$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: 4UtxfEnfPbVuCH+plQh7HeYL7TXSMK+d6FM+CY/7j10= Subject key identifier: DC:2E:A3:D2:F5:EB:4E:7A:BB:C8:0B:1F:39:2C:59:AD:37:BE:55:39 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 01A12B0DBF31CA68E1E5296663B56C07B6A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 0288 Signing time: Sun 11 Oct 2026 13:01:23 +0000 Manifest this update: Sun 11 Oct 2026 13:01:23 +0000 Manifest next update: Mon 12 Oct 2026 13:01:23 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: n1NPA5t7vIjkcSKNp92+HPNRQbSv24F55nT9IQJbKjI=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2b:0d:bf:31:ca:68:e1:e5:29:66:63:b5:6c:07:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Oct 11 13:01:23 2026 GMT Not After : Oct 12 13:01:23 2026 GMT Subject: CN=dc2ea3d2f5eb4e7abbc80b1f392c59ad37be5539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:da:35:c8:ad:93:ff:38:03:8e:bb:4d:c0:43: 62:12:b3:a6:f0:36:9f:97:fd:4c:dd:4f:80:4f:ab: 09:41:df:22:1d:d0:f8:bd:99:5d:f5:57:f4:12:42: 22:86:9b:14:dd:db:23:a2:96:dc:d7:9c:4b:e9:97: 66:6c:85:08:2f:1c:b5:dc:1f:e4:30:07:4d:b8:ae: d8:65:7c:4e:9a:55:33:e8:30:3d:8f:4a:02:a3:d1: 05:10:83:54:68:71:9f:4d:e5:ae:d5:21:e5:c7:ee: d0:17:4d:3a:8e:74:ed:01:44:0b:54:2f:4a:e1:ac: cc:8a:04:4d:1b:5b:f3:65:b3:c2:1c:22:89:4e:ca: a8:3a:ae:df:da:cc:5c:4e:f2:ce:44:9b:b0:da:31: dd:56:7b:5c:4d:a5:58:58:cc:37:b1:64:cd:2e:e5: 36:a8:ad:17:12:96:d9:6b:88:47:b6:fa:24:cb:08: 16:d4:56:c0:a6:f6:55:9b:e5:df:24:90:b9:be:45: 5f:60:04:78:2b:8e:1f:65:00:9b:91:77:84:17:7d: 3f:85:2b:98:b2:21:61:a5:ea:3e:05:0d:7c:43:d7: a4:22:a4:d0:13:d5:68:0b:62:71:28:e9:c5:e5:40: 90:68:5e:24:cf:71:07:b9:b6:46:31:06:22:80:2d: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2E:A3:D2:F5:EB:4E:7A:BB:C8:0B:1F:39:2C:59:AD:37:BE:55:39 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c4:8f:d3:f8:05:c9:f9:5b:ad:85:2a:12:d7:7c:71:90:e3: 3f:2c:5c:1c:25:7c:2f:95:17:88:ea:94:2a:da:95:3c:97:ce: 7e:8f:f5:ad:39:45:18:b5:1a:e6:89:18:26:00:6e:95:4e:f0: 1e:0a:bc:b8:45:cc:37:bd:56:56:0c:36:c3:69:39:8a:0c:4d: cc:36:da:42:45:f0:ce:0e:5c:99:e0:73:77:a6:92:34:31:57: 6b:3a:6a:20:54:3c:d1:fe:64:46:2e:67:f7:88:bd:ad:6d:df: 23:ee:1f:6f:26:a3:63:6c:77:d2:e4:09:73:d4:ed:e4:84:5e: 12:a8:f4:92:a8:6b:3d:49:75:e9:b6:7f:76:9c:77:37:38:2c: cb:f9:7d:4d:fc:8d:b4:65:96:07:99:21:f0:50:40:57:ad:8e: f8:89:ea:1d:e1:41:0e:44:f9:b5:71:7d:a3:55:96:87:73:6d: 07:af:55:55:91:a7:b1:70:4f:4e:04:24:03:e6:c2:5c:d5:46: 7d:cb:76:36:96:03:06:52:dc:73:09:51:f7:8c:33:eb:47:f3: 87:fc:f2:27:cc:67:89:f8:8f:70:ff:ad:54:91:d7:4a:0e:22: 57:e4:07:1d:29:6f:0d:21:99:5c:6f:02:7d:70:8e:c9:00:0f: a0:22:07:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaErDb8xymjh5SlmY7VsB7agMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYxMDExMTMwMTIzWhcNMjYxMDEyMTMwMTIzWjAzMTEwLwYDVQQD EyhkYzJlYTNkMmY1ZWI0ZTdhYmJjODBiMWYzOTJjNTlhZDM3YmU1NTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmto1yK2T/zgDjrtNwENiErOm8Daf l/1M3U+AT6sJQd8iHdD4vZld9Vf0EkIihpsU3dsjopbc15xL6ZdmbIUILxy13B/k MAdNuK7YZXxOmlUz6DA9j0oCo9EFEINUaHGfTeWu1SHlx+7QF006jnTtAUQLVC9K 4azMigRNG1vzZbPCHCKJTsqoOq7f2sxcTvLORJuw2jHdVntcTaVYWMw3sWTNLuU2 qK0XEpbZa4hHtvokywgW1FbApvZVm+XfJJC5vkVfYAR4K44fZQCbkXeEF30/hSuY siFhpeo+BQ18Q9ekIqTQE9VoC2JxKOnF5UCQaF4kz3EHubZGMQYigC22TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwuo9L16056u8gLHzksWa03vlU5MB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsSP0/gF yflbrYUqEtd8cZDjPyxcHCV8L5UXiOqUKtqVPJfOfo/1rTlFGLUa5okYJgBulU7w Hgq8uEXMN71WVgw2w2k5igxNzDbaQkXwzg5cmeBzd6aSNDFXazpqIFQ80f5kRi5n 94i9rW3fI+4fbyajY2x30uQJc9Tt5IReEqj0kqhrPUl16bZ/dpx3Nzgsy/l9TfyN tGWWB5kh8FBAV62O+InqHeFBDkT5tXF9o1WWh3NtB69VVZGnsXBPTgQkA+bCXNVG fct2NpYDBlLccwlR94wz60fzh/zyJ8xnifiPcP+tVJHXSg4iV+QHHSlvDSGZXG8C fXCOyQAPoCIH+g== -----END CERTIFICATE-----Generated at Sun Oct 11 22:18:55 2026 by rpki-client