$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: We0OvO/1TrQK6qH9jHCI71/pom96fdnhq3uvpAG33mc= Subject key identifier: 4E:18:A8:56:3E:3F:A2:D4:B5:A3:04:34:8A:1E:B3:89:A6:AD:5D:0C Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 01A0CDECCE6903BA700EE2B83C1342C69C7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 1A37 Signing time: Wed 23 Sep 2026 11:00:43 +0000 Manifest this update: Wed 23 Sep 2026 11:00:43 +0000 Manifest next update: Thu 24 Sep 2026 11:00:43 +0000 Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: wPBdSB/L0G8I36+bvjhpmSE9yxmeROAd/GQdp9AhrEw=) 2: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (hash: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE=) 3: HdDV5YwMNyFB8k-B_X4MU9-30nM.roa (hash: luVRxl/FnQsj5OM+H4x3yTlX1ppJM10PIPO1RpHN79g=) 4: Nu_9r8H3m3GpfJQaXI9Z_gksBSE.roa (hash: A0MtvPieujf5jUqev3piW+xmWcpxjiKiXWnP9KoZX/U=) 5: ObexSGVy696Wkd2DRhwt2_VaBs8.roa (hash: Ly1Ec9X97SiqjYPYhofzign3IKjIwUM2uHbt0VCXmE4=) 6: ObzqjXT5GtzebuI8BcIwPsXaLb8.roa (hash: CxduJ99uKrCwZPdYUZzvhflelo5OchrVkeFU+IICnVU=) 7: XJkwKQw1uwsNaMGPHoEZmHJ7ln0.roa (hash: 4mMJPUkmp2WBHWIYLKvvJ35kZmLlEY53pxDsemE3rMA=) 8: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (hash: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=) 9: teSjGmrvY_tu6RkdG_34GiE8KM0.roa (hash: yc8bd5ePK4M8XX+rsAFOZYDdIrq94apPIscjQGUl9lw=) 10: ugVQrwIOiOMJPcA4zFZm9kWmY04.roa (hash: Q8pDB3SA4JzJaHb+up2jkC0do3Kit4mBYGTJ7TNXFRI=) 11: yWZ-5OdaSQI1LPfjNeNs7tCX608.roa (hash: esuWPq3Xg5U/Su3ABpCWC8pkIxvEw4LQCmVfV8WC2QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:ec:ce:69:03:ba:70:0e:e2:b8:3c:13:42:c6:9c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Sep 23 11:00:43 2026 GMT Not After : Sep 24 11:00:43 2026 GMT Subject: CN=4e18a8563e3fa2d4b5a304348a1eb389a6ad5d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:71:04:ce:b6:25:4f:d5:20:5b:02:5f:dd: 36:93:ce:07:ba:de:e1:93:7d:af:9a:f6:1d:96:c7: 54:2e:07:c3:fb:c4:e2:3d:3a:06:ce:e1:b2:71:1b: fa:e8:a7:c7:5c:04:72:30:3c:03:fd:d1:3a:9f:09: 3f:7b:a4:c5:a1:b8:10:df:cc:92:b9:a2:ae:3f:d5: f5:6e:a5:73:f8:4d:ac:34:10:a0:0d:c5:cc:21:fc: 7f:70:c7:ed:5f:bb:4e:4b:66:cd:f6:7f:e5:a8:9b: 7e:c1:74:cd:32:60:46:e5:e9:b7:38:69:ab:be:1c: c2:bc:d1:a6:d6:11:e1:14:3a:e3:45:45:f6:60:79: 16:54:be:63:36:1a:6d:95:44:bb:51:49:ec:02:52: 78:d7:ca:a6:c4:a3:12:12:d8:45:e4:c5:26:db:d4: 50:c9:c6:3f:2d:0b:bd:de:57:f8:d8:03:c3:0a:bb: 