$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: Ngf09GkzYbpSDoBiAFYMFJ/sPjQI9QZPNgw1cNWE8Xo= Subject key identifier: B6:64:B9:F3:CC:72:B5:87:97:A0:56:92:9F:3D:DF:B0:28:14:DC:D9 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019D25F1DC10A9D1377BB2ECD68096B23737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 1898 Signing time: Wed 25 Mar 2026 17:01:40 +0000 Manifest this update: Wed 25 Mar 2026 17:01:40 +0000 Manifest next update: Thu 26 Mar 2026 17:01:40 +0000 Files and hashes: 1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=) 5: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 6: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=) 7: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 8: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: JO/1UzrCIp8mFy1jrbsNh6q4FpCBCUnnq1qA6cqOFAA=) 9: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=) 10: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=) 11: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:dc:10:a9:d1:37:7b:b2:ec:d6:80:96:b2:37:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Mar 25 17:01:40 2026 GMT Not After : Mar 26 17:01:40 2026 GMT Subject: CN=b664b9f3cc72b58797a056929f3ddfb02814dcd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:79:61:9a:67:78:09:26:f1:a3:0e:35:3f: 16:18:fa:ca:eb:9d:f4:9c:ab:a5:7c:13:9d:8f:f6: 29:70:f4:8a:f8:b1:69:1a:b1:3b:1b:14:e3:b7:f1: 64:bd:45:d4:d2:ff:04:1b:76:3e:f2:b6:a9:64:50: cc:84:b6:47:fc:a1:f2:f6:31:1c:2d:2b:11:66:96: 3d:da:9f:9e:76:67:5f:96:be:30:6d:4c:6d:d9:18: f7:c5:5d:d3:ee:95:3a:af:3d:c4:a0:11:c4:5e:fd: 0e:20:bc:44:9d:86:61:0c:ce:45:a9:e1:54:88:56: 52:61:40:8c:6f:81:2d:6d:d9:0b:23:ba:20:48:77: 53:5d:1e:cb:a0:32:38:16:51:04:21:d6:1b:9d:82: f7:4e:49:e4:7d:84:16:17:ce:2b:74:20:6e:54:97: 42:4d:ae:65:e9:1e:51:6a:64:cc:6c:72:68:37:4c: 85:54:6c:b8:92:da:0a:2a:20:df:f7:9a:07:bd:fc: 81:90:fb:47:66:1d:ef:a5:86:89:27:c1:8b:ce:11: 30:3e:c9:0a:db:b0:c8:55:2d:13:a6:6a:ba:c8:db: 92:8f:6a:41:0c:44:b2:c1:a8:1f:12:9d:3b:32:99: 3b:54:e6:11:5f:28:07:8e:8d:31:eb:73:d9:a9:f3: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:64:B9:F3:CC:72:B5:87:97:A0:56:92:9F:3D:DF:B0:28:14:DC:D9 X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:99:4e:00:71:62:d0:12:6f:84:77:f5:78:d8:3a:78:d5:f8: 7b:84:ec:54:f9:7a:b1:e7:80:b9:e5:54:61:fb:6f:cb:5b:49: 8d:76:68:4b:be:a1:ab:5d:ee:4f:15:e9:d6:a7:cb:c3:b2:11: fb:37:7b:0e:19:f1:91:23:63:25:81:bf:be:e1:a3:0d:f6:73: d3:dc:ad:c0:a3:d6:ad:d4:7b:a3:a9:d4:95:3e:81:db:fd:bd: e9:3e:06:a9:d9:67:76:5d:3d:0b:2d:97:96:cf:8e:63:9d:ca: c3:91:34:c6:77:20:47:2d:7b:28:64:9d:30:4d:5f:c5:ab:e5: 6f:38:cf:85:3a:04:c2:8f:47:17:9c:35:2b:85:99:10:cc:48: 34:46:58:19:e4:c0:dc:09:4c:8f:25:d6:88:5f:44:1d:72:36: 24:2f:15:66:95:70:2f:f4:d2:bd:16:25:e1:48:ba:58:0e:58: a2:82:cb:05:e0:ec:9d:b8:6a:07:67:6a:c4:3f:46:10:72:d6: 0a:c1:46:88:97:a7:7d:e5:80:aa:30:cc:47:b8:7e:e0:b3:8e: 49:d1:5c:c5:8b:a0:27:8a:df:78:f4:c6:e6:ae:7c:8e:d7:52: 5d:50:4a:78:51:c1:f8:83:96:56:ec:d8:af:be:35:98:e1:16: 98:0c:66:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8dwQqdE3e7Ls1oCWsjc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwMzI1MTcwMTQwWhcNMjYwMzI2MTcwMTQwWjAzMTEwLwYDVQQD EyhiNjY0YjlmM2NjNzJiNTg3OTdhMDU2OTI5ZjNkZGZiMDI4MTRkY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bt5YZpneAkm8aMONT8WGPrK6530 nKulfBOdj/YpcPSK+LFpGrE7GxTjt/FkvUXU0v8EG3Y+8rapZFDMhLZH/KHy9jEc LSsRZpY92p+edmdflr4wbUxt2Rj3xV3T7pU6rz3EoBHEXv0OILxEnYZhDM5FqeFU iFZSYUCMb4EtbdkLI7ogSHdTXR7LoDI4FlEEIdYbnYL3TknkfYQWF84rdCBuVJdC Ta5l6R5RamTMbHJoN0yFVGy4ktoKKiDf95oHvfyBkPtHZh3vpYaJJ8GLzhEwPskK 27DIVS0Tpmq6yNuSj2pBDESywagfEp07Mpk7VOYRXygHjo0x63PZqfOYewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZkufPMcrWHl6BWkp8937AoFNzZMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5lOAHFi 0BJvhHf1eNg6eNX4e4TsVPl6seeAueVUYftvy1tJjXZoS76hq13uTxXp1qfLw7IR +zd7DhnxkSNjJYG/vuGjDfZz09ytwKPWrdR7o6nUlT6B2/296T4Gqdlndl09Cy2X ls+OY53Kw5E0xncgRy17KGSdME1fxavlbzjPhToEwo9HF5w1K4WZEMxINEZYGeTA 3AlMjyXWiF9EHXI2JC8VZpVwL/TSvRYl4Ui6WA5YooLLBeDsnbhqB2dqxD9GEHLW CsFGiJenfeWAqjDMR7h+4LOOSdFcxYugJ4rfePTG5q58jtdSXVBKeFHB+IOWVuzY r741mOEWmAxmKw== -----END CERTIFICATE-----Generated at Wed Mar 25 21:18:59 2026 by rpki-client