$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: Z7St+mXD7nwYBzwIrpP3+JCaDLx0z04S6cLu/9HCDGM= Subject key identifier: 30:23:B5:4E:5F:4D:15:78:8D:D1:D9:A6:3D:01:76:61:89:FD:7C:19 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 01A13C6E90EE710CC7171599FCD4ED46FD27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 1AB5 Signing time: Wed 14 Oct 2026 22:00:41 +0000 Manifest this update: Wed 14 Oct 2026 22:00:41 +0000 Manifest next update: Thu 15 Oct 2026 22:00:41 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: ACdy1/YOrFFlPo4d83jRi980zQJjyYD2f+IC+8Z2x9k=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Oct 2026 14:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:3c:6e:90:ee:71:0c:c7:17:15:99:fc:d4:ed:46:fd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Oct 14 22:00:41 2026 GMT Not After : Oct 15 22:00:41 2026 GMT Subject: CN=3023b54e5f4d15788dd1d9a63d01766189fd7c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:3d:50:73:90:2f:b6:bb:cd:61:66:dd:fb: f7:f7:99:a0:3d:f3:3f:6d:12:76:8b:c1:e9:53:ad: f0:5e:e1:5a:02:69:9d:71:fa:b5:e8:54:25:28:6e: b4:ed:1f:98:48:a7:2f:b7:71:a0:6a:5c:33:69:1e: 12:60:c4:4a:a3:78:61:b9:ec:a5:31:14:3f:04:2c: c2:6b:e6:54:1c:79:47:ad:b2:2d:11:20:b4:3a:0a: fb:93:03:a5:82:27:3a:91:80:a1:ab:00:ab:46:7d: 01:f7:84:01:1c:07:d0:06:8a:80:33:b6:4c:f6:bb: 36:9c:cd:0f:b3:04:80:5a:2c:f5:d6:6f:6f:b8:22: 69:52:45:e2:1e:f0:6e:c2:8a:2b:52:3f:24:40:08: 02:9b:5d:52:2b:1a:49:7e:96:b4:ff:b1:22:7d:10: ae:57:63:4b:ed:80:b2:7e:a7:93:2c:63:cf:04:0d: 11:b3:6a:40:bf:5c:27:fe:bd:17:c2:85:96:41:5f: 10:a1:2e:52:70:ad:5a:73:06:c0:c5:d0:6b:8a:c0: 1a:91:7e:b3:26:68:38:69:46:d7:8e:89:3f:c2:d2: de:82:6c:58:63:1f:aa:09:e6:d3:0b:1e:14:27:25: d8:d6:78:a6:bc:3f:67:94:58:75:06:58:bd:f6:89: 9e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:23:B5:4E:5F:4D:15:78:8D:D1:D9:A6:3D:01:76:61:89:FD:7C:19 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d1:47:85:ae:e8:83:bf:ff:ab:f1:45:82:ee:64:05:ac:25: 07:8b:52:21:b1:0d:39:2d:00:c6:ff:28:95:df:df:5b:4a:f8: 89:1d:c6:76:6e:aa:ae:51:c4:0e:94:80:2d:38:0c:3f:b2:5f: a8:d3:57:8c:44:9e:d4:31:49:99:a6:55:3d:94:ce:4a:a4:60: 90:0a:25:ef:8d:fd:16:92:37:14:f0:7a:54:9f:46:9c:e7:a7: a7:ce:0d:d8:fe:b6:a5:69:d8:14:93:3a:5f:da:03:c1:0f:c4: 62:03:1b:30:24:f7:92:17:92:68:86:d8:30:7c:27:05:23:08: 8c:da:dd:71:d0:cc:4e:d2:59:f4:10:27:ca:c4:73:c5:91:4c: 2f:0c:f9:d3:d6:c4:42:39:a0:62:54:c6:ce:07:18:ea:b9:da: 89:ef:9c:9a:45:af:b8:f4:cd:ab:9d:10:2b:dc:de:d2:b9:15: 87:58:a8:51:8f:f9:6d:a7:3e:3c:85:46:55:4b:84:24:43:51: 4f:7a:08:40:da:12:fb:7d:91:c1:b9:92:4e:2b:e8:ef:a6:ce: 11:02:37:4e:07:44:36:ab:7e:4c:91:c2:8c:5a:16:1c:52:40: bf:03:ca:b9:54:5e:c5:d4:02:d3:28:46:70:ef:a5:a9:5d:0e: 81:44:9c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE8bpDucQzHFxWZ/NTtRv0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYxMDE0MjIwMDQxWhcNMjYxMDE1MjIwMDQxWjAzMTEwLwYDVQQD EygzMDIzYjU0ZTVmNGQxNTc4OGRkMWQ5YTYzZDAxNzY2MTg5ZmQ3YzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG09UHOQL7a7zWFm3fv395mgPfM/ bRJ2i8HpU63wXuFaAmmdcfq16FQlKG607R+YSKcvt3GgalwzaR4SYMRKo3hhueyl MRQ/BCzCa+ZUHHlHrbItESC0Ogr7kwOlgic6kYChqwCrRn0B94QBHAfQBoqAM7ZM 9rs2nM0PswSAWiz11m9vuCJpUkXiHvBuwoorUj8kQAgCm11SKxpJfpa0/7EifRCu V2NL7YCyfqeTLGPPBA0Rs2pAv1wn/r0XwoWWQV8QoS5ScK1acwbAxdBrisAakX6z Jmg4aUbXjok/wtLegmxYYx+qCebTCx4UJyXY1nimvD9nlFh1Bli99omenQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAjtU5fTRV4jdHZpj0BdmGJ/XwZMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNFHha7o g7//q/FFgu5kBawlB4tSIbENOS0Axv8old/fW0r4iR3Gdm6qrlHEDpSALTgMP7Jf qNNXjESe1DFJmaZVPZTOSqRgkAol7439FpI3FPB6VJ9GnOenp84N2P62pWnYFJM6 X9oDwQ/EYgMbMCT3kheSaIbYMHwnBSMIjNrdcdDMTtJZ9BAnysRzxZFMLwz509bE QjmgYlTGzgcY6rnaie+cmkWvuPTNq50QK9ze0rkVh1ioUY/5bac+PIVGVUuEJENR T3oIQNoS+32RwbmSTivo76bOEQI3TgdENqt+TJHCjFoWHFJAvwPKuVRexdQC0yhG cO+lqV0OgUScRw== -----END CERTIFICATE-----Generated at Thu Oct 15 00:34:30 2026 by rpki-client