$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: A9sTUkXYnz4b9UT5CjXBRE+xvk0DcTxNgO/y3GiVBag= Subject key identifier: 88:A7:75:65:DC:57:0C:6C:85:8E:58:AB:C6:E0:AE:3D:8B:6B:43:52 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019D25F1BF97BCA7410F0D8E0C58D7396E66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 18AE Signing time: Wed 25 Mar 2026 17:01:33 +0000 Manifest this update: Wed 25 Mar 2026 17:01:33 +0000 Manifest next update: Thu 26 Mar 2026 17:01:33 +0000 Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: X056SQB5sB2BV12JmLEzrlA3TRATfPYZPT5IHfI5pdE=) 2: 6tTmYQwXOKfIx8EFjvxOkACOgVE.asa (hash: B+RAPGXA/BvL3QEc86FbnID2OOj7wYJWGGhX0NgqKgw=) 3: H6apiE0r9rOHvwzUANUDplSJSTM.roa (hash: cqjpgcUWiCJ8i4KpFtLhuI6KYkP0u+mdUggey1II1u8=) 4: HO--5wVYjTks1d4pGuEUndfhIc8.roa (hash: PSZ01mmnd3IXqRjRDT7Afa21Y0Y9+VVQ6A0uP0yE5t4=) 5: MW9IWiMaMbGWFIKAeGiIeFNoSuk.roa (hash: WXFlau1tw1wJE2NKxIsomrLjPJJN929dyuhMW8ngWzA=) 6: MdU1TDg6gPzzC5Jls0YI4g9dlJY.roa (hash: j2NCQtDtoHkREqMeNzVs0PKFMT/ogTJaPYMRxR3JZtM=) 7: T-DUSJ-O8JuK2PTgLk1errJO3_0.roa (hash: gJp14x3RVojW4Suzi+mnaQxUdouo4FmMOXfOj5Yct9k=) 8: ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa (hash: uDFD5MRDq12e9FrZ9TcR4muF3bF0UyIZh3ZvvCBU2ko=) 9: ZxZQikqsaz0OBgAuk40P1B9mOf4.roa (hash: +lV4F2CcosnXBXnETAHYkbM6uZLP9AqAiX7Djks3Lcg=) 10: iEeEp42GZdk24J_XhsWfZczs8bI.roa (hash: Es9r36V7+YULS9141hzfnZoXbLZeW7YOudDWcJDuqPo=) 11: iFaMxfToISMhuIOtnklJbKH8sU0.roa (hash: kU5eLBTCsLrlHtahyO4pMWGlPVbZxhPgtGU2m2KhHJU=) 12: kivoHyrrTapcSTu_dcsRevtd1qU.roa (hash: vlUy1Pp06OgEmxAK5wPWEB8oYerqdlsGZx57sDlsb/I=) 13: knMCjsMKq8boFlcM4TD-NB1mee0.roa (hash: 5pXrohpLzHpy5wR5NL0Pk7xascagMMWfyt+Jyy021+I=) 14: nBm950xJAm9pONVZhHt0wVFEq7Y.roa (hash: ZyCH9JBRPWP0WR4LL51Jbb1msIvVHDWA7bezxMkIVWY=) 15: orZjZ-bLi4QKzxMYS8aOyD5DwHw.roa (hash: j0NxewdNRbQ+iT6xBmN+n5xKVYa/xRMyvSC57UkHgro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:bf:97:bc:a7:41:0f:0d:8e:0c:58:d7:39:6e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Mar 25 17:01:33 2026 GMT Not After : Mar 26 17:01:33 2026 GMT Subject: CN=88a77565dc570c6c858e58abc6e0ae3d8b6b4352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:1c:62:9d:f7:bb:5f:01:d2:06:1b:6b:5d: 89:18:27:8a:a9:d0:6f:eb:e1:17:37:65:90:02:44: 17:22:41:81:7a:fe:71:51:d7:f0:b1:f1:5e:9d:c0: 24:07:35:63:a3:32:22:33:ad:dc:51:fa:a4:a5:61: 99:0f:5e:98:7d:14:bb:8c:dc:21:f9:90:b5:a8:38: 0e:08:39:3c:d1:87:a1:98:b6:6b:fc:d2:d6:0a:e5: 5e:ef:c5:eb:5c:3d:31:ff:37:c9:78:39:72:f2:06: 59:cf:97:13:59:2f:4a:6f:2b:58:4b:f5:52:48:5b: