$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: wgjerSk0BGR3aR4Njgq+idJwfpFtAZ7WBtQPSzEfm7c= Subject key identifier: AF:3E:56:21:1B:D9:5B:1C:C6:D3:E7:32:D8:96:36:C7:46:EC:9E:99 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 01A0D07FCCBBC95A6E5B628E44FDC576592C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0E3D Signing time: Wed 23 Sep 2026 23:00:31 +0000 Manifest this update: Wed 23 Sep 2026 23:00:31 +0000 Manifest next update: Thu 24 Sep 2026 23:00:31 +0000 Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=) 2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=) 3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: yYqgk+s5U4bThLbtBNrYzbOgfXk7CeDp/wMU0s3tCjk=) 4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=) 5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=) 6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=) 7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=) 8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=) 9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=) 10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=) 11: HZ7C4ms11ElfIAOCXz2KP1UZQOo.roa (hash: XB0mb76ajFkdDxe5edVo54FP1IvbB8otJuWMuOU3oU8=) 12: QL4XIa93X9j8w6Q69GPbrIm9Txg.roa (hash: q3a41ZI2Ed5MjFN9KCPKVx+N+9H7Kne18XdEvUkqHKo=) 13: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=) 14: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=) 15: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=) 16: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=) 17: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=) 18: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=) 19: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=) 20: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=) 21: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=) 22: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=) 23: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=) 24: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=) 25: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=) 26: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:7f:cc:bb:c9:5a:6e:5b:62:8e:44:fd:c5:76:59:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Sep 23 23:00:31 2026 GMT Not After : Sep 24 23:00:31 2026 GMT Subject: CN=af3e56211bd95b1cc6d3e732d89636c746ec9e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:3d:8e:3c:b9:51:ca:83:a5:65:f1:44:b5: 57:6e:8e:24:48:91:bb:3e:f6:8d:3a:15:32:05:4b: a5:df:d9:c1:be:09:14:1a:68:5f:b9:d9:27:2a:f7: a3:16:90:01:60:41:89:ae:e2:06:6f:f2:2a:79:fb: f5:cb:37:ea:23:fd:e5:ae:0c:94:06:17:4f:72:a8: 51:70:c2:b4:08:74:f3:fc:d1:b4:56:99:eb:3b:aa: f3:70:a4:08:c9:88:e7:aa:70:ca:7b:41:83:47:2a: 1b:14:d1:a6:25:a8:9e:a3:38:d0:42:a0:81:3b:5a: 79:92:83:e7:61:7e:5e:09:11:17:51:4f:52:be:9b: 4c:30:4a:99:f7:4f:ef:c1:be:93:3c:ee:a5:65:00: 99:71:60:52:f5:c1:6a:11:cc:79:28:15:cc:4b:f9: cb:97:4f:02:7f:6a:ad:70:be:37:de:eb:a1:c0:29: 62:85:6b:de:24:f4:f0:2a:4e:64:94:96:df:7e:74: 18:4d:0c:c7:67:52:6c:7e:bc:0c:0f:1d:1d:d4:9f: 59:8f:43:96:73:53:b7:7d:59:5e:93:14:db:57:69: 6b:c9:2f:a9:fe:af:e7:9d:51:90:16:02:41:c2:11: aa:de:2c:8f:0d:3f:64:12:98:ee:a6:0b:66:8b:b2: 53:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3E:56:21:1B:D9:5B:1C:C6:D3:E7:32:D8:96:36:C7:46:EC:9E:99 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:67:c9:ae:f5:31:87:d9:ec:15:e3:bf:f0:97:ec:e7:95:ba: d2:62:87:2d:43:00:54:7a:72:ca:29:57:94:3a:04:55:22:33: 1c:91:0b:7d:46:49:1e:27:61:a9:ea:e7:a2:32:47:8c:de:c7: 5e:8f:81:74:f8:e2:a9:e7:a4:b2:12:40:03:64:e6:1a:bb:c3: eb:63:86:df:88:c9:3f:88:cf:7a:c8:d4:84:3f:5b:c1:44:60: 8e:30:9b:4e:fa:ca:46:2a:da:20:fa:09:0f:81:0b:23:bb:0d: 8d:d7:e8:a8:ed:02:fe:8b:18:66:39:77:ca:3d:1a:70:1c:6f: 9b:2b:19:af:c7:70:7a:b6:91:96:02:c0:d9:03:56:7f:20:a6: fa:ea:0c:40:b4:67:eb:fc:3e:13:83:07:c7:66:8d:d1:3e:41: 69:93:05:aa:3e:09:9b:7f:81:a8:d7:fd:d6:57:11:30:50:6c: 97:92:d9:22:1d:7f:8e:cd:3d:3b:38:e5:98:00:6e:41:ed:ac: 9a:c8:bb:b7:03:b6:03:6c:9b:08:72:62:38:ac:70:52:20:2e: 6f:4f:b1:1c:c3:b9:ff:f7:39:0a:4e:b0:2e:1d:8f:a8:b9:cb: 8b:be:40:6a:60:90:25:2f:3c:99:50:1b:72:94:23:ad:a2:de: f5:fa:31:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQf8y7yVpuW2KORP3FdlksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwOTIzMjMwMDMxWhcNMjYwOTI0MjMwMDMxWjAzMTEwLwYDVQQD EyhhZjNlNTYyMTFiZDk1YjFjYzZkM2U3MzJkODk2MzZjNzQ2ZWM5ZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOU9jjy5UcqDpWXxRLVXbo4kSJG7 PvaNOhUyBUul39nBvgkUGmhfudknKvejFpABYEGJruIGb/Iqefv1yzfqI/3lrgyU BhdPcqhRcMK0CHTz/NG0VpnrO6rzcKQIyYjnqnDKe0GDRyobFNGmJaieozjQQqCB O1p5koPnYX5eCREXUU9SvptMMEqZ90/vwb6TPO6lZQCZcWBS9cFqEcx5KBXMS/nL l08Cf2qtcL433uuhwClihWveJPTwKk5klJbffnQYTQzHZ1JsfrwMDx0d1J9Zj0OW c1O3fVlekxTbV2lryS+p/q/nnVGQFgJBwhGq3iyPDT9kEpjupgtmi7JT1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8+ViEb2VscxtPnMtiWNsdG7J6ZMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2fJrvUx h9nsFeO/8Jfs55W60mKHLUMAVHpyyilXlDoEVSIzHJELfUZJHidhqernojJHjN7H Xo+BdPjiqeekshJAA2TmGrvD62OG34jJP4jPesjUhD9bwURgjjCbTvrKRiraIPoJ D4ELI7sNjdfoqO0C/osYZjl3yj0acBxvmysZr8dweraRlgLA2QNWfyCm+uoMQLRn 6/w+E4MHx2aN0T5BaZMFqj4Jm3+BqNf91lcRMFBsl5LZIh1/js09OzjlmABuQe2s msi7twO2A2ybCHJiOKxwUiAub0+xHMO5//c5Ck6wLh2PqLnLi75AamCQJS88mVAb cpQjraLe9foxNA== -----END CERTIFICATE-----Generated at Thu Sep 24 09:38:47 2026 by rpki-client