$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: wz7E53GPkbQE386HaYKmInssydRowaC+nFvorBSYzUI= Subject key identifier: 47:A4:2A:A5:A2:3C:A6:C6:BC:C6:49:67:AD:B2:D7:D4:BA:AC:A8:88 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019DAD20A259AACC660B15EA99FD9B4E7B47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0C9B Signing time: Mon 20 Apr 2026 23:01:30 +0000 Manifest this update: Mon 20 Apr 2026 23:01:30 +0000 Manifest next update: Tue 21 Apr 2026 23:01:30 +0000 Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=) 2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=) 3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: palhj+1NquZL0+tc5ZuRCp6NywuoHK8m1eP52bacqYg=) 4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=) 5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=) 6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=) 7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=) 8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=) 9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=) 10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=) 11: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=) 12: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=) 13: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=) 14: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=) 15: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=) 16: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=) 17: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=) 18: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=) 19: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=) 20: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=) 21: lj669dX1v9pNSJRiu80sXV0wDEU.roa (hash: a71cJCBEg+tia0cmJQMaQwkbw9fYgnq3IrPLp8Y1TeY=) 22: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=) 23: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=) 24: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=) 25: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 22:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ad:20:a2:59:aa:cc:66:0b:15:ea:99:fd:9b:4e:7b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Apr 20 23:01:30 2026 GMT Not After : Apr 21 23:01:30 2026 GMT Subject: CN=47a42aa5a23ca6c6bcc64967adb2d7d4baaca888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d2:f5:bc:34:ee:f0:c4:0b:7c:2a:c0:36:81: 0a:97:fb:48:ad:92:bb:36:2f:80:ad:3f:1c:10:b6: a3:ef:a1:ef:8a:e7:1c:f7:04:8d:76:0c:41:f4:80: 5a:22:59:6b:7e:58:65:05:eb:fa:54:79:34:7c:ce: 53:10:9d:ce:4a:54:3b:39:7d:d5:e3:fa:22:fc:7f: d9:ab:41:97:8d:b3:e8:71:4b:88:5d:13:ff:31:25: a3:36:1f:48:74:17:21:07:3d:ad:0c:bb:d2:26:cf: 3e:f6:82:6f:fd:b1:b2:fd:36:ad:b4:2f:12:90:a8: 76:6a:8b:92:c9:33:6c:27:61:34:fb:de:1c:43:40: ee:d9:0a:a5:4a:7b:97:0f:ae:0f:8e:9d:ad:73:6f: f8:9f:dc:b8:a7:02:93:02:ae:06:a5:5d:cd:61:bc: 93:5b:bd:b3:a1:77:ef:68:c7:c2:7a:e4:b7:35:4d: 66:c6:10:5b:c5:d7:96:4f:16:ed:a6:8e:f4:39:82: a8:e1:6d:26:3f:49:17:69:0b:2d:f5:a1:49:3b:ab: bc:7d:ee:ef:b4:29:47:e1:31:04:dc:6d:be:dd:d9: 96:6a:16:c2:b2:fa:5c:ab:6e:9c:bd:4a:48:26:20: 00:89:59:89:83:88:21:5d:25:3a:26:40:bc:93:f9: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A4:2A:A5:A2:3C:A6:C6:BC:C6:49:67:AD:B2:D7:D4:BA:AC:A8:88 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b9:fa:2e:4d:b1:27:14:c1:eb:65:b3:46:37:86:81:55:28: dc:ea:6f:9b:b9:26:f3:62:2d:f2:8b:80:04:50:2d:25:6c:a6: d1:39:1c:2b:5e:a9:57:69:3b:d7:bd:d7:5f:4f:a5:1a:27:fc: c6:61:64:42:20:63:f4:de:a1:5a:9c:21:3f:c5:3d:81:2c:38: 05:18:bc:82:a5:8b:a2:a4:ab:30:61:85:d4:13:62:d1:e8:8a: f2:9b:82:7f:5f:84:c5:4e:6c:be:cc:b8:c1:03:c0:0c:60:ee: 9a:5e:0e:3f:ce:06:37:e9:a5:ed:c4:07:57:61:20:87:ce:b1: 50:5d:c1:ed:9a:f5:a2:38:9d:24:6c:12:a1:33:25:c5:f1:9b: c9:f9:08:a2:6a:07:d0:53:f2:bf:5f:ca:fa:0f:60:a1:8b:14: 1a:59:ca:52:43:a4:ed:69:f5:d1:ee:ba:47:48:8a:9d:41:f7: 53:40:75:c1:c2:c6:e6:b0:d0:3a:d0:95:df:30:f5:02:34:00: 26:41:de:3f:35:58:0e:35:ef:ce:00:c1:18:5c:07:8e:7f:40: be:a2:a2:8d:ab:2d:68:89:4e:63:4d:80:26:2d:fd:73:47:91: 4f:35:97:62:99:30:84:ae:e9:24:f4:83:dd:64:3c:5c:d1:cb: f4:d5:b1:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2tIKJZqsxmCxXqmf2bTntHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwNDIwMjMwMTMwWhcNMjYwNDIxMjMwMTMwWjAzMTEwLwYDVQQD Eyg0N2E0MmFhNWEyM2NhNmM2YmNjNjQ5NjdhZGIyZDdkNGJhYWNhODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dL1vDTu8MQLfCrANoEKl/tIrZK7 Ni+ArT8cELaj76Hviucc9wSNdgxB9IBaIllrflhlBev6VHk0fM5TEJ3OSlQ7OX3V 4/oi/H/Zq0GXjbPocUuIXRP/MSWjNh9IdBchBz2tDLvSJs8+9oJv/bGy/TattC8S kKh2aouSyTNsJ2E0+94cQ0Du2QqlSnuXD64Pjp2tc2/4n9y4pwKTAq4GpV3NYbyT W72zoXfvaMfCeuS3NU1mxhBbxdeWTxbtpo70OYKo4W0mP0kXaQst9aFJO6u8fe7v tClH4TEE3G2+3dmWahbCsvpcq26cvUpIJiAAiVmJg4ghXSU6JkC8k/lo+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEekKqWiPKbGvMZJZ62y19S6rKiIMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLn6Lk2x JxTB62WzRjeGgVUo3Opvm7km82It8ouABFAtJWym0TkcK16pV2k7173XX0+lGif8 xmFkQiBj9N6hWpwhP8U9gSw4BRi8gqWLoqSrMGGF1BNi0eiK8puCf1+ExU5svsy4 wQPADGDuml4OP84GN+ml7cQHV2Egh86xUF3B7Zr1ojidJGwSoTMlxfGbyfkIomoH 0FPyv1/K+g9goYsUGlnKUkOk7Wn10e66R0iKnUH3U0B1wcLG5rDQOtCV3zD1AjQA JkHePzVYDjXvzgDBGFwHjn9AvqKijastaIlOY02AJi39c0eRTzWXYpkwhK7pJPSD 3WQ8XNHL9NWxWA== -----END CERTIFICATE-----Generated at Tue Apr 21 08:38:46 2026 by rpki-client