$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: ypJuhJ8f87hXY3L58JOMg9PZZdEgVhIYTIYp4cvB8oA= Subject key identifier: 98:5C:0D:F1:1C:13:B6:58:8E:2E:A1:F8:EE:AA:49:A9:DC:D0:32:95 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019D27A8CDF178B1B975BF7DCDFFB7D7836D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 1898 Signing time: Thu 26 Mar 2026 01:01:07 +0000 Manifest this update: Thu 26 Mar 2026 01:01:07 +0000 Manifest next update: Fri 27 Mar 2026 01:01:07 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: +zLt20XtLEt3qbOtaxoThRQ1Az/xSTm3GoEw2j3NVNM=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a8:cd:f1:78:b1:b9:75:bf:7d:cd:ff:b7:d7:83:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Mar 26 01:01:07 2026 GMT Not After : Mar 27 01:01:07 2026 GMT Subject: CN=985c0df11c13b6588e2ea1f8eeaa49a9dcd03295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5c:ff:a2:fd:40:f1:d9:6b:70:6f:a9:d2:64: a6:56:0e:5e:1e:c2:50:36:f0:45:0e:b5:97:8a:70: b1:f4:b3:b4:4e:a6:65:5e:76:2e:95:7a:15:c9:fa: 68:74:c7:58:66:55:ca:46:5b:95:28:92:7d:80:a0: 85:7d:ca:90:e4:b8:9e:0d:01:02:06:70:86:ed:b9: 7c:a5:29:88:a8:6b:c6:2b:81:3f:38:7f:e6:ac:56: 9b:ab:de:c9:79:96:94:dc:4d:ad:46:d1:86:87:cf: 89:b0:cb:f1:54:47:53:62:d3:5b:f2:52:e9:fe:81: b4:af:64:c1:c8:22:cf:99:90:2f:97:a6:40:53:24: 77:aa:1c:21:2f:a0:7d:b3:d7:a4:f2:c0:19:a6:f0: 09:7e:d0:2f:a4:a8:55:de:50:7b:50:47:5b:76:f9: 8b:40:55:dd:c3:78:d4:08:6a:53:45:4a:ed:95:7e: 52:4f:33:8f:e4:22:50:c1:19:6e:70:18:60:47:bd: 06:73:74:f9:e5:11:6e:dd:1c:64:23:9d:22:4d:55: f4:fe:46:61:18:b5:0e:75:ce:53:58:fc:b4:6b:be: 90:ae:87:cd:b1:ac:34:ce:fc:a8:fb:4b:20:ee:49: 1c:b1:39:50:59:79:6e:01:78:59:f2:bd:96:8c:bf: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5C:0D:F1:1C:13:B6:58:8E:2E:A1:F8:EE:AA:49:A9:DC:D0:32:95 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:08:b4:fc:3e:b4:21:f2:c4:a3:28:8b:e2:03:2c:af:0b:d1: 83:af:1e:69:00:66:16:7a:38:ba:60:6b:4c:7b:26:a6:d4:1d: 45:41:93:9a:ba:33:0c:77:f0:59:dd:7c:4d:ec:7a:ea:92:74: b4:17:ed:8f:7d:b1:9f:ec:5f:84:ff:b2:45:f9:1e:48:7c:36: 2b:5d:d0:b2:aa:ab:63:d5:75:ff:ae:3a:12:dd:3c:59:dc:13: bb:2e:c0:f4:6e:22:a6:d8:9a:74:e3:db:61:4d:49:7a:55:1f: bc:0e:e9:b1:95:5d:35:20:f5:8d:11:94:18:6e:7f:71:2d:74: af:37:8c:8c:ec:f6:d2:46:63:5f:1c:84:55:a9:0b:18:42:da: b1:d9:37:ad:00:98:75:07:2a:b8:10:69:a4:82:e9:1a:70:fe: 6e:88:ba:04:34:7b:8a:e7:99:ad:6c:44:c7:2d:ed:12:cc:e5: 74:be:d0:02:eb:fd:b2:44:a9:a8:67:70:0a:40:7c:02:dd:f1: 46:53:81:40:34:fd:e3:6f:ac:eb:6b:bc:1b:d9:b1:f4:71:2e: 65:b8:63:e5:9b:28:1c:85:ef:17:76:24:06:3d:71:c2:63:d8: 75:c3:24:a8:92:44:fd:45:fe:0b:29:0c:67:7f:d8:19:01:6d: d1:fe:ba:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqM3xeLG5db99zf+314NtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwMzI2MDEwMTA3WhcNMjYwMzI3MDEwMTA3WjAzMTEwLwYDVQQD Eyg5ODVjMGRmMTFjMTNiNjU4OGUyZWExZjhlZWFhNDlhOWRjZDAzMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31z/ov1A8dlrcG+p0mSmVg5eHsJQ NvBFDrWXinCx9LO0TqZlXnYulXoVyfpodMdYZlXKRluVKJJ9gKCFfcqQ5LieDQEC BnCG7bl8pSmIqGvGK4E/OH/mrFabq97JeZaU3E2tRtGGh8+JsMvxVEdTYtNb8lLp /oG0r2TByCLPmZAvl6ZAUyR3qhwhL6B9s9ek8sAZpvAJftAvpKhV3lB7UEdbdvmL QFXdw3jUCGpTRUrtlX5STzOP5CJQwRlucBhgR70Gc3T55RFu3RxkI50iTVX0/kZh GLUOdc5TWPy0a76QrofNsaw0zvyo+0sg7kkcsTlQWXluAXhZ8r2WjL/fMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhcDfEcE7ZYji6h+O6qSanc0DKVMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwi0/D60 IfLEoyiL4gMsrwvRg68eaQBmFno4umBrTHsmptQdRUGTmrozDHfwWd18Tex66pJ0 tBftj32xn+xfhP+yRfkeSHw2K13QsqqrY9V1/646Et08WdwTuy7A9G4iptiadOPb YU1JelUfvA7psZVdNSD1jRGUGG5/cS10rzeMjOz20kZjXxyEVakLGELasdk3rQCY dQcquBBppILpGnD+boi6BDR7iueZrWxExy3tEszldL7QAuv9skSpqGdwCkB8At3x RlOBQDT942+s62u8G9mx9HEuZbhj5ZsoHIXvF3YkBj1xwmPYdcMkqJJE/UX+CykM Z3/YGQFt0f66kA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:36:25 2026 by rpki-client