$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: 5D+26LuzndlbpAf9+EHekpKhJvbiJijP7u4cnUy4y8g= Subject key identifier: 71:4B:86:D2:B0:17:8E:94:4C:90:EC:93:A1:B4:25:45:44:CE:8F:1B Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019D9886B11875E12A74493392F0EA8E367E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 18EB Signing time: Thu 16 Apr 2026 23:00:57 +0000 Manifest this update: Thu 16 Apr 2026 23:00:57 +0000 Manifest next update: Fri 17 Apr 2026 23:00:57 +0000 Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: 73LdPYVU1+eZh+/jxvisd9KvpSS35p+Hg2Mqw1LaZX4=) 2: 6tTmYQwXOKfIx8EFjvxOkACOgVE.asa (hash: B+RAPGXA/BvL3QEc86FbnID2OOj7wYJWGGhX0NgqKgw=) 3: H6apiE0r9rOHvwzUANUDplSJSTM.roa (hash: cqjpgcUWiCJ8i4KpFtLhuI6KYkP0u+mdUggey1II1u8=) 4: HO--5wVYjTks1d4pGuEUndfhIc8.roa (hash: PSZ01mmnd3IXqRjRDT7Afa21Y0Y9+VVQ6A0uP0yE5t4=) 5: MW9IWiMaMbGWFIKAeGiIeFNoSuk.roa (hash: WXFlau1tw1wJE2NKxIsomrLjPJJN929dyuhMW8ngWzA=) 6: MdU1TDg6gPzzC5Jls0YI4g9dlJY.roa (hash: j2NCQtDtoHkREqMeNzVs0PKFMT/ogTJaPYMRxR3JZtM=) 7: T-DUSJ-O8JuK2PTgLk1errJO3_0.roa (hash: gJp14x3RVojW4Suzi+mnaQxUdouo4FmMOXfOj5Yct9k=) 8: ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa (hash: uDFD5MRDq12e9FrZ9TcR4muF3bF0UyIZh3ZvvCBU2ko=) 9: ZxZQikqsaz0OBgAuk40P1B9mOf4.roa (hash: +lV4F2CcosnXBXnETAHYkbM6uZLP9AqAiX7Djks3Lcg=) 10: bWK3uhABpwf6mvXl4q8o7yPRJno.roa (hash: /EqiCs51Nu4hopwtTcoOO6slNJ4AdVdaWqEpADYeITY=) 11: iEeEp42GZdk24J_XhsWfZczs8bI.roa (hash: Es9r36V7+YULS9141hzfnZoXbLZeW7YOudDWcJDuqPo=) 12: iFaMxfToISMhuIOtnklJbKH8sU0.roa (hash: kU5eLBTCsLrlHtahyO4pMWGlPVbZxhPgtGU2m2KhHJU=) 13: kivoHyrrTapcSTu_dcsRevtd1qU.roa (hash: vlUy1Pp06OgEmxAK5wPWEB8oYerqdlsGZx57sDlsb/I=) 14: knMCjsMKq8boFlcM4TD-NB1mee0.roa (hash: 5pXrohpLzHpy5wR5NL0Pk7xascagMMWfyt+Jyy021+I=) 15: nBm950xJAm9pONVZhHt0wVFEq7Y.roa (hash: ZyCH9JBRPWP0WR4LL51Jbb1msIvVHDWA7bezxMkIVWY=) 16: orZjZ-bLi4QKzxMYS8aOyD5DwHw.roa (hash: j0NxewdNRbQ+iT6xBmN+n5xKVYa/xRMyvSC57UkHgro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:86:b1:18:75:e1:2a:74:49:33:92:f0:ea:8e:36:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Apr 16 23:00:57 2026 GMT Not After : Apr 17 23:00:57 2026 GMT Subject: CN=714b86d2b0178e944c90ec93a1b4254544ce8f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:9a:c8:bd:26:95:3f:42:2c:58:fa:78:15: 28:38:ca:5d:09:f2:56:22:94:ba:83:30:36:41:7f: 6a:f2:3b:14:31:34:44:77:66:f3:41:81:e2:af:d9: c3:2c:af:97:f2:30:80:93:9e:22:25:6a:df:a4:40: ee:64:e5:25:76:f6:65:f1:77:5e:69:fd:b4:1e:b7: ba:d2:cf:65:56:ef:fb:58:f3:33:00:fb:83:47:55: e4:23:fd:94:a5:5c:f8:4a:28:58:68:74:4c:43:5e: