$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: 1NlAYWB673XwV+Us3EUCexgJ8KmTPvY0IUjhBCCpFUI= Subject key identifier: 26:24:95:98:B6:EA:3B:28:5D:28:D4:96:80:1B:10:E8:B1:D1:20:15 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019DCB9890D231167F6EA2AC8E7BB1DCC087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 18ED Signing time: Sun 26 Apr 2026 21:01:06 +0000 Manifest this update: Sun 26 Apr 2026 21:01:06 +0000 Manifest next update: Mon 27 Apr 2026 21:01:06 +0000 Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=) 2: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=) 3: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=) 4: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=) 5: FGXifY4YNXSWwZi4QtD01XX8A_4.roa (hash: r3Yn9lbI97BgnohED52RZmDaF/H4yGegwCsX0vScc1U=) 6: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=) 7: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=) 8: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=) 9: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=) 10: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=) 11: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=) 12: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=) 13: iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa (hash: qHRlnH6xTrPGrh7Rcfy15Z1OzJA8rkrqC8qbXcCLhY0=) 14: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=) 15: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=) 16: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: Q+xlqw8rbepnxSVCS/owLLyErvDXV6F/PnahSDfn4rw=) 17: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cb:98:90:d2:31:16:7f:6e:a2:ac:8e:7b:b1:dc:c0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Apr 26 21:01:06 2026 GMT Not After : Apr 27 21:01:06 2026 GMT Subject: CN=26249598b6ea3b285d28d496801b10e8b1d12015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:73:e0:64:40:9d:ef:82:b8:3f:4c:9a:c5:64: 49:45:bc:c0:c5:58:2b:ed:ba:8a:2d:db:67:96:a1: 1f:e4:af:ed:6c:6a:a6:37:dc:65:d3:25:a1:f2:7d: 8d:ff:5e:70:cf:75:f1:69:34:0a:2e:09:c2:ce:4a: 06:69:d2:2e:db:ed:9f:a2:5a:e3:2d:6c:a0:e3:a3: 18:bd:81:fa:fb:96:75:04:12:03:7a:4a:3d:92:5c: 90:da:3b:e0:86:fd:5f:1d:dd:23:ad:1f:56:db:57: f3:88:ee:69:1a:a5:1a:a2:b6:fa:12:60:c9:f4:fd: 97:66:b9:3a:3d:e1:18:af:36:73:3f:39:a3:25:1a: a4:72:36:17:ba:93:41:7b:5c:22:51:36:22:51:5e: db:fe:12:0a:87:11:1b:5f:46:d6:24:93:ee:78:34: 03:0d:31:7c:7d:02:6f:c2:78:bd:b9:c2:4a:ec:ed: 22:cb:e1:92:18:9a:80:91:32:16:77:07:e2:56:9d: 1b:4d:e0:3e:95:8d:73:af:6f:c4:39:f5:55:21:fd: fc:0f:52:19:e1:f0:f6:54:aa:07:82:b9:e2:44:91: 38:8c:13:e2:54:72:8f:48:e7:f1:a9:1d:9b:71:dc: c6:0b:14:44:30:e0:13:95:bb:13:03:cc:b5:38:19: c0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:24:95:98:B6:EA:3B:28:5D:28:D4:96:80:1B:10:E8:B1:D1:20:15 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:7c:9b:8a:73:dc:d8:db:00:f3:cb:90:fd:30:e3:46:86:1c: d8:8d:0c:46:c6:7b:57:96:42:6d:27:21:61:25:d8:29:ac:7c: bf:bf:35:81:c6:78:47:74:eb:49:9b:7f:2f:66:11:6d:f9:8c: 51:f8:7b:2c:77:6e:84:cc:f4:bf:67:9a:b0:7b:36:82:6d:d6: e6:f1:09:6c:76:55:24:e3:21:6f:4e:b6:0f:ae:b9:80:b6:b0: b9:68:f7:d6:a2:3a:b6:ac:09:e3:53:e5:04:76:2c:33:aa:51: bc:d0:f2:30:97:16:33:ac:fe:e4:44:7c:ba:9b:3f:05:40:38: e1:5d:c9:60:58:54:96:15:08:37:1f:94:d9:c0:d5:d2:3c:fa: db:f7:c9:03:be:bd:9a:5e:4a:c6:70:bd:9e:a1:67:e1:e5:e0: 93:1c:76:06:ad:41:6c:d2:0f:c7:3a:10:61:f4:b5:a0:dc:93: bd:f2:a0:41:8b:b8:bb:fd:85:4b:3c:29:f5:7a:1e:96:91:30: 2a:c0:67:6d:84:40:1d:df:48:47:cc:84:eb:5a:6e:ed:3b:13: fd:62:9a:77:0a:8b:f6:b5:51:43:2e:b0:02:fd:49:ba:c8:b5: d8:52:ac:aa:1d:32:bf:74:bd:fa:ce:98:d0:2f:98:e3:b4:eb: 36:7f:3e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3LmJDSMRZ/bqKsjnux3MCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwNDI2MjEwMTA2WhcNMjYwNDI3MjEwMTA2WjAzMTEwLwYDVQQD EygyNjI0OTU5OGI2ZWEzYjI4NWQyOGQ0OTY4MDFiMTBlOGIxZDEyMDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHPgZECd74K4P0yaxWRJRbzAxVgr 7bqKLdtnlqEf5K/tbGqmN9xl0yWh8n2N/15wz3XxaTQKLgnCzkoGadIu2+2folrj LWyg46MYvYH6+5Z1BBIDeko9klyQ2jvghv1fHd0jrR9W21fziO5pGqUaorb6EmDJ 9P2XZrk6PeEYrzZzPzmjJRqkcjYXupNBe1wiUTYiUV7b/hIKhxEbX0bWJJPueDQD DTF8fQJvwni9ucJK7O0iy+GSGJqAkTIWdwfiVp0bTeA+lY1zr2/EOfVVIf38D1IZ 4fD2VKoHgrniRJE4jBPiVHKPSOfxqR2bcdzGCxREMOATlbsTA8y1OBnAaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYklZi26jsoXSjUloAbEOix0SAVMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHybinPc 2NsA88uQ/TDjRoYc2I0MRsZ7V5ZCbSchYSXYKax8v781gcZ4R3TrSZt/L2YRbfmM Ufh7LHduhMz0v2easHs2gm3W5vEJbHZVJOMhb062D665gLawuWj31qI6tqwJ41Pl BHYsM6pRvNDyMJcWM6z+5ER8ups/BUA44V3JYFhUlhUINx+U2cDV0jz62/fJA769 ml5KxnC9nqFn4eXgkxx2Bq1BbNIPxzoQYfS1oNyTvfKgQYu4u/2FSzwp9XoelpEw KsBnbYRAHd9IR8yE61pu7TsT/WKadwqL9rVRQy6wAv1Jusi12FKsqh0yv3S9+s6Y 0C+Y47TrNn8+JA== -----END CERTIFICATE-----Generated at Mon Apr 27 05:32:16 2026 by rpki-client