$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: FOWvl6P80tguyoJo1RIJa9i07PE6KH8k5skdcVHzZ+Q= Subject key identifier: 9D:85:CF:6B:32:4C:78:C1:F9:72:0A:9C:35:83:52:41:8A:FF:CA:D2 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 01A001A5A867D774C1EF1262EE4A3B7E3434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 1A12 Signing time: Fri 14 Aug 2026 19:00:28 +0000 Manifest this update: Fri 14 Aug 2026 19:00:28 +0000 Manifest next update: Sat 15 Aug 2026 19:00:28 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: z9H/UOLQbPv5qfnFb5KtXi9+p4AFAWk2fyn1THU3HCc=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 15:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:01:a5:a8:67:d7:74:c1:ef:12:62:ee:4a:3b:7e:34:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Aug 14 19:00:28 2026 GMT Not After : Aug 15 19:00:28 2026 GMT Subject: CN=9d85cf6b324c78c1f9720a9c358352418affcad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:2e:a2:b4:cb:57:f2:58:d5:43:58:b0:bf: 0f:96:2c:33:a5:0d:48:7b:0e:f1:55:5c:f0:dd:09: c8:49:3e:37:76:02:2f:4a:ef:51:c0:cb:60:65:ae: a9:c0:0b:98:8d:5d:c8:e1:da:b8:48:a5:7c:01:92: dc:1e:ee:48:80:f0:5d:61:cc:20:28:2a:85:6d:c2: 13:15:2a:0f:b1:58:f4:91:6b:c6:ba:81:1d:ad:fe: 34:7a:1e:bd:08:e3:3e:88:75:62:ca:9e:f3:d5:bb: e1:bd:89:6a:cb:a9:7f:f6:a6:80:b8:40:59:55:e7: 0d:3b:11:44:cb:8a:7f:58:0b:b4:da:38:c3:84:69: 43:c0:ea:59:55:99:bc:59:98:3a:5e:f2:42:8a:0c: 0b:92:c9:da:cc:88:99:ad:42:ae:18:54:69:b7:ec: ed:69:a0:38:7f:93:3c:14:9b:a3:49:e5:67:72:73: e6:37:95:bc:4f:32:4a:1e:f2:4d:7b:7c:5b:6d:64: 2c:43:a1:3b:32:63:24:2d:85:04:48:4d:a6:32:fc: 3e:a9:8f:2a:34:b8:cf:c1:02:92:98:8d:ac:7b:93: 23:d0:92:d7:76:5b:8a:03:26:bf:03:3b:ba:a8:39: 2f:20:83:5c:a4:82:ef:fb:3b:f8:0e:fc:b6:f3:2e: 15:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:85:CF:6B:32:4C:78:C1:F9:72:0A:9C:35:83:52:41:8A:FF:CA:D2 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:61:c1:9e:90:a7:7d:b5:87:f1:65:33:93:28:08:ad:a0:28: e8:52:48:65:b6:92:c1:18:a4:16:05:40:1e:a8:b2:0f:48:3b: b5:ee:bd:d3:70:b5:78:f4:89:01:41:20:8b:6a:3b:63:a3:4c: ee:bb:33:61:6e:16:f9:ca:8b:fc:06:4e:ce:f5:27:c4:f8:be: f4:ec:66:a2:7e:a8:53:50:0b:fb:02:91:8e:f8:bf:8b:46:79: 1e:c1:8f:0f:32:f5:36:36:5c:2c:72:6b:82:57:a3:40:c4:ec: 24:df:40:89:53:4e:cb:f2:f1:9b:f2:aa:40:bf:45:b2:ab:26: c6:e2:10:ee:5a:5c:4c:3f:25:fa:81:5f:ab:4f:23:01:0b:68: 5c:71:01:70:bc:1c:e6:67:94:ca:86:c0:b1:6c:9a:c8:9c:36: 58:10:d0:a1:1c:9f:42:82:23:bb:0b:b8:31:9d:53:79:ea:c6: b0:91:39:23:0c:f1:92:f7:7c:c6:7b:94:f1:ea:32:84:9b:c8: 5f:e2:f7:f5:b3:2c:ad:d3:b7:b1:26:cf:5c:e3:6d:0d:d7:44: 67:e5:4a:91:72:8f:74:85:8c:ae:b8:8d:72:fe:0d:5b:5f:ed: e1:d1:25:76:11:9f:2e:12:4f:93:ae:26:b8:53:62:db:d6:59: 1a:b6:36:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaABpahn13TB7xJi7ko7fjQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwODE0MTkwMDI4WhcNMjYwODE1MTkwMDI4WjAzMTEwLwYDVQQD Eyg5ZDg1Y2Y2YjMyNGM3OGMxZjk3MjBhOWMzNTgzNTI0MThhZmZjYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbUuorTLV/JY1UNYsL8PliwzpQ1I ew7xVVzw3QnIST43dgIvSu9RwMtgZa6pwAuYjV3I4dq4SKV8AZLcHu5IgPBdYcwg KCqFbcITFSoPsVj0kWvGuoEdrf40eh69COM+iHViyp7z1bvhvYlqy6l/9qaAuEBZ VecNOxFEy4p/WAu02jjDhGlDwOpZVZm8WZg6XvJCigwLksnazIiZrUKuGFRpt+zt aaA4f5M8FJujSeVncnPmN5W8TzJKHvJNe3xbbWQsQ6E7MmMkLYUESE2mMvw+qY8q NLjPwQKSmI2se5Mj0JLXdluKAya/Azu6qDkvIINcpILv+zv4Dvy28y4V/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2Fz2syTHjB+XIKnDWDUkGK/8rSMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGHBnpCn fbWH8WUzkygIraAo6FJIZbaSwRikFgVAHqiyD0g7te6903C1ePSJAUEgi2o7Y6NM 7rszYW4W+cqL/AZOzvUnxPi+9Oxmon6oU1AL+wKRjvi/i0Z5HsGPDzL1NjZcLHJr glejQMTsJN9AiVNOy/Lxm/KqQL9FsqsmxuIQ7lpcTD8l+oFfq08jAQtoXHEBcLwc 5meUyobAsWyayJw2WBDQoRyfQoIjuwu4MZ1TeerGsJE5Iwzxkvd8xnuU8eoyhJvI X+L39bMsrdO3sSbPXONtDddEZ+VKkXKPdIWMrriNcv4NW1/t4dEldhGfLhJPk64m uFNi29ZZGrY2cA== -----END CERTIFICATE-----Generated at Sat Aug 15 00:34:11 2026 by rpki-client