$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: c0fqGMhWW1pGb2uIdWtqyhm9VhxbTMwAXwsm0aodNIw= Subject key identifier: 44:3C:2A:86:43:D7:FC:77:31:34:EF:F7:CD:D9:68:72:CA:E5:18:BA Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 01A088D4E5B0AC16D5385D7BCB5E8A76B051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 1743 Signing time: Thu 10 Sep 2026 01:00:48 +0000 Manifest this update: Thu 10 Sep 2026 01:00:48 +0000 Manifest next update: Fri 11 Sep 2026 01:00:48 +0000 Files and hashes: 1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=) 2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: lxM46uqRj5VJfnyg6L/HZFMyqE2tZNZW1HRGzWLH17U=) 3: 9anE0sOxoh9ur86ajXwt8Cg3V2g.roa (hash: 3bLfAo7AcbEE+IrcvvE4Oy3s012eURqkiS4C1whTXhk=) 4: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=) 5: CiNhwzJsM6ZFV5GCT0q6BXhT6DI.roa (hash: KWZXDRfpaCL2QK5Ff1vICptorEtdR6f4RpWBfQJGxXA=) 6: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=) 7: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=) 8: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=) 9: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=) 10: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=) 11: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=) 12: gh9mh2nEYvJBvUONr1JLfJRdcUs.roa (hash: 14Bmt92WrcjOAYI79zrk/0f0+mA+kpeqt2TIxdzRFFM=) 13: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=) 14: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=) 15: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=) 16: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=) 17: qk7uT5aAa_csmyx9Uuzf5YCpEf4.roa (hash: LoXBLhoXU5lN7weMYQ1jPtIKrd6AvSiXKfSjf4AAclo=) 18: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=) 19: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=) 20: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:88:d4:e5:b0:ac:16:d5:38:5d:7b:cb:5e:8a:76:b0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Sep 10 01:00:48 2026 GMT Not After : Sep 11 01:00:48 2026 GMT Subject: CN=443c2a8643d7fc773134eff7cdd96872cae518ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:5b:70:76:a5:8a:c8:7e:71:06:b8:6e:d4: 13:c3:94:41:44:bb:5f:f9:a9:93:c9:bf:2b:8a:29: 14:b0:f2:61:0a:6e:df:da:93:2e:39:d4:88:38:82: 54:66:48:b1:cc:99:67:ef:57:8f:2b:94:4c:2a:11: 2d:7a:26:b2:98:4e:6e:13:75:71:9c:59:2b:1c:12: 29:7c:a0:ea:04:26:27:62:64:32:20:70:68:69:32: cd:12:c9:f2:01:8a:8b:39:bf:10:a0:68:fc:dd:1c: d4:d6:13:a3:5d:44:32:c3:51:4a:48:cd:2c:41:bc: d7:14:0a:c2:36:9b:ed:d7:0f:2b:69:cd:e1:b1:04: ae:a0:88:85:98:a1:4a:e9:b2:4e:c7:f0:08:1e:eb: 4b:60:a9:86:ff:ef:ba:da:64:67:17:c3:42:0d:42: c1:67:b0:d6:dd:82:fe:de:95:f4:a8:37:bc:dd:45: 19:86:7b:88:6a:11:d1:26:f3:18:b4:97:65:d4:9c: 70:ae:25:c4:f6:d4:13:d7:34:82:2d:03:2f:47:22: 1b:18:5e:1c:56:44:f7:14:b7:b4:0b:4b:b4:0b:b4: ee:75:79:e3:34:ef:10:f4:8a:4f:cb:75:20:2c:c1: 74:22:aa:c6:65:d2:eb:3d:53:7e:18:d0:94:4e:fd: 71:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3C:2A:86:43:D7:FC:77:31:34:EF:F7:CD:D9:68:72:CA:E5:18:BA X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8a:e9:80:8c:14:88:e5:5a:ad:a0:24:03:17:e8:73:e2:82: 45:13:1e:10:dc:b0:1c:45:97:ea:c8:56:64:21:a4:c7:3a:a3: 59:12:5c:21:df:8f:e3:3d:de:bf:e6:27:52:73:bb:ba:2b:ed: d8:f0:17:8e:f0:0c:61:ab:c3:9f:27:f0:8a:39:fd:10:97:60: 45:5f:5e:87:51:fa:2d:22:33:5a:26:43:22:a2:52:1a:07:5d: a1:96:50:04:84:ba:c2:27:85:06:fa:46:9e:e1:8b:f8:3a:f4: 6c:cd:bf:97:32:ac:ed:b8:47:34:c9:06:68:d3:2b:86:99:41: ff:1e:fa:f0:c1:9b:5c:9b:ea:73:d8:89:58:1f:09:f7:2d:dc: 47:64:8c:4f:2c:f1:c5:94:ca:c7:2f:1d:40:90:70:2f:f5:0d: df:20:d8:e3:b1:98:8a:68:4a:b8:28:97:a3:4a:e1:c4:36:d9: 67:35:51:60:aa:79:9b:02:93:91:80:05:79:af:0d:77:17:b7: 83:82:69:bf:80:04:76:22:92:7c:72:b6:81:58:2d:fb:31:c8: 8a:a9:38:0b:dc:bb:b4:49:dd:c2:c1:19:e1:c5:80:4f:0d:76: e0:da:2e:14:e2:2e:be:25:53:48:60:50:c0:08:31:a8:7b:5f: ad:fd:1a:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCI1OWwrBbVOF17y16KdrBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwOTEwMDEwMDQ4WhcNMjYwOTExMDEwMDQ4WjAzMTEwLwYDVQQD Eyg0NDNjMmE4NjQzZDdmYzc3MzEzNGVmZjdjZGQ5Njg3MmNhZTUxOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFhbcHalish+cQa4btQTw5RBRLtf +amTyb8riikUsPJhCm7f2pMuOdSIOIJUZkixzJln71ePK5RMKhEteiaymE5uE3Vx nFkrHBIpfKDqBCYnYmQyIHBoaTLNEsnyAYqLOb8QoGj83RzU1hOjXUQyw1FKSM0s QbzXFArCNpvt1w8rac3hsQSuoIiFmKFK6bJOx/AIHutLYKmG/++62mRnF8NCDULB Z7DW3YL+3pX0qDe83UUZhnuIahHRJvMYtJdl1JxwriXE9tQT1zSCLQMvRyIbGF4c VkT3FLe0C0u0C7TudXnjNO8Q9IpPy3UgLMF0IqrGZdLrPVN+GNCUTv1x3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ8KoZD1/x3MTTv983ZaHLK5Ri6MB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPorpgIwU iOVaraAkAxfoc+KCRRMeENywHEWX6shWZCGkxzqjWRJcId+P4z3ev+YnUnO7uivt 2PAXjvAMYavDnyfwijn9EJdgRV9eh1H6LSIzWiZDIqJSGgddoZZQBIS6wieFBvpG nuGL+Dr0bM2/lzKs7bhHNMkGaNMrhplB/x768MGbXJvqc9iJWB8J9y3cR2SMTyzx xZTKxy8dQJBwL/UN3yDY47GYimhKuCiXo0rhxDbZZzVRYKp5mwKTkYAFea8Ndxe3 g4Jpv4AEdiKSfHK2gVgt+zHIiqk4C9y7tEndwsEZ4cWATw124NouFOIuviVTSGBQ wAgxqHtfrf0aaQ== -----END CERTIFICATE-----Generated at Thu Sep 10 10:43:57 2026 by rpki-client