$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: YwJ1vjjGTzS5grUOy04QekDW+0OwUBUGFP7khICT3MQ= Subject key identifier: A6:A2:A8:8E:BE:7A:C7:37:24:63:D0:A0:42:C4:0F:02:4B:40:4D:A4 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019F91A43B457B434A2E5A129DBA444143DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 19D8 Signing time: Fri 24 Jul 2026 01:01:27 +0000 Manifest this update: Fri 24 Jul 2026 01:01:27 +0000 Manifest next update: Sat 25 Jul 2026 01:01:27 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: u+Ypry15na7Au4QLmYagGmwG5zta3DTSe8OayYXG1hs=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a4:3b:45:7b:43:4a:2e:5a:12:9d:ba:44:41:43:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Jul 24 01:01:27 2026 GMT Not After : Jul 25 01:01:27 2026 GMT Subject: CN=a6a2a88ebe7ac7372463d0a042c40f024b404da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:68:ea:47:70:bb:86:11:ff:63:61:5a:cb: b5:ea:4b:af:8c:2a:6c:f5:a0:13:fe:49:a8:19:d0: e5:f1:a6:9b:d5:11:93:b3:f2:20:5c:ea:b5:9e:3d: 17:5e:aa:43:a4:71:bd:d8:c4:98:8c:29:2c:1f:2f: 1b:48:d8:30:e5:91:32:67:5f:a8:71:0e:34:3f:28: f5:a8:dc:35:92:a7:9f:65:f8:34:69:16:e3:e9:ab: ca:1b:7d:4d:21:6a:aa:3c:db:4a:37:59:dc:d5:28: 7b:eb:1b:29:51:17:3a:b9:bf:9d:37:28:b1:36:e0: 05:bf:06:15:d1:1c:73:7e:cf:0b:cc:4b:4b:b4:ea: 96:a2:3e:c2:34:b6:79:26:13:4b:a6:ff:f0:36:9c: 84:dc:25:96:e1:da:19:d0:19:77:3a:9e:0f:2f:97: af:d1:1b:ed:e6:3d:59:28:cf:1d:20:ba:6f:d2:37: 6b:c6:6b:17:a8:5b:88:14:65:88:ba:39:17:02:ef: 1c:6c:07:66:a1:af:4e:14:e4:f7:f1:ce:b7:71:ce: 2b:26:79:d1:de:b6:56:40:18:94:a1:e4:95:3f:20: b8:4c:51:a2:4d:ec:ec:39:ba:67:fa:be:f6:eb:72: fd:77:d5:6a:b5:d5:ca:11:e7:2a:38:f4:5b:e9:c2: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A2:A8:8E:BE:7A:C7:37:24:63:D0:A0:42:C4:0F:02:4B:40:4D:A4 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:87:5b:98:93:09:50:25:42:01:a0:95:a3:9d:04:62:93:50: dd:4d:cf:90:92:3e:cd:ed:09:3c:d4:2b:03:78:9e:e0:d6:a9: 28:f2:72:67:17:c8:79:2f:4a:6b:54:4a:d0:30:e5:8d:36:93: c9:4e:34:29:8a:40:db:dd:9c:55:61:8c:2a:45:f6:08:9f:d5: 6e:0d:85:ca:ff:65:f8:b9:1e:4d:a6:90:ad:53:ba:79:44:b3: 11:ef:65:40:ce:fd:95:1e:ac:90:62:52:f3:bc:b7:c9:e3:b7: 39:b5:bd:fa:88:b7:f4:06:a3:e3:29:33:ca:31:02:da:e9:89: d9:10:c0:3b:a1:a2:da:ab:73:c6:37:1f:dd:01:15:23:a1:f6: f7:ec:6b:1c:8c:64:a3:be:2f:fc:5d:2c:c4:27:a0:79:f9:64: d4:3e:82:b5:04:be:f3:e3:02:7b:84:93:2e:2d:2c:03:ee:14: 6c:36:e3:31:1c:8a:d2:e7:29:da:51:27:61:1e:84:70:47:4a: 31:cd:2f:ba:70:31:cd:2c:9f:4b:00:e1:c1:14:5a:0e:b2:54: 4d:2c:a0:5b:1e:f0:04:0a:51:eb:64:3b:84:5c:b5:9c:83:d2: bb:f2:fe:bc:3b:b8:8d:15:72:50:87:7e:a6:af:1e:29:f8:57: cf:21:eb:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RpDtFe0NKLloSnbpEQUPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwNzI0MDEwMTI3WhcNMjYwNzI1MDEwMTI3WjAzMTEwLwYDVQQD EyhhNmEyYTg4ZWJlN2FjNzM3MjQ2M2QwYTA0MmM0MGYwMjRiNDA0ZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFxo6kdwu4YR/2NhWsu16kuvjCps 9aAT/kmoGdDl8aab1RGTs/IgXOq1nj0XXqpDpHG92MSYjCksHy8bSNgw5ZEyZ1+o cQ40Pyj1qNw1kqefZfg0aRbj6avKG31NIWqqPNtKN1nc1Sh76xspURc6ub+dNyix NuAFvwYV0Rxzfs8LzEtLtOqWoj7CNLZ5JhNLpv/wNpyE3CWW4doZ0Bl3Op4PL5ev 0Rvt5j1ZKM8dILpv0jdrxmsXqFuIFGWIujkXAu8cbAdmoa9OFOT38c63cc4rJnnR 3rZWQBiUoeSVPyC4TFGiTezsObpn+r7263L9d9VqtdXKEecqOPRb6cKpVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaiqI6+esc3JGPQoELEDwJLQE2kMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIdbmJMJ UCVCAaCVo50EYpNQ3U3PkJI+ze0JPNQrA3ie4NapKPJyZxfIeS9Ka1RK0DDljTaT yU40KYpA292cVWGMKkX2CJ/Vbg2Fyv9l+LkeTaaQrVO6eUSzEe9lQM79lR6skGJS 87y3yeO3ObW9+oi39Aaj4ykzyjEC2umJ2RDAO6Gi2qtzxjcf3QEVI6H29+xrHIxk o74v/F0sxCegeflk1D6CtQS+8+MCe4STLi0sA+4UbDbjMRyK0ucp2lEnYR6EcEdK Mc0vunAxzSyfSwDhwRRaDrJUTSygWx7wBApR62Q7hFy1nIPSu/L+vDu4jRVyUId+ pq8eKfhXzyHreA== -----END CERTIFICATE-----Generated at Fri Jul 24 03:22:11 2026 by rpki-client