$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json) Hash identifier: 8UjT4XF8//+P6QEzWlrmkj+RPQDkWMCz4d/xpPTY83k= Subject key identifier: 18:B1:B9:BD:95:25:7A:89:0C:C4:6C:FA:A1:8A:10:63:A9:03:04:61 Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019CAB6B828D1F76694C82B867E81CE0F209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft Manifest number: 1896 Signing time: Sun 01 Mar 2026 22:01:15 +0000 Manifest this update: Sun 01 Mar 2026 22:01:15 +0000 Manifest next update: Mon 02 Mar 2026 22:01:15 +0000 Files and hashes: 1: 29Rv_UEl6-ilxixgPbwouEBeR9I.roa (hash: NqpV6epyV/V/BxqmnDQYUJhls660HR8Q3Pqa7VupQfg=) 2: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: znbjU/edNauH8ep9LXpY4qg/sFkyMfNPaHyLMCGYpeA=) 3: AAWvDfwb2jQSUWa9BYHOOcjPqc8.roa (hash: TG2n+ec91o1/npZ11uH5oNK4E3sR3ZKcNMfWgBS+6WU=) 4: Ahsz-tNL3LF_YjxGflfsbWY2EXY.roa (hash: IDB823/zK/udBkADZfcrEWPlrqEtUTwrSKR6Szbuvag=) 5: B6KVvgx5TM8VN3l8pwcEtXd1Zv0.roa (hash: 8nF8dktPdwqwoKApiZ3hvMdTDPbdz2wRKZCsJzWa0NI=) 6: BOOJwgifZtRIWDuJkBxvnWoyiJ0.roa (hash: V/G6nvIlcZvYbQSr2QvCL0JgCDmAS2PVZl2IojBI82Y=) 7: JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa (hash: UPvHDY+QZmptAo1aMBQZCt3JHBBqlqPm63jjsEBEq9k=) 8: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=) 9: Ucca3RaZdjMWnn67R04BLea-ttU.roa (hash: CzJfRjlyJl7P43rMU8tIstGzfSxyVareresLUP4UMaU=) 10: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=) 11: aMYCwmkdSXX4ZfDKhC1rWAMOjYI.roa (hash: nmzakxTfwrDVurY8/As0jECtOIx0LqRTcRnAOJxRKNk=) 12: b5PQ0LP3dQvaroi8uqIK4qRY8fE.roa (hash: XUgOw13/