$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json) Hash identifier: W/3hcds3DVAETCQvQZkIsCvDw5+tGriqHKdZ0dMi6Ik= Subject key identifier: E4:43:A4:97:11:BF:C2:3B:90:87:80:4D:4C:1D:E9:E3:2B:FE:14:3E Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Certificate serial: 019D99621BCD3677B8CB4DB6E85FD75B1011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft Manifest number: 049C Signing time: Fri 17 Apr 2026 03:00:36 +0000 Manifest this update: Fri 17 Apr 2026 03:00:36 +0000 Manifest next update: Sat 18 Apr 2026 03:00:36 +0000 Files and hashes: 1: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (hash: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=) 2: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (hash: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=) 3: 3gai81UGgfLPbQftciy3jGMkOwI.roa (hash: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=) 4: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: 82ivvgCauQ49Uiai1+sGhhI++Ov5hvWmzYYjx6VbL/o=) 5: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (hash: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=) 6: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (hash: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=) 7: P2DOHQZk6uadyNsFYKTvp0Yljns.roa (hash: drWm8UAEyYp0gk5pD0pZZGlNfBy4kmJrj0xpKvuccbI=) 8: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=) 9: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (hash: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=) 10: pMSYP5P8y8eLfNyDEeXV3zc-nps.roa (hash: enJ6YCYyQ+/wl2mffuOqzFyRpZKc2xjCWdqck8SgcXI=) 11: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (hash: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=) 12: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (hash: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:1b:cd:36:77:b8:cb:4d:b6:e8:5f:d7:5b:10:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Validity Not Before: Apr 17 03:00:36 2026 GMT Not After : Apr 18 03:00:36 2026 GMT Subject: CN=e443a49711bfc23b9087804d4c1de9e32bfe143e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:9b:21:e4:8f:94:7c:a9:b8:d9:3e:59:21: 1b:cb:7e:35:43:f9:be:51:06:6b:3e:36:7a:d8:99: f9:72:d2:33:e3:1a:28:9f:e6:e7:4b:00:bd:d9:96: 33:58:86:e8:49:9b:71:6d:96:98:32:bd:3f:a0:82: d1:06:6e:09:48:4d:9a:da:69:21:f0:d4:99:e0:57: a1:97:59:d2:89:4a:14:ad:14:a7:2a:7d:d3:fe:46: bd:da:e9:2f:71:99:f0:4f:5a:56:2c:d0:65:d8:d8: c8:df:44:ac:26:74:c3:b7:0c:2b:7a:5d:2f:91:87: fe:4b:ff:3f:f8:09:70:5c:55:80:bc:bf:69:9c:16: 32:7f:fd:f5:40:11:16:d8:ff:6b:43:68:1c:2c:e1: cf:88:a0:bb:46:c0:14:15:17:25:a9:f4:82:16:bc: 28:3d:9e:2a:9b:26:ae:11:3c:15:19:2e:26:8e:51: e1:53:a5:dd:de:bd:0d:c3:35:fe:0e:75:f3:a0:c8: e1:78:84:29:94:1e:c4:2e:87:4e:f2:69:4e:54:24: 13:c9:4b:01:43:8a:74:01:0b:a7:80:00:e6:6c:51: 6f:1f:16:50:e8:a8:4f:0b:bf:98:f1:cd:81:83:d9: 0f:33:4a:ef:4f:7f:a7:e9:04:35:25:9e:15:64:da: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:43:A4:97:11:BF:C2:3B:90:87:80:4D:4C:1D:E9:E3:2B:FE:14:3E X509v3 Authority Key Identifier: keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7b:30:2a:b4:b6:7e:8e:cf:16:66:de:22:46:53:b0:e1:54: 87:ac:57:58:a0:ba:1c:b8:79:7d:2d:f6:3b:23:4d:8e:27:1b: bd:99:a8:fc:e7:8d:52:79:96:5c:d6:3a:b6:b2:e6:43:56:8f: aa:dc:6b:60:d8:ca:ab:7e:35:7d:96:8d:8e:53:51:0e:1b:65: 42:88:a7:44:cb:08:b6:ff:78:db:b5:f9:3e:33:2f:6c:51:a2: 03:b1:43:63:85:ec:9e:40:72:ea:98:1c:f8:81:ac:9a:b5:aa: 4f:e2:cd:0d:87:a9:b4:00:31:1c:6f:06:70:66:b8:f1:aa:df: f6:73:d7:6f:b9:65:f7:3f:81:1d:64:f5:38:cb:b0:c3:3d:b8: 35:67:63:5b:1e:f8:44:dd:f9:2a:46:1a:ed:5f:59:6d:f7:66: d5:e2:b3:0a:44:bb:d0:50:23:89:3e:c0:6f:12:6a:0f:06:97: 75:f4:4d:5a:cb:fe:9e:49:ed:01:80:0d:93:5d:2a:79:37:2c: 67:e7:10:7c:12:5e:71:68:d5:4d:a5:00:30:be:17:a3:b1:86: 6f:2b:97:ce:b0:c2:66:4b:6f:dd:42:91:9c:5f:eb:f4:e5:0b: 31:4f:ad:64:8f:49:3f:bd:c7:e0:cb:7d:8d:6d:16:18:ff:a4: cd:fa:97:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYhvNNne4y0226F/XWxARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy NGRjYzAwHhcNMjYwNDE3MDMwMDM2WhcNMjYwNDE4MDMwMDM2WjAzMTEwLwYDVQQD EyhlNDQzYTQ5NzExYmZjMjNiOTA4NzgwNGQ0YzFkZTllMzJiZmUxNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+ubIeSPlHypuNk+WSEby341Q/m+ UQZrPjZ62Jn5ctIz4xoon+bnSwC92ZYzWIboSZtxbZaYMr0/oILRBm4JSE2a2mkh 8NSZ4Fehl1nSiUoUrRSnKn3T/ka92ukvcZnwT1pWLNBl2NjI30SsJnTDtwwrel0v kYf+S/8/+AlwXFWAvL9pnBYyf/31QBEW2P9rQ2gcLOHPiKC7RsAUFRclqfSCFrwo PZ4qmyauETwVGS4mjlHhU6Xd3r0NwzX+DnXzoMjheIQplB7ELodO8mlOVCQTyUsB Q4p0AQungADmbFFvHxZQ6KhPC7+Y8c2Bg9kPM0rvT3+n6QQ1JZ4VZNrkwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORDpJcRv8I7kIeATUwd6eMr/hQ+MB8GA1UdIwQY MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt Y2JiZmRhOTI0MTlkLzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnswKrS2 fo7PFmbeIkZTsOFUh6xXWKC6HLh5fS32OyNNjicbvZmo/OeNUnmWXNY6trLmQ1aP qtxrYNjKq341fZaNjlNRDhtlQoinRMsItv9427X5PjMvbFGiA7FDY4XsnkBy6pgc +IGsmrWqT+LNDYeptAAxHG8GcGa48arf9nPXb7ll9z+BHWT1OMuwwz24NWdjWx74 RN35KkYa7V9Zbfdm1eKzCkS70FAjiT7AbxJqDwaXdfRNWsv+nkntAYANk10qeTcs Z+cQfBJecWjVTaUAML4Xo7GGbyuXzrDCZktv3UKRnF/r9OULMU+tZI9JP73H4Mt9 jW0WGP+kzfqXPw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:55:22 2026 by rpki-client