$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: CQSRKRJJElcjFTXR7ljjZPbuvDcfdXLZW5jiPhGK69E= Subject key identifier: A2:25:EA:28:75:D7:80:5D:32:4C:4B:DD:9B:0A:75:FA:F4:E8:1E:46 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019D27044566FC831D8292CEB8864C2BDECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 18BA Signing time: Wed 25 Mar 2026 22:01:24 +0000 Manifest this update: Wed 25 Mar 2026 22:01:24 +0000 Manifest next update: Thu 26 Mar 2026 22:01:24 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: cUwcU3TD0V2aCsi0LxrRJLRNsf36CKfVaXuSYJrvKfg=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 5: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 6: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 7: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=) 8: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 9: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 10: bXta14-WukP-sD3mvhrFJ-diblM.roa (hash: mvaQ8RJneVflOpMmhLqVGEU4MjH5zJ3p7ErO9d6FawE=) 11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 12: vtlW7KcHy2quDtxiMcXh5ACZAJE.roa (hash: jwkMxNX7GEGE3hAf5FaeLuIWqkCqM1RbyuM2bownKWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:45:66:fc:83:1d:82:92:ce:b8:86:4c:2b:de:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Mar 25 22:01:24 2026 GMT Not After : Mar 26 22:01:24 2026 GMT Subject: CN=a225ea2875d7805d324c4bdd9b0a75faf4e81e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:2c:2a:a0:b9:fd:70:ad:f1:fc:12:97:7a: ea:5d:29:43:f9:86:c5:4e:1d:67:d6:3b:88:7d:10: 64:7b:2b:c5:98:a0:08:16:f8:3f:e5:b9:b3:e0:51: 7b:e5:a7:12:97:7d:4f:67:48:c0:93:ab:b6:6b:7a: 03:d9:b4:a4:06:98:2b:e3:81:0a:56:84:17:80:b6: 33:88:ad:00:a2:7e:3b:ac:d8:9f:35:62:dd:fc:15: 0f:4e:21:8d:24:16:39:41:10:51:8c:f4:7e:67:3e: 20:a1:54:1b:00:d1:9f:54:8a:2b:bc:ee:24:9f:3c: 7b:b8:bf:66:91:c5:b9:44:ce:f4:a9:4c:c4:fc:84: ab:97:fd:d6:d4:9d:95:b3:62:76:61:cf:9f:de:5e: 59:73:4f:bd:df:b1:3e:93:87:c3:30:58:37:c3:89: 66:70:6b:b6:e3:3a:cb:93:8d:14:b8:f1:44:30:16: 13:df:7b:2f:f8:09:3a:94:81:da:33:a6:95:d1:df: 96:bc:27:82:ba:9f:92:5e:3d:12:07:fa:81:6e:c4: 74:94:25:74:3f:48:7d:1d:10:43:6b:c0:c2:45:f2: e9:98:7b:a5:65:a4:71:d4:79:c8:c5:dc:89:46:f0: e7:8e:cc:f1:bf:a5:d2:e5:c4:b8:a3:1d:5d:3b:df: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:25:EA:28:75:D7:80:5D:32:4C:4B:DD:9B:0A:75:FA:F4:E8:1E:46 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b4:7a:f2:bb:95:4f:72:76:4c:a1:c8:1f:2d:5e:d0:3b:31: 39:4e:5b:cb:10:29:aa:49:73:f3:5a:9a:56:27:35:e5:98:08: 90:34:15:2f:97:16:bd:0b:38:db:e5:5d:6e:ca:25:02:a9:e2: 8b:ef:49:27:d0:2c:9c:08:eb:38:2b:c8:ad:a6:68:c5:25:bc: bb:6f:2d:be:3f:f7:7a:d3:d0:58:76:42:d9:5a:bd:5d:9c:f5: 22:20:8a:9b:8a:7a:2f:26:be:1f:1a:7d:74:6d:f4:e9:00:18: bb:43:d2:98:05:09:f4:6d:79:48:dc:36:e6:c2:d8:6e:ce:ad: 04:41:a2:63:5c:a3:67:91:7a:e0:94:9b:57:8a:b8:bd:3d:eb: f9:9c:0e:b9:30:b3:68:83:d1:bb:85:85:de:e4:0d:97:0a:ec: 92:36:53:c1:b4:02:ba:dd:4a:02:d1:bd:8d:79:96:65:17:8b: d7:e4:2f:f5:84:4f:2e:4e:ce:57:8a:70:71:ee:93:78:cd:bf: a2:56:aa:fa:a4:c6:a2:2a:a8:41:56:83:38:77:0a:59:47:b9: 84:86:f9:87:6e:60:16:52:1f:38:6a:c4:f4:11:ac:10:b9:3b: d0:01:f2:33:4f:fe:b0:4d:35:13:00:3d:89:dd:88:3b:db:ad: 76:e9:aa:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBEVm/IMdgpLOuIZMK97KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMzI1MjIwMTI0WhcNMjYwMzI2MjIwMTI0WjAzMTEwLwYDVQQD EyhhMjI1ZWEyODc1ZDc4MDVkMzI0YzRiZGQ5YjBhNzVmYWY0ZTgxZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWosKqC5/XCt8fwSl3rqXSlD+YbF Th1n1juIfRBkeyvFmKAIFvg/5bmz4FF75acSl31PZ0jAk6u2a3oD2bSkBpgr44EK VoQXgLYziK0Aon47rNifNWLd/BUPTiGNJBY5QRBRjPR+Zz4goVQbANGfVIorvO4k nzx7uL9mkcW5RM70qUzE/ISrl/3W1J2Vs2J2Yc+f3l5Zc0+937E+k4fDMFg3w4lm cGu24zrLk40UuPFEMBYT33sv+Ak6lIHaM6aV0d+WvCeCup+SXj0SB/qBbsR0lCV0 P0h9HRBDa8DCRfLpmHulZaRx1HnIxdyJRvDnjszxv6XS5cS4ox1dO9+7mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIl6ih114BdMkxL3ZsKdfr06B5GMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrR68ruV T3J2TKHIHy1e0DsxOU5byxApqklz81qaVic15ZgIkDQVL5cWvQs42+VdbsolAqni i+9JJ9AsnAjrOCvIraZoxSW8u28tvj/3etPQWHZC2Vq9XZz1IiCKm4p6Lya+Hxp9 dG306QAYu0PSmAUJ9G15SNw25sLYbs6tBEGiY1yjZ5F64JSbV4q4vT3r+ZwOuTCz aIPRu4WF3uQNlwrskjZTwbQCut1KAtG9jXmWZReL1+Qv9YRPLk7OV4pwce6TeM2/ olaq+qTGoiqoQVaDOHcKWUe5hIb5h25gFlIfOGrE9BGsELk70AHyM0/+sE01EwA9 id2IO9utdumqDg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:31:11 2026 by rpki-client