$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: AvCpO3PgBk1dvGJUj6X6NzbMi4Ba8yq67MY8mLlDDnY= Subject key identifier: C1:29:CE:E3:A5:69:15:E4:B0:F3:6A:95:1F:12:DF:5D:DD:33:AE:21 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 26C02976091F8EB1E14B85958F094CAB8AD29BE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 05A7 Signing time: Wed 04 Nov 2026 16:34:03 +0000 Manifest this update: Wed 04 Nov 2026 16:29:03 +0000 Manifest next update: Thu 05 Nov 2026 19:20:03 +0000 Files and hashes: 1: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: CTftoPGHrXXBqNwBsk+JB6aMh5FTruF9zBOslkFrnvc=) 2: 3135392e3235332e352e302f32342d3234203d3e203134323933.roa (hash: cEWWq+vWvz0QGTuKyKpL/mU+zo1QSPHamrvnYlsxURw=) 3: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) 4: 3135392e3235332e352e302f32342d3234203d3e20313336383039.roa (hash: PGSNBJZSgEZXHxWLsVpaBOMQuMv7Jf7lmre9ZMG017M=) 5: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) 6: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 7: 3138352e31332e3232372e302f32342d3234203d3e20323138393131.roa (hash: Slf2vGqQS/62E7ptDEE0+E4kft71NUs7UJMlpNExNI4=) 8: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: bEgh3OCsVAt5ckK3e7+Q/GmLXkOh873pSPK9+D6Bg4g=) 9: 3135392e3235332e302e302f32342d3234203d3e2039343537.roa (hash: gjVWVk+MK0eisl29bicQKjCUAPKT72ROxrCE52HBEH4=) 10: 3138352e31332e3232372e302f32342d3234203d3e20323139303735.roa (hash: rZHA0UZyNZ5R7uvhzS0F/m2O4iaZav8bzKzxSw+K3e8=) 11: 3135392e3235332e332e302f32342d3234203d3e203330303838.roa (hash: m/WsgDnKudN9OxxS5uP/FnsHB6L05+9JXXKTrSkVWmA=) 12: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: JAh58OXONEmj8JLi4Nsgc9Q+GB0Aas/V+4il71ESNj4=) 13: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: CaXDOGgIurdmCZYqYQc0f2EZuaYMUeplqTDJnpRc1ZI=) 14: 3135392e3235332e322e302f32342d3234203d3e20343032383636.roa (hash: FYyVU5mdl4sjOfIkCO8pv8zlNu2zpGJkuedMD+pdfZk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 19:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c0:29:76:09:1f:8e:b1:e1:4b:85:95:8f:09:4c:ab:8a:d2:9b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Nov 4 16:29:03 2026 GMT Not After : Nov 5 19:20:03 2026 GMT Subject: CN=C129CEE3A56915E4B0F36A951F12DF5DDD33AE21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:b7:6e:51:83:12:25:7d:18:e6:8a:96:b0: 1d:44:23:1b:db:89:02:11:46:ef:31:e2:b3:b2:97: 26:17:50:50:6a:b3:5b:f1:b5:16:21:6e:48:f9:14: b1:ee:c5:9b:1b:3a:8b:c0:3e:b7:c2:ce:1f:6c:f9: 29:70:a3:4a:45:69:9c:57:bc:e4:d0:11:fd:bc:1d: c9:c5:f1:52:df:67:8c:cc:67:ee:e9:0f:55:9a:8f: 30:a8:24:18:db:82:7f:da:9c:8a:22:c4:65:df:c9: 