$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: iSwkOjNOomURrfMQe3TqxBphWH2OzXErv6ziHXOK3jg= Subject key identifier: 6C:B7:32:82:E0:BE:CF:88:D6:AD:30:8B:AA:A2:70:92:DB:8E:DA:05 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019DDE0C6E321ED9DFA92378AC1A0CBCB10D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 18EF Signing time: Thu 30 Apr 2026 11:00:49 +0000 Manifest this update: Thu 30 Apr 2026 11:00:49 +0000 Manifest next update: Fri 01 May 2026 11:00:49 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: r7LVU8S5k+Y4YQCGqzSJ8yu+msw2goqjiyswgg1nejo=) 2: 4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa (hash: 37kfxzMZjAEGlX1IGqlGrRZxkEO+b+KVXD2c+rB8lAQ=) 3: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=) 4: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=) 5: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=) 6: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=) 7: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=) 8: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=) 9: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=) 10: qF5xd0E9VHjEoVDgrR2EV2reNkg.roa (hash: +LVENHANP4Wm2qt1oX01yx6cEEPM3z4kpbtQOwe00sQ=) 11: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=) 12: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:de:0c:6e:32:1e:d9:df:a9:23:78:ac:1a:0c:bc:b1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Apr 30 11:00:49 2026 GMT Not After : May 1 11:00:49 2026 GMT Subject: CN=6cb73282e0becf88d6ad308baaa27092db8eda05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:18:8b:45:e9:66:b3:49:65:ea:5f:26:fc: 88:3c:a2:ca:c9:09:47:58:d8:02:b0:93:a5:df:c5: 49:27:98:4a:cb:f1:42:2e:a9:c4:87:4f:1d:47:d8: 25:0e:30:c0:3a:1a:9b:e1:8c:7b:e2:f7:76:59:5b: 16:a7:52:d8:f0:c8:38:e5:d1:07:24:5e:d7:67:18: d8:a4:e3:57:a8:25:af:cd:42:f5:24:41:5e:cf:33: 8c:35:91:c9:0b:7d:80:2b:03:a6:6f:e8:d5:fa:d4: b2:ee:b7:8e:34:ca:7a:a4:e4:37:60:2c:e1:d7:a8: 4a:4e:5a:98:c3:80:7d:de:5c:0b:a4:ac:14:ac:3e: 28:58:cf:b9:e0:a1:eb:ad:d1:98:b6:1a:3a:95:f3: 50:83:8f:0d:33:31:87:b7:67:7d:c4:03:c5:17:7a: de:7c:50:3a:bb:b3:14:f0:7b:88:be:ae:c4:62:4d: 2b:d5:74:21:fe:ee:1e:19:ff:ec:1a:4a:f3:ce:17: 6f:53:eb:45:de:27:08:82:51:ab:f0:2f:ac:7c:38: 6f:89:88:38:82:45:47:bc:2e:91:4a:24:f0:d3:10: 04:c0:7e:d9:85:0e:10:54:6f:20:fc:f3:9d:ba:fd: 12:56:61:1f:25:9d:ee:4e:7c:90:2a:28:fd:df:b5: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B7:32:82:E0:BE:CF:88:D6:AD:30:8B:AA:A2:70:92:DB:8E:DA:05 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a7:70:12:48:31:fa:32:20:e5:8d:32:be:6f:16:fb:37:41: de:08:1f:57:ea:d3:06:40:f6:9d:35:97:c0:95:ea:98:ee:eb: fb:d6:f8:7b:7c:91:a0:b4:c1:76:5e:7f:a1:9a:c2:c3:fb:5d: 26:05:42:57:cd:96:d2:46:ff:57:0d:2f:5b:36:da:48:ea:d2: 67:e6:e2:eb:e3:b7:79:f8:0d:89:d7:3f:9e:22:43:ef:64:74: c5:54:62:c7:ef:1f:fe:3c:be:79:d4:43:26:ad:fc:1d:76:c9: 5b:f2:ba:8c:ae:73:2a:89:fb:28:12:07:23:29:13:50:f8:33: a1:9e:47:f5:d7:88:73:b4:f0:69:98:0c:bc:04:08:51:e3:a9: 02:d4:fa:7e:ca:f2:39:de:60:89:1d:5b:be:18:32:14:6f:7d: ba:52:8d:27:92:72:82:84:89:e0:d0:42:20:ac:20:a1:63:c2: 5d:4b:53:49:20:1f:e4:d9:45:a4:6b:b9:df:58:ff:7f:16:da: c5:87:5f:b6:c0:07:98:4b:d4:28:b0:e9:8d:98:35:e8:d0:cd: 03:b2:0a:e0:93:14:9c:cd:4f:e7:c5:3c:1d:ce:7a:8d:88:ff: dd:2a:3c:57:3a:8f:9c:0e:45:2a:f6:69:ad:48:bf:37:66:a0: c7:e3:74:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3eDG4yHtnfqSN4rBoMvLENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwNDMwMTEwMDQ5WhcNMjYwNTAxMTEwMDQ5WjAzMTEwLwYDVQQD Eyg2Y2I3MzI4MmUwYmVjZjg4ZDZhZDMwOGJhYWEyNzA5MmRiOGVkYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTEYi0XpZrNJZepfJvyIPKLKyQlH WNgCsJOl38VJJ5hKy/FCLqnEh08dR9glDjDAOhqb4Yx74vd2WVsWp1LY8Mg45dEH JF7XZxjYpONXqCWvzUL1JEFezzOMNZHJC32AKwOmb+jV+tSy7reONMp6pOQ3YCzh 16hKTlqYw4B93lwLpKwUrD4oWM+54KHrrdGYtho6lfNQg48NMzGHt2d9xAPFF3re fFA6u7MU8HuIvq7EYk0r1XQh/u4eGf/sGkrzzhdvU+tF3icIglGr8C+sfDhviYg4 gkVHvC6RSiTw0xAEwH7ZhQ4QVG8g/POduv0SVmEfJZ3uTnyQKij937VBBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGy3MoLgvs+I1q0wi6qicJLbjtoFMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqdwEkgx +jIg5Y0yvm8W+zdB3ggfV+rTBkD2nTWXwJXqmO7r+9b4e3yRoLTBdl5/oZrCw/td JgVCV82W0kb/Vw0vWzbaSOrSZ+bi6+O3efgNidc/niJD72R0xVRix+8f/jy+edRD Jq38HXbJW/K6jK5zKon7KBIHIykTUPgzoZ5H9deIc7TwaZgMvAQIUeOpAtT6fsry Od5giR1bvhgyFG99ulKNJ5JygoSJ4NBCIKwgoWPCXUtTSSAf5NlFpGu531j/fxba xYdftsAHmEvUKLDpjZg16NDNA7IK4JMUnM1P58U8Hc56jYj/3So8VzqPnA5FKvZp rUi/N2agx+N0Cw== -----END CERTIFICATE-----Generated at Thu Apr 30 17:47:51 2026 by rpki-client