$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: qEFNwhiz0OHiINHIYGAy6duomAiN8jW3pm9Q7yRrl/8= Subject key identifier: A1:5D:06:C6:DC:4E:FA:8E:F3:91:E5:61:60:1C:28:13:30:12:8F:33 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019F8FB5B63E997972D90353FAE46CC6F7D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 19D7 Signing time: Thu 23 Jul 2026 16:01:18 +0000 Manifest this update: Thu 23 Jul 2026 16:01:18 +0000 Manifest next update: Fri 24 Jul 2026 16:01:18 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 3Mzap5Gmk33najEs/nuG1c/MrzmnNPJk/i4TH1WT4pc=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:b5:b6:3e:99:79:72:d9:03:53:fa:e4:6c:c6:f7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Jul 23 16:01:18 2026 GMT Not After : Jul 24 16:01:18 2026 GMT Subject: CN=a15d06c6dc4efa8ef391e561601c281330128f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:7a:92:e4:a0:d7:b1:29:42:4f:19:ba:0d: 99:53:9e:61:ad:22:df:9a:c3:4a:0a:2f:8e:46:ce: da:3f:c4:d7:5d:a9:03:d7:28:3f:6c:ad:e5:07:69: d1:01:1e:ac:03:44:57:b1:00:53:45:70:72:67:6c: 9e:c1:08:f2:0d:b8:0f:96:b7:81:87:08:4b:74:f8: b4:96:c9:f0:9c:dc:cf:e5:73:12:1a:00:a8:37:b2: e2:4a:a3:2f:bd:bf:c8:12:ef:e7:92:47:27:96:2d: b7:95:56:27:2d:df:ea:b2:07:5d:27:f8:ac:75:d8: de:a7:f6:18:68:63:a6:6b:ba:89:5d:20:c7:44:7f: 7e:3f:12:68:7b:51:0d:e2:9c:e6:6a:3e:9f:60:e9: e7:f5:c4:cd:91:9a:6a:39:14:f6:a2:9e:e5:c1:07: eb:16:0b:71:d5:ce:00:c1:26:73:ae:bd:6a:02:6d: 57:02:85:01:11:c6:94:82:a6:f4:47:67:bf:73:08: ca:23:9a:f0:dd:89:30:f3:fe:d5:9a:7f:09:03:98: 0a:ae:22:80:6a:e7:de:18:15:0b:25:3b:c2:f4:1b: 2a:9e:b4:f3:58:f3:52:fc:46:d8:6b:b3:63:68:f4: 05:65:81:0a:e4:f5:e5:ab:7c:09:2c:fd:16:09:fb: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5D:06:C6:DC:4E:FA:8E:F3:91:E5:61:60:1C:28:13:30:12:8F:33 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:b5:1b:09:22:bb:f3:e0:b1:40:d9:e7:83:a3:34:d0:51:4c: d7:20:7d:94:87:ba:bb:90:eb:1f:db:cf:84:28:e5:d2:b2:6e: ee:15:5c:29:c7:87:80:9e:41:96:ce:7d:b0:e3:2b:2f:d1:09: 22:9f:b9:e5:ba:63:f4:63:1e:6b:fe:a2:17:e5:09:87:1f:76: 6b:bf:37:e7:57:ae:d2:af:7f:ee:5e:90:44:04:99:af:10:1d: 45:3d:94:f1:44:6d:c9:b8:28:05:0f:90:75:44:16:ca:df:e3: c1:e7:fd:f0:4d:27:e8:45:eb:e3:16:56:70:8d:fb:ac:7e:46: f6:f2:b9:d6:e2:44:a1:ad:d9:3b:f9:b9:5d:f3:88:7b:52:96: 10:83:32:9c:f0:49:32:f7:e6:23:f0:5e:61:df:f2:4d:37:a9: 99:76:cc:3f:fb:6c:d5:f7:44:8a:bd:ea:10:6b:16:7c:2f:df: 2f:94:bd:d2:fe:5c:d9:b0:29:36:3b:95:c8:ea:95:ea:64:03: 43:da:17:d3:75:6d:4c:93:d4:8e:a2:5d:e2:a1:25:d4:f6:40: 38:ce:b2:18:b3:87:bd:f2:38:1f:fb:2b:1e:07:54:5b:25:55: 0b:8a:bc:e6:f3:d9:c6:93:68:c1:2b:3c:8a:b1:5f:7e:a5:b9: fc:5e:0e:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PtbY+mXly2QNT+uRsxvfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwNzIzMTYwMTE4WhcNMjYwNzI0MTYwMTE4WjAzMTEwLwYDVQQD EyhhMTVkMDZjNmRjNGVmYThlZjM5MWU1NjE2MDFjMjgxMzMwMTI4ZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNF6kuSg17EpQk8Zug2ZU55hrSLf msNKCi+ORs7aP8TXXakD1yg/bK3lB2nRAR6sA0RXsQBTRXByZ2yewQjyDbgPlreB hwhLdPi0lsnwnNzP5XMSGgCoN7LiSqMvvb/IEu/nkkcnli23lVYnLd/qsgddJ/is ddjep/YYaGOma7qJXSDHRH9+PxJoe1EN4pzmaj6fYOnn9cTNkZpqORT2op7lwQfr Fgtx1c4AwSZzrr1qAm1XAoUBEcaUgqb0R2e/cwjKI5rw3Ykw8/7Vmn8JA5gKriKA aufeGBULJTvC9BsqnrTzWPNS/EbYa7NjaPQFZYEK5PXlq3wJLP0WCfsSQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFdBsbcTvqO85HlYWAcKBMwEo8zMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLUbCSK7 8+CxQNnng6M00FFM1yB9lIe6u5DrH9vPhCjl0rJu7hVcKceHgJ5Bls59sOMrL9EJ Ip+55bpj9GMea/6iF+UJhx92a78351eu0q9/7l6QRASZrxAdRT2U8URtybgoBQ+Q dUQWyt/jwef98E0n6EXr4xZWcI37rH5G9vK51uJEoa3ZO/m5XfOIe1KWEIMynPBJ MvfmI/BeYd/yTTepmXbMP/ts1fdEir3qEGsWfC/fL5S90v5c2bApNjuVyOqV6mQD Q9oX03VtTJPUjqJd4qEl1PZAOM6yGLOHvfI4H/srHgdUWyVVC4q85vPZxpNowSs8 irFffqW5/F4OMw== -----END CERTIFICATE-----Generated at Fri Jul 24 01:54:27 2026 by rpki-client