$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json) Hash identifier: gmnAaKMJ7XS4X4uflYF2tUx6G2M51nGl0LM3mi4aL98= Subject key identifier: 3A:98:59:01:D1:E3:34:60:F1:39:DE:A5:F6:FD:4D:54:22:D0:88:CA Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 01A0DBA922B1462DF1DBB525781D84BB7137 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft Manifest number: 1ADE Signing time: Sat 26 Sep 2026 03:01:29 +0000 Manifest this update: Sat 26 Sep 2026 03:01:29 +0000 Manifest next update: Sun 27 Sep 2026 03:01:29 +0000 Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: GDKA9GvaMfy7mYimDGPm9TLzrTEpioyLzL0orGt4itM=) 2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=) 3: CyXEon0EjqXOHr8IeWjEVFpMffs.roa (hash: 61FTseLqfGHD+d4UC74A9kaSSpCsOAMcXitG3hvPp+Y=) 4: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=) 5: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=) 6: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=) 7: ccBq--nhlrlj-SQFFud3LvSjHcs.roa (hash: xXhVmuwZaVq/u5W4va4FychwRtt+dYkphzF8S3KVfQI=) 8: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=) 9: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=) 10: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:db:a9:22:b1:46:2d:f1:db:b5:25:78:1d:84:bb:71:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Sep 26 03:01:29 2026 GMT Not After : Sep 27 03:01:29 2026 GMT Subject: CN=3a985901d1e33460f139dea5f6fd4d5422d088ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:d6:d2:3d:8e:15:98:f9:9e:94:38:4c:9c: c3:a5:32:7c:9e:03:bf:e1:7a:9f:16:2d:6b:cb:ff: a8:c9:2a:e8:c4:67:2e:34:bb:45:4b:f0:df:76:62: 75:a1:b3:11:d8:3e:80:be:cd:45:7b:bc:d9:73:a4: 22:e1:f0:28:58:f0:d0:bb:a3:d7:55:a8:bb:a7:64: 86:60:43:a6:48:7d:14:35:49:ad:e2:c5:e9:dd:dc: 28:f4:5a:2b:dc:62:74:77:f1:5e:9c:b3:15:8d:a3: 85:fe:da:5e:5f:ef:99:88:82:54:15:90:c3:59:5e: 24:2c:a3:ef:6b:76:91:fa:7a:97:99:e4:d5:78:02: c1:d2:75:d4:4d:54:8a:fd:1a:86:07:49:61:c6:13: 7d:88:f5:b8:7d:30:3f:da:c8:76:af:88:b4:6d:82: 4a:0c:b0:32:f9:92:31:76:41:a2:e9:41:f3:42:fe: 65:42:9f:bd:f4:b9:21:d6:1a:e4:cd:ba:7f:97:80: 46:90:c1:ad:d2:83:e4:3e:52:c5:39:32:ec:79:6e: 35:a6:ff:c1:5e:68:78:81:a6:0b:ee:82:d8:a0:36: 68:f0:07:e5:fb:0d:58:6a:b9:1c:88:dc:75:a5:2d: 09:53:a0:02:00:f5:09:07:62:e3:e0:f5:d4:34:5a: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:98:59:01:D1:E3:34:60:F1:39:DE:A5:F6:FD:4D:54:22:D0:88:CA X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a9:87:f5:fb:6a:b7:26:e4:20:77:db:c3:e1:3a:11:3a:81: fd:be:10:d0:e3:70:b3:14:31:21:38:40:d1:27:ee:9b:64:34: 84:7f:e5:58:6e:48:79:91:d8:67:5e:21:ed:3c:ad:1e:a5:89: 7e:83:7b:8d:60:1b:2e:91:1d:0c:e1:52:33:54:ab:ae:62:c0: 73:b1:7f:a2:17:a5:b3:09:45:d3:f2:61:6f:52:50:53:c3:be: 9d:fb:63:a3:45:4b:90:aa:f7:14:09:aa:05:27:e8:c8:7e:e0: d3:d7:11:a2:57:bb:26:c2:e5:f6:5d:4a:0d:82:35:be:97:7d: 6a:55:5a:67:8d:a6:57:d8:99:ca:1b:88:f1:ba:50:66:80:78: 9e:14:39:09:00:5e:c3:1a:1a:f3:6a:69:99:65:63:20:81:4b: a9:5d:53:9d:76:85:20:cd:f6:58:f3:84:20:f5:6d:6c:01:07: cd:05:6b:50:8a:52:fe:b1:72:ca:c4:79:f7:0e:f5:84:27:31: 4e:0e:6d:a0:01:9d:a1:e1:36:90:f5:b7:29:c8:8c:5e:89:52: 60:f5:a3:c0:a5:0c:d2:4b:fe:b1:ab:72:d9:ee:19:2a:44:ac: db:2e:1e:6b:63:b9:82:2d:65:4c:1a:fe:ac:18:c6:28:26:7a: 36:68:62:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDbqSKxRi3x27UleB2Eu3E3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjYwOTI2MDMwMTI5WhcNMjYwOTI3MDMwMTI5WjAzMTEwLwYDVQQD EygzYTk4NTkwMWQxZTMzNDYwZjEzOWRlYTVmNmZkNGQ1NDIyZDA4OGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM3W0j2OFZj5npQ4TJzDpTJ8ngO/ 4XqfFi1ry/+oySroxGcuNLtFS/DfdmJ1obMR2D6Avs1Fe7zZc6Qi4fAoWPDQu6PX Vai7p2SGYEOmSH0UNUmt4sXp3dwo9For3GJ0d/FenLMVjaOF/tpeX++ZiIJUFZDD WV4kLKPva3aR+nqXmeTVeALB0nXUTVSK/RqGB0lhxhN9iPW4fTA/2sh2r4i0bYJK DLAy+ZIxdkGi6UHzQv5lQp+99Lkh1hrkzbp/l4BGkMGt0oPkPlLFOTLseW41pv/B Xmh4gaYL7oLYoDZo8Afl+w1YarkciNx1pS0JU6ACAPUJB2Lj4PXUNFp8WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqYWQHR4zRg8Tnepfb9TVQi0IjKMB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKmH9ftq tybkIHfbw+E6ETqB/b4Q0ONwsxQxIThA0Sfum2Q0hH/lWG5IeZHYZ14h7TytHqWJ foN7jWAbLpEdDOFSM1SrrmLAc7F/ohelswlF0/Jhb1JQU8O+nftjo0VLkKr3FAmq BSfoyH7g09cRole7JsLl9l1KDYI1vpd9alVaZ42mV9iZyhuI8bpQZoB4nhQ5CQBe wxoa82ppmWVjIIFLqV1TnXaFIM32WPOEIPVtbAEHzQVrUIpS/rFyysR59w71hCcx Tg5toAGdoeE2kPW3KciMXolSYPWjwKUM0kv+saty2e4ZKkSs2y4ea2O5gi1lTBr+ rBjGKCZ6Nmhi1A== -----END CERTIFICATE-----Generated at Sat Sep 26 09:50:35 2026 by rpki-client