$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json) Hash identifier: Gs25KgDtIW+PTqugDhpSfk0bvnUvtAGqn+4OM/gqn/0= Subject key identifier: BE:7D:53:9D:C9:99:AF:0C:48:40:70:7F:6C:82:F5:E6:61:82:6C:FC Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Certificate serial: 019D2772E4D821764CBA5B064F52819D9DD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft Manifest number: 0461 Signing time: Thu 26 Mar 2026 00:02:14 +0000 Manifest this update: Thu 26 Mar 2026 00:02:14 +0000 Manifest next update: Fri 27 Mar 2026 00:02:14 +0000 Files and hashes: 1: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (hash: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=) 2: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (hash: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=) 3: 3gai81UGgfLPbQftciy3jGMkOwI.roa (hash: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=) 4: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: zy8gYefEPQXnNDoGX9foXH1xymaPZ1Yjp/xF+4nZ8Zw=) 5: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (hash: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=) 6: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (hash: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=) 7: P2DOHQZk6uadyNsFYKTvp0Yljns.roa (hash: drWm8UAEyYp0gk5pD0pZZGlNfBy4kmJrj0xpKvuccbI=) 8: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=) 9: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (hash: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=) 10: pMSYP5P8y8eLfNyDEeXV3zc-nps.roa (hash: enJ6YCYyQ+/wl2mffuOqzFyRpZKc2xjCWdqck8SgcXI=) 11: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (hash: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=) 12: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (hash: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:e4:d8:21:76:4c:ba:5b:06:4f:52:81:9d:9d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Validity Not Before: Mar 26 00:02:14 2026 GMT Not After : Mar 27 00:02:14 2026 GMT Subject: CN=be7d539dc999af0c4840707f6c82f5e661826cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:13:81:b5:4c:11:44:c9:07:16:a1:0a:9f:61: 2e:c6:d9:12:1b:39:d7:4c:93:0b:87:2a:6b:9a:63: cc:24:17:23:79:dd:2a:99:47:8f:d4:80:a9:40:30: 19:cf:45:0c:f7:d4:df:33:2e:8b:4f:9c:0e:b4:27: 0f:f6:8e:2b:27:fb:92:cb:15:7c:dd:f5:f8:e7:7d: 5c:1c:e4:11:86:bb:46:74:91:4a:a5:e9:68:3a:16: 53:e8:b9:fa:e6:77:62:09:fa:65:1c:86:45:9e:d1: 39:57:c3:dc:f4:3a:3e:13:ad:13:52:95:f9:a6:a3: d0:d3:78:b7:96:40:85:0a:9a:e9:10:96:0b:85:eb: d3:8f:11:11:66:6e:fe:5f:3d:25:67:88:93:1c:3a: b3:ec:ae:d2:93:aa:ca:ef:fa:9d:21:bf:d8:b7:b3: 45:16:82:b7:4a:0f:4e:f8:b7:6d:a2:35:2f:85:bb: 47:17:74:4d:90:87:ef:3a:55:64:72:21:cb:9b:68: 22:0e:a7:69:76:c9:61:88:e8:55:08:98:dc:1d:f5: 23:75:72:63:14:6a:0e:9b:76:c6:c7:39:fb:9a:77: dd:8c:f9:f2:c1:72:2e:86:dd:40:84:20:f1:10:0e: c7:ed:f3:2a:1d:32:ab:ff:3e:fe:a3:70:44:2d:10: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7D:53:9D:C9:99:AF:0C:48:40:70:7F:6C:82:F5:E6:61:82:6C:FC X509v3 Authority Key Identifier: keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6f:8f:3a:f3:e0:8f:e1:0c:2b:0b:99:bc:e7:6b:07:bd:b0: 28:bc:ea:b1:05:42:6e:2c:de:28:64:be:1c:a2:ed:82:f9:a3: 3a:60:47:e4:c4:3c:f8:05:bb:8e:46:69:c7:fb:3d:02:67:24: 88:1e:16:13:b5:79:86:51:fd:e7:81:bc:fb:24:c4:97:70:67: 5f:7d:ed:3d:73:83:93:6c:40:5b:71:72:d4:76:4e:b0:83:f3: e6:63:76:3d:96:6c:ca:e8:6a:25:02:0f:b3:fc:ba:e1:1d:15: 24:27:4d:f0:75:ba:c0:a1:8a:c9:6d:16:9e:68:6c:22:af:9b: 2a:48:90:46:0f:43:6e:9b:68:a9:e9:28:1b:9b:5c:57:84:a9: d6:60:b2:ad:b7:85:ca:36:19:8e:94:7b:23:58:27:3a:c3:6d: 93:61:7f:93:72:d5:df:cf:1a:b5:16:11:b7:a5:a0:56:a7:db: d3:21:3d:f5:b0:ea:7a:58:dc:3b:c5:b0:d5:1d:07:14:e7:1a: 2f:1d:5f:bc:b4:2e:b6:a1:36:f3:eb:f0:4f:38:f1:9f:fa:d5: 34:73:52:8b:24:65:62:5a:bf:2a:83:04:8c:a8:5a:83:24:28: d0:c1:a4:a8:34:c2:b5:d3:53:94:e5:c7:8e:d4:36:f9:55:cc: 54:cd:73:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncuTYIXZMulsGT1KBnZ3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy NGRjYzAwHhcNMjYwMzI2MDAwMjE0WhcNMjYwMzI3MDAwMjE0WjAzMTEwLwYDVQQD EyhiZTdkNTM5ZGM5OTlhZjBjNDg0MDcwN2Y2YzgyZjVlNjYxODI2Y2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ROBtUwRRMkHFqEKn2EuxtkSGznX TJMLhyprmmPMJBcjed0qmUeP1ICpQDAZz0UM99TfMy6LT5wOtCcP9o4rJ/uSyxV8 3fX4531cHOQRhrtGdJFKpeloOhZT6Ln65ndiCfplHIZFntE5V8Pc9Do+E60TUpX5 pqPQ03i3lkCFCprpEJYLhevTjxERZm7+Xz0lZ4iTHDqz7K7Sk6rK7/qdIb/Yt7NF FoK3Sg9O+LdtojUvhbtHF3RNkIfvOlVkciHLm2giDqdpdslhiOhVCJjcHfUjdXJj FGoOm3bGxzn7mnfdjPnywXIuht1AhCDxEA7H7fMqHTKr/z7+o3BELRDMkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL59U53Jma8MSEBwf2yC9eZhgmz8MB8GA1UdIwQY MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt Y2JiZmRhOTI0MTlkLzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW+POvPg j+EMKwuZvOdrB72wKLzqsQVCbizeKGS+HKLtgvmjOmBH5MQ8+AW7jkZpx/s9Amck iB4WE7V5hlH954G8+yTEl3BnX33tPXODk2xAW3Fy1HZOsIPz5mN2PZZsyuhqJQIP s/y64R0VJCdN8HW6wKGKyW0WnmhsIq+bKkiQRg9DbptoqekoG5tcV4Sp1mCyrbeF yjYZjpR7I1gnOsNtk2F/k3LV388atRYRt6WgVqfb0yE99bDqeljcO8Ww1R0HFOca Lx1fvLQutqE28+vwTzjxn/rVNHNSiyRlYlq/KoMEjKhagyQo0MGkqDTCtdNTlOXH jtQ2+VXMVM1zSA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:12:33 2026 by rpki-client