$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: f3FOpp35u5i6E71e7kVWkZjDWFwBu4QE5+q7W2fWQgo= Subject key identifier: A2:76:8E:30:22:49:9C:F6:49:70:16:C1:82:56:12:63:BB:FD:E5:24 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019D84FFA3B5E60125F087EC5CC3A46E4467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 1106 Signing time: Mon 13 Apr 2026 04:00:39 +0000 Manifest this update: Mon 13 Apr 2026 04:00:39 +0000 Manifest next update: Tue 14 Apr 2026 04:00:39 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: UV8z0ZlCZB1rLkmpLpp4OavaBLfsf26kxW80IRZNK6s=) 7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=) 9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 10: qOS44k4K1WSKtUKGLEhRxJxPEas.roa (hash: FW03t2tk2X1t0JN65p0CDI9DvEztasvMAKi+nwmwwnw=) 11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Apr 2026 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:84:ff:a3:b5:e6:01:25:f0:87:ec:5c:c3:a4:6e:44:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Apr 13 04:00:39 2026 GMT Not After : Apr 14 04:00:39 2026 GMT Subject: CN=a2768e3022499cf6497016c182561263bbfde524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:39:0c:99:1a:7b:8e:3a:59:c9:5c:e4:87: d6:0e:42:70:33:b6:66:40:f3:80:21:83:88:a0:67: 55:f0:d2:f6:41:74:0c:97:a8:38:1d:bb:bc:79:82: 03:d2:d8:09:de:94:d9:83:68:d5:51:e9:78:c0:2b: c0:82:cb:75:6b:fe:11:dd:04:f1:1d:08:b6:ed:46: eb:ed:c4:2c:68:64:ff:c7:83:f6:7d:b6:c1:ae:94: 2e:55:b4:ec:aa:6d:c0:0f:12:68:13:27:b0:49:6c: 2f:08:9b:26:8a:9e:00:99:72:ab:29:a0:7f:f4:ce: 12:c2:8a:20:f6:c0:c6:f9:3c:ec:de:24:5a:a2:75: 4f:cb:3f:b7:56:6a:f1:f5:49:ec:c8:be:ff:fb:88: d8:db:e8:51:cd:f5:52:c6:d9:00:c1:66:ba:7f:75: ae:5c:df:e2:1e:ba:46:81:7c:fc:e7:a4:08:00:84: d0:3d:c5:36:c3:54:3f:66:0b:17:de:bb:a6:0e:8c: b2:13:93:09:8d:2d:60:46:12:e9:96:3e:a7:1e:1e: 11:d4:7a:fb:36:ea:21:f4:ef:b0:33:3e:a8:ec:34: 9c:19:3a:98:37:23:33:c0:17:ff:24:cd:cb:77:48: 43:4a:12:ec:6d:36:65:e6:b0:ac:7e:9f:dc:4d:66: 2d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:76:8E:30:22:49:9C:F6:49:70:16:C1:82:56:12:63:BB:FD:E5:24 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:64:cc:b0:bc:d6:83:ea:0f:0b:08:9b:95:41:0c:89:f1:b5: 84:0d:f0:aa:80:a1:d5:62:a4:34:1f:a1:6a:47:58:cd:cf:c7: 6c:3a:99:ff:8d:8b:41:5a:c3:41:65:a6:59:17:4c:e5:79:fc: a9:b8:6b:5f:2c:04:7d:11:36:04:90:eb:1c:74:29:f4:3e:40: 34:34:0e:12:3c:db:be:72:81:06:bd:4c:51:67:3b:25:a6:44: 7c:a9:3c:08:30:84:26:34:17:dc:07:12:7d:84:f9:e8:27:f8: b4:0d:6b:ce:20:50:9b:a5:aa:e4:74:75:45:ff:e6:28:a0:89: a6:63:bc:04:be:0c:d6:28:ff:4b:25:dd:ef:c8:bd:73:4e:05: 23:ed:00:00:ae:9d:32:2c:e1:45:4f:95:7d:ba:18:ba:01:c8: 36:f6:91:2e:02:d6:0a:bc:7b:7d:1b:af:2b:25:7a:9a:ef:0c: 3d:1b:ed:b1:f6:72:56:e0:de:fb:0f:ed:e0:94:b4:c9:30:5c: 70:2e:2e:88:6a:6a:c9:49:b7:10:82:c1:29:6f:fc:27:e2:aa: 9e:1e:0d:09:ab:34:cd:da:d6:7e:88:41:6a:b6:6e:e1:41:86: d7:52:f7:2f:2e:0a:b0:fa:3e:89:24:5b:2d:e2:e6:7c:ce:ec: 7d:36:d2:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2E/6O15gEl8IfsXMOkbkRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwNDEzMDQwMDM5WhcNMjYwNDE0MDQwMDM5WjAzMTEwLwYDVQQD EyhhMjc2OGUzMDIyNDk5Y2Y2NDk3MDE2YzE4MjU2MTI2M2JiZmRlNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntk5DJkae446Wclc5IfWDkJwM7Zm QPOAIYOIoGdV8NL2QXQMl6g4Hbu8eYID0tgJ3pTZg2jVUel4wCvAgst1a/4R3QTx HQi27Ubr7cQsaGT/x4P2fbbBrpQuVbTsqm3ADxJoEyewSWwvCJsmip4AmXKrKaB/ 9M4Swoog9sDG+Tzs3iRaonVPyz+3Vmrx9UnsyL7/+4jY2+hRzfVSxtkAwWa6f3Wu XN/iHrpGgXz856QIAITQPcU2w1Q/ZgsX3rumDoyyE5MJjS1gRhLplj6nHh4R1Hr7 Nuoh9O+wMz6o7DScGTqYNyMzwBf/JM3Ld0hDShLsbTZl5rCsfp/cTWYtDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJ2jjAiSZz2SXAWwYJWEmO7/eUkMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGTMsLzW g+oPCwiblUEMifG1hA3wqoCh1WKkNB+hakdYzc/HbDqZ/42LQVrDQWWmWRdM5Xn8 qbhrXywEfRE2BJDrHHQp9D5ANDQOEjzbvnKBBr1MUWc7JaZEfKk8CDCEJjQX3AcS fYT56Cf4tA1rziBQm6Wq5HR1Rf/mKKCJpmO8BL4M1ij/SyXd78i9c04FI+0AAK6d MizhRU+VfboYugHINvaRLgLWCrx7fRuvKyV6mu8MPRvtsfZyVuDe+w/t4JS0yTBc cC4uiGpqyUm3EILBKW/8J+Kqnh4NCas0zdrWfohBarZu4UGG11L3Ly4KsPo+iSRb LeLmfM7sfTbSQw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:26:37 2026 by rpki-client