$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json) Hash identifier: RF/HeR17Gg8ejKlghvsA2kFRgXImIQbUCU33NF1YB48= Subject key identifier: F5:CA:75:E2:2B:6C:27:C7:C9:39:64:62:D3:AC:91:6D:39:FD:AD:B3 Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 01A08C7AB3C97AB8512F68508B063A42C4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft Manifest number: 1AB5 Signing time: Thu 10 Sep 2026 18:00:46 +0000 Manifest this update: Thu 10 Sep 2026 18:00:46 +0000 Manifest next update: Fri 11 Sep 2026 18:00:46 +0000 Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: cM0flCjHKd6ClWawUuShWv6yhXivaPG+Zeu/dSxlKe4=) 2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=) 3: CyXEon0EjqXOHr8IeWjEVFpMffs.roa (hash: 61FTseLqfGHD+d4UC74A9kaSSpCsOAMcXitG3hvPp+Y=) 4: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=) 5: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=) 6: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=) 7: ccBq--nhlrlj-SQFFud3LvSjHcs.roa (hash: xXhVmuwZaVq/u5W4va4FychwRtt+dYkphzF8S3KVfQI=) 8: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=) 9: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=) 10: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:7a:b3:c9:7a:b8:51:2f:68:50:8b:06:3a:42:c4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Sep 10 18:00:46 2026 GMT Not After : Sep 11 18:00:46 2026 GMT Subject: CN=f5ca75e22b6c27c7c9396462d3ac916d39fdadb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:a4:df:47:87:8d:09:d4:ac:6e:bf:bd:7c: 58:33:e2:97:df:25:fe:93:d9:74:69:48:88:d8:6a: 07:e4:b9:75:29:d9:d9:a9:bd:54:0f:65:23:52:4e: 28:cf:24:da:72:74:e9:d0:02:24:35:98:81:5e:a7: 4f:67:4e:92:dd:19:24:cd:2f:07:46:0b:11:7b:ff: ff:51:d1:08:d6:31:12:0f:6d:9b:dd:b2:d1:06:cd: dd:75:0f:f0:03:86:aa:2f:c6:a6:e5:3b:68:eb:f3: ca:f5:a7:4b:f0:c9:6f:f4:fd:a8:62:cd:4b:4f:a1: ad:83:e7:00:b4:12:05:f5:c7:6c:ea:40:1f:60:5c: f9:aa:52:ef:55:08:54:40:c0:7a:db:94:9a:49:3e: d4:28:38:f1:67:51:10:f9:d1:fe:54:6c:b7:c9:22: 9b:de:f1:89:97:c8:93:e0:ee:62:ef:e6:7c:ec:dc: f7:2d:1c:2b:0b:82:41:a2:73:10:bc:a8:99:7e:6a: 53:c3:8b:62:5b:9b:f7:78:f4:1a:fa:75:6f:bd:a6: a0:73:47:21:ce:40:22:ce:22:51:78:d4:67:52:b1: 6d:4e:84:3e:40:85:77:85:78:65:2c:65:c6:60:36: 13:04:d0:c1:89:08:87:f7:2e:cd:31:4e:c8:02:fd: 3a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CA:75:E2:2B:6C:27:C7:C9:39:64:62:D3:AC:91:6D:39:FD:AD:B3 X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e8:2e:03:e7:42:25:e4:a0:ac:6b:00:01:9d:39:41:92:73: 2c:9a:c8:25:05:7e:96:e3:e4:17:e4:c1:c9:db:fb:b3:b2:81: ee:49:b8:ff:cb:df:32:f1:b2:5c:3f:8e:f5:28:b8:26:e9:e0: d7:ef:f4:f9:d1:d1:2d:e3:9a:d7:0a:31:99:48:3e:fc:e1:db: d8:3b:a0:40:d9:47:21:33:14:83:90:b9:28:cc:64:cc:67:35: fa:37:e9:ee:6f:7e:17:17:5a:a5:06:22:87:81:9b:ee:3c:ef: 29:ef:a1:b6:d1:f0:70:21:06:3f:d0:ea:06:61:c0:30:e0:e1: 9d:8c:49:66:e4:5c:60:20:71:e6:d5:ea:40:5c:d0:9a:23:54: 4e:44:74:9b:2c:dc:8a:db:d9:a2:d7:f1:15:45:03:bd:fc:24: 23:13:07:be:31:e2:9a:8d:03:84:59:66:a2:17:4e:44:73:7d: 47:20:4d:6f:6f:5d:de:d8:49:f6:7f:7c:a5:f0:5e:46:97:2d: 13:b8:7d:90:55:cb:f7:5c:e8:37:5a:75:20:0c:7d:17:4e:30: 0d:17:e1:f9:d4:30:ea:52:03:b8:08:b3:6a:97:29:21:d9:86: 10:50:98:00:5f:50:3c:e4:ff:2a:ea:7c:82:45:a5:83:52:22: 94:0d:5b:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCMerPJerhRL2hQiwY6QsS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjYwOTEwMTgwMDQ2WhcNMjYwOTExMTgwMDQ2WjAzMTEwLwYDVQQD EyhmNWNhNzVlMjJiNmMyN2M3YzkzOTY0NjJkM2FjOTE2ZDM5ZmRhZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRqk30eHjQnUrG6/vXxYM+KX3yX+ k9l0aUiI2GoH5Ll1KdnZqb1UD2UjUk4ozyTacnTp0AIkNZiBXqdPZ06S3RkkzS8H RgsRe///UdEI1jESD22b3bLRBs3ddQ/wA4aqL8am5Tto6/PK9adL8Mlv9P2oYs1L T6Gtg+cAtBIF9cds6kAfYFz5qlLvVQhUQMB625SaST7UKDjxZ1EQ+dH+VGy3ySKb 3vGJl8iT4O5i7+Z87Nz3LRwrC4JBonMQvKiZfmpTw4tiW5v3ePQa+nVvvaagc0ch zkAiziJReNRnUrFtToQ+QIV3hXhlLGXGYDYTBNDBiQiH9y7NMU7IAv06iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXKdeIrbCfHyTlkYtOskW05/a2zMB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReguA+dC JeSgrGsAAZ05QZJzLJrIJQV+luPkF+TBydv7s7KB7km4/8vfMvGyXD+O9Si4Jung 1+/0+dHRLeOa1woxmUg+/OHb2DugQNlHITMUg5C5KMxkzGc1+jfp7m9+FxdapQYi h4Gb7jzvKe+httHwcCEGP9DqBmHAMODhnYxJZuRcYCBx5tXqQFzQmiNUTkR0myzc itvZotfxFUUDvfwkIxMHvjHimo0DhFlmohdORHN9RyBNb29d3thJ9n98pfBeRpct E7h9kFXL91zoN1p1IAx9F04wDRfh+dQw6lIDuAizapcpIdmGEFCYAF9QPOT/Kup8 gkWlg1IilA1bcg== -----END CERTIFICATE-----Generated at Thu Sep 10 19:53:16 2026 by rpki-client