$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: Xe6A0jNZWDOHWkQv2/ulc+Yqei8PdtKAkQvkFCFRAvY= Subject key identifier: 24:8E:B8:B5:98:86:85:1C:D6:BE:AE:DE:F1:94:F9:5C:0D:5B:87:97 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019E1CEB473300C910F5D8C7F7934269A074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 1917 Signing time: Tue 12 May 2026 16:00:41 +0000 Manifest this update: Tue 12 May 2026 16:00:41 +0000 Manifest next update: Wed 13 May 2026 16:00:41 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: mwBMD58HVQIGk9AHBMTA10lDSDXM9zCKuKrScUbjwYg=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:47:33:00:c9:10:f5:d8:c7:f7:93:42:69:a0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: May 12 16:00:41 2026 GMT Not After : May 13 16:00:41 2026 GMT Subject: CN=248eb8b59886851cd6beaedef194f95c0d5b8797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:00:d3:b1:b5:a9:1a:94:08:41:3c:8b:09:02: a7:e6:ac:dd:02:be:c5:60:48:82:0f:dc:ed:41:ea: ef:60:31:56:74:19:dc:f5:b2:a4:d8:4d:1a:b2:36: c3:92:e1:a2:d5:a2:12:15:d8:70:a1:22:3a:0a:46: 4e:75:0b:6b:e0:6f:89:7c:54:6f:63:b7:59:3f:28: 1a:61:09:8c:3d:f1:12:88:03:e8:5e:ab:2a:f3:5c: ed:99:35:4d:83:49:66:74:84:90:5c:67:f5:ed:dd: b0:a6:49:d6:8e:d4:37:43:d3:47:4d:aa:93:0f:dc: 5c:c3:7e:f2:84:35:ec:14:35:91:a3:de:5b:ae:7d: e1:70:a4:d1:ef:27:f4:37:95:aa:cf:f1:e0:34:9a: 53:38:d5:6f:7b:60:b6:a9:6b:7a:3f:73:d0:d5:27: c8:3f:7f:10:fa:fc:78:1a:36:fd:56:27:aa:f4:c7: a8:44:49:2d:c0:19:e5:e4:07:f0:94:9f:b2:d2:86: 1f:cc:fc:a8:6b:a4:87:1c:23:ba:f5:78:11:97:c8: d9:c6:ac:36:e2:c9:c2:b7:61:a9:a7:81:0c:0a:e3: 24:f2:63:59:56:a1:8d:14:d8:82:31:9f:36:a2:75: 3d:e1:34:9e:a0:64:fb:d0:21:0b:b2:be:e4:07:3e: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8E:B8:B5:98:86:85:1C:D6:BE:AE:DE:F1:94:F9:5C:0D:5B:87:97 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bb:6e:61:2d:52:1c:0f:9f:89:73:31:0f:a1:fd:d4:e7:e2: ca:86:6c:3a:30:c5:d2:1d:c0:47:e1:90:e6:b6:5d:3b:27:d8: d1:d3:de:11:14:e6:ce:ab:c6:c2:05:dc:67:76:b3:70:9b:ef: cb:3a:71:4c:7a:5f:be:92:d3:83:2a:c3:c0:68:96:b4:d5:99: a8:e5:43:46:41:44:37:6f:59:76:60:94:05:c0:65:82:55:ea: cf:b1:b3:51:b5:4f:5d:7d:c0:8d:28:75:69:db:24:99:6f:f3: 54:0d:72:58:95:06:8e:dd:86:1d:66:50:5c:29:24:f5:fc:de: 60:35:f0:6a:6b:7a:57:ea:5f:c6:53:2c:fe:c4:11:b0:d6:31: 3d:57:fe:27:d8:57:e9:cd:12:06:8e:2d:f3:3b:2a:25:5c:5a: 3a:aa:c6:f1:c0:e7:c6:d7:2c:75:94:a9:85:1a:68:7f:15:4c: ba:a1:e5:66:25:bb:01:5e:9c:e0:31:90:4f:3c:70:31:5d:75: 30:f2:61:1d:4f:0c:78:bf:be:ab:55:df:6b:5b:3f:90:5b:80: 31:fc:9b:44:f6:76:26:2a:3e:9a:99:9f:69:0f:3d:80:2c:87: b5:38:45:5d:f7:26:68:0b:e4:c9:98:18:97:e1:96:27:da:f9: f4:2a:b2:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c60czAMkQ9djH95NCaaB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwNTEyMTYwMDQxWhcNMjYwNTEzMTYwMDQxWjAzMTEwLwYDVQQD EygyNDhlYjhiNTk4ODY4NTFjZDZiZWFlZGVmMTk0Zjk1YzBkNWI4Nzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ADTsbWpGpQIQTyLCQKn5qzdAr7F YEiCD9ztQervYDFWdBnc9bKk2E0asjbDkuGi1aISFdhwoSI6CkZOdQtr4G+JfFRv Y7dZPygaYQmMPfESiAPoXqsq81ztmTVNg0lmdISQXGf17d2wpknWjtQ3Q9NHTaqT D9xcw37yhDXsFDWRo95brn3hcKTR7yf0N5Wqz/HgNJpTONVve2C2qWt6P3PQ1SfI P38Q+vx4Gjb9Vieq9MeoREktwBnl5AfwlJ+y0oYfzPyoa6SHHCO69XgRl8jZxqw2 4snCt2Gpp4EMCuMk8mNZVqGNFNiCMZ82onU94TSeoGT70CELsr7kBz63ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSOuLWYhoUc1r6u3vGU+VwNW4eXMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbtuYS1S HA+fiXMxD6H91OfiyoZsOjDF0h3AR+GQ5rZdOyfY0dPeERTmzqvGwgXcZ3azcJvv yzpxTHpfvpLTgyrDwGiWtNWZqOVDRkFEN29ZdmCUBcBlglXqz7GzUbVPXX3AjSh1 adskmW/zVA1yWJUGjt2GHWZQXCkk9fzeYDXwamt6V+pfxlMs/sQRsNYxPVf+J9hX 6c0SBo4t8zsqJVxaOqrG8cDnxtcsdZSphRpofxVMuqHlZiW7AV6c4DGQTzxwMV11 MPJhHU8MeL++q1Xfa1s/kFuAMfybRPZ2Jio+mpmfaQ89gCyHtThFXfcmaAvkyZgY l+GWJ9r59Cqygg== -----END CERTIFICATE-----Generated at Tue May 12 21:14:40 2026 by rpki-client