$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: gx9Mtt0QSwm8cnnQkFvQNld3JhLooDR+4v2qf9mIqKo= Subject key identifier: 87:35:E6:DA:8F:8C:47:78:D7:BD:EE:1A:4C:0C:61:46:2F:B6:D3:AB Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019FA14DB9396D355367B6550AA09B98371F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0DA0 Signing time: Mon 27 Jul 2026 02:00:53 +0000 Manifest this update: Mon 27 Jul 2026 02:00:53 +0000 Manifest next update: Tue 28 Jul 2026 02:00:53 +0000 Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=) 2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=) 3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: f1j1W7EeUWAp5XACEqeBQgzmPAD6WxtACd/36vykODc=) 4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=) 5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=) 6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=) 7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=) 8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=) 9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=) 10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=) 11: HZ7C4ms11ElfIAOCXz2KP1UZQOo.roa (hash: XB0mb76ajFkdDxe5edVo54FP1IvbB8otJuWMuOU3oU8=) 12: QL4XIa93X9j8w6Q69GPbrIm9Txg.roa (hash: q3a41ZI2Ed5MjFN9KCPKVx+N+9H7Kne18XdEvUkqHKo=) 13: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=) 14: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=) 15: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=) 16: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=) 17: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=) 18: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=) 19: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=) 20: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=) 21: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=) 22: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=) 23: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=) 24: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=) 25: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=) 26: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:4d:b9:39:6d:35:53:67:b6:55:0a:a0:9b:98:37:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jul 27 02:00:53 2026 GMT Not After : Jul 28 02:00:53 2026 GMT Subject: CN=8735e6da8f8c4778d7bdee1a4c0c61462fb6d3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:fb:33:6f:86:83:7f:15:2b:b0:06:ed:c2: ed:44:54:79:15:5a:11:56:3c:76:58:18:73:42:c2: 6d:28:9c:6a:ab:ff:22:9e:66:24:7c:37:4d:0a:02: 44:a2:fb:9c:c5:af:c7:be:43:e3:fa:34:fd:1e:cf: 79:25:8d:39:1a:85:92:36:e6:2e:3c:d4:9f:e7:02: 6d:e0:ea:0f:9b:44:20:bc:cb:4f:8a:f2:c3:e6:f1: c1:9c:c1:2c:67:7a:20:e5:5c:b6:78:28:74:4c:57: 65:6a:13:8b:52:bf:40:1d:ca:e0:28:88:8a:76:c9: 47:1b:19:9c:55:76:14:34:c5:87:3e:ed:b2:67:17: 30:c7:84:c7:64:8d:a0:38:57:db:48:7d:d4:93:ac: df:62:fc:15:3c:c8:17:9c:20:1d:2d:fd:00:00:c4: e7:8d:e4:a9:8e:81:6a:a1:6f:9b:53:b9:22:7d:cf: 48:ab:3a:1b:4b:9a:33:4c:b6:ed:3e:4a:a0:b3:07: 41:b7:d3:66:f9:48:15:a6:fa:c9:f7:31:29:e4:e5: 8c:1b:e6:87:b8:c0:e9:5d:9f:43:96:7c:c0:2b:ec: 81:46:06:03:3e:be:4d:07:f6:a4:79:5c:cf:cf:49: dd:b8:01:cc:fa:fe:57:5c:6a:64:3a:c7:9c:44:71: 13:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:35:E6:DA:8F:8C:47:78:D7:BD:EE:1A:4C:0C:61:46:2F:B6:D3:AB X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b4:0f:1f:62:6d:7e:4c:3f:b4:19:00:f6:45:8c:b9:7b:e7: 42:b2:3f:fd:a9:08:88:01:9a:e8:01:03:73:42:1d:22:2f:11: 83:9f:6d:0a:c0:f6:fa:e1:2d:75:34:f6:cf:8d:d4:2a:9d:e2: a4:94:e9:3f:df:00:4b:23:8e:bd:c1:0b:0b:71:e2:b0:17:8a: 67:5c:8f:ba:48:d8:b8:9e:29:e3:5d:85:ba:16:38:64:45:0e: 8c:74:fa:57:f2:97:69:15:5e:13:dd:e3:3f:bb:bc:61:71:fc: 59:4e:35:5e:b9:31:e3:cc:59:5d:96:8f:38:98:96:fd:a1:fd: 1c:a7:e1:34:41:d9:28:c7:8d:b0:c2:b9:c7:56:f7:7e:d8:b0: 89:e9:40:bf:ea:9b:72:16:75:7f:1d:48:d0:9f:42:a0:39:df: 16:cf:e5:2e:c8:b7:fa:c8:8d:44:5a:68:9c:d7:4e:8b:f0:90: 06:31:91:3a:bb:39:66:cf:65:7e:9e:fe:60:b1:6c:f6:dc:32: 90:4a:88:42:5e:d8:d1:36:7e:c2:9c:d0:ff:53:6c:13:c7:2f: 37:5b:5e:35:76:8a:59:0d:6e:65:d6:44:7e:95:1e:2b:19:56: 38:23:22:0a:67:db:d8:00:92:19:66:d3:bd:73:0c:b7:e2:08: 30:d1:2b:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hTbk5bTVTZ7ZVCqCbmDcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwNzI3MDIwMDUzWhcNMjYwNzI4MDIwMDUzWjAzMTEwLwYDVQQD Eyg4NzM1ZTZkYThmOGM0Nzc4ZDdiZGVlMWE0YzBjNjE0NjJmYjZkM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnf7M2+Gg38VK7AG7cLtRFR5FVoR Vjx2WBhzQsJtKJxqq/8inmYkfDdNCgJEovucxa/HvkPj+jT9Hs95JY05GoWSNuYu PNSf5wJt4OoPm0QgvMtPivLD5vHBnMEsZ3og5Vy2eCh0TFdlahOLUr9AHcrgKIiK dslHGxmcVXYUNMWHPu2yZxcwx4THZI2gOFfbSH3Uk6zfYvwVPMgXnCAdLf0AAMTn jeSpjoFqoW+bU7kifc9IqzobS5ozTLbtPkqgswdBt9Nm+UgVpvrJ9zEp5OWMG+aH uMDpXZ9DlnzAK+yBRgYDPr5NB/akeVzPz0nduAHM+v5XXGpkOsecRHETkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc15tqPjEd4173uGkwMYUYvttOrMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbQPH2Jt fkw/tBkA9kWMuXvnQrI//akIiAGa6AEDc0IdIi8Rg59tCsD2+uEtdTT2z43UKp3i pJTpP98ASyOOvcELC3HisBeKZ1yPukjYuJ4p412FuhY4ZEUOjHT6V/KXaRVeE93j P7u8YXH8WU41Xrkx48xZXZaPOJiW/aH9HKfhNEHZKMeNsMK5x1b3ftiwielAv+qb chZ1fx1I0J9CoDnfFs/lLsi3+siNRFponNdOi/CQBjGROrs5Zs9lfp7+YLFs9twy kEqIQl7Y0TZ+wpzQ/1NsE8cvN1teNXaKWQ1uZdZEfpUeKxlWOCMiCmfb2ACSGWbT vXMMt+IIMNEr5A== -----END CERTIFICATE-----Generated at Mon Jul 27 11:34:27 2026 by rpki-client