$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: KEBI8DLNwk9xEd6DaolyACdXIvEGmKTHDftyxGHOFUo= Subject key identifier: 55:B8:3B:5A:E3:03:21:EF:31:A8:EB:AC:6C:B6:82:DC:FE:82:D1:C9 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019DC18299850507A5679BEB97C9B4D5BCE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 18FD Signing time: Fri 24 Apr 2026 22:00:54 +0000 Manifest this update: Fri 24 Apr 2026 22:00:54 +0000 Manifest next update: Sat 25 Apr 2026 22:00:54 +0000 Files and hashes: 1: 0D14gN2WiBa54cFbuKlrQUOrf8M.roa (hash: 2wB51bMRZ+T+HK/B9Edc9OpYAvR825v+i0duj5mr6/E=) 2: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=) 3: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=) 4: Go3pOTuap2_fsOG2Cy2Y4VT2pN0.roa (hash: 0oyx4eIX+vmWlDNgh2kGWbDg44/BIpYISvXYVe/lRmI=) 5: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=) 6: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=) 7: axdSVqIzRJIZuL4bUaXgsCZR0GA.roa (hash: o1y1RiYLt8sTd8RRJ89cjZcmfxt/0UhXCW4mXlZ2wPw=) 8: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=) 9: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: KoJDDfQIHhZKcY6vXI3wFst0aB6HuslNyUxZ6uiFXbU=) 10: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=) 11: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=) 12: qtFUd8UrHAjg1CQzxCUVYh49r34.roa (hash: zeOnhH1WA+57cINQaOKMw3j5q8bJlC2Ele92zkBPv4I=) 13: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=) 14: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=) 15: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:c1:82:99:85:05:07:a5:67:9b:eb:97:c9:b4:d5:bc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Apr 24 22:00:54 2026 GMT Not After : Apr 25 22:00:54 2026 GMT Subject: CN=55b83b5ae30321ef31a8ebac6cb682dcfe82d1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e9:9d:77:49:d9:01:7a:a5:96:2c:1c:18:e1: 17:97:31:e1:6d:a0:ed:58:ca:89:08:ea:34:fc:43: 32:1c:f6:be:cc:52:ca:e6:3c:80:3a:70:3e:b4:3e: 47:86:e5:52:3f:24:3d:f4:bc:04:46:8f:ee:a9:cb: 03:f3:c8:4e:e5:1a:12:20:6a:7e:89:05:2c:20:9d: 41:f5:8a:a0:55:e5:f3:aa:63:00:89:30:a4:7e:1e: 2b:70:7a:1a:4d:45:bd:e0:61:dd:02:b0:92:2c:b5: 04:1f:40:4f:6d:47:48:5e:fd:00:1e:53:30:f6:28: 60:3b:df:3f:7a:d6:ad:53:bf:9a:0e:ab:c6:85:64: f6:0d:bf:9c:bd:0f:cb:83:e8:35:da:c6:28:2e:a0: b2:3e:25:e9:3f:f3:80:f0:ee:1d:27:ba:bb:b5:a8: a2:11:11:d7:d7:33:ba:66:ff:f0:c3:10:a4:4d:78: 0d:67:42:15:0a:0d:75:0f:6b:e3:cf:21:a2:b4:fa: 4e:3c:8d:89:8e:16:1a:d3:7f:7d:0d:b8:61:f9:92: 58:fa:d5:be:40:8f:33:dd:7e:cd:e8:43:65:e0:e9: 7b:ba:44:52:ac:3f:16:aa:dc:10:37:e5:84:b8:3d: 8b:25:84:6c:21:b1:f7:aa:c0:b0:b6:6a:4f:28:5d: 71:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B8:3B:5A:E3:03:21:EF:31:A8:EB:AC:6C:B6:82:DC:FE:82:D1:C9 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8c:5f:60:7a:ce:16:2b:5c:7b:92:28:51:92:9a:8a:0d:5b: 03:ec:c1:a8:21:74:ec:69:18:be:b2:e2:27:0c:7f:e5:2c:9f: 37:a9:fd:73:31:cd:fc:20:5c:41:48:dd:4d:65:37:9d:3a:dc: a6:3b:2b:c3:49:12:29:d5:43:1d:74:eb:42:24:f6:fa:a8:77: 54:0d:d0:89:a3:de:df:fb:13:7e:4b:24:b3:07:41:4a:59:87: 9d:aa:6f:b6:40:d7:5a:65:00:f3:fd:c0:73:ec:f1:79:9b:29: 0b:ae:34:8d:d6:a4:2d:e5:bc:ae:80:d1:1a:55:a2:a4:ba:b8: 65:dd:42:df:de:32:33:7d:fa:00:4f:c4:da:f0:4e:10:be:bd: 1a:ae:2b:f1:30:23:05:55:34:76:55:ad:34:0a:7d:e1:fc:c9: e3:26:89:45:9a:c2:3c:cf:6b:f2:2d:6c:5a:ab:0e:a2:dd:d1: e9:41:60:fe:66:13:e6:b6:74:6d:17:a9:1a:59:25:13:05:d3: e9:46:07:e0:e3:a9:d4:fe:80:6e:17:1b:4c:b4:8c:3f:21:84: a3:ea:a0:8a:a0:65:4f:f5:45:48:6f:9b:01:4b:e3:c2:b8:86: 9f:a3:4e:f2:b1:48:49:e8:9e:c6:2d:cb:99:28:4b:91:f6:d1: b6:03:03:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3BgpmFBQelZ5vrl8m01bzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjYwNDI0MjIwMDU0WhcNMjYwNDI1MjIwMDU0WjAzMTEwLwYDVQQD Eyg1NWI4M2I1YWUzMDMyMWVmMzFhOGViYWM2Y2I2ODJkY2ZlODJkMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Omdd0nZAXqlliwcGOEXlzHhbaDt WMqJCOo0/EMyHPa+zFLK5jyAOnA+tD5HhuVSPyQ99LwERo/uqcsD88hO5RoSIGp+ iQUsIJ1B9YqgVeXzqmMAiTCkfh4rcHoaTUW94GHdArCSLLUEH0BPbUdIXv0AHlMw 9ihgO98/etatU7+aDqvGhWT2Db+cvQ/Lg+g12sYoLqCyPiXpP/OA8O4dJ7q7taii ERHX1zO6Zv/wwxCkTXgNZ0IVCg11D2vjzyGitPpOPI2JjhYa0399Dbhh+ZJY+tW+ QI8z3X7N6ENl4Ol7ukRSrD8WqtwQN+WEuD2LJYRsIbH3qsCwtmpPKF1xCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFW4O1rjAyHvMajrrGy2gtz+gtHJMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoxfYHrO Fitce5IoUZKaig1bA+zBqCF07GkYvrLiJwx/5SyfN6n9czHN/CBcQUjdTWU3nTrc pjsrw0kSKdVDHXTrQiT2+qh3VA3QiaPe3/sTfkskswdBSlmHnapvtkDXWmUA8/3A c+zxeZspC640jdakLeW8roDRGlWipLq4Zd1C394yM336AE/E2vBOEL69Gq4r8TAj BVU0dlWtNAp94fzJ4yaJRZrCPM9r8i1sWqsOot3R6UFg/mYT5rZ0bRepGlklEwXT 6UYH4OOp1P6AbhcbTLSMPyGEo+qgiqBlT/VFSG+bAUvjwriGn6NO8rFISeiexi3L mShLkfbRtgMDcA== -----END CERTIFICATE-----Generated at Sat Apr 25 00:34:32 2026 by rpki-client