$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: bcaa4/MOP1fOh7xiUO2P6JzdwSveQbvcw8C1eG3WdNk= Subject key identifier: C5:91:18:21:E0:7A:44:7E:03:3E:98:CC:A2:BA:F5:AD:D1:00:07:B9 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 01A1AAF3C19B97AADCBFCA30C3A45084D195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 1B0E Signing time: Thu 05 Nov 2026 09:04:23 +0000 Manifest this update: Thu 05 Nov 2026 09:04:23 +0000 Manifest next update: Fri 06 Nov 2026 09:04:23 +0000 Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: CRVCO4Y18wBhpwWqblGC0JVIPzI/1N6xTEl/SDhDaNA=) 2: 6EpyLVj4Qz0gntguPl9ColFPreA.roa (hash: 0etMDynqyb3b8HO0zgxVIgPZsSOnYJvhlRcvSSVawFI=) 3: 6tTmYQwXOKfIx8EFjvxOkACOgVE.asa (hash: B+RAPGXA/BvL3QEc86FbnID2OOj7wYJWGGhX0NgqKgw=) 4: H6apiE0r9rOHvwzUANUDplSJSTM.roa (hash: cqjpgcUWiCJ8i4KpFtLhuI6KYkP0u+mdUggey1II1u8=) 5: HO--5wVYjTks1d4pGuEUndfhIc8.roa (hash: PSZ01mmnd3IXqRjRDT7Afa21Y0Y9+VVQ6A0uP0yE5t4=) 6: MW9IWiMaMbGWFIKAeGiIeFNoSuk.roa (hash: WXFlau1tw1wJE2NKxIsomrLjPJJN929dyuhMW8ngWzA=) 7: MdU1TDg6gPzzC5Jls0YI4g9dlJY.roa (hash: j2NCQtDtoHkREqMeNzVs0PKFMT/ogTJaPYMRxR3JZtM=) 8: ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa (hash: uDFD5MRDq12e9FrZ9TcR4muF3bF0UyIZh3ZvvCBU2ko=) 9: dD53sJzzVQFTaAvueszbsFDLUTw.roa (hash: wIIr9cffPwMDI4diSS8ekiKkSszKnatKJvPAiutfvTc=) 10: iEeEp42GZdk24J_XhsWfZczs8bI.roa (hash: Es9r36V7+YULS9141hzfnZoXbLZeW7YOudDWcJDuqPo=) 11: iFaMxfToISMhuIOtnklJbKH8sU0.roa (hash: kU5eLBTCsLrlHtahyO4pMWGlPVbZxhPgtGU2m2KhHJU=) 12: kivoHyrrTapcSTu_dcsRevtd1qU.roa (hash: vlUy1Pp06OgEmxAK5wPWEB8oYerqdlsGZx57sDlsb/I=) 13: knMCjsMKq8boFlcM4TD-NB1mee0.roa (hash: 5pXrohpLzHpy5wR5NL0Pk7xascagMMWfyt+Jyy021+I=) 14: nBm950xJAm9pONVZhHt0wVFEq7Y.roa (hash: ZyCH9JBRPWP0WR4LL51Jbb1msIvVHDWA7bezxMkIVWY=) 15: orZjZ-bLi4QKzxMYS8aOyD5DwHw.roa (hash: j0NxewdNRbQ+iT6xBmN+n5xKVYa/xRMyvSC57UkHgro=) 16: vFf6cf3-aSJZQbIqqQrYLQu8950.roa (hash: ycU4CA6KP6+Q2Qpldtht/iZ17Oc96//Hv0CwFxV0duk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:aa:f3:c1:9b:97:aa:dc:bf:ca:30:c3:a4:50:84:d1:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Nov 5 09:04:23 2026 GMT Not After : Nov 6 09:04:23 2026 GMT Subject: CN=c5911821e07a447e033e98cca2baf5add10007b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:90:23:6f:78:c4:7e:fb:88:12:d6:9d:68:69: b8:e1:81:bb:d4:b1:61:0b:d8:c1:ed:49:ac:79:5b: 02:27:62:ca:5a:ff:dc:6b:72:f5:bd:a7:a7:1d:b5: de:64:c2:48:39:e9:2b:2f:07:3c:fe:79:cd:5b:4f: d2:a9:1f:8c:34:94:23:dc:a2:3b:27:2a:2d:e4:e7: 78:7c:2a:c3:7f:62:03:ee:ad:b8:72:c9:2b:bd:8e: 03:e8:a9:cb:c2:98:0d:26:50:1a:02:b1:26:49:64: 