$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: UxQPPlrkuHUhZ52XXmQg75+jEXOg5KBltaxCa5KlJro= Subject key identifier: F4:38:65:E0:42:75:93:1D:0F:8F:B7:C7:61:58:50:68:45:39:77:F7 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 01A0D9F1A6AB40E69CDFE4E0A8B079BEAB80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 1A82 Signing time: Fri 25 Sep 2026 19:01:27 +0000 Manifest this update: Fri 25 Sep 2026 19:01:27 +0000 Manifest next update: Sat 26 Sep 2026 19:01:27 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: Wwd77laCRBP2yVdJwXasiARtVDiiWqd5kSfR5RbXpWM=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d9:f1:a6:ab:40:e6:9c:df:e4:e0:a8:b0:79:be:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Sep 25 19:01:27 2026 GMT Not After : Sep 26 19:01:27 2026 GMT Subject: CN=f43865e04275931d0f8fb7c761585068453977f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:c4:66:fa:3e:cc:4a:72:37:32:87:f8:d4: 06:95:1f:9f:c8:7f:c1:97:84:1e:fa:94:1a:bf:ef: c1:fd:1c:7a:9d:88:11:7e:03:e5:2f:5b:85:32:ac: dc:cd:29:38:97:3e:0a:c2:35:83:3a:d2:05:04:4d: 99:5c:3c:74:26:ff:0f:3d:cf:0a:5e:0c:5f:22:c9: 4c:67:b7:c6:ca:ae:29:c0:7d:83:e5:50:0a:2f:8d: 8f:45:fc:8a:0d:e9:ea:d1:c0:aa:a1:3d:8d:ed:f4: fa:38:a2:01:3a:e8:dd:c6:6d:24:1d:7e:2c:d1:9e: 09:7a:f5:24:2f:8f:ae:e2:39:49:05:05:81:1e:89: ad:4c:07:cd:18:3a:f9:d3:cc:0d:74:c8:5f:7e:96: 54:56:72:13:33:48:81:04:c8:2e:5a:6d:e4:7c:69: 5f:2a:a8:ad:08:03:9e:c7:f9:ed:c4:8a:f5:02:46: a9:4f:30:16:ea:58:ab:44:5f:66:95:6a:22:08:fb: bc:90:91:52:c2:f2:11:d9:83:95:30:69:70:1b:c6: 3e:2d:57:17:db:d7:66:68:ff:4b:90:16:24:4c:2a: 6e:e6:02:ab:04:e0:f7:ba:b6:b5:b8:f6:9d:66:00: 38:c0:2d:1b:6c:fb:62:2c:df:ac:19:0a:27:08:53: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:38:65:E0:42:75:93:1D:0F:8F:B7:C7:61:58:50:68:45:39:77:F7 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:89:c0:dd:54:42:28:63:e8:29:55:b1:9d:74:24:a7:92:a5: 95:05:0d:89:26:9b:81:0f:fc:07:72:35:5e:e3:ba:96:85:87: 9a:78:0f:b7:19:e1:be:ba:63:d7:50:6c:c9:1f:1b:c7:96:3a: b0:32:ea:b4:20:0e:7c:62:39:6d:fc:9f:33:09:8a:c3:e8:55: 44:92:e1:52:7d:ce:d4:e2:85:53:b3:7d:18:fe:56:74:4b:b1: 34:40:5c:0d:42:e9:d4:74:e5:26:38:7a:b9:cf:c7:ec:d4:9e: 24:9e:ca:c6:d3:1f:7f:3e:91:75:2c:13:a5:3f:83:b8:96:02: a6:64:1f:7c:87:bf:de:d4:53:84:8d:3d:e2:9a:30:bc:34:24: 2d:b6:b1:d1:33:84:06:80:24:cd:e2:6f:ad:75:95:63:0f:e8: e3:3e:02:4a:cf:8b:dc:45:b1:f5:19:47:9c:b5:02:2e:ab:fb: af:a6:f8:3f:e1:ad:81:6d:e6:c5:63:1e:fa:fb:f5:27:dd:74: 4c:06:90:76:b1:02:bd:f0:bc:14:f8:4b:61:54:5d:7f:5e:80: b9:5e:b7:d2:75:c4:a8:b8:2d:51:10:6b:fc:0a:05:39:8b:10: 0f:81:ac:86:a7:25:68:f0:ef:de:f9:06:b8:08:df:ec:20:c3: 8c:49:29:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDZ8aarQOac3+TgqLB5vquAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwOTI1MTkwMTI3WhcNMjYwOTI2MTkwMTI3WjAzMTEwLwYDVQQD EyhmNDM4NjVlMDQyNzU5MzFkMGY4ZmI3Yzc2MTU4NTA2ODQ1Mzk3N2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYrEZvo+zEpyNzKH+NQGlR+fyH/B l4Qe+pQav+/B/Rx6nYgRfgPlL1uFMqzczSk4lz4KwjWDOtIFBE2ZXDx0Jv8PPc8K XgxfIslMZ7fGyq4pwH2D5VAKL42PRfyKDenq0cCqoT2N7fT6OKIBOujdxm0kHX4s 0Z4JevUkL4+u4jlJBQWBHomtTAfNGDr508wNdMhffpZUVnITM0iBBMguWm3kfGlf KqitCAOex/ntxIr1AkapTzAW6lirRF9mlWoiCPu8kJFSwvIR2YOVMGlwG8Y+LVcX 29dmaP9LkBYkTCpu5gKrBOD3ura1uPadZgA4wC0bbPtiLN+sGQonCFN3/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ4ZeBCdZMdD4+3x2FYUGhFOXf3MB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYnA3VRC KGPoKVWxnXQkp5KllQUNiSabgQ/8B3I1XuO6loWHmngPtxnhvrpj11BsyR8bx5Y6 sDLqtCAOfGI5bfyfMwmKw+hVRJLhUn3O1OKFU7N9GP5WdEuxNEBcDULp1HTlJjh6 uc/H7NSeJJ7KxtMffz6RdSwTpT+DuJYCpmQffIe/3tRThI094powvDQkLbax0TOE BoAkzeJvrXWVYw/o4z4CSs+L3EWx9RlHnLUCLqv7r6b4P+GtgW3mxWMe+vv1J910 TAaQdrECvfC8FPhLYVRdf16AuV630nXEqLgtURBr/AoFOYsQD4GshqclaPDv3vkG uAjf7CDDjEkpZA== -----END CERTIFICATE-----Generated at Sat Sep 26 05:41:58 2026 by rpki-client