b5:70:b2:d7:cb:94:53:b3:cf:0a:7f:50:e8:3f:e0: f5:96:bb:0e:22:eb:2d:77:93:54:76:62:16:0f:1e: 84:d7:f6:50:42:05:16:46:ac:a4:b1:39:fd:59:3f: 55:78:f4:96:28:7b:a3:be:db:52:dd:13:fe:9d:fd: fc:81:11:ea:e6:d8:be:0f:c9:ef:c5:31:84:1d:d4: 5d:6c:73:80:71:1d:b9:4b:bd:cf:9b:ef:01:51:5b: 97:bc:a5:f9:f7:17:87:1f:d4:aa:71:1a:89:1b:b6: 0c:0e:3d:93:61:d1:13:c9:6a:4e:2f:54:b0:d1:52: d0:e6:df:c9:5a:92:95:93:8a:88:79:f8:6a:bb:37: 4d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A7:75:65:DC:57:0C:6C:85:8E:58:AB:C6:E0:AE:3D:8B:6B:43:52 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c1:9e:77:5f:95:4f:44:c4:3f:99:44:f8:c7:63:47:f0:09: 51:2d:88:7c:2c:1f:31:31:82:d2:e5:a9:50:f4:96:bf:28:ae: 04:7e:df:d2:e7:3c:2a:06:4f:4a:db:00:a6:88:32:81:9e:83: 18:c6:b7:07:93:e5:aa:3e:37:9d:22:f1:94:1f:ef:e5:4d:dd: 59:fe:6b:06:3c:bd:3d:e6:42:e1:16:77:ec:31:b3:ef:f0:35: 9e:97:0e:0a:b8:32:f5:cf:1b:12:f9:41:a0:f7:88:76:e9:20: 28:ff:31:3e:8f:4e:d4:a4:31:37:6b:6b:b6:43:1f:30:33:c6: c9:92:f1:57:1c:01:af:38:bf:34:81:16:33:50:70:b6:c5:0e: 7f:f0:56:18:af:9a:c8:4e:f5:66:2e:40:40:f9:d3:e1:76:70: 19:e6:2f:28:8f:7d:61:0c:db:20:2c:b8:e7:22:6e:80:aa:5a: 2c:03:90:4a:8c:4f:f0:47:37:92:7d:e0:6f:7d:62:c3:f7:c4: 6b:50:06:2f:dd:dc:61:a1:65:44:5f:3c:36:ba:0a:6b:5e:24: 57:07:ac:9c:47:bd:a0:30:4f:6d:fa:49:77:92:ca:69:50:db: 87:0b:2b:b1:f6:d0:e9:f2:25:78:58:a8:2f:2c:90:a9:16:78: cf:e0:9d:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8b+XvKdBDw2ODFjXOW5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjYwMzI1MTcwMTMzWhcNMjYwMzI2MTcwMTMzWjAzMTEwLwYDVQQD Eyg4OGE3NzU2NWRjNTcwYzZjODU4ZTU4YWJjNmUwYWUzZDhiNmI0MzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv0cYp33u18B0gYba12JGCeKqdBv 6+EXN2WQAkQXIkGBev5xUdfwsfFencAkBzVjozIiM63cUfqkpWGZD16YfRS7jNwh +ZC1qDgOCDk80YehmLZr/NLWCuVe78XrXD0x/zfJeDly8gZZz5cTWS9KbytYS/VS SFu1cLLXy5RTs88Kf1DoP+D1lrsOIustd5NUdmIWDx6E1/ZQQgUWRqyksTn9WT9V ePSWKHujvttS3RP+nf38gRHq5ti+D8nvxTGEHdRdbHOAcR25S73Pm+8BUVuXvKX5 9xeHH9SqcRqJG7YMDj2TYdETyWpOL1Sw0VLQ5t/JWpKVk4qIefhquzdNMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIindWXcVwxshY5Yq8bgrj2La0NSMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcGed1+V T0TEP5lE+MdjR/AJUS2IfCwfMTGC0uWpUPSWvyiuBH7f0uc8KgZPStsApogygZ6D GMa3B5Plqj43nSLxlB/v5U3dWf5rBjy9PeZC4RZ37DGz7/A1npcOCrgy9c8bEvlB oPeIdukgKP8xPo9O1KQxN2trtkMfMDPGyZLxVxwBrzi/NIEWM1BwtsUOf/BWGK+a yE71Zi5AQPnT4XZwGeYvKI99YQzbICy45yJugKpaLAOQSoxP8Ec3kn3gb31iw/fE a1AGL93cYaFlRF88NroKa14kVwesnEe9oDBPbfpJd5LKaVDbhwsrsfbQ6fIleFio LyyQqRZ4z+CdeQ== -----END CERTIFICATE-----Generated at Wed Mar 25 21:25:57 2026 by rpki-client