$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: 2GVGC1KRDvwy/TE209t+MaWhZ9bmV4WpCMEIWA0sjms= Subject key identifier: 2F:7E:24:1B:1B:54:B4:3C:D6:35:E1:9C:1A:A0:7E:44:65:7F:84:EA Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019D2515393270645BC2AC37C7AD9F8CEAA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 18B9 Signing time: Wed 25 Mar 2026 13:00:41 +0000 Manifest this update: Wed 25 Mar 2026 13:00:41 +0000 Manifest next update: Thu 26 Mar 2026 13:00:41 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: KaZgS2IJMw5LC+wHgcWAqdxPAPpX4X2FalCXG8jskCQ=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 5: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 6: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 7: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=) 8: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 9: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 10: bXta14-WukP-sD3mvhrFJ-diblM.roa (hash: mvaQ8RJneVflOpMmhLqVGEU4MjH5zJ3p7ErO9d6FawE=) 11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 12: vtlW7KcHy2quDtxiMcXh5ACZAJE.roa (hash: jwkMxNX7GEGE3hAf5FaeLuIWqkCqM1RbyuM2bownKWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:15:39:32:70:64:5b:c2:ac:37:c7:ad:9f:8c:ea:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Mar 26 13:00:41 2026 GMT Subject: CN=2f7e241b1b54b43cd635e19c1aa07e44657f84ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:b7:88:1d:8b:10:90:34:42:96:86:1d:75: a5:98:33:0c:fc:bd:91:6c:fc:f5:21:14:8b:6a:b4: 5a:53:b6:cb:46:74:eb:2e:30:cd:78:7c:cc:ad:9d: 00:70:c4:88:25:09:46:21:3e:d8:a8:04:a0:7e:a8: 7c:69:14:f3:7a:42:4d:ef:e0:37:08:9c:12:4d:ee: 6d:ca:8c:54:c1:82:20:49:a2:b5:ed:21:5b:62:46: c3:6d:0c:0a:88:a9:a6:b9:df:82:ab:c0:f6:9c:0d: 44:ad:91:31:31:98:90:51:cd:dd:ab:d9:88:50:88: 81:15:71:dd:20:cf:6c:81:b0:ff:55:80:87:af:33: 5c:8d:6d:d4:9f:c2:b9:e6:57:6f:0e:c7:56:93:0d: 40:30:09:61:00:3f:72:b4:79:b0:40:f1:05:92:f2: ba:5d:0b:ad:6a:53:57:06:12:ca:c6:c6:e9:9e:ec: 90:4d:a7:aa:9c:20:bf:45:1f:0f:19:ec:0f:60:cb: b6:36:f9:c2:8b:11:d3:54:c0:51:fd:40:65:e0:56: 98:91:36:28:13:a4:c9:86:25:fb:52:ce:59:29:27: 76:79:2a:5b:d5:73:b5:5f:3a:61:00:ad:db:e0:26: cc:0b:a2:95:b7:32:8e:06:d2:ae:87:2b:5f:64:dc: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7E:24:1B:1B:54:B4:3C:D6:35:E1:9C:1A:A0:7E:44:65:7F:84:EA X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:df:00:44:cf:13:2e:86:ef:7b:53:aa:e8:23:d9:91:51:dd: f9:b7:26:9a:fd:d8:b2:80:bc:1d:bf:fa:13:26:88:a8:a9:46: 00:fc:95:80:e7:40:b7:bc:4e:97:4b:49:18:1a:0f:8a:5f:8f: a3:f5:59:a0:6f:b9:18:49:dc:46:68:25:56:c3:ee:8d:6e:51: a2:5d:f9:17:a4:44:94:eb:3f:58:0e:69:d8:88:32:5d:be:e8: dd:23:2f:24:55:ef:fe:c1:67:af:a0:b3:94:e7:70:ec:a4:63: 7e:18:9f:a3:a8:c2:80:ad:b1:cb:29:95:b3:25:d2:88:02:ea: 30:3e:2c:e8:f4:63:80:f4:64:dc:e5:5d:47:ed:63:40:58:ef: 3a:45:14:34:da:9e:76:e6:63:2a:1a:a1:d9:7e:b4:05:e8:07: 53:3f:c0:1d:1f:a9:8c:0a:44:24:32:a9:16:37:c0:75:1b:0c: c1:fe:8d:bf:0c:d2:33:7b:c1:bb:f1:7f:20:40:51:7d:59:b9: 0c:6d:fa:be:3d:d3:c5:0e:e8:bf:d8:24:cd:73:45:19:e9:80: e5:b7:87:80:4b:18:b9:7a:b9:4a:8d:af:84:b3:5e:4d:e3:26: ff:00:70:7d:02:cb:ca:76:fe:c2:45:bc:67:14:70:2d:22:af: 36:7e:b3:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lFTkycGRbwqw3x62fjOqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMzI1MTMwMDQxWhcNMjYwMzI2MTMwMDQxWjAzMTEwLwYDVQQD EygyZjdlMjQxYjFiNTRiNDNjZDYzNWUxOWMxYWEwN2U0NDY1N2Y4NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZy3iB2LEJA0QpaGHXWlmDMM/L2R bPz1IRSLarRaU7bLRnTrLjDNeHzMrZ0AcMSIJQlGIT7YqASgfqh8aRTzekJN7+A3 CJwSTe5tyoxUwYIgSaK17SFbYkbDbQwKiKmmud+Cq8D2nA1ErZExMZiQUc3dq9mI UIiBFXHdIM9sgbD/VYCHrzNcjW3Un8K55ldvDsdWkw1AMAlhAD9ytHmwQPEFkvK6 XQutalNXBhLKxsbpnuyQTaeqnCC/RR8PGewPYMu2NvnCixHTVMBR/UBl4FaYkTYo E6TJhiX7Us5ZKSd2eSpb1XO1XzphAK3b4CbMC6KVtzKOBtKuhytfZNxGcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9+JBsbVLQ81jXhnBqgfkRlf4TqMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP98ARM8T Lobve1Oq6CPZkVHd+bcmmv3YsoC8Hb/6EyaIqKlGAPyVgOdAt7xOl0tJGBoPil+P o/VZoG+5GEncRmglVsPujW5Rol35F6RElOs/WA5p2IgyXb7o3SMvJFXv/sFnr6Cz lOdw7KRjfhifo6jCgK2xyymVsyXSiALqMD4s6PRjgPRk3OVdR+1jQFjvOkUUNNqe duZjKhqh2X60BegHUz/AHR+pjApEJDKpFjfAdRsMwf6NvwzSM3vBu/F/IEBRfVm5 DG36vj3TxQ7ov9gkzXNFGemA5beHgEsYuXq5So2vhLNeTeMm/wBwfQLLynb+wkW8 ZxRwLSKvNn6zKg== -----END CERTIFICATE-----Generated at Wed Mar 25 22:46:52 2026 by rpki-client