a4:55:5d:85:8a:c2:f6:4c:59:52:64:b1:eb:c2:d4: d7:88:1f:9a:6e:8c:11:dd:35:da:6c:56:77:54:d3: 7f:c4:22:af:82:15:c1:0e:36:40:5e:5d:48:14:03: 26:85:47:ef:6b:b6:16:03:1f:8c:e9:dd:91:11:2d: 6e:8c:77:4c:49:a5:82:74:62:cf:e8:76:9f:bc:9a: 9a:b1:92:06:b0:c8:07:a0:3e:5e:91:e6:65:86:85: 90:bf:77:ff:6a:41:84:71:f6:7a:43:16:bb:24:48: 88:34:16:0e:f8:9e:bf:f4:54:29:da:15:c2:9a:34: a0:50:8e:7d:4d:9b:39:4c:3f:1e:31:3e:e1:c4:6f: ea:e6:fa:28:6f:bc:43:03:1a:df:ef:3f:e5:5c:28: 27:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4B:86:D2:B0:17:8E:94:4C:90:EC:93:A1:B4:25:45:44:CE:8F:1B X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5a:87:1a:34:e5:7e:1b:1b:92:6e:ce:b2:18:6a:d9:15:d2: ae:f4:96:ae:83:16:fd:a8:18:29:71:34:84:8c:a4:53:77:c0: 0d:18:6d:a6:5d:d0:be:b8:4c:af:58:de:a0:c5:4b:7e:0a:ec: d0:38:99:86:58:73:33:ae:b8:26:76:f4:3a:33:e0:29:a4:99: bb:c6:25:39:6a:2a:08:52:c4:6b:c1:e7:db:ae:ac:3e:6a:a7: 7c:92:66:0c:66:0f:c6:e6:24:0a:6f:59:b3:a3:86:cd:b0:7d: 19:ab:5f:80:45:3d:28:c3:0f:6a:10:ba:d7:57:c7:71:25:8d: 0b:af:12:9d:93:19:28:84:ae:4a:25:33:83:57:b8:19:1f:5e: 78:5b:94:70:ea:d1:f0:29:4a:35:28:34:db:f6:d3:06:1c:74: e1:aa:64:2e:c9:d5:09:23:18:c8:b4:8e:b8:16:53:22:5d:09: 4c:ff:01:46:23:0a:1b:62:ab:dd:5d:b5:46:6c:48:cb:f3:b7: 55:38:36:30:8e:10:5f:0e:fc:46:d4:cc:36:1c:ff:40:a8:14: 3b:4e:e8:39:c3:aa:dc:6c:d6:1f:8f:0e:ba:0c:62:e2:24:ba: 9e:e4:a1:25:1d:25:f9:1f:00:35:d1:6b:c0:a0:cc:15:be:7e: e6:e3:42:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YhrEYdeEqdEkzkvDqjjZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjYwNDE2MjMwMDU3WhcNMjYwNDE3MjMwMDU3WjAzMTEwLwYDVQQD Eyg3MTRiODZkMmIwMTc4ZTk0NGM5MGVjOTNhMWI0MjU0NTQ0Y2U4ZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygmayL0mlT9CLFj6eBUoOMpdCfJW IpS6gzA2QX9q8jsUMTREd2bzQYHir9nDLK+X8jCAk54iJWrfpEDuZOUldvZl8Xde af20Hre60s9lVu/7WPMzAPuDR1XkI/2UpVz4SihYaHRMQ16kVV2FisL2TFlSZLHr wtTXiB+abowR3TXabFZ3VNN/xCKvghXBDjZAXl1IFAMmhUfva7YWAx+M6d2RES1u jHdMSaWCdGLP6HafvJqasZIGsMgHoD5ekeZlhoWQv3f/akGEcfZ6Qxa7JEiINBYO +J6/9FQp2hXCmjSgUI59TZs5TD8eMT7hxG/q5voob7xDAxrf7z/lXCgnvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFLhtKwF46UTJDsk6G0JUVEzo8bMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1qHGjTl fhsbkm7Oshhq2RXSrvSWroMW/agYKXE0hIykU3fADRhtpl3QvrhMr1jeoMVLfgrs 0DiZhlhzM664Jnb0OjPgKaSZu8YlOWoqCFLEa8Hn266sPmqnfJJmDGYPxuYkCm9Z s6OGzbB9GatfgEU9KMMPahC611fHcSWNC68SnZMZKISuSiUzg1e4GR9eeFuUcOrR 8ClKNSg02/bTBhx04apkLsnVCSMYyLSOuBZTIl0JTP8BRiMKG2Kr3V21RmxIy/O3 VTg2MI4QXw78RtTMNhz/QKgUO07oOcOq3GzWH48Ougxi4iS6nuShJR0l+R8ANdFr wKDMFb5+5uNC2g== -----END CERTIFICATE-----Generated at Fri Apr 17 03:09:47 2026 by rpki-client