$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: HFEEE5t8qrIbhM+sKVBnVTbDyU8V7uJYO/meLXbIAhA= Subject key identifier: 16:BD:A9:82:B1:C0:06:64:56:12:1E:50:12:35:E6:95:70:00:B2:AD Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019F122E128CD11906905FCA1D36EDABF83E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 1996 Signing time: Mon 29 Jun 2026 07:00:36 +0000 Manifest this update: Mon 29 Jun 2026 07:00:36 +0000 Manifest next update: Tue 30 Jun 2026 07:00:36 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: odlnnjXgBoE1vcGTq0G5MakEBarwVmtdb5QafRf48D0=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:12:2e:12:8c:d1:19:06:90:5f:ca:1d:36:ed:ab:f8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Jun 29 07:00:36 2026 GMT Not After : Jun 30 07:00:36 2026 GMT Subject: CN=16bda982b1c0066456121e501235e6957000b2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:25:91:bd:10:79:0b:87:d5:29:53:0d:8f: 08:8b:43:01:49:29:b0:3d:aa:5e:68:22:69:9a:36: 2f:f9:b6:b6:76:a7:7f:5d:91:90:a1:e4:e9:73:71: 3a:25:fe:06:21:a1:f5:87:b3:98:16:58:05:cd:2b: 85:19:9f:4e:46:d9:a3:49:74:04:a6:96:f4:64:26: e9:4f:7a:b5:69:70:75:26:47:03:43:9d:44:e3:9e: f0:4d:4a:59:61:a1:75:bc:b2:19:37:a7:7d:de:74: ff:39:7b:bc:57:74:cc:ac:32:49:00:53:24:2b:4e: 57:dc:b6:55:5e:d8:2e:cb:12:55:c3:3e:ab:23:24: 91:2d:1b:b9:0f:bf:1c:aa:b3:9d:b2:3e:0d:3d:43: b4:8c:14:27:e5:db:e7:e8:78:f5:84:ed:c1:2c:ad: 1c:46:76:8f:f2:02:55:4d:77:a1:7e:43:37:50:54: 40:dd:2e:04:3b:8b:68:28:1b:61:7b:f6:c9:b0:a6: a4:bd:ab:cb:a6:f6:dd:8a:13:a0:35:80:e2:e7:59: 9f:56:1e:a2:83:8f:19:87:3f:fd:2e:d7:77:72:e5: 00:4c:be:a6:6d:43:2d:1a:b6:cc:38:07:02:ec:b5: 2b:70:5b:05:d6:bd:46:63:e2:ca:ac:57:a4:c1:e3: 52:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BD:A9:82:B1:C0:06:64:56:12:1E:50:12:35:E6:95:70:00:B2:AD X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:bf:53:95:5d:af:9d:04:a9:69:e1:ae:57:ae:d1:bd:97:86: da:ea:0e:fb:1a:1e:b7:bb:04:4d:d9:ff:70:01:bc:6f:c3:a2: f8:46:9a:ad:3b:92:4b:82:2a:26:91:43:76:39:69:17:97:33: 42:36:00:66:73:c2:21:59:0d:c2:64:20:83:b4:29:ff:fb:b7: 06:8a:e9:df:4e:92:f7:7c:79:8d:38:99:d4:ec:1d:28:53:47: 7b:ef:53:26:94:05:e1:f3:6b:87:95:03:b1:d6:d0:12:dd:41: 77:d2:74:7d:e2:85:59:23:1e:7f:43:bd:05:57:8d:8a:aa:07: 58:8f:1c:5e:22:2b:3d:b0:f6:22:5f:ec:f5:12:61:5e:8d:61: 6a:ab:46:8a:8a:2b:32:2a:5c:fe:ad:a3:fa:71:47:39:00:70: 93:b6:59:ab:4a:88:37:9e:f6:d7:83:b5:a9:77:03:f4:81:0f: a6:26:12:71:9a:2b:11:52:59:ea:88:66:d5:ea:39:7e:81:fd: 8d:59:fb:54:ca:37:38:5c:6f:80:c3:04:5a:ac:f4:e5:c4:ee: 99:48:00:fd:44:c7:10:5c:cd:a3:48:26:e1:88:62:2a:46:b6: c6:29:14:a2:ec:ec:bc:ee:2e:f1:9f:58:c4:fe:46:c2:b0:da: 3e:cc:71:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8SLhKM0RkGkF/KHTbtq/g+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwNjI5MDcwMDM2WhcNMjYwNjMwMDcwMDM2WjAzMTEwLwYDVQQD EygxNmJkYTk4MmIxYzAwNjY0NTYxMjFlNTAxMjM1ZTY5NTcwMDBiMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+clkb0QeQuH1SlTDY8Ii0MBSSmw PapeaCJpmjYv+ba2dqd/XZGQoeTpc3E6Jf4GIaH1h7OYFlgFzSuFGZ9ORtmjSXQE ppb0ZCbpT3q1aXB1JkcDQ51E457wTUpZYaF1vLIZN6d93nT/OXu8V3TMrDJJAFMk K05X3LZVXtguyxJVwz6rIySRLRu5D78cqrOdsj4NPUO0jBQn5dvn6Hj1hO3BLK0c RnaP8gJVTXehfkM3UFRA3S4EO4toKBthe/bJsKakvavLpvbdihOgNYDi51mfVh6i g48Zhz/9Ltd3cuUATL6mbUMtGrbMOAcC7LUrcFsF1r1GY+LKrFekweNS1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa9qYKxwAZkVhIeUBI15pVwALKtMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY79TlV2v nQSpaeGuV67RvZeG2uoO+xoet7sETdn/cAG8b8Oi+EaarTuSS4IqJpFDdjlpF5cz QjYAZnPCIVkNwmQgg7Qp//u3Borp306S93x5jTiZ1OwdKFNHe+9TJpQF4fNrh5UD sdbQEt1Bd9J0feKFWSMef0O9BVeNiqoHWI8cXiIrPbD2Il/s9RJhXo1haqtGioor Mipc/q2j+nFHOQBwk7ZZq0qIN57214O1qXcD9IEPpiYScZorEVJZ6ohm1eo5foH9 jVn7VMo3OFxvgMMEWqz05cTumUgA/UTHEFzNo0gm4YhiKka2xikUouzsvO4u8Z9Y xP5GwrDaPsxxQQ== -----END CERTIFICATE-----Generated at Mon Jun 29 11:38:31 2026 by rpki-client