$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: 6i9buvi8mJf17WlZu+FbPz3xdoS3yjDzzmEL18JQQDY= Subject key identifier: 86:DF:0B:4D:BB:22:32:E0:96:86:8B:F0:46:5F:8F:9F:36:47:3C:E0 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 01A175F08031DDF6BE4808DD77F4EEB42BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 17BE Signing time: Mon 26 Oct 2026 02:00:57 +0000 Manifest this update: Mon 26 Oct 2026 02:00:57 +0000 Manifest next update: Tue 27 Oct 2026 02:00:57 +0000 Files and hashes: 1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=) 2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: ZLPp/yF3T9bOLSLDCQlRUiJHQeTEMHuUIAW6yFfftNo=) 3: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=) 4: CiNhwzJsM6ZFV5GCT0q6BXhT6DI.roa (hash: KWZXDRfpaCL2QK5Ff1vICptorEtdR6f4RpWBfQJGxXA=) 5: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=) 6: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=) 7: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=) 8: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=) 9: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=) 10: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=) 11: gkudlEGyzvKioGOIttwgOUCTM10.roa (hash: +/8v705rI0CYapeUgxKV7obdyQ0ff71n7lzoEsW/vus=) 12: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=) 13: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=) 14: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=) 15: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=) 16: qk7uT5aAa_csmyx9Uuzf5YCpEf4.roa (hash: LoXBLhoXU5lN7weMYQ1jPtIKrd6AvSiXKfSjf4AAclo=) 17: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=) 18: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=) 19: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:f0:80:31:dd:f6:be:48:08:dd:77:f4:ee:b4:2b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Oct 26 02:00:57 2026 GMT Not After : Oct 27 02:00:57 2026 GMT Subject: CN=86df0b4dbb2232e096868bf0465f8f9f36473ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:79:d2:2d:18:a1:35:ed:da:fb:22:8d:0e: 16:ea:01:dc:cf:f9:12:77:48:3a:4f:88:cb:bd:f2: f7:ca:09:06:dc:cb:0d:fc:1f:9b:62:a2:a0:d9:7a: a6:d6:35:9e:90:11:f1:92:0e:f0:93:bc:25:cb:4a: ca:55:e4:f6:aa:fe:8f:ee:80:a4:f0:b4:76:33:66: d8:bb:81:07:7a:8e:e6:17:49:c6:a0:65:e9:77:4a: 8d:88:86:5d:0b:e0:e0:ce:9e:41:9b:81:e6:ed:a9: d3:57:f5:65:79:d8:ba:64:ec:a4:80:e7:0a:54:20: 2e:e0:55:8f:50:75:51:2c:41:1b:cc:e7:eb:b9:0b: 40:c9:04:d8:86:5c:d6:52:ea:4e:14:e8:12:a5:0d: c1:d3:e3:96:07:f2:79:da:d0:6f:9e:1e:d4:61:39: 19:cd:cc:ce:92:f1:e9:2e:e0:02:f7:e5:c1:30:9d: 11:d6:09:8a:6b:a8:1a:41:b1:e1:e5:eb:4b:ae:79: fc:f9:bc:51:2f:a4:6f:f9:05:18:05:d7:53:6b:68: 46:9e:f9:f7:8b:d9:6b:49:b7:79:88:b5:1c:42:0c: 63:9a:ae:16:aa:bd:f3:af:5f:68:06:93:fb:40:ca: 51:c2:df:21:64:ea:58:b6:96:1a:a5:a0:22:ff:61: 68:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DF:0B:4D:BB:22:32:E0:96:86:8B:F0:46:5F:8F:9F:36:47:3C:E0 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:21:1a:e9:c7:ba:cd:17:d6:04:d6:54:0b:30:2e:57:66:cb: 45:97:a0:0f:60:c1:79:9a:e3:3d:67:d3:29:35:16:33:ad:4a: 7d:46:ae:2a:e0:85:49:41:70:3c:86:a5:af:92:e5:7c:1c:11: 1a:b6:83:9d:69:1c:a2:38:63:c1:71:53:d3:0c:96:85:9a:23: 62:ad:4e:b0:17:a4:d7:93:57:80:cc:ae:55:a7:9f:1b:61:60: c3:af:29:36:1d:84:1a:85:31:06:40:5f:c3:29:f1:5e:a1:40: 33:9c:9b:38:02:52:d6:2e:88:5d:4c:7b:cb:92:fe:49:d9:b5: 8f:75:9a:e9:5c:f2:a0:36:7b:b8:39:a7:65:37:ce:c5:8e:76: d6:a1:8f:f1:2f:bd:c9:d0:7b:d4:cc:db:4b:04:fb:49:d1:0c: 27:38:5f:c8:4f:35:d7:00:db:b0:95:55:ce:c2:83:00:ff:7a: c7:25:12:f3:24:32:23:f1:af:67:b5:69:6d:8f:87:7a:dd:15: f4:62:05:80:ef:9b:86:83:5c:83:b1:60:16:76:d5:85:fc:d0: 2c:11:30:c5:fc:45:e6:b9:62:6d:f1:86:ea:6e:e8:be:ef:4f: d4:57:2c:4b:b7:97:27:7c:59:34:c9:46:33:37:d3:fb:7c:91: c0:25:6e:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF18IAx3fa+SAjdd/TutCuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYxMDI2MDIwMDU3WhcNMjYxMDI3MDIwMDU3WjAzMTEwLwYDVQQD Eyg4NmRmMGI0ZGJiMjIzMmUwOTY4NjhiZjA0NjVmOGY5ZjM2NDczY2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzt50i0YoTXt2vsijQ4W6gHcz/kS d0g6T4jLvfL3ygkG3MsN/B+bYqKg2Xqm1jWekBHxkg7wk7wly0rKVeT2qv6P7oCk 8LR2M2bYu4EHeo7mF0nGoGXpd0qNiIZdC+Dgzp5Bm4Hm7anTV/Vledi6ZOykgOcK VCAu4FWPUHVRLEEbzOfruQtAyQTYhlzWUupOFOgSpQ3B0+OWB/J52tBvnh7UYTkZ zczOkvHpLuAC9+XBMJ0R1gmKa6gaQbHh5etLrnn8+bxRL6Rv+QUYBddTa2hGnvn3 i9lrSbd5iLUcQgxjmq4Wqr3zr19oBpP7QMpRwt8hZOpYtpYapaAi/2FoEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbfC027IjLgloaL8EZfj582RzzgMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyEa6ce6 zRfWBNZUCzAuV2bLRZegD2DBeZrjPWfTKTUWM61KfUauKuCFSUFwPIalr5LlfBwR GraDnWkcojhjwXFT0wyWhZojYq1OsBek15NXgMyuVaefG2Fgw68pNh2EGoUxBkBf wynxXqFAM5ybOAJS1i6IXUx7y5L+Sdm1j3Wa6VzyoDZ7uDmnZTfOxY521qGP8S+9 ydB71MzbSwT7SdEMJzhfyE811wDbsJVVzsKDAP96xyUS8yQyI/GvZ7VpbY+Het0V 9GIFgO+bhoNcg7FgFnbVhfzQLBEwxfxF5rlibfGG6m7ovu9P1FcsS7eXJ3xZNMlG MzfT+3yRwCVueA== -----END CERTIFICATE-----Generated at Mon Oct 26 11:38:10 2026 by rpki-client