$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: 3ZWt0wyTLwBD57YF7E/0Jbt0YdK+GgJQRPvzAZaGta8= Subject key identifier: A3:F7:DB:49:F8:E4:BE:AC:6C:A0:E0:20:63:E4:06:81:86:56:B0:40 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019D999929C04C1F98773765848D398BCF7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 18D3 Signing time: Fri 17 Apr 2026 04:00:44 +0000 Manifest this update: Fri 17 Apr 2026 04:00:44 +0000 Manifest next update: Sat 18 Apr 2026 04:00:44 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: eQyQqzKehyHYHpu1UZXF3Q6S+PrM3rLV9PGzrmghVYM=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:99:29:c0:4c:1f:98:77:37:65:84:8d:39:8b:cf:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Apr 17 04:00:44 2026 GMT Not After : Apr 18 04:00:44 2026 GMT Subject: CN=a3f7db49f8e4beac6ca0e02063e406818656b040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:6c:85:11:38:27:c9:58:5d:5b:a6:98:05: b9:bd:13:1d:8a:75:c4:fb:16:bf:7d:31:73:6b:e0: 04:e3:3b:64:c9:69:5a:20:f4:86:5a:75:a0:3f:74: 8a:99:f9:5c:78:92:d2:1b:e9:a9:2f:de:0c:ba:0d: 46:61:59:c5:88:44:19:2a:71:4c:ec:f9:01:cf:17: 8a:6f:af:09:08:d0:a3:9a:f6:b0:02:fa:f1:a3:55: 39:dc:d4:b8:ad:58:b3:ed:f7:ff:07:70:d3:c6:27: b1:4f:68:65:22:2e:ff:95:97:70:4c:45:6c:00:bb: ec:52:96:8f:84:b8:e5:d9:fc:4a:43:4b:19:62:d9: 78:70:22:51:d8:05:17:9a:20:3f:23:68:df:f8:5a: 43:3b:b1:da:bc:21:1f:11:4c:ca:ec:aa:28:4a:0a: cd:21:0f:4f:07:99:b9:cb:0c:20:86:13:f1:1f:81: a4:5e:83:66:89:56:9b:c7:56:a4:92:94:8e:0a:e3: fc:ee:18:d3:65:09:cc:3e:c1:e7:7c:be:f0:e0:41: 55:6e:6f:27:a7:b8:01:16:84:34:a7:25:78:b1:74: 48:fd:4f:68:0f:28:ae:b5:57:29:6e:0b:ce:dc:34: a7:03:fa:56:6e:6f:18:de:d4:a9:9e:63:0b:67:c3: df:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F7:DB:49:F8:E4:BE:AC:6C:A0:E0:20:63:E4:06:81:86:56:B0:40 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:da:5c:78:27:00:22:c8:c7:1d:0c:3b:f6:4f:e7:c6:92:06: bd:0c:e0:e9:04:cc:9f:04:b8:3a:25:22:5c:0d:3c:c1:ea:16: aa:97:3d:ef:66:e6:92:c6:f4:c5:88:0b:13:96:ea:6c:21:48: de:56:11:b0:40:66:0f:98:e6:bd:c3:fb:8f:70:56:e4:9c:34: 17:46:92:fa:fb:b4:3c:5c:a2:de:5e:94:e5:16:30:fb:21:76: c5:06:46:34:ff:19:39:96:73:7a:2f:3c:77:54:2c:c6:73:60: b4:17:ee:eb:27:dd:6f:16:74:09:19:57:05:2d:91:a3:06:38: 8a:8a:86:b0:da:1e:a7:0c:c1:49:22:a4:03:5f:32:2b:cc:b5: ed:7f:c7:d3:9b:e0:a5:4b:09:21:e8:cd:9a:ee:08:46:8e:dc: 89:17:27:75:f1:9a:3a:0a:70:73:66:6b:1d:55:0f:60:b1:f3: 84:0c:22:b7:c3:44:92:59:66:07:75:52:fd:72:c6:16:6c:5b: 7a:f6:03:fd:a9:0f:8e:43:ba:ad:df:c3:f1:2b:f8:3a:62:3d: 2e:02:fd:ad:09:a8:67:6d:20:b1:2b:1e:5f:e7:95:a7:a7:85: 3e:b1:e5:77:5c:a0:a8:58:b6:3b:e6:2c:2b:71:02:b2:fd:cf: 82:2e:b9:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmSnATB+YdzdlhI05i89/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwNDE3MDQwMDQ0WhcNMjYwNDE4MDQwMDQ0WjAzMTEwLwYDVQQD EyhhM2Y3ZGI0OWY4ZTRiZWFjNmNhMGUwMjA2M2U0MDY4MTg2NTZiMDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBhshRE4J8lYXVummAW5vRMdinXE +xa/fTFza+AE4ztkyWlaIPSGWnWgP3SKmflceJLSG+mpL94Mug1GYVnFiEQZKnFM 7PkBzxeKb68JCNCjmvawAvrxo1U53NS4rViz7ff/B3DTxiexT2hlIi7/lZdwTEVs ALvsUpaPhLjl2fxKQ0sZYtl4cCJR2AUXmiA/I2jf+FpDO7HavCEfEUzK7KooSgrN IQ9PB5m5ywwghhPxH4GkXoNmiVabx1akkpSOCuP87hjTZQnMPsHnfL7w4EFVbm8n p7gBFoQ0pyV4sXRI/U9oDyiutVcpbgvO3DSnA/pWbm8Y3tSpnmMLZ8PfaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKP320n45L6sbKDgIGPkBoGGVrBAMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9pceCcA IsjHHQw79k/nxpIGvQzg6QTMnwS4OiUiXA08weoWqpc972bmksb0xYgLE5bqbCFI 3lYRsEBmD5jmvcP7j3BW5Jw0F0aS+vu0PFyi3l6U5RYw+yF2xQZGNP8ZOZZzei88 d1QsxnNgtBfu6yfdbxZ0CRlXBS2RowY4ioqGsNoepwzBSSKkA18yK8y17X/H05vg pUsJIejNmu4IRo7ciRcndfGaOgpwc2ZrHVUPYLHzhAwit8NEkllmB3VS/XLGFmxb evYD/akPjkO6rd/D8Sv4OmI9LgL9rQmoZ20gsSseX+eVp6eFPrHld1ygqFi2O+Ys K3ECsv3Pgi65/A== -----END CERTIFICATE-----Generated at Fri Apr 17 11:48:09 2026 by rpki-client