$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: C0x89F5jpRB38QakEnKd5NyfmKP7AaRzsaOKKkxATE4= Subject key identifier: 0D:C1:DD:C8:4D:4B:A6:16:2B:6A:AF:E9:A8:30:BA:4B:FD:2C:49:CB Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019EB7A09FA6FDDC11FAC6EB5C183D7C7296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 164F Signing time: Thu 11 Jun 2026 17:00:17 +0000 Manifest this update: Thu 11 Jun 2026 17:00:17 +0000 Manifest next update: Fri 12 Jun 2026 17:00:17 +0000 Files and hashes: 1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=) 2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: bzxKCQMyb1sI+ofTvX9jysAaMLNb0MAm1w9h+1C7CyQ=) 3: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=) 4: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=) 5: CiNhwzJsM6ZFV5GCT0q6BXhT6DI.roa (hash: KWZXDRfpaCL2QK5Ff1vICptorEtdR6f4RpWBfQJGxXA=) 6: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=) 7: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=) 8: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=) 9: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=) 10: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=) 11: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=) 12: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=) 13: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=) 14: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=) 15: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=) 16: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=) 17: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=) 18: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=) 19: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=) 20: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:a0:9f:a6:fd:dc:11:fa:c6:eb:5c:18:3d:7c:72:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jun 11 17:00:17 2026 GMT Not After : Jun 12 17:00:17 2026 GMT Subject: CN=0dc1ddc84d4ba6162b6aafe9a830ba4bfd2c49cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:8e:af:15:4e:2d:4b:d9:85:a2:d5:27:af: 5e:32:bd:d4:de:61:4c:7b:0b:d9:8e:4c:04:47:30: 69:de:00:e1:92:cf:b3:e5:4d:15:f3:6d:1e:c3:bf: 42:5a:64:c0:a0:af:6d:d2:89:98:70:8a:ca:50:1f: 13:63:63:48:99:b8:29:64:9c:88:52:11:7c:29:6b: a4:2e:a5:0d:f2:70:22:8b:a5:6a:b1:07:63:fe:a3: 42:77:61:c9:69:20:23:75:6e:c9:51:15:b1:2f:73: 72:6f:65:84:42:b4:50:56:f0:66:b6:c3:a7:09:4f: 63:f0:d4:88:98:1d:65:c6:22:5a:e4:21:47:9f:a2: 4e:7d:6d:88:5f:a4:35:b1:da:66:ee:8a:fd:03:be: 89:2c:d9:f7:90:30:fa:a7:70:2b:d0:df:8f:99:64: 20:bf:82:82:a0:d4:f1:7e:fe:e3:9f:13:6c:ea:47: 20:d1:c6:24:fc:e9:c0:80:0e:e1:8a:10:8d:0b:80: a9:ea:02:28:4a:aa:b2:ea:09:1e:3f:de:cc:ea:db: 25:11:03:47:d0:09:b0:f5:12:03:6a:39:2f:93:83: f5:21:8f:7a:3b:ac:90:d9:7e:68:76:b2:8c:d7:c9: 58:67:53:73:58:ed:21:97:82:bc:e1:ba:22:22:2f: 7b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C1:DD:C8:4D:4B:A6:16:2B:6A:AF:E9:A8:30:BA:4B:FD:2C:49:CB X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:1e:0c:24:11:48:8e:12:d5:83:74:ea:5b:11:96:db:d8:cf: 11:7d:5d:f8:6e:91:d4:88:cd:b2:a0:42:a3:f1:db:f2:c6:2c: ab:25:15:a0:56:29:c2:37:92:d7:a3:ec:a7:34:f5:85:c5:da: aa:8a:74:fd:ec:1c:3f:bb:10:75:42:cb:92:a0:69:e5:59:1a: e4:75:48:cc:fa:d5:5f:35:3e:9c:6a:f4:fb:33:8e:05:d3:87: 94:69:b9:6f:34:4b:71:2d:c4:db:ab:18:87:ee:c0:a6:ce:5a: 17:1b:6e:d7:a5:c5:15:ca:de:e7:5a:dc:13:f4:d7:99:96:62: 2f:69:12:28:b9:2b:d7:fc:79:16:3e:69:b5:df:23:e8:58:81: 05:8e:f0:ab:72:25:cb:d1:10:cc:34:da:f4:5e:a3:40:2b:29: af:50:83:87:d0:c1:de:b9:89:49:a5:2d:3b:12:5e:eb:b2:ca: 83:ee:39:9c:ea:95:00:0c:af:00:29:bd:4b:eb:05:24:79:d9: fc:b7:b7:0f:38:72:e7:67:d8:7b:97:a3:1a:ec:06:78:45:17: e4:97:a7:6b:cf:34:63:4c:16:15:2d:64:00:c6:29:19:06:74: 01:65:29:10:64:65:09:a6:e9:cb:76:81:ae:b7:b9:53:1a:a6: 73:7a:ed:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63oJ+m/dwR+sbrXBg9fHKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwNjExMTcwMDE3WhcNMjYwNjEyMTcwMDE3WjAzMTEwLwYDVQQD EygwZGMxZGRjODRkNGJhNjE2MmI2YWFmZTlhODMwYmE0YmZkMmM0OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0COrxVOLUvZhaLVJ69eMr3U3mFM ewvZjkwERzBp3gDhks+z5U0V820ew79CWmTAoK9t0omYcIrKUB8TY2NImbgpZJyI UhF8KWukLqUN8nAii6VqsQdj/qNCd2HJaSAjdW7JURWxL3Nyb2WEQrRQVvBmtsOn CU9j8NSImB1lxiJa5CFHn6JOfW2IX6Q1sdpm7or9A76JLNn3kDD6p3Ar0N+PmWQg v4KCoNTxfv7jnxNs6kcg0cYk/OnAgA7hihCNC4Cp6gIoSqqy6gkeP97M6tslEQNH 0Amw9RIDajkvk4P1IY96O6yQ2X5odrKM18lYZ1NzWO0hl4K84boiIi97dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3B3chNS6YWK2qv6agwukv9LEnLMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxx4MJBFI jhLVg3TqWxGW29jPEX1d+G6R1IjNsqBCo/Hb8sYsqyUVoFYpwjeS16PspzT1hcXa qop0/ewcP7sQdULLkqBp5Vka5HVIzPrVXzU+nGr0+zOOBdOHlGm5bzRLcS3E26sY h+7Aps5aFxtu16XFFcre51rcE/TXmZZiL2kSKLkr1/x5Fj5ptd8j6FiBBY7wq3Il y9EQzDTa9F6jQCspr1CDh9DB3rmJSaUtOxJe67LKg+45nOqVAAyvACm9S+sFJHnZ /Le3Dzhy52fYe5ejGuwGeEUX5Jena880Y0wWFS1kAMYpGQZ0AWUpEGRlCabpy3aB rre5Uxqmc3rt8w== -----END CERTIFICATE-----Generated at Thu Jun 11 19:03:37 2026 by rpki-client