49:21:87:10:75:37:39:54:2a:13:56:3a:26:4a:65: 70:3b:28:b6:b9:78:93:81:d9:38:4b:e0:2d:21:95: 01:b0:c6:02:94:12:d6:94:38:15:7f:57:d8:bc:af: 6a:45:42:f3:23:ea:a6:fc:bd:1e:c7:7f:36:19:dd: 94:67:0a:b4:0a:98:25:c3:02:97:4e:17:7b:91:4c: 44:44:83:33:dc:f0:23:d2:dd:fd:51:03:49:2d:ea: ab:da:ed:06:0e:76:db:97:17:13:89:1a:86:64:fb: 2a:ca:9a:4c:6b:5f:5e:00:a3:e7:63:bf:04:0a:d3: fa:4a:b0:b2:30:96:b1:9a:ca:09:40:01:19:70:a1: d8:b4:4b:2e:f8:7d:3e:8f:70:f2:5c:41:70:42:78: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:29:CE:E3:A5:69:15:E4:B0:F3:6A:95:1F:12:DF:5D:DD:33:AE:21 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:37:62:c8:3a:ca:53:37:d3:e1:31:5a:f6:0a:fa:cb:94:fa: 39:d2:69:4e:7a:45:9e:a4:03:3a:ab:55:e6:d3:fa:6e:63:cd: 8c:2c:e4:9c:0b:61:60:eb:17:47:4e:9a:81:44:dc:67:00:99: ba:30:db:2f:0c:2f:2b:f5:29:2a:00:31:c5:5c:98:88:18:c9: cb:b9:7a:6f:7b:e0:0b:94:71:9e:c7:20:fd:c8:03:2c:f0:b5: 26:db:ba:a0:f5:ec:5d:b6:cb:ac:72:76:c3:92:19:66:bc:dd: a5:7e:02:3a:71:fd:1a:53:ac:23:1d:e1:d8:23:22:32:1c:6a: 71:be:b3:3b:99:ff:6d:24:58:7a:76:41:d8:ff:62:99:2c:88: b5:1d:30:f6:c3:da:c3:96:b6:79:f1:20:58:91:e3:8f:a4:40: 71:3f:ba:66:27:ef:06:40:7f:a1:b8:43:9f:5a:4d:24:46:cc: 05:37:ff:fe:3b:dd:f1:b1:73:c6:2e:39:92:d1:22:d3:cd:f2: 9a:ae:b9:b5:63:90:8b:3c:6f:6f:d1:70:e9:e2:0e:9c:5e:6d: ce:e9:37:38:76:4e:a1:86:60:34:aa:70:83:09:2b:33:af:25: cc:07:ad:96:eb:3c:74:fa:b5:2f:34:14:f3:24:b8:97:d2:d0: a0:ff:a6:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJsApdgkfjrHhS4WVjwlMq4rSm+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjExMDQxNjI5MDNaFw0yNjExMDUxOTIwMDNaMDMxMTAvBgNV BAMTKEMxMjlDRUUzQTU2OTE1RTRCMEYzNkE5NTFGMTJERjVEREQzM0FFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxLduUYMSJX0Y5oqWsB1EIxvb iQIRRu8x4rOylyYXUFBqs1vxtRYhbkj5FLHuxZsbOovAPrfCzh9s+Slwo0pFaZxX vOTQEf28HcnF8VLfZ4zMZ+7pD1WajzCoJBjbgn/anIoixGXfyUkhhxB1NzlUKhNW OiZKZXA7KLa5eJOB2ThL4C0hlQGwxgKUEtaUOBV/V9i8r2pFQvMj6qb8vR7HfzYZ 3ZRnCrQKmCXDApdOF3uRTEREgzPc8CPS3f1RA0kt6qva7QYOdtuXFxOJGoZk+yrK mkxrX14Ao+djvwQK0/pKsLIwlrGayglAARlwodi0Sy74fT6PcPJcQXBCeIarAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwSnO46VpFeSw82qVHxLfXd0zriEwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTdiyDrKUzfT4TFa9gr6 y5T6OdJpTnpFnqQDOqtV5tP6bmPNjCzknAthYOsXR06agUTcZwCZujDbLwwvK/Up KgAxxVyYiBjJy7l6b3vgC5Rxnscg/cgDLPC1Jtu6oPXsXbbLrHJ2w5IZZrzdpX4C OnH9GlOsIx3h2CMiMhxqcb6zO5n/bSRYenZB2P9imSyItR0w9sPaw5a2efEgWJHj j6RAcT+6ZifvBkB/obhDn1pNJEbMBTf//jvd8bFzxi45ktEi083ymq65tWOQizxv b9Fw6eIOnF5tzuk3OHZOoYZgNKpwgwkrM68lzAetlus8dPq1LzQU8yS4l9LQoP+m YQ== -----END CERTIFICATE-----Generated at Thu Nov 5 12:54:22 2026 by rpki-client