c0:56:ab:9b:30:07:e8: 5e:8e:3f:22:6e:02:a1:3b:6a:87:4b:e1:d0:d8:5c: 80:3f:07:1e:3e:b1:81:7b:2d:6a:4f:5f:d9:62:fb: 7a:7c:aa:14:af:d3:1e:00:76:db:33:eb:aa:c2:17: 34:99:72:e0:c9:7b:93:15:05:79:a2:1f:54:85:83: 40:86:a6:20:b9:05:08:24:30:58:c2:ed:2c:87:00: d5:2e:93:fc:5d:0c:25:9e:85:91:d6:43:e6:b5:61: e5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7C:11:CE:A5:D0:A5:E4:61:7A:D8:6F:51:94:5B:0E:D5:89:BC:5C X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8f:10:30:5a:ad:6e:ba:9d:08:84:a4:5d:51:53:aa:62:b1: b0:67:45:7f:d6:96:0a:a3:9c:9e:11:fd:c7:7c:2a:86:72:24: 7e:7f:38:5f:62:6f:ce:5f:c1:46:1b:7f:62:68:bb:02:91:60: a9:96:48:bd:24:fb:ac:b1:dc:97:77:3e:bc:19:d3:15:39:90: 8b:25:4b:5b:ee:17:44:69:ed:72:6c:36:f1:b2:e8:4c:93:96: 94:12:4d:3b:c9:8e:ac:e4:81:8e:1a:ab:1c:21:0c:7d:5d:b7: a7:43:fc:2b:02:8a:f3:a6:d8:92:1d:d2:15:72:12:7e:0a:34: 55:82:d7:64:04:5b:3b:20:55:c5:8d:a3:80:12:8a:11:b0:45: 79:6a:58:34:c4:99:81:48:c7:0c:df:68:9d:ca:e2:73:58:ca: 49:0f:c4:07:01:5c:02:2e:1d:76:b3:f3:9d:31:a4:67:58:70: a1:c8:44:d5:31:2e:17:73:4c:74:8d:0c:1e:b9:c9:39:41:f9: c3:dd:37:4f:b7:22:75:00:18:24:4d:33:a8:3d:99:ee:16:41: c3:d5:b0:c3:b9:04:d1:db:a8:54:09:05:25:08:80:21:72:00: 39:10:b9:35:d4:2b:75:51:4b:d3:b9:7b:83:dd:7a:3e:fe:5e: 15:99:79:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OYyPCBpAPP5qbkd81s70IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwNDI3MTAwMTM2WhcNMjYwNDI4MTAwMTM2WjAzMTEwLwYDVQQD Eyg2NTdjMTFjZWE1ZDBhNWU0NjE3YWQ4NmY1MTk0NWIwZWQ1ODliYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuZJ+gIcj3mtI7Kx4Z+UmKld6ykQ vOObuw+erIYMHsCZs1nkBearM2RkwxYW0LiZ6NAnkT2O9ZOAM8wxSUP39izDON8I wEYkohYdJlfTplyhEkKcSoxWFttL7JK5LZFeE38Qw4XkHF+tqBGIvrSJ2/xEGfhY GUXhQtxsRgf8yp0oO3yey3p+ruSohKq14ldLXUDveNo1h/OAWwkuO8BWq5swB+he jj8ibgKhO2qHS+HQ2FyAPwcePrGBey1qT1/ZYvt6fKoUr9MeAHbbM+uqwhc0mXLg yXuTFQV5oh9UhYNAhqYguQUIJDBYwu0shwDVLpP8XQwlnoWR1kPmtWHlmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGV8Ec6l0KXkYXrYb1GUWw7VibxcMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo8QMFqt brqdCISkXVFTqmKxsGdFf9aWCqOcnhH9x3wqhnIkfn84X2Jvzl/BRht/Ymi7ApFg qZZIvST7rLHcl3c+vBnTFTmQiyVLW+4XRGntcmw28bLoTJOWlBJNO8mOrOSBjhqr HCEMfV23p0P8KwKK86bYkh3SFXISfgo0VYLXZARbOyBVxY2jgBKKEbBFeWpYNMSZ gUjHDN9oncric1jKSQ/EBwFcAi4ddrPznTGkZ1hwochE1TEuF3NMdI0MHrnJOUH5 w903T7cidQAYJE0zqD2Z7hZBw9Www7kE0duoVAkFJQiAIXIAORC5NdQrdVFL07l7 g916Pv5eFZl5aw== -----END CERTIFICATE-----Generated at Mon Apr 27 14:00:44 2026 by rpki-client