$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: EUfqSCer030e3n7EcKwfr3AbL25xkAplVisXZ4WW0Xc= Subject key identifier: 6A:39:E3:97:45:98:B3:4B:DF:73:69:5A:A3:E4:C0:08:7E:4F:51:99 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019FF6EC0F36428B5A5E24E3E00BBE81E440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 1A18 Signing time: Wed 12 Aug 2026 17:01:32 +0000 Manifest this update: Wed 12 Aug 2026 17:01:32 +0000 Manifest next update: Thu 13 Aug 2026 17:01:32 +0000 Files and hashes: 1: 20sKUViZ_Hjr1_tKwt6E16rEi4A.asa (hash: +8vZKz+2gviXypf2joFi3QZPabFG5GEATLlv5LqXS4o=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: QOv9AtzM59S_WNU7KUIEWRfJl68.asa (hash: 6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=) 5: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=) 6: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 7: e5VirbuAOkg1PBFK0M3mtZcI84w.asa (hash: EqbpkcZPOaxJPSydnA3m+kgJNXbf/c0LEhfWDvh4rJY=) 8: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=) 9: hYI8_W7KbcINcD3rIBl0TxlFsr0.asa (hash: ul9ROLDfaYD/lTgozmnX7AY2tTIU1gHVBphVJS56cV4=) 10: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 11: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: FBL/WJfpe8dzTuTlrXbdcFcbOL7GTCZI8qIFPPakGdU=) 12: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) 13: yPa1ORKwdYO21oPHsCqaSGK2ss8.asa (hash: rF3Bv82DUAK46dZh7JdvizZgf5EoczF43qjQleVqEKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 16:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f6:ec:0f:36:42:8b:5a:5e:24:e3:e0:0b:be:81:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Aug 12 17:01:32 2026 GMT Not After : Aug 13 17:01:32 2026 GMT Subject: CN=6a39e3974598b34bdf73695aa3e4c0087e4f5199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:8d:7b:6b:6d:31:49:84:95:40:c0:4b:3d: f8:b3:d6:53:06:c4:d3:35:fb:1c:15:a1:fd:24:ce: 31:41:e5:e3:1d:39:65:6a:29:98:4d:d7:db:0f:8f: 52:70:c9:c2:9b:2f:54:c3:fe:d9:c0:42:86:7b:f9: 74:9b:e3:44:51:3f:74:ad:a5:51:46:3c:e4:40:65: 9d:36:1d:3f:34:a4:8f:5e:8a:19:55:77:b3:8f:b0: 0f:11:5c:08:5c:df:8c:f7:ae:fb:f6:f8:71:b6:c3: 1f:9e:05:3e:07:43:ce:31:51:92:bb:5f:93:52:3a: 02:05:07:a1:eb:d5:ca:ce:78:de:82:94:aa:47:53: 90:23:32:d2:77:ad:78:35:d4:1c:11:d7:f2:af:fb: c9:ee:99:11:ec:9e:5a:bc:5e:0f:19:df:36:35:56: d7:f3:6d:04:b4:87:4d:13:4a:e4:9d:94:98:e9:9f: c4:43:79:3a:c3:69:71:b5:00:b6:9f:28:06:4a:29: 72:fd:23:26:8b:bd:2c:64:7b:e9:06:b8:f9:29:66: 23:9c:ff:60:96:85:0f:d9:de:be:43:0d:86:8a:8d: a0:15:44:70:71:45:99:f4:70:3f:e6:6f:58:0d:46: 79:70:89:a6:29:7f:c8:e4:3b:e6:df:04:9f:71:1e: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:39:E3:97:45:98:B3:4B:DF:73:69:5A:A3:E4:C0:08:7E:4F:51:99 X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b4:2a:37:2e:03:e1:c7:ff:ec:a1:e3:a8:e6:20:4b:db:09: e9:91:91:d3:8f:d8:cb:db:41:ff:9b:40:30:64:2e:55:ff:55: 3c:c0:35:89:bf:50:db:8b:d1:78:47:13:55:49:9e:05:5a:6e: 33:1f:0a:f6:da:c3:6c:3d:ef:42:6d:0d:35:da:52:f5:45:fb: 1f:23:62:17:94:d4:f7:ed:5d:71:92:dc:e3:31:6a:15:25:b8: e7:1d:39:eb:15:66:e5:3f:bc:73:4b:5a:69:35:b9:3d:1e:b5: 36:20:7d:fa:83:47:06:91:23:c4:8e:97:25:74:d8:c7:1b:51: 97:c7:00:47:22:7e:6c:98:47:3e:87:90:31:bf:5a:8a:c4:54: 60:b1:91:23:0f:91:1a:37:e4:c5:ff:69:eb:f5:83:1e:2b:e4: 9b:a3:b0:10:f6:1a:96:a6:14:e8:ae:f4:85:7c:82:b2:5e:1e: 62:e6:ee:3d:26:00:ce:12:fb:22:f0:10:73:ff:a5:fa:b9:3b: 71:dd:6f:18:35:b0:d8:f3:55:d5:72:b8:b4:a7:2a:16:a9:41: d8:f3:8d:ed:60:64:39:b8:46:2a:7e:15:f9:02:4d:0b:22:7d: 00:db:0e:dc:8c:e6:8c:61:3f:a9:9d:65:12:6b:49:ed:76:65: 78:21:04:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/27A82QotaXiTj4Au+geRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwODEyMTcwMTMyWhcNMjYwODEzMTcwMTMyWjAzMTEwLwYDVQQD Eyg2YTM5ZTM5NzQ1OThiMzRiZGY3MzY5NWFhM2U0YzAwODdlNGY1MTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkyNe2ttMUmElUDASz34s9ZTBsTT NfscFaH9JM4xQeXjHTllaimYTdfbD49ScMnCmy9Uw/7ZwEKGe/l0m+NEUT90raVR RjzkQGWdNh0/NKSPXooZVXezj7APEVwIXN+M96779vhxtsMfngU+B0POMVGSu1+T UjoCBQeh69XKznjegpSqR1OQIzLSd614NdQcEdfyr/vJ7pkR7J5avF4PGd82NVbX 820EtIdNE0rknZSY6Z/EQ3k6w2lxtQC2nygGSily/SMmi70sZHvpBrj5KWYjnP9g loUP2d6+Qw2Gio2gFURwcUWZ9HA/5m9YDUZ5cImmKX/I5Dvm3wSfcR6B0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGo545dFmLNL33NpWqPkwAh+T1GZMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7QqNy4D 4cf/7KHjqOYgS9sJ6ZGR04/Yy9tB/5tAMGQuVf9VPMA1ib9Q24vReEcTVUmeBVpu Mx8K9trDbD3vQm0NNdpS9UX7HyNiF5TU9+1dcZLc4zFqFSW45x056xVm5T+8c0ta aTW5PR61NiB9+oNHBpEjxI6XJXTYxxtRl8cARyJ+bJhHPoeQMb9aisRUYLGRIw+R Gjfkxf9p6/WDHivkm6OwEPYalqYU6K70hXyCsl4eYubuPSYAzhL7IvAQc/+l+rk7 cd1vGDWw2PNV1XK4tKcqFqlB2PON7WBkObhGKn4V+QJNCyJ9ANsO3IzmjGE/qZ1l EmtJ7XZleCEEbg== -----END CERTIFICATE-----Generated at Wed Aug 12 20:35:56 2026 by rpki-client