$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: 1UOQSgwLNkpidwO/jAYElGG2jmFrHuoT7bOownCNzZ4= Subject key identifier: 4F:92:EC:90:74:31:98:FA:F6:D2:52:F0:27:85:FA:EF:2E:85:48:2A Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 01A08CE84EC64E50CD0E0E952748B022B5A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0E1A Signing time: Thu 10 Sep 2026 20:00:29 +0000 Manifest this update: Thu 10 Sep 2026 20:00:29 +0000 Manifest next update: Fri 11 Sep 2026 20:00:29 +0000 Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=) 2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=) 3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: uVPCAOwSAhUN0c37/JhFymRYlarxCBKEflzjwNiHTEs=) 4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=) 5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=) 6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=) 7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=) 8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=) 9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=) 10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=) 11: HZ7C4ms11ElfIAOCXz2KP1UZQOo.roa (hash: XB0mb76ajFkdDxe5edVo54FP1IvbB8otJuWMuOU3oU8=) 12: QL4XIa93X9j8w6Q69GPbrIm9Txg.roa (hash: q3a41ZI2Ed5MjFN9KCPKVx+N+9H7Kne18XdEvUkqHKo=) 13: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=) 14: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=) 15: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=) 16: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=) 17: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=) 18: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=) 19: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=) 20: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=) 21: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=) 22: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=) 23: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=) 24: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=) 25: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=) 26: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:e8:4e:c6:4e:50:cd:0e:0e:95:27:48:b0:22:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Sep 10 20:00:29 2026 GMT Not After : Sep 11 20:00:29 2026 GMT Subject: CN=4f92ec90743198faf6d252f02785faef2e85482a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:b9:9f:88:99:88:98:f9:f8:38:35:9d:f4: b4:2a:5a:cf:99:2e:14:34:6d:c4:a1:72:55:18:8a: 84:db:dc:f6:8b:70:7c:f2:40:8a:7c:d0:ca:20:e5: 5c:73:2f:db:e3:70:9a:a5:5b:7a:7c:be:b6:cd:57: f0:74:a8:8d:94:c6:3c:4f:c5:cf:c0:5c:ba:49:ab: 17:84:bd:ca:09:cf:67:af:f0:7a:e7:87:bb:6b:6a: fc:ba:8b:ce:1f:2c:8b:eb:e6:89:88:af:16:5e:c8: d2:fa:a0:49:b0:5d:72:4a:31:4b:b3:6d:e4:a8:e8: 58:0f:49:41:ee:a1:24:01:ee:50:5f:1a:65:35:ea: 4f:51:4e:66:f7:10:af:46:c9:19:a7:db:ef:3b:41: f5:a6:f3:69:d0:bd:8c:24:3f:e9:f9:9e:fc:05:18: b6:a1:ab:4b:dc:08:2d:29:c4:ee:c3:17:24:e1:94: 0d:33:ac:81:50:f1:4e:e3:7b:ab:39:1f:8c:c4:e3: 40:7a:eb:e8:2f:c0:77:b3:5d:fb:c9:41:53:2b:14: 8e:4d:df:5c:f5:53:98:ed:dc:d3:ba:09:c6:c8:22: 9f:a1:9c:37:1f:73:79:33:56:c4:6e:7b:04:e9:42: a4:a6:92:ff:fd:a1:a6:dd:d1:df:43:b6:cd:07:ce: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:92:EC:90:74:31:98:FA:F6:D2:52:F0:27:85:FA:EF:2E:85:48:2A X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:9d:ce:b5:3d:78:ca:4b:1d:94:03:51:ae:7c:9d:0b:44:0d: b3:35:40:ff:66:df:5b:f8:0a:2a:04:bf:21:61:32:69:b4:5b: 8e:be:3e:80:c9:63:b6:21:ae:5f:02:4b:84:77:e8:e8:a0:f1: 3e:7b:f2:96:67:21:f9:d1:20:66:e2:a1:a2:1e:60:de:01:87: a5:60:18:ed:07:38:3d:8c:b0:80:65:5c:d0:d1:67:a5:02:93: 67:80:f9:6e:ce:bc:33:33:de:f4:fd:19:ba:b1:ff:c3:18:32: d1:21:8a:c6:e1:45:16:c7:e5:55:0a:b4:8f:1b:08:f4:28:e2: 58:f5:84:39:19:b0:8a:9e:1a:08:6e:43:e2:12:ce:21:8c:ab: ea:72:2f:12:8d:0b:06:26:7d:55:3b:98:2c:76:8f:68:c2:28: 32:c3:6b:0b:d2:8e:0a:59:40:16:d7:70:55:f2:03:f7:f1:d3: 71:f0:23:87:05:8f:94:8e:b5:1d:5e:ee:ac:d7:cf:e6:c1:1f: 3a:fb:e8:eb:51:6c:ae:c8:f2:69:f3:d2:20:ad:8f:0f:74:f1: 6f:11:bb:eb:0b:13:36:95:9e:de:b3:e5:3e:ac:ae:46:ea:cc: a2:87:83:df:83:74:80:b8:14:b2:69:7e:e9:6c:6a:c3:32:bc: 9b:c8:ae:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCM6E7GTlDNDg6VJ0iwIrWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwOTEwMjAwMDI5WhcNMjYwOTExMjAwMDI5WjAzMTEwLwYDVQQD Eyg0ZjkyZWM5MDc0MzE5OGZhZjZkMjUyZjAyNzg1ZmFlZjJlODU0ODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGW5n4iZiJj5+Dg1nfS0KlrPmS4U NG3EoXJVGIqE29z2i3B88kCKfNDKIOVccy/b43CapVt6fL62zVfwdKiNlMY8T8XP wFy6SasXhL3KCc9nr/B654e7a2r8uovOHyyL6+aJiK8WXsjS+qBJsF1ySjFLs23k qOhYD0lB7qEkAe5QXxplNepPUU5m9xCvRskZp9vvO0H1pvNp0L2MJD/p+Z78BRi2 oatL3AgtKcTuwxck4ZQNM6yBUPFO43urOR+MxONAeuvoL8B3s137yUFTKxSOTd9c 9VOY7dzTugnGyCKfoZw3H3N5M1bEbnsE6UKkppL//aGm3dHfQ7bNB84ChQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+S7JB0MZj69tJS8CeF+u8uhUgqMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZ3OtT14 yksdlANRrnydC0QNszVA/2bfW/gKKgS/IWEyabRbjr4+gMljtiGuXwJLhHfo6KDx Pnvylmch+dEgZuKhoh5g3gGHpWAY7Qc4PYywgGVc0NFnpQKTZ4D5bs68MzPe9P0Z urH/wxgy0SGKxuFFFsflVQq0jxsI9CjiWPWEORmwip4aCG5D4hLOIYyr6nIvEo0L BiZ9VTuYLHaPaMIoMsNrC9KOCllAFtdwVfID9/HTcfAjhwWPlI61HV7urNfP5sEf Ovvo61FsrsjyafPSIK2PD3TxbxG76wsTNpWe3rPlPqyuRurMooeD34N0gLgUsml+ 6WxqwzK8m8iu6Q== -----END CERTIFICATE-----Generated at Thu Sep 10 22:44:05 2026 by rpki-client