$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: BnMCtsKXSjlq6a+r2tJ1ipwFFUXmShE8+InZ3rP4voM= Subject key identifier: 6F:54:1E:B8:3C:AB:8B:83:43:E2:B9:16:6E:B6:CD:0B:47:25:52:1C Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019DDD681507F7D5B629D30C8CD764A39A23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 18F7 Signing time: Thu 30 Apr 2026 08:01:18 +0000 Manifest this update: Thu 30 Apr 2026 08:01:18 +0000 Manifest next update: Fri 01 May 2026 08:01:18 +0000 Files and hashes: 1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=) 5: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 6: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=) 7: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 8: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: OIO2PrqI1zyE7L74bvzZSBoHir1J5d/59rFdwH/QrDQ=) 9: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=) 10: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=) 11: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:dd:68:15:07:f7:d5:b6:29:d3:0c:8c:d7:64:a3:9a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Apr 30 08:01:18 2026 GMT Not After : May 1 08:01:18 2026 GMT Subject: CN=6f541eb83cab8b8343e2b9166eb6cd0b4725521c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3e:47:6c:32:fa:d2:2f:49:11:fe:c4:e4:6e: 2b:3c:33:7a:11:8b:91:4f:ff:84:70:5e:3e:5e:6d: 41:5b:f7:74:5b:eb:f5:c9:8c:94:74:a2:4f:7e:30: f7:80:c3:6f:0a:c4:26:64:be:c1:c3:fc:5b:81:16: f4:22:e5:ab:f9:f4:32:be:49:30:12:4d:6f:5b:bb: fe:30:bb:ee:25:6b:ce:e8:f2:6f:43:05:11:10:d6: b8:f9:b7:7c:85:8e:ba:7c:fe:7c:e6:a1:b0:fa:fd: 98:50:f1:c4:3a:95:ef:06:d3:bd:74:d2:83:63:4a: 97:7b:75:a5:6d:cb:6b:0b:b7:20:47:a1:7d:2b:ce: 7d:37:29:75:a3:40:82:4d:47:6e:73:b9:a0:4c:e7: b4:cf:8b:58:74:fb:4e:3a:ec:de:7f:f1:c3:b7:6d: 63:b7:cd:c9:ff:fe:f1:d7:ce:48:8e:91:88:e4:0e: cf:a2:8e:db:88:dd:0f:ba:1f:c1:13:79:eb:e7:41: 1a:18:40:8b:ae:49:94:54:19:6a:19:c1:e8:7a:57: d2:5c:8c:2a:4e:f8:dd:ab:d8:b5:f8:eb:e2:06:6d: 9c:36:27:73:ee:ff:b1:fb:f0:6f:5e:d3:40:5d:cd: c0:4a:ed:ac:1e:f4:6f:0f:31:b7:89:50:f5:b0:76: eb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:54:1E:B8:3C:AB:8B:83:43:E2:B9:16:6E:B6:CD:0B:47:25:52:1C X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8d:86:9b:b0:0e:57:ab:84:3c:74:48:4e:c5:5c:c0:16:15: 68:1e:28:69:5e:92:3b:78:a8:ab:2a:38:6f:82:61:7e:4d:17: 91:c4:2d:16:0b:95:00:b6:44:06:52:4e:85:04:b5:c4:5d:16: d0:58:b2:31:8d:2d:ba:a8:c3:07:f6:27:82:da:ce:1d:45:9a: 62:d7:81:94:33:e1:de:36:30:67:2a:72:15:30:77:bc:8f:70: cc:2d:6c:49:f1:10:23:ad:87:98:04:14:96:7f:51:45:03:7e: 2f:5d:45:c7:56:08:65:07:3b:9c:ab:44:0c:b5:34:a3:b1:29: 79:72:fc:f5:e0:e7:6c:7c:a2:51:bf:48:7d:84:41:d5:1b:4c: 38:0d:85:31:53:48:f7:05:29:50:a1:73:db:1e:33:1a:ea:c3: 1f:05:da:a0:3e:e0:62:92:7e:1b:ca:c9:07:ae:ab:b6:1a:35: 38:09:71:4c:05:52:55:10:79:e0:6e:21:53:43:70:89:82:83: 2e:1b:b1:3f:83:16:94:8e:92:13:cf:14:e4:ee:7a:07:21:73: a7:92:2b:4f:5a:6c:ad:fa:b9:cc:32:22:65:c9:0d:93:b3:c0: e0:25:03:73:81:3a:37:58:7c:b5:e1:24:ab:33:1c:b1:b1:ab: 3e:39:59:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3daBUH99W2KdMMjNdko5ojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwNDMwMDgwMTE4WhcNMjYwNTAxMDgwMTE4WjAzMTEwLwYDVQQD Eyg2ZjU0MWViODNjYWI4YjgzNDNlMmI5MTY2ZWI2Y2QwYjQ3MjU1MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz5HbDL60i9JEf7E5G4rPDN6EYuR T/+EcF4+Xm1BW/d0W+v1yYyUdKJPfjD3gMNvCsQmZL7Bw/xbgRb0IuWr+fQyvkkw Ek1vW7v+MLvuJWvO6PJvQwURENa4+bd8hY66fP585qGw+v2YUPHEOpXvBtO9dNKD Y0qXe3WlbctrC7cgR6F9K859Nyl1o0CCTUduc7mgTOe0z4tYdPtOOuzef/HDt21j t83J//7x185IjpGI5A7Poo7biN0Puh/BE3nr50EaGECLrkmUVBlqGcHoelfSXIwq Tvjdq9i1+OviBm2cNidz7v+x+/BvXtNAXc3ASu2sHvRvDzG3iVD1sHbrMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9UHrg8q4uDQ+K5Fm62zQtHJVIcMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhI2Gm7AO V6uEPHRITsVcwBYVaB4oaV6SO3ioqyo4b4Jhfk0XkcQtFguVALZEBlJOhQS1xF0W 0FiyMY0tuqjDB/YngtrOHUWaYteBlDPh3jYwZypyFTB3vI9wzC1sSfEQI62HmAQU ln9RRQN+L11Fx1YIZQc7nKtEDLU0o7EpeXL89eDnbHyiUb9IfYRB1RtMOA2FMVNI 9wUpUKFz2x4zGurDHwXaoD7gYpJ+G8rJB66rtho1OAlxTAVSVRB54G4hU0NwiYKD LhuxP4MWlI6SE88U5O56ByFzp5IrT1psrfq5zDIiZckNk7PA4CUDc4E6N1h8teEk qzMcsbGrPjlZsw== -----END CERTIFICATE-----Generated at Thu Apr 30 12:52:02 2026 by rpki-client