$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: jjPFOwvN3pUfmX3PVtUKj9tXA1A6OVDHqSsqgQuHt30= Subject key identifier: 72:67:67:6C:EF:8A:89:8B:C0:EA:C7:55:B2:74:0D:8D:E8:6D:7F:2B Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019D3909C24793CB6BDB246AFA57C9DF57AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 18A1 Signing time: Sun 29 Mar 2026 10:00:34 +0000 Manifest this update: Sun 29 Mar 2026 10:00:34 +0000 Manifest next update: Mon 30 Mar 2026 10:00:34 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 6kjsQK7MRCytbQLX+Q209fIz9XO9V+AgOnDYylzw8Vo=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:09:c2:47:93:cb:6b:db:24:6a:fa:57:c9:df:57:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Mar 29 10:00:34 2026 GMT Not After : Mar 30 10:00:34 2026 GMT Subject: CN=7267676cef8a898bc0eac755b2740d8de86d7f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:04:1c:10:e3:cb:94:7e:2d:e9:8c:21:5c:f5: de:c6:a5:e2:3f:5a:ef:03:f1:d2:43:74:79:b1:57: b8:f8:cc:b4:22:22:9f:56:e6:9e:ed:bc:83:70:e2: 3b:59:67:6f:58:03:3f:1e:86:57:9a:24:06:13:50: 6d:8c:f8:51:b8:fc:61:b7:fe:2c:78:a4:23:fe:a1: a7:fa:a5:3d:6f:75:d8:6d:c9:79:b4:63:c8:a8:2a: 14:a0:50:67:b8:13:7c:0e:38:62:a2:1a:08:e2:fa: c2:4c:29:42:4f:f6:36:9c:12:7a:51:43:ce:a7:ae: 47:36:7d:cd:f5:c5:98:47:2d:39:af:58:93:94:03: c7:99:fb:f1:d1:d0:a6:f2:a1:85:bb:e7:5f:b3:76: dd:b3:f1:ae:3b:59:7d:d9:4f:1e:a1:b3:74:d9:fc: 38:9d:b5:d3:ea:83:85:46:93:4a:1b:d4:54:fb:8e: 76:34:e6:17:c8:f5:9c:7f:1b:2e:07:78:dc:91:ae: 1c:48:10:ac:21:4d:55:86:dc:fd:bf:9c:94:24:5a: 38:eb:68:28:9e:46:21:ba:95:84:23:08:2b:dc:8e: 47:d6:27:8a:0f:18:5e:f4:ab:8d:4f:f7:70:f8:ca: 01:09:94:d3:a7:1d:75:8d:74:d6:3f:9a:91:dc:c6: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:67:67:6C:EF:8A:89:8B:C0:EA:C7:55:B2:74:0D:8D:E8:6D:7F:2B X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:62:e9:e4:1d:e7:d9:9c:d7:f5:df:6a:45:bf:da:53:34:7e: f5:92:ee:24:b6:9d:e4:9c:01:41:9e:f9:40:77:d3:ec:16:8b: cd:c0:5a:19:23:02:43:ab:ad:93:0e:13:ed:21:a8:84:e3:e0: fa:05:f9:b1:24:39:6e:44:08:a0:d7:e1:54:5e:f5:de:e3:71: e7:98:0e:25:18:d9:15:16:b3:5e:22:fb:82:1e:42:58:b7:0b: ef:12:e9:eb:7d:3c:88:f7:e8:f6:a0:8e:9f:90:17:2b:14:23: 1c:4e:e8:07:e1:c6:2d:45:b7:31:0a:72:c0:1a:a1:e7:6e:e6: ce:3b:eb:1e:d7:22:0c:dd:17:e3:b1:a0:62:29:e1:d6:a2:e4: 14:f2:a4:8e:11:8b:5e:49:8b:7f:7b:d0:1f:62:44:f0:82:6c: 4e:92:e3:e1:05:09:3e:c0:39:86:0b:d3:1a:12:32:12:d1:74: 52:d5:20:81:cd:93:4d:ab:91:88:58:61:70:b1:c2:af:52:75: 80:82:1d:e1:9c:e6:9e:26:6f:68:3f:31:b3:af:ba:22:24:ca: ff:10:bc:99:89:a1:e6:f6:0e:79:8f:03:47:2e:f9:d8:4b:63: 61:10:f8:b8:21:5a:6c:76:20:f3:43:28:3e:68:d7:8c:a4:71: b2:36:10:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05CcJHk8tr2yRq+lfJ31etMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwMzI5MTAwMDM0WhcNMjYwMzMwMTAwMDM0WjAzMTEwLwYDVQQD Eyg3MjY3Njc2Y2VmOGE4OThiYzBlYWM3NTViMjc0MGQ4ZGU4NmQ3ZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AQcEOPLlH4t6YwhXPXexqXiP1rv A/HSQ3R5sVe4+My0IiKfVuae7byDcOI7WWdvWAM/HoZXmiQGE1BtjPhRuPxht/4s eKQj/qGn+qU9b3XYbcl5tGPIqCoUoFBnuBN8DjhiohoI4vrCTClCT/Y2nBJ6UUPO p65HNn3N9cWYRy05r1iTlAPHmfvx0dCm8qGFu+dfs3bds/GuO1l92U8eobN02fw4 nbXT6oOFRpNKG9RU+452NOYXyPWcfxsuB3jcka4cSBCsIU1Vhtz9v5yUJFo462go nkYhupWEIwgr3I5H1ieKDxhe9KuNT/dw+MoBCZTTpx11jXTWP5qR3MYQHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJnZ2zviomLwOrHVbJ0DY3obX8rMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2Lp5B3n 2ZzX9d9qRb/aUzR+9ZLuJLad5JwBQZ75QHfT7BaLzcBaGSMCQ6utkw4T7SGohOPg +gX5sSQ5bkQIoNfhVF713uNx55gOJRjZFRazXiL7gh5CWLcL7xLp6308iPfo9qCO n5AXKxQjHE7oB+HGLUW3MQpywBqh527mzjvrHtciDN0X47GgYinh1qLkFPKkjhGL XkmLf3vQH2JE8IJsTpLj4QUJPsA5hgvTGhIyEtF0UtUggc2TTauRiFhhcLHCr1J1 gIId4ZzmniZvaD8xs6+6IiTK/xC8mYmh5vYOeY8DRy752EtjYRD4uCFabHYg80Mo PmjXjKRxsjYQ2g== -----END CERTIFICATE-----Generated at Sun Mar 29 20:00:24 2026 by rpki-client