$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: q6442B2fJUNWH8AnZvCxWkIH8hJBii0Vy2t2fe+x5s4= Subject key identifier: A2:8D:29:E4:EF:E6:45:03:BD:EC:33:68:99:C0:05:F9:55:0F:41:AA Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 01A0DFBD1C693CD491664C6681A5DDEB5A88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 1A85 Signing time: Sat 26 Sep 2026 22:01:47 +0000 Manifest this update: Sat 26 Sep 2026 22:01:47 +0000 Manifest next update: Sun 27 Sep 2026 22:01:47 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 3WZnR+8l+cGIEAsN58fGOWfdweYT2v80OCkcL8T2f4w=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 22:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:df:bd:1c:69:3c:d4:91:66:4c:66:81:a5:dd:eb:5a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Sep 26 22:01:47 2026 GMT Not After : Sep 27 22:01:47 2026 GMT Subject: CN=a28d29e4efe64503bdec336899c005f9550f41aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:d1:18:a8:50:f0:f2:1c:d8:dd:b7:18:ea: dc:4d:89:12:a2:a9:93:cb:b8:6d:a6:0d:44:4d:41: a5:a6:c5:5e:3d:7b:ab:41:54:36:5e:0c:fa:23:6d: 40:dc:01:2f:32:0f:c1:c1:ee:cd:8a:d0:68:8b:e4: dc:85:f1:bd:53:14:b3:1e:1f:08:34:d9:7f:8a:a0: 45:11:7f:31:a8:b8:ca:47:45:5e:a1:79:03:2d:bf: 8b:99:23:96:b6:3d:57:fa:4a:88:8d:8e:1b:81:b7: 32:5c:7a:ee:2e:a8:ea:60:f7:c8:91:38:53:09:0b: db:3d:f4:b3:64:ff:15:29:39:72:fb:a8:2c:ff:08: e9:9d:de:66:0e:0e:72:0b:10:34:c8:06:32:a9:f1: 3b:e4:41:10:61:eb:5b:32:bd:7d:f3:7f:26:0c:95: 98:93:5c:56:8a:0c:a4:84:84:24:d2:8b:27:a2:23: 99:25:aa:ce:c4:71:59:16:dc:b0:b1:d4:a8:3d:99: e5:e3:c0:f9:15:db:21:64:98:47:ea:3c:fa:f3:06: 25:cf:d7:bd:de:a2:28:6b:f9:16:95:ed:45:31:11: 70:0c:a2:0a:4c:e7:1d:a8:ec:fe:61:30:21:19:f6: a0:a0:9a:e3:93:5a:ad:96:e4:06:30:26:e0:89:74: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8D:29:E4:EF:E6:45:03:BD:EC:33:68:99:C0:05:F9:55:0F:41:AA X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d2:dc:26:de:85:a4:4e:07:25:0f:49:52:66:8d:3b:1a:05: 61:51:c7:9d:29:fa:ba:aa:2f:18:38:02:03:09:68:88:e0:0f: d5:5f:02:3e:b6:42:8e:22:e5:68:af:b1:2e:ab:c7:8d:55:2e: 54:af:46:29:6e:48:40:76:2a:d6:62:ec:ec:bc:de:03:2f:c1: 56:d6:cd:bb:1b:a6:33:35:7f:d9:e5:ff:b3:0f:28:ac:a2:81: 44:25:df:32:8b:f8:7a:0f:e2:14:a0:82:53:6b:ba:9a:8b:89: 50:72:ae:f0:6e:d1:8e:a8:73:d6:ee:d1:7d:d2:a4:58:7c:fc: f9:88:e9:f1:bd:34:28:79:6e:cf:85:47:bb:01:20:4e:dd:74: 67:0b:1e:b9:db:95:49:f0:9c:05:64:28:4a:d4:2c:f7:d6:3e: 96:d2:a5:9c:e6:45:24:89:41:e1:b7:b4:71:8e:e1:01:3d:8e: 28:e6:59:c2:2f:73:71:12:7f:0e:8d:f4:cb:63:4b:d6:ed:a9: 9b:1b:a6:da:e9:76:5f:d3:3c:46:2c:58:80:c7:d2:78:8f:cd: 7d:cb:2c:eb:16:e6:30:bf:00:d0:27:6c:eb:b0:ba:07:b3:59: 18:56:ee:d5:1e:19:25:24:c2:0b:8f:45:3f:6d:51:c3:cc:59: 6f:a4:0b:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDfvRxpPNSRZkxmgaXd61qIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwOTI2MjIwMTQ3WhcNMjYwOTI3MjIwMTQ3WjAzMTEwLwYDVQQD EyhhMjhkMjllNGVmZTY0NTAzYmRlYzMzNjg5OWMwMDVmOTU1MGY0MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshvRGKhQ8PIc2N23GOrcTYkSoqmT y7htpg1ETUGlpsVePXurQVQ2Xgz6I21A3AEvMg/Bwe7NitBoi+TchfG9UxSzHh8I NNl/iqBFEX8xqLjKR0VeoXkDLb+LmSOWtj1X+kqIjY4bgbcyXHruLqjqYPfIkThT CQvbPfSzZP8VKTly+6gs/wjpnd5mDg5yCxA0yAYyqfE75EEQYetbMr19838mDJWY k1xWigykhIQk0osnoiOZJarOxHFZFtywsdSoPZnl48D5FdshZJhH6jz68wYlz9e9 3qIoa/kWle1FMRFwDKIKTOcdqOz+YTAhGfagoJrjk1qtluQGMCbgiXTSiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKNKeTv5kUDvewzaJnABflVD0GqMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNLcJt6F pE4HJQ9JUmaNOxoFYVHHnSn6uqovGDgCAwloiOAP1V8CPrZCjiLlaK+xLqvHjVUu VK9GKW5IQHYq1mLs7LzeAy/BVtbNuxumMzV/2eX/sw8orKKBRCXfMov4eg/iFKCC U2u6mouJUHKu8G7Rjqhz1u7RfdKkWHz8+Yjp8b00KHluz4VHuwEgTt10ZwseuduV SfCcBWQoStQs99Y+ltKlnOZFJIlB4be0cY7hAT2OKOZZwi9zcRJ/Do30y2NL1u2p mxum2ul2X9M8RixYgMfSeI/Nfcss6xbmML8A0Cds67C6B7NZGFbu1R4ZJSTCC49F P21Rw8xZb6QLWA== -----END CERTIFICATE-----Generated at Sun Sep 27 06:44:44 2026 by rpki-client