2e:cb:f0:1c:9c:fb:19:a2:5a:6e:ad:bb:55:53:7b: fd:43:af:0b:91:d0:4b:92:04:c4:2b:89:e2:8d:2a: cf:69:db:3f:ba:d3:da:12:d8:64:a5:2b:e6:5a:21: 1b:dc:4a:f3:76:91:22:8a:02:06:0b:f5:78:1a:ab: d8:de:76:cc:1f:5e:7a:52:70:ce:c2:2c:3e:1c:b9: 43:d7:49:84:a5:9f:a3:ef:6d:dd:a2:a9:5f:66:b3: b8:59:fb:8c:6a:6a:d5:77:53:7a:55:87:d0:a5:c6: ef:b3:65:46:0d:32:94:39:c4:f2:61:07:05:c1:bf: 2e:24:bc:43:8a:d1:4f:a6:f3:b9:37:41:08:aa:cc: 22:48:d5:d2:4c:d4:83:31:ba:33:14:46:22:1c:8f: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:91:18:21:E0:7A:44:7E:03:3E:98:CC:A2:BA:F5:AD:D1:00:07:B9 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9d:16:21:82:1c:e7:82:b3:8d:73:92:4a:dc:7b:ae:b8:8f: 3a:ef:fd:d0:c7:a2:3f:2b:7b:95:45:ee:29:0a:dc:41:78:62: da:e3:9f:9d:d6:f1:2e:3d:b3:11:cb:12:6a:49:ab:06:b1:50: 02:92:9f:20:8a:bd:a1:79:81:50:ab:b1:d0:55:bf:71:84:e3: ca:41:77:a9:50:80:72:bd:18:22:07:f9:ab:f2:e1:23:bf:58: ea:1f:2f:44:94:fc:28:17:be:8a:a8:81:33:20:3c:18:55:0d: 34:1c:ac:61:2c:18:94:fc:2f:8c:3a:5f:06:36:e5:74:bb:5b: 53:e2:64:12:51:49:71:9b:7b:c0:5c:ee:0b:61:f3:ff:85:57: 03:9a:bc:c1:54:94:8e:96:b9:82:8f:80:ac:5e:c4:3c:8e:66: 1e:88:45:b0:e9:c7:40:ab:9d:fb:98:4d:4a:7e:8d:e8:44:33: 52:74:e0:9d:be:56:c4:67:98:35:0b:ec:4e:b6:cf:83:74:21: 95:a9:9c:a7:56:1f:ee:89:3d:20:35:75:55:79:b9:3a:4a:d1: 71:25:88:e7:ca:ae:e5:56:f0:4c:a0:2d:3c:a7:4d:a5:de:5e: 74:ab:54:77:70:6f:f9:11:76:60:90:6d:c2:b5:a1:e1:bf:ce: 96:9f:48:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGq88Gbl6rcv8oww6RQhNGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjYxMTA1MDkwNDIzWhcNMjYxMTA2MDkwNDIzWjAzMTEwLwYDVQQD EyhjNTkxMTgyMWUwN2E0NDdlMDMzZTk4Y2NhMmJhZjVhZGQxMDAwN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpAjb3jEfvuIEtadaGm44YG71LFh C9jB7UmseVsCJ2LKWv/ca3L1vaenHbXeZMJIOekrLwc8/nnNW0/SqR+MNJQj3KI7 Jyot5Od4fCrDf2ID7q24cskrvY4D6KnLwpgNJlAaArEmSWQuy/AcnPsZolpurbtV U3v9Q68LkdBLkgTEK4nijSrPads/utPaEthkpSvmWiEb3ErzdpEiigIGC/V4GqvY 3nbMH156UnDOwiw+HLlD10mEpZ+j723doqlfZrO4WfuMamrVd1N6VYfQpcbvs2VG DTKUOcTyYQcFwb8uJLxDitFPpvO5N0EIqswiSNXSTNSDMbozFEYiHI9ScQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWRGCHgekR+Az6YzKK69a3RAAe5MB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR50WIYIc 54KzjXOSStx7rriPOu/90MeiPyt7lUXuKQrcQXhi2uOfndbxLj2zEcsSakmrBrFQ ApKfIIq9oXmBUKux0FW/cYTjykF3qVCAcr0YIgf5q/LhI79Y6h8vRJT8KBe+iqiB MyA8GFUNNBysYSwYlPwvjDpfBjbldLtbU+JkElFJcZt7wFzuC2Hz/4VXA5q8wVSU jpa5go+ArF7EPI5mHohFsOnHQKud+5hNSn6N6EQzUnTgnb5WxGeYNQvsTrbPg3Qh lamcp1Yf7ok9IDV1VXm5OkrRcSWI58qu5VbwTKAtPKdNpd5edKtUd3Bv+RF2YJBt wrWh4b/Olp9IAA== -----END CERTIFICATE-----Generated at Thu Nov 5 17:31:22 2026 by rpki-client