$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: Dfi0DtXlCLm3bCn5sTvf23AjZKKqSngp+Zaj0newoxY= Subject key identifier: 5B:7F:DD:A3:4E:95:5C:BF:71:07:AA:40:46:E8:E9:9F:43:BF:40:ED Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019E20FFE33B6EE8D588E43DD315797228E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 1601 Signing time: Wed 13 May 2026 11:01:41 +0000 Manifest this update: Wed 13 May 2026 11:01:41 +0000 Manifest next update: Thu 14 May 2026 11:01:41 +0000 Files and hashes: 1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=) 2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: GJP3OP8t8Z0KkqdmSqQ5Gu22n2lQ+3GWtQkWsgtklw0=) 3: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=) 4: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=) 5: CiNhwzJsM6ZFV5GCT0q6BXhT6DI.roa (hash: KWZXDRfpaCL2QK5Ff1vICptorEtdR6f4RpWBfQJGxXA=) 6: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=) 7: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=) 8: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=) 9: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=) 10: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=) 11: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=) 12: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=) 13: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=) 14: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=) 15: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=) 16: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=) 17: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=) 18: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=) 19: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=) 20: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:20:ff:e3:3b:6e:e8:d5:88:e4:3d:d3:15:79:72:28:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: May 13 11:01:41 2026 GMT Not After : May 14 11:01:41 2026 GMT Subject: CN=5b7fdda34e955cbf7107aa4046e8e99f43bf40ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:9f:1c:67:12:dc:e5:c4:36:a5:12:5f:8d: 9c:88:39:98:3d:8c:8b:ce:cc:fe:b6:ce:c6:5f:18: e4:d0:79:8f:7c:79:ef:d8:70:78:42:fe:43:cc:67: a7:a2:36:28:03:0d:ad:11:92:44:38:99:67:16:e6: ab:36:e9:68:c1:63:d2:8e:70:59:97:f5:24:32:8a: 4c:d6:ce:99:d3:a6:63:b8:e4:eb:f3:08:ff:51:5c: b7:db:9e:1f:d3:0b:af:92:ba:71:e8:c9:58:37:c9: d4:50:cf:e8:e0:40:02:25:8f:d5:74:e5:99:fd:31: ab:a9:60:c6:3f:86:9f:e9:23:33:f0:35:1e:8f:64: 1b:2e:b5:1f:fa:e8:9f:c5:bb:bd:20:3f:4c:af:2f: 5c:93:49:c1:d8:db:b5:9e:e4:d6:51:53:80:ae:01: 30:be:b9:d8:f5:ac:77:02:f9:ba:c9:d8:b4:5c:69: 19:a1:1a:b7:b2:9f:9b:4c:30:58:6c:5a:ef:27:06: 50:51:3c:c2:83:ee:fe:9c:d0:42:8b:74:d7:f9:01: bc:9a:d8:4e:c8:3d:18:01:3e:2a:cb:e2:b3:92:4d: 87:c0:c4:2a:02:62:8f:55:30:58:27:38:0f:f6:9f: 50:f2:75:c6:33:04:da:cb:35:62:fd:72:0f:18:1d: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7F:DD:A3:4E:95:5C:BF:71:07:AA:40:46:E8:E9:9F:43:BF:40:ED X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:95:e9:ab:4f:6a:23:b6:c3:17:28:e3:00:77:ba:17:40:45: 4b:5b:1f:c4:3a:40:7b:b3:ff:40:56:e9:db:e5:ad:92:ab:85: 17:4b:44:de:c0:a1:55:2d:4f:03:b9:93:f3:80:77:63:cc:1f: ad:41:d3:54:a1:2c:8c:d0:7f:94:d0:5e:5a:26:dc:61:2b:4a: ca:7e:6a:a1:12:ac:36:64:06:f4:ca:f6:1c:b7:d7:17:1b:78: ac:36:a8:0c:d6:9e:cf:6a:7b:c8:b9:05:b0:d5:78:be:ea:ac: e8:53:22:85:c9:9c:69:d9:ae:ce:ef:ae:6b:56:56:ff:9b:ef: a6:d8:5c:6f:49:be:47:f3:c8:25:b1:f6:a9:42:48:65:21:f1: 6a:12:e0:16:2e:67:9b:79:35:ab:cf:7b:94:4c:fa:9e:c1:44: 6f:14:57:f6:6b:2d:7b:07:34:4d:3b:b8:f2:8b:e8:ee:fe:47: 4f:68:a9:ac:19:3e:79:4b:38:21:0c:57:d2:c6:ab:d0:28:47: a2:99:35:fc:16:3c:db:b9:a4:b8:68:c7:90:ca:b9:db:16:10: 7b:0f:0f:74:b8:92:12:c6:fa:6f:ea:4a:c2:75:a9:89:e3:18: 9f:c9:bf:95:d2:dd:03:e3:ec:85:3f:c1:c6:7e:ab:48:b0:f1: fc:b1:50:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4g/+M7bujViOQ90xV5cijjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwNTEzMTEwMTQxWhcNMjYwNTE0MTEwMTQxWjAzMTEwLwYDVQQD Eyg1YjdmZGRhMzRlOTU1Y2JmNzEwN2FhNDA0NmU4ZTk5ZjQzYmY0MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL6fHGcS3OXENqUSX42ciDmYPYyL zsz+ts7GXxjk0HmPfHnv2HB4Qv5DzGenojYoAw2tEZJEOJlnFuarNulowWPSjnBZ l/UkMopM1s6Z06ZjuOTr8wj/UVy3254f0wuvkrpx6MlYN8nUUM/o4EACJY/VdOWZ /TGrqWDGP4af6SMz8DUej2QbLrUf+uifxbu9ID9Mry9ck0nB2Nu1nuTWUVOArgEw vrnY9ax3Avm6ydi0XGkZoRq3sp+bTDBYbFrvJwZQUTzCg+7+nNBCi3TX+QG8mthO yD0YAT4qy+Kzkk2HwMQqAmKPVTBYJzgP9p9Q8nXGMwTayzVi/XIPGB0FTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFt/3aNOlVy/cQeqQEbo6Z9Dv0DtMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZXpq09q I7bDFyjjAHe6F0BFS1sfxDpAe7P/QFbp2+WtkquFF0tE3sChVS1PA7mT84B3Y8wf rUHTVKEsjNB/lNBeWibcYStKyn5qoRKsNmQG9Mr2HLfXFxt4rDaoDNaez2p7yLkF sNV4vuqs6FMihcmcadmuzu+ua1ZW/5vvpthcb0m+R/PIJbH2qUJIZSHxahLgFi5n m3k1q897lEz6nsFEbxRX9mstewc0TTu48ovo7v5HT2iprBk+eUs4IQxX0sar0ChH opk1/BY827mkuGjHkMq52xYQew8PdLiSEsb6b+pKwnWpieMYn8m/ldLdA+PshT/B xn6rSLDx/LFQCg== -----END CERTIFICATE-----Generated at Wed May 13 14:21:59 2026 by rpki-client