$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: U+L5Z+gIVD6FsXIcTElBIYjlL89ibv8NpfYuq9j1EUA= Subject key identifier: B6:34:DD:FD:61:34:23:B6:51:7B:94:7D:1E:8C:71:DF:AA:62:2A:5D Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019D2A3B93C232CA34F021D03298BB134077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 1581 Signing time: Thu 26 Mar 2026 13:00:40 +0000 Manifest this update: Thu 26 Mar 2026 13:00:40 +0000 Manifest next update: Fri 27 Mar 2026 13:00:40 +0000 Files and hashes: 1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=) 2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: Y3E2V3BHVbPb0ESrkW2a4+R999iZbFNQhCUupVkPX60=) 3: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=) 4: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=) 5: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=) 6: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=) 7: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=) 8: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=) 9: PE77Z5wen-eVZ16iGf2_1c1Jaws.roa (hash: h7zUrN0KBvEcmYXd1dCIRMPxZTqT4501CRk4u67n9zo=) 10: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=) 11: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=) 12: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=) 13: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=) 14: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=) 15: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=) 16: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=) 17: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=) 18: qLE7D4CG3mYVkl8oS9Fzc5SexMc.roa (hash: JyfpyyKWFy47CPyUQtytdwQPJBc0llD8HdRl1HrFy6k=) 19: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=) 20: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=) 21: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:3b:93:c2:32:ca:34:f0:21:d0:32:98:bb:13:40:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Mar 26 13:00:40 2026 GMT Not After : Mar 27 13:00:40 2026 GMT Subject: CN=b634ddfd613423b6517b947d1e8c71dfaa622a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:83:11:b3:5d:cd:53:c7:c3:3d:ee:62:61:86: 9e:b6:7f:ae:23:e9:45:d6:ba:72:50:0c:d2:3a:ad: 95:fb:ec:45:b1:08:19:7b:f2:f8:de:e8:4a:19:96: bf:0a:9a:5e:66:b1:19:7e:08:db:b2:8a:26:42:8e: 39:09:90:ec:6a:3e:e6:ec:17:08:4b:8a:ce:d3:d0: 86:2b:a0:0c:b2:e5:2c:28:84:c5:2a:45:65:0a:cc: 9e:52:9b:a8:0d:61:5c:e3:ee:2b:c7:ee:78:f6:3a: c4:22:d4:46:03:38:c9:2c:22:64:1e:b7:0f:4d:0e: d9:36:66:08:b2:2c:a9:27:8b:08:e1:97:a8:b8:38: ec:55:a3:10:b0:22:a2:5d:32:e6:07:63:a4:62:77: b3:26:a7:d7:c0:c4:28:1d:9f:62:6c:99:25:f6:a9: b0:08:5d:dc:67:44:90:4a:18:e3:e8:5c:79:4d:53: d8:38:e7:d7:5d:41:eb:f4:80:63:ea:ae:de:89:6f: 14:e5:0a:20:70:f7:68:7f:c6:07:46:ae:4a:5a:e5: df:0a:6d:9d:06:b1:1c:44:5d:1a:fb:b8:7e:da:f5: 00:95:2f:4e:1d:30:4a:d6:34:70:dd:96:19:78:ee: 6c:67:65:c4:c3:a0:c2:a1:03:21:50:cd:8d:39:97: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:DD:FD:61:34:23:B6:51:7B:94:7D:1E:8C:71:DF:AA:62:2A:5D X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:b1:fe:20:51:b3:72:d6:ef:ec:75:ff:95:43:22:c3:95:0a: 38:ec:bf:4b:1b:59:5a:52:63:ee:8e:68:cb:a1:5e:b1:0d:85: 15:5b:12:f6:a7:4b:02:dd:69:f3:96:24:92:63:bb:ea:d4:3f: d2:91:bb:67:ab:48:0f:08:03:fe:06:fe:5d:e7:24:18:58:5b: 81:a0:7b:9a:61:7d:85:85:a8:26:16:02:c0:36:81:3a:1c:1a: 75:36:0d:4a:8b:70:a1:f2:68:16:74:86:28:89:c5:4f:61:f9: 0d:06:b6:12:03:3e:8c:82:c2:63:fd:bd:02:03:d5:0f:e5:ee: 8a:c6:1f:03:02:7c:15:5a:04:f6:2f:ce:d8:93:9e:81:22:85: 53:25:5b:3c:5e:34:a8:0d:0c:f4:17:ec:70:ae:0b:26:2e:95: 42:5d:49:28:21:e5:cf:93:be:a2:81:8e:ff:2d:8f:29:82:37: ef:e3:3c:c4:4f:90:c5:20:9d:36:00:21:22:de:6f:ff:a1:40: 68:85:75:b0:c5:63:45:a7:88:3a:45:de:66:0d:ee:c5:ab:e1: 23:42:17:43:2b:c5:61:30:d8:06:4a:e6:14:85:0f:02:2b:4e: d8:72:44:26:ba:dc:09:27:20:24:e4:38:76:2f:6b:6e:64:b6: cc:aa:d4:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qO5PCMso08CHQMpi7E0B3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMzI2MTMwMDQwWhcNMjYwMzI3MTMwMDQwWjAzMTEwLwYDVQQD EyhiNjM0ZGRmZDYxMzQyM2I2NTE3Yjk0N2QxZThjNzFkZmFhNjIyYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14MRs13NU8fDPe5iYYaetn+uI+lF 1rpyUAzSOq2V++xFsQgZe/L43uhKGZa/CppeZrEZfgjbsoomQo45CZDsaj7m7BcI S4rO09CGK6AMsuUsKITFKkVlCsyeUpuoDWFc4+4rx+549jrEItRGAzjJLCJkHrcP TQ7ZNmYIsiypJ4sI4ZeouDjsVaMQsCKiXTLmB2OkYnezJqfXwMQoHZ9ibJkl9qmw CF3cZ0SQShjj6Fx5TVPYOOfXXUHr9IBj6q7eiW8U5QogcPdof8YHRq5KWuXfCm2d BrEcRF0a+7h+2vUAlS9OHTBK1jRw3ZYZeO5sZ2XEw6DCoQMhUM2NOZf7SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY03f1hNCO2UXuUfR6Mcd+qYipdMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwbH+IFGz ctbv7HX/lUMiw5UKOOy/SxtZWlJj7o5oy6FesQ2FFVsS9qdLAt1p85YkkmO76tQ/ 0pG7Z6tIDwgD/gb+XeckGFhbgaB7mmF9hYWoJhYCwDaBOhwadTYNSotwofJoFnSG KInFT2H5DQa2EgM+jILCY/29AgPVD+XuisYfAwJ8FVoE9i/O2JOegSKFUyVbPF40 qA0M9BfscK4LJi6VQl1JKCHlz5O+ooGO/y2PKYI37+M8xE+QxSCdNgAhIt5v/6FA aIV1sMVjRaeIOkXeZg3uxavhI0IXQyvFYTDYBkrmFIUPAitO2HJEJrrcCScgJOQ4 di9rbmS2zKrUVA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:07 2026 by rpki-client