$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: n2CWkH2EMQVuiVoUDBJJzO1PwlwX8VFIYR7VTbPi2KI= Subject key identifier: C8:5E:35:11:9D:8E:9D:DA:92:A2:8A:6E:F6:D6:6A:D8:11:67:DC:F6 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019FA8CFBF3683CF34797E5F05E97BEDB8CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 19E4 Signing time: Tue 28 Jul 2026 13:00:14 +0000 Manifest this update: Tue 28 Jul 2026 13:00:14 +0000 Manifest next update: Wed 29 Jul 2026 13:00:14 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: hThZz8QH3vk2d48iyYEUanaI1JXT2II7KrwNPfxcWPo=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:cf:bf:36:83:cf:34:79:7e:5f:05:e9:7b:ed:b8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Jul 28 13:00:14 2026 GMT Not After : Jul 29 13:00:14 2026 GMT Subject: CN=c85e35119d8e9dda92a28a6ef6d66ad81167dcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:13:a8:83:57:d0:a0:e6:1a:f9:07:1e:10: 1e:ee:65:35:9f:fb:ee:db:30:d4:d6:8f:73:85:a3: 6c:c7:41:3f:b2:cc:33:95:fe:a3:6c:de:6d:07:d3: 64:c7:2f:85:f0:de:de:92:1b:81:60:ed:93:8e:55: 84:56:91:5a:27:1a:c0:7d:a7:09:fb:18:ee:43:36: f1:03:79:9f:fd:8e:7f:f7:ab:b6:4e:d9:6c:d8:16: 32:e4:70:4a:b5:99:28:95:2b:de:dd:42:46:43:ad: 23:52:de:d6:53:0c:4e:95:0e:9b:47:f6:a9:9d:df: d1:d0:4f:91:32:2b:28:09:42:9a:54:c4:e0:17:1d: 64:c2:de:ac:0d:54:dc:8c:c8:46:50:b5:51:67:4e: cf:4a:0a:1d:df:2f:e4:23:5b:57:6c:a0:82:f2:2a: e3:21:32:0d:cd:0c:fd:be:3a:1a:ba:e1:2e:0f:35: e7:1a:ce:02:1c:f2:f9:d1:e4:65:af:1e:b9:70:37: 68:43:23:79:de:4c:64:e4:c7:6a:78:5f:66:eb:9f: 65:9a:a5:99:cf:ab:c9:b7:ce:4b:b9:af:c7:50:1e: e5:29:44:fe:92:c2:cc:09:a9:97:0c:10:3a:11:e3: 63:84:15:34:a0:47:13:84:b3:48:e2:8d:6a:98:7c: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5E:35:11:9D:8E:9D:DA:92:A2:8A:6E:F6:D6:6A:D8:11:67:DC:F6 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:73:e0:e9:fc:17:b5:4d:f4:b6:5a:1b:8f:b9:a9:fe:e3:77: 5f:0d:65:7f:4d:55:69:05:1c:88:19:47:75:cb:e6:0c:d4:06: bf:ae:5c:90:c0:1e:7e:b0:0a:99:f8:58:ea:3b:5d:89:54:e5: 9f:97:48:a1:19:ea:56:ee:4f:a4:a9:9f:0b:07:24:28:4b:74: 6a:85:23:67:44:c6:3e:a2:b9:13:56:b2:0c:71:60:20:7f:80: f1:22:88:f3:9a:14:1c:9b:62:43:50:98:0a:7a:83:51:cf:c2: 21:a6:3f:80:62:57:0e:94:c4:f0:b4:98:89:8c:2f:d6:a6:4a: 99:2f:ab:25:75:49:45:25:16:9a:98:9a:68:82:38:bd:3b:d4: 31:4b:0a:6e:29:aa:42:d1:db:8e:5b:f7:e8:99:d5:7a:d8:48: 73:48:7f:31:15:e3:14:a1:88:45:ea:5d:71:e1:07:6c:12:f4: 06:cc:4b:c9:9d:79:6c:a6:fd:e3:54:5b:68:0e:05:5c:70:15: 42:c2:c8:ba:b1:ae:1f:f3:85:4f:a7:2f:53:3e:e4:0f:3e:fb: a0:b1:74:cc:48:60:c6:c8:7c:5a:e6:8a:c3:88:0b:e6:ae:f1: 6c:67:91:27:cb:eb:c7:d0:57:84:68:1b:14:ec:44:a8:f2:25: 86:1d:bc:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oz782g880eX5fBel77bjNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwNzI4MTMwMDE0WhcNMjYwNzI5MTMwMDE0WjAzMTEwLwYDVQQD EyhjODVlMzUxMTlkOGU5ZGRhOTJhMjhhNmVmNmQ2NmFkODExNjdkY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmekTqINX0KDmGvkHHhAe7mU1n/vu 2zDU1o9zhaNsx0E/sswzlf6jbN5tB9Nkxy+F8N7ekhuBYO2TjlWEVpFaJxrAfacJ +xjuQzbxA3mf/Y5/96u2Ttls2BYy5HBKtZkolSve3UJGQ60jUt7WUwxOlQ6bR/ap nd/R0E+RMisoCUKaVMTgFx1kwt6sDVTcjMhGULVRZ07PSgod3y/kI1tXbKCC8irj ITINzQz9vjoauuEuDzXnGs4CHPL50eRlrx65cDdoQyN53kxk5MdqeF9m659lmqWZ z6vJt85Lua/HUB7lKUT+ksLMCamXDBA6EeNjhBU0oEcThLNI4o1qmHxxLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMheNRGdjp3akqKKbvbWatgRZ9z2MB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA03Pg6fwX tU30tlobj7mp/uN3Xw1lf01VaQUciBlHdcvmDNQGv65ckMAefrAKmfhY6jtdiVTl n5dIoRnqVu5PpKmfCwckKEt0aoUjZ0TGPqK5E1ayDHFgIH+A8SKI85oUHJtiQ1CY CnqDUc/CIaY/gGJXDpTE8LSYiYwv1qZKmS+rJXVJRSUWmpiaaII4vTvUMUsKbimq QtHbjlv36JnVethIc0h/MRXjFKGIRepdceEHbBL0BsxLyZ15bKb941RbaA4FXHAV QsLIurGuH/OFT6cvUz7kDz77oLF0zEhgxsh8WuaKw4gL5q7xbGeRJ8vrx9BXhGgb FOxEqPIlhh28sQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:57:08 2026 by rpki-client