$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: xP6tCD/OOU9/o6kwJ/rJ7K8JB9Ueom2pwYpGy7/fhbE= Subject key identifier: 91:8E:22:B3:0B:B3:6C:8C:D5:C3:4F:6A:09:8B:AD:D3:3A:90:85:D7 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019E1DC76123420BA5E2BEC4791BA1F8D0EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0CD7 Signing time: Tue 12 May 2026 20:01:06 +0000 Manifest this update: Tue 12 May 2026 20:01:06 +0000 Manifest next update: Wed 13 May 2026 20:01:06 +0000 Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=) 2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=) 3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: 08v55UmQrZcuSLtJDozVOrMz+l6Q+KJYM32Zpuh+ZMc=) 4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=) 5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=) 6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=) 7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=) 8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=) 9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=) 10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=) 11: QL4XIa93X9j8w6Q69GPbrIm9Txg.roa (hash: q3a41ZI2Ed5MjFN9KCPKVx+N+9H7Kne18XdEvUkqHKo=) 12: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=) 13: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=) 14: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=) 15: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=) 16: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=) 17: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=) 18: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=) 19: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=) 20: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=) 21: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=) 22: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=) 23: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=) 24: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=) 25: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:61:23:42:0b:a5:e2:be:c4:79:1b:a1:f8:d0:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: May 12 20:01:06 2026 GMT Not After : May 13 20:01:06 2026 GMT Subject: CN=918e22b30bb36c8cd5c34f6a098badd33a9085d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:c1:fe:29:13:ac:74:68:df:63:a2:a9:f9: ef:9d:c6:85:f2:61:96:b4:01:ca:3d:ed:e7:7b:ca: 3b:24:86:83:05:14:cf:de:0f:93:a5:70:9f:af:06: 14:06:9d:dd:6b:f8:77:29:dc:fe:fe:10:0c:78:8d: d8:59:fa:29:2a:da:77:34:63:1e:62:c6:26:9b:8c: 17:ae:f3:8d:eb:84:34:10:59:80:1e:c2:73:6c:f3: 27:5f:6e:14:5d:0b:83:6c:30:32:85:13:a0:68:b0: aa:ea:37:91:5c:0a:44:7f:df:e2:c8:8d:dd:86:c8: f4:2b:bc:cd:3d:85:e4:7b:fd:2a:18:e4:c0:c1:11: 5e:aa:48:28:28:26:8a:e1:63:a5:49:ba:34:b8:36: bc:7c:58:ff:08:be:53:7e:88:ba:6a:41:f1:27:86: 58:c5:09:64:6d:e9:d7:c3:db:9d:44:fd:7b:fa:7b: a5:4e:a7:2f:33:3e:bc:e3:e3:f4:95:7d:19:12:2a: 42:e0:54:b5:45:a9:b6:54:09:1d:9f:d4:f6:aa:a0: 99:3c:d9:01:97:47:1d:55:4d:63:0f:93:2c:34:51: 37:7c:90:21:5c:b5:90:74:eb:52:92:ea:99:42:22: 4e:9c:25:8c:4a:9f:a3:d3:77:f9:be:64:2c:94:a3: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:22:B3:0B:B3:6C:8C:D5:C3:4F:6A:09:8B:AD:D3:3A:90:85:D7 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:26:32:47:ce:fa:24:ea:b5:9b:e8:39:ea:22:21:66:49:e1: ef:90:05:a9:07:64:a0:82:9e:5a:19:e1:7b:90:3e:b7:aa:a8: 0c:56:17:72:d9:ec:0d:08:05:64:19:78:24:c3:4d:25:14:b1: 47:22:30:1d:8a:70:03:02:f9:ba:1f:a5:cc:e5:36:75:82:87: ae:26:2a:d5:ee:2b:9c:7b:56:f0:0f:5c:67:c7:07:67:09:14: 60:fc:33:67:f1:d3:53:09:66:80:45:f6:3e:0f:79:58:86:5c: 12:bd:c0:c4:51:a3:b8:93:3d:72:8a:85:c0:5b:f5:40:21:70: 2f:33:ec:61:b3:da:35:66:43:76:84:a7:96:2d:f8:62:c4:54: bb:a3:35:2e:29:f9:cc:44:05:e1:d0:04:ba:69:c2:f9:66:b3: 54:73:77:05:b9:3d:3d:c9:a4:ad:b9:32:0e:43:35:43:4f:68: 01:d4:9e:5a:03:9c:93:94:82:24:83:9f:81:ec:b6:94:f5:df: 36:51:6e:da:31:ec:95:20:fe:80:fb:e8:b8:de:2b:40:3b:1f: c5:e6:81:e2:c3:1a:64:45:ac:0a:78:cc:49:34:7a:d1:2d:df: 24:fb:a1:26:3b:cb:6a:20:88:4c:96:ab:f7:1c:9a:4f:9b:20: 9c:cc:f2:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dx2EjQgul4r7EeRuh+NDrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwNTEyMjAwMTA2WhcNMjYwNTEzMjAwMTA2WjAzMTEwLwYDVQQD Eyg5MThlMjJiMzBiYjM2YzhjZDVjMzRmNmEwOThiYWRkMzNhOTA4NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4LB/ikTrHRo32OiqfnvncaF8mGW tAHKPe3ne8o7JIaDBRTP3g+TpXCfrwYUBp3da/h3Kdz+/hAMeI3YWfopKtp3NGMe YsYmm4wXrvON64Q0EFmAHsJzbPMnX24UXQuDbDAyhROgaLCq6jeRXApEf9/iyI3d hsj0K7zNPYXke/0qGOTAwRFeqkgoKCaK4WOlSbo0uDa8fFj/CL5Tfoi6akHxJ4ZY xQlkbenXw9udRP17+nulTqcvMz684+P0lX0ZEipC4FS1Ram2VAkdn9T2qqCZPNkB l0cdVU1jD5MsNFE3fJAhXLWQdOtSkuqZQiJOnCWMSp+j03f5vmQslKMvowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGOIrMLs2yM1cNPagmLrdM6kIXXMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSYyR876 JOq1m+g56iIhZknh75AFqQdkoIKeWhnhe5A+t6qoDFYXctnsDQgFZBl4JMNNJRSx RyIwHYpwAwL5uh+lzOU2dYKHriYq1e4rnHtW8A9cZ8cHZwkUYPwzZ/HTUwlmgEX2 Pg95WIZcEr3AxFGjuJM9coqFwFv1QCFwLzPsYbPaNWZDdoSnli34YsRUu6M1Lin5 zEQF4dAEumnC+WazVHN3Bbk9PcmkrbkyDkM1Q09oAdSeWgOck5SCJIOfgey2lPXf NlFu2jHslSD+gPvouN4rQDsfxeaB4sMaZEWsCnjMSTR60S3fJPuhJjvLaiCITJar 9xyaT5sgnMzy5Q== -----END CERTIFICATE-----Generated at Wed May 13 03:44:21 2026 by rpki-client