$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: AsPS7nBSeBeKo3tREIVyEBmj1Q5VrE+hd4aVb3AZXpg= Subject key identifier: 80:95:A9:03:27:4C:32:49:66:7A:42:60:E1:B9:E1:F1:B5:6A:8E:89 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019CAA58AA289609223BDD60224BB6CA30E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0C15 Signing time: Sun 01 Mar 2026 17:01:03 +0000 Manifest this update: Sun 01 Mar 2026 17:01:03 +0000 Manifest next update: Mon 02 Mar 2026 17:01:03 +0000 Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=) 2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=) 3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: HypijumK1iFHYgCXRIzDg7TtMd1zDTHFcg7+sA6sQ3w=) 4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=) 5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=) 6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=) 7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=) 8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=) 9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=) 10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=) 11: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=) 12: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=) 13: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=) 14: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=) 15: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=) 16: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=) 17: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=) 18: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=) 19: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=) 20: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=) 21: lj669dX1v9pNSJRiu80sXV0wDEU.roa (hash: a71cJCBEg+tia0cmJQMaQwkbw9fYgnq3IrPLp8Y1TeY=) 22: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=) 23: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=) 24: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=) 25: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:58:aa:28:96:09:22:3b:dd:60:22:4b:b6:ca:30:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Mar 1 17:01:03 2026 GMT Not After : Mar 2 17:01:03 2026 GMT Subject: CN=8095a903274c3249667a4260e1b9e1f1b56a8e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6a:0a:ab:68:3e:e9:34:fa:d6:34:3c:8f:dc: 34:19:5b:09:e9:22:35:8a:d6:a4:11:81:1e:1a:72: 55:77:28:d9:19:a8:4e:cf:2e:d3:67:a1:7d:c5:e4: 83:08:a4:0a:a3:28:3e:06:2e:3c:24:68:86:3a:be: 99:26:64:2a:93:37:14:0e:ad:60:61:7d:25:9d:27: ba:67:ab:e3:90:18:3f:d1:20:19:ed:e9:1d:ed:69: dd:62:c7:a9:fb:64:7f:78:a0:93:74:e2:ed:6a:ed: fa:df:4d:54:08:9c:96:c0:02:b3:9e:75:ae:6e:ce: a0:bd:4d:b1:e1:2e:88:95:53:51:8a:98:c4:ad:a8: cf:58:64:bf:6b:f6:da:24:5f:c6:d5:93:a3:74:27: e5:da:16:0b:b3:7e:a1:44:f7:3f:cf:40:54:93:cc: 71:94:e6:e4:cd:73:e9:15:9a:68:88:dc:e3:d5:e6: a0:d8:8e:80:07:8b:1b:08:d1:f5:b8:37:ea:c6:e2: 9b:db:71:cd:0c:ae:8f:e7:da:be:99:ee:e7:89:87: ec:e3:90:ae:f0:98:68:f9:dc:ca:24:3a:ce:c5:56: 8c:7d:9f:40:af:b3:d6:7f:66:5f:66:37:82:2d:99: b0:42:1f:35:c0:72:97:24:71:20:a7:71:1f:01:d8: 95:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:95:A9:03:27:4C:32:49:66:7A:42:60:E1:B9:E1:F1:B5:6A:8E:89 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:20:1a:86:b5:eb:af:f3:40:72:e3:44:59:d7:9d:0f:8a:02: 11:e6:c6:f7:cb:a1:a3:d8:03:be:6f:27:2e:eb:b3:ac:41:95: af:a9:70:9e:29:b2:f5:89:ea:a0:fb:33:c8:d5:d2:65:3b:1c: 4e:bb:ae:c5:10:ca:eb:50:90:0b:21:7c:3a:ac:61:d6:ef:ae: 4a:54:84:a0:8d:bc:62:c8:ab:d7:7e:b5:6d:d2:60:99:48:1e: 15:1f:5c:33:6f:9c:a4:1d:cf:45:db:5d:b6:04:14:1d:f0:8e: a0:ca:de:ed:2d:13:85:a3:ef:f1:36:26:7f:26:0d:a7:61:d5: f7:c4:68:ec:4a:a8:48:03:1e:79:5f:48:11:e9:92:80:9d:7a: b1:6a:02:8a:a6:7b:ac:7e:b4:8e:85:79:24:31:42:61:d2:35: ac:7f:96:bb:a4:46:27:cd:22:5e:d7:d5:01:b2:b9:14:61:f6: db:5e:cd:07:95:2f:92:d4:fd:64:23:38:d1:74:9a:97:54:f8: c6:f4:93:72:ea:a7:ba:7b:d5:e1:dd:d4:ce:ea:e9:1c:46:8c: 36:7b:fe:e5:97:39:94:6e:59:e9:2f:c2:11:6f:ac:3f:21:7a: 28:fe:0d:d3:9c:75:80:4d:de:81:eb:86:ab:58:cc:95:a2:7c: ca:94:87:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWKoolgkiO91gIku2yjDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMzAxMTcwMTAzWhcNMjYwMzAyMTcwMTAzWjAzMTEwLwYDVQQD Eyg4MDk1YTkwMzI3NGMzMjQ5NjY3YTQyNjBlMWI5ZTFmMWI1NmE4ZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmoKq2g+6TT61jQ8j9w0GVsJ6SI1 itakEYEeGnJVdyjZGahOzy7TZ6F9xeSDCKQKoyg+Bi48JGiGOr6ZJmQqkzcUDq1g YX0lnSe6Z6vjkBg/0SAZ7ekd7WndYsep+2R/eKCTdOLtau36301UCJyWwAKznnWu bs6gvU2x4S6IlVNRipjErajPWGS/a/baJF/G1ZOjdCfl2hYLs36hRPc/z0BUk8xx lObkzXPpFZpoiNzj1eag2I6AB4sbCNH1uDfqxuKb23HNDK6P59q+me7niYfs45Cu 8Jho+dzKJDrOxVaMfZ9Ar7PWf2ZfZjeCLZmwQh81wHKXJHEgp3EfAdiViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICVqQMnTDJJZnpCYOG54fG1ao6JMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyAahrXr r/NAcuNEWdedD4oCEebG98uho9gDvm8nLuuzrEGVr6lwnimy9YnqoPszyNXSZTsc TruuxRDK61CQCyF8Oqxh1u+uSlSEoI28Ysir1361bdJgmUgeFR9cM2+cpB3PRdtd tgQUHfCOoMre7S0ThaPv8TYmfyYNp2HV98Ro7EqoSAMeeV9IEemSgJ16sWoCiqZ7 rH60joV5JDFCYdI1rH+Wu6RGJ80iXtfVAbK5FGH2217NB5UvktT9ZCM40XSal1T4 xvSTcuqnunvV4d3UzurpHEaMNnv+5Zc5lG5Z6S/CEW+sPyF6KP4N05x1gE3egeuG q1jMlaJ8ypSHCg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:17 2026 by rpki-client