$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: yWbheGdx+7D/I2CisUdiu5zKOlqSQxmc3jQ5WXK2IjA= Subject key identifier: 55:C2:24:4C:0E:98:99:5C:B6:EB:3C:50:27:F3:1B:D4:26:93:C2:F2 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 01A134B58B23C113B856C19DEE48344C3178 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 028D Signing time: Tue 13 Oct 2026 10:01:15 +0000 Manifest this update: Tue 13 Oct 2026 10:01:15 +0000 Manifest next update: Wed 14 Oct 2026 10:01:15 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: /CVNSK6eS7H8bbA1oPYVyzlSwLMAuKwWFwj87IHs84E=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:34:b5:8b:23:c1:13:b8:56:c1:9d:ee:48:34:4c:31:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Oct 13 10:01:15 2026 GMT Not After : Oct 14 10:01:15 2026 GMT Subject: CN=55c2244c0e98995cb6eb3c5027f31bd42693c2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:bb:08:30:f6:bf:51:29:73:8e:53:59:26: d7:95:a1:b7:00:c9:68:cd:b9:7f:b0:e7:7b:4f:2c: 5f:b5:02:4b:cc:a6:06:16:fe:fe:b1:8a:a2:c3:ab: df:ce:7f:41:03:a8:5c:cd:4b:62:35:81:2b:94:9d: b9:11:43:55:da:8a:33:11:11:08:b3:50:f0:ac:0d: 9b:9a:3b:98:6b:4f:6d:74:fb:95:8c:9b:2c:e7:fd: 3d:10:df:4c:95:95:eb:38:40:03:79:43:e1:fe:6e: 8d:2d:b5:50:f3:46:f6:4f:d0:52:dd:83:d9:45:cf: b8:d5:5c:65:42:20:ee:16:3a:ba:cc:29:eb:cc:40: 8c:5c:49:66:dc:08:3e:3e:36:73:43:4e:5b:03:da: f6:a0:4f:a1:be:8f:a6:d8:23:a1:30:42:ec:f3:a4: 72:c7:ff:7d:ac:f1:ca:fa:b5:2f:25:fd:a7:34:a2: e7:09:4b:f8:63:9c:95:fe:bc:30:a1:87:e0:54:e2: b9:4b:00:26:ba:d9:c6:7f:5c:9a:4c:91:4f:88:02: 1a:b0:44:bb:73:47:af:8d:87:2b:ac:af:e4:65:8a: 4a:46:75:59:65:dd:87:6a:9c:9a:e0:a7:19:98:10: 8d:ec:72:7b:7c:64:8d:21:9c:02:0c:15:27:d5:6f: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C2:24:4C:0E:98:99:5C:B6:EB:3C:50:27:F3:1B:D4:26:93:C2:F2 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5a:ed:94:c6:af:53:93:d7:03:e0:a1:0d:f3:92:48:da:85: 83:6d:27:cd:1a:27:72:89:90:f7:02:c8:20:8d:9f:40:7d:3f: 29:0a:0d:ad:77:22:3e:c4:47:0e:b3:3a:24:69:1b:cd:fa:b4: d2:a9:58:c6:3e:6c:83:0f:77:c2:6b:4a:cf:0b:ab:49:aa:22: 4f:c6:d7:6f:2e:fb:1b:4c:3a:7d:1f:56:85:6d:ba:c5:f3:6c: c5:00:b7:90:8a:e4:9b:8b:00:91:93:a9:f1:8e:37:61:2f:6b: 70:17:3b:31:f1:4b:2a:25:47:90:dd:bb:99:46:f2:99:6b:3f: a3:c8:c1:1b:2c:76:3b:25:18:8e:c5:f9:4d:78:5e:dc:56:44: 9a:28:06:ac:8d:6f:e3:1d:77:88:74:c9:e7:8e:50:8d:64:75: 5a:52:f7:18:09:62:1a:87:32:f6:70:58:1c:aa:ec:b1:2c:41: 1d:81:7e:fe:eb:1c:b0:41:1b:93:05:13:a3:0f:b3:71:fe:09: 17:47:28:6b:02:d1:75:64:ff:20:90:66:29:4e:a7:4f:32:e0: 5c:45:76:c4:cc:44:95:a3:de:44:2a:e5:85:2f:c9:b2:eb:27: 7d:f6:67:bf:b5:b1:41:f5:48:63:ac:d5:c9:4c:c1:10:b2:ba: 8e:87:8a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE0tYsjwRO4VsGd7kg0TDF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYxMDEzMTAwMTE1WhcNMjYxMDE0MTAwMTE1WjAzMTEwLwYDVQQD Eyg1NWMyMjQ0YzBlOTg5OTVjYjZlYjNjNTAyN2YzMWJkNDI2OTNjMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUK7CDD2v1Epc45TWSbXlaG3AMlo zbl/sOd7TyxftQJLzKYGFv7+sYqiw6vfzn9BA6hczUtiNYErlJ25EUNV2oozEREI s1DwrA2bmjuYa09tdPuVjJss5/09EN9MlZXrOEADeUPh/m6NLbVQ80b2T9BS3YPZ Rc+41VxlQiDuFjq6zCnrzECMXElm3Ag+PjZzQ05bA9r2oE+hvo+m2COhMELs86Ry x/99rPHK+rUvJf2nNKLnCUv4Y5yV/rwwoYfgVOK5SwAmutnGf1yaTJFPiAIasES7 c0evjYcrrK/kZYpKRnVZZd2Hapya4KcZmBCN7HJ7fGSNIZwCDBUn1W/sOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXCJEwOmJlctus8UCfzG9Qmk8LyMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlrtlMav U5PXA+ChDfOSSNqFg20nzRoncomQ9wLIII2fQH0/KQoNrXciPsRHDrM6JGkbzfq0 0qlYxj5sgw93wmtKzwurSaoiT8bXby77G0w6fR9WhW26xfNsxQC3kIrkm4sAkZOp 8Y43YS9rcBc7MfFLKiVHkN27mUbymWs/o8jBGyx2OyUYjsX5TXhe3FZEmigGrI1v 4x13iHTJ545QjWR1WlL3GAliGocy9nBYHKrssSxBHYF+/uscsEEbkwUTow+zcf4J F0coawLRdWT/IJBmKU6nTzLgXEV2xMxElaPeRCrlhS/JsusnffZnv7WxQfVIY6zV yUzBELK6joeK7g== -----END CERTIFICATE-----Generated at Tue Oct 13 19:25:45 2026 by rpki-client