1d:ca:00:31:13:8c:71:34:8f:d4:17:3b:c1:50:a3: 71:ce:45:25:64:97:7f:a3:e2:13:17:cd:f8:2b:1a: 0e:85:b5:76:76:fe:5c:a6:f8:80:01:5d:40:2a:3e: 41:ba:96:16:3b:ff:73:87:c2:e6:e6:eb:2d:0a:77: 6f:96:c5:39:10:70:27:09:1b:5b:df:e0:60:53:a5: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:18:A8:56:3E:3F:A2:D4:B5:A3:04:34:8A:1E:B3:89:A6:AD:5D:0C X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:08:ab:7c:32:35:fa:f7:83:f9:52:2d:24:2a:ad:1d:52:01: 4a:2a:68:55:86:65:bb:db:10:75:99:62:df:04:37:31:fc:1d: 31:8b:33:8c:09:a0:bc:c7:30:77:9e:f0:28:f1:95:03:64:79: 38:ec:26:81:6d:c0:2f:ec:b4:da:25:4c:eb:bf:a8:6c:b5:a7: 0d:38:0f:21:9f:8c:0b:52:70:d5:07:82:83:b6:78:60:d5:fa: b4:43:ab:3a:2a:0d:7b:f6:15:c7:d8:bd:4b:2f:5f:09:63:bb: 55:ed:47:6d:46:a1:85:34:ff:6d:03:c7:94:0e:08:78:08:fe: 48:0f:d6:aa:49:5f:54:16:41:c3:61:f6:91:55:9a:e1:92:b1: 41:ee:8a:05:a8:2d:38:d0:4d:ac:26:f5:b2:58:eb:3a:49:ab: 1c:9e:62:83:84:99:70:bc:2a:e9:3d:73:ad:70:35:4c:14:e1: 50:82:c5:7c:b5:af:1c:7a:99:0a:ef:2b:0b:f8:d0:d0:dd:19: df:1e:61:9e:8f:73:60:1b:01:ba:c1:13:6f:6a:35:c2:34:7d: af:27:ca:3f:db:33:1d:72:e1:77:aa:cf:37:22:a0:82:b9:5b: 41:a9:a7:d9:0e:95:cf:06:08:0b:f0:bd:bf:a0:fe:61:aa:1b: 89:49:af:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDN7M5pA7pwDuK4PBNCxpx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjYwOTIzMTEwMDQzWhcNMjYwOTI0MTEwMDQzWjAzMTEwLwYDVQQD Eyg0ZTE4YTg1NjNlM2ZhMmQ0YjVhMzA0MzQ4YTFlYjM4OWE2YWQ1ZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwltxBM62JU/VIFsCX902k84Hut7h k32vmvYdlsdULgfD+8TiPToGzuGycRv66KfHXARyMDwD/dE6nwk/e6TFobgQ38yS uaKuP9X1bqVz+E2sNBCgDcXMIfx/cMftX7tOS2bN9n/lqJt+wXTNMmBG5em3OGmr vhzCvNGm1hHhFDrjRUX2YHkWVL5jNhptlUS7UUnsAlJ418qmxKMSEthF5MUm29RQ ycY/LQu93lf42APDCrsdygAxE4xxNI/UFzvBUKNxzkUlZJd/o+ITF834KxoOhbV2 dv5cpviAAV1AKj5BupYWO/9zh8Lm5ustCndvlsU5EHAnCRtb3+BgU6XRRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4YqFY+P6LUtaMENIoes4mmrV0MMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwirfDI1 +veD+VItJCqtHVIBSipoVYZlu9sQdZli3wQ3MfwdMYszjAmgvMcwd57wKPGVA2R5 OOwmgW3AL+y02iVM67+obLWnDTgPIZ+MC1Jw1QeCg7Z4YNX6tEOrOioNe/YVx9i9 Sy9fCWO7Ve1HbUahhTT/bQPHlA4IeAj+SA/WqklfVBZBw2H2kVWa4ZKxQe6KBagt ONBNrCb1sljrOkmrHJ5ig4SZcLwq6T1zrXA1TBThUILFfLWvHHqZCu8rC/jQ0N0Z 3x5hno9zYBsBusETb2o1wjR9ryfKP9szHXLhd6rPNyKggrlbQamn2Q6VzwYIC/C9 v6D+YaobiUmvFw== -----END CERTIFICATE-----Generated at Wed Sep 23 16:59:14 2026 by rpki-client