$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: 6eMWdYj0WJ5lajRjF7qAOcmGh9UKQpEHqeWqutgTfB0= Subject key identifier: 8D:74:58:EE:91:33:94:D9:D1:ED:52:DC:8E:FE:E8:3C:86:FE:87:9B Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019DD0199DF1FD02BFA044B6E083624B41E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1917 Signing time: Mon 27 Apr 2026 18:00:32 +0000 Manifest this update: Mon 27 Apr 2026 18:00:32 +0000 Manifest next update: Tue 28 Apr 2026 18:00:32 +0000 Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=) 2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=) 3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=) 4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=) 5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: ydnRveQF1dJXSoTwM5FKBt6WY0dpZoa/SfS2RXwCTw0=) 7: CpwjRHd-dlM6HLWtJRLo65vz3sE.roa (hash: ipcBkj7y8N+DKJBxCvsI7Zk0obHeYg4amjAZYyQnzfU=) 8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=) 9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=) 10: TWWxT-nCkmtPHnYGn6dWdhUMzGM.roa (hash: 7Vooj87eGlBm2XvcSGagn83xkeJCxQE8AEsJBuPCxmA=) 11: eUbHTyUSavH8iggt7_qSKew38qc.roa (hash: DkFbowlItExQYC/lsxmajYQ2K4RpBXLaJENP+PgEu2I=) 12: eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa (hash: CE6Pwn13O7Jm2klRaAsz6obokQcz3Q5vJ5OCjk+3oLA=) 13: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=) 14: wIQN1qjszJK_EWTG2KZPYPb7pjY.roa (hash: gRnICZ8LPFfQ15En6Kpg0jEOMzCzPNmoOaQr/MOyZDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d0:19:9d:f1:fd:02:bf:a0:44:b6:e0:83:62:4b:41:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Apr 27 18:00:32 2026 GMT Not After : Apr 28 18:00:32 2026 GMT Subject: CN=8d7458ee913394d9d1ed52dc8efee83c86fe879b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:ea:1a:ad:59:3e:1f:c5:44:e3:d1:20:5b: 19:90:8f:c1:23:9c:e6:d2:63:3a:30:11:70:22:5d: a3:13:1c:0e:83:18:8d:56:71:68:82:0d:df:2b:94: af:d6:56:e9:b8:87:5d:53:2c:b6:d9:ff:9b:d3:b0: 97:fa:ba:dd:99:aa:43:77:21:f7:23:91:d8:1b:10: 47:a5:6c:fb:7a:af:06:6a:a5:fe:05:53:e7:dd:43: 4e:9d:a1:b5:b0:bd:79:f9:ce:9b:45:c2:01:b1:83: ec:bd:d9:39:b3:29:7e:f6:bf:e6:e0:5c:89:a5:fc: d2:19:9e:84:a6:4f:79:ce:a1:04:4e:e0:34:12:dc: 9d:bb:1d:31:41:05:dc:fb:40:4d:c8:e8:89:3c:ac: 05:7e:8c:56:2e:6f:40:f2:f5:f4:aa:51:da:a2:42: 3c:26:a2:75:7f:dd:17:67:9c:f5:fa:8c:f2:a8:49: b5:88:e9:5e:ed:64:8a:24:da:64:68:78:63:b8:88: ab:29:ee:92:97:c5:01:0a:3b:3d:c0:a8:b2:1f:cc: 2c:0e:5c:24:6f:4e:47:e2:18:5c:00:b7:cc:22:09: 93:0a:f8:13:06:4f:e9:86:cf:18:e5:2d:a9:0d:e9: 7a:a3:42:c4:de:64:6a:06:1e:54:eb:af:75:91:20: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:74:58:EE:91:33:94:D9:D1:ED:52:DC:8E:FE:E8:3C:86:FE:87:9B X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:92:81:5e:7c:41:e3:81:6f:7e:4d:3b:42:a1:62:cb:89:73: 57:4c:3a:e9:bb:55:dc:cd:41:5c:e3:55:be:47:59:69:d3:f3: fe:67:a3:cf:28:bd:93:d5:af:9c:15:6a:7a:11:d7:4f:aa:bb: 1e:d7:fa:19:3f:b0:73:52:63:39:07:38:9e:77:7e:f3:a2:ac: 04:bb:ff:53:a3:c2:30:c2:0a:47:d6:88:3e:70:d9:f0:8f:86: c6:96:41:20:2d:92:3c:47:d2:ee:69:1b:7d:32:83:bd:98:4c: 56:01:55:51:dd:02:29:0f:27:63:e6:86:15:cf:d6:89:9e:b8: 3e:fc:b3:46:a7:a8:e8:af:8a:39:88:bc:07:57:72:91:78:58: e5:97:ab:9c:f2:43:dc:2f:eb:53:d3:ac:ee:14:61:0a:ac:f8: 6f:60:b6:30:3e:cf:d1:b2:3a:ed:0a:4b:40:ac:e8:41:fe:2c: 4f:c7:b5:1c:73:77:45:5a:9d:8c:e5:cb:73:1b:67:5e:96:d4: 50:02:e0:1d:e8:a1:32:76:fa:21:44:a2:14:44:f0:68:a4:04: b6:b9:d3:9b:2f:4f:0a:28:ba:26:26:4d:e3:87:9c:5a:c0:de: e3:61:5d:53:48:e5:ba:9b:f0:17:1b:15:b3:54:ae:6e:c1:2e: 1e:a6:d1:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3QGZ3x/QK/oES24INiS0HmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwNDI3MTgwMDMyWhcNMjYwNDI4MTgwMDMyWjAzMTEwLwYDVQQD Eyg4ZDc0NThlZTkxMzM5NGQ5ZDFlZDUyZGM4ZWZlZTgzYzg2ZmU4NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/XqGq1ZPh/FROPRIFsZkI/BI5zm 0mM6MBFwIl2jExwOgxiNVnFogg3fK5Sv1lbpuIddUyy22f+b07CX+rrdmapDdyH3 I5HYGxBHpWz7eq8GaqX+BVPn3UNOnaG1sL15+c6bRcIBsYPsvdk5syl+9r/m4FyJ pfzSGZ6Epk95zqEETuA0Etydux0xQQXc+0BNyOiJPKwFfoxWLm9A8vX0qlHaokI8 JqJ1f90XZ5z1+ozyqEm1iOle7WSKJNpkaHhjuIirKe6Sl8UBCjs9wKiyH8wsDlwk b05H4hhcALfMIgmTCvgTBk/phs8Y5S2pDel6o0LE3mRqBh5U6691kSBfsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI10WO6RM5TZ0e1S3I7+6DyG/oebMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5KBXnxB 44Fvfk07QqFiy4lzV0w66btV3M1BXONVvkdZadPz/mejzyi9k9WvnBVqehHXT6q7 Htf6GT+wc1JjOQc4nnd+86KsBLv/U6PCMMIKR9aIPnDZ8I+GxpZBIC2SPEfS7mkb fTKDvZhMVgFVUd0CKQ8nY+aGFc/WiZ64PvyzRqeo6K+KOYi8B1dykXhY5ZernPJD 3C/rU9Os7hRhCqz4b2C2MD7P0bI67QpLQKzoQf4sT8e1HHN3RVqdjOXLcxtnXpbU UALgHeihMnb6IUSiFETwaKQEtrnTmy9PCii6JiZN44ecWsDe42FdU0jlupvwFxsV s1SubsEuHqbR3Q== -----END CERTIFICATE-----Generated at Mon Apr 27 22:31:16 2026 by rpki-client