$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: lurXmndxPWmBY4vP3/nOu9I5zBreSxLSQYMuVKHl0Pw= Subject key identifier: 56:39:D6:3C:26:F3:2C:79:00:9C:53:C1:37:E5:A2:A3:F1:67:26:15 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 019E1CEB4EE2E98E4C0EE15748448917583B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: F3 Signing time: Tue 12 May 2026 16:00:43 +0000 Manifest this update: Tue 12 May 2026 16:00:43 +0000 Manifest next update: Wed 13 May 2026 16:00:43 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: REoP0aGA4aWDBvKuTS8LwOGYlde9BryZQcIzb4VeN6A=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:4e:e2:e9:8e:4c:0e:e1:57:48:44:89:17:58:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: May 12 16:00:43 2026 GMT Not After : May 13 16:00:43 2026 GMT Subject: CN=5639d63c26f32c79009c53c137e5a2a3f1672615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:18:d1:83:28:e8:6c:15:85:de:9b:a2:3c:86: ce:76:f9:a3:e0:2c:4b:7f:eb:d0:88:0a:b9:06:e6: c8:fe:06:a9:aa:b7:6d:50:67:5c:55:2b:db:b8:2d: eb:4c:0e:1b:f6:92:09:0c:53:a1:35:d4:d9:61:2d: 93:bc:5a:10:68:db:ae:b9:f1:ab:cc:1a:86:b3:0d: ae:6a:b3:d4:eb:f0:a3:98:7a:98:c1:ac:80:5f:75: a5:30:61:1d:8c:15:7d:44:55:84:62:fd:e6:a2:44: fa:2e:90:22:c4:3c:36:a5:b8:cf:2e:93:f6:42:66: 30:1b:12:6b:40:ad:44:e8:2f:68:11:48:1b:7e:bc: e3:24:57:2a:6c:14:8d:a5:5e:2b:1d:58:16:8d:e4: 80:d6:63:27:23:45:f0:03:1a:ed:19:33:60:5b:5b: 80:c5:9a:76:90:07:67:33:cc:7b:76:76:af:b9:47: 8b:4d:8a:7f:78:2b:15:83:37:5b:f6:54:f1:e7:65: 53:b0:b6:a3:8c:b2:bc:6f:00:07:16:04:c1:4a:64: 36:3b:1e:1d:b5:41:f1:7a:de:16:99:a5:5e:6c:b3: 4a:ff:42:0c:6e:db:be:d7:22:55:74:a8:55:d3:94: c5:07:3c:1f:8b:fa:17:68:ce:23:3e:d1:0e:cf:1b: a7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:39:D6:3C:26:F3:2C:79:00:9C:53:C1:37:E5:A2:A3:F1:67:26:15 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7f:da:6d:9c:03:ef:58:b3:24:ed:58:e2:db:9d:1e:76:14: 44:d2:57:66:46:ff:7a:1e:6e:13:68:f6:51:3c:0f:68:06:23: 46:09:dd:2a:cc:ab:2a:3d:cc:3b:be:53:16:2e:2c:63:e0:ae: 26:fc:8e:a0:a4:0c:33:9f:48:b3:4b:09:20:1a:28:5b:2a:d8: f1:7b:7e:c8:9e:f7:17:f2:3d:7b:01:cd:d1:37:ab:32:8f:29: 05:43:10:62:65:eb:f9:7e:f4:43:af:7a:ab:12:17:77:30:0b: 9b:f9:0d:05:d5:b4:82:7e:a5:f3:f0:8f:a2:ce:67:f1:7d:d5: 51:67:b4:a6:b4:f6:96:28:13:5d:ce:86:7b:cd:9c:ed:51:09: a6:46:c0:49:15:fe:82:97:3f:ca:05:5f:9d:14:b4:27:50:d0: 0c:82:9a:07:f9:79:d6:e4:ae:7f:b3:d3:06:3e:9b:f5:3c:da: 6a:f9:2d:a5:ee:5c:d0:5f:9e:4b:7b:f9:ee:8f:5d:13:f5:36: 25:87:99:82:f4:e4:12:ba:ff:28:13:18:41:91:f3:52:72:cf: 61:98:85:91:29:a0:f6:33:fb:eb:ec:63:b0:a2:3e:16:a6:e8: 6b:9c:11:1a:f0:6f:68:fd:43:b5:2f:1f:8b:03:36:cb:ad:e7: 5f:96:fd:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c607i6Y5MDuFXSESJF1g7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwNTEyMTYwMDQzWhcNMjYwNTEzMTYwMDQzWjAzMTEwLwYDVQQD Eyg1NjM5ZDYzYzI2ZjMyYzc5MDA5YzUzYzEzN2U1YTJhM2YxNjcyNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BjRgyjobBWF3puiPIbOdvmj4CxL f+vQiAq5BubI/gapqrdtUGdcVSvbuC3rTA4b9pIJDFOhNdTZYS2TvFoQaNuuufGr zBqGsw2uarPU6/CjmHqYwayAX3WlMGEdjBV9RFWEYv3mokT6LpAixDw2pbjPLpP2 QmYwGxJrQK1E6C9oEUgbfrzjJFcqbBSNpV4rHVgWjeSA1mMnI0XwAxrtGTNgW1uA xZp2kAdnM8x7dnavuUeLTYp/eCsVgzdb9lTx52VTsLajjLK8bwAHFgTBSmQ2Ox4d tUHxet4WmaVebLNK/0IMbtu+1yJVdKhV05TFBzwfi/oXaM4jPtEOzxunowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFY51jwm8yx5AJxTwTfloqPxZyYVMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfX/abZwD 71izJO1Y4tudHnYURNJXZkb/eh5uE2j2UTwPaAYjRgndKsyrKj3MO75TFi4sY+Cu JvyOoKQMM59Is0sJIBooWyrY8Xt+yJ73F/I9ewHN0TerMo8pBUMQYmXr+X70Q696 qxIXdzALm/kNBdW0gn6l8/CPos5n8X3VUWe0prT2ligTXc6Ge82c7VEJpkbASRX+ gpc/ygVfnRS0J1DQDIKaB/l51uSuf7PTBj6b9Tzaavktpe5c0F+eS3v57o9dE/U2 JYeZgvTkErr/KBMYQZHzUnLPYZiFkSmg9jP76+xjsKI+Fqboa5wRGvBvaP1DtS8f iwM2y63nX5b9nw== -----END CERTIFICATE-----Generated at Wed May 13 00:40:44 2026 by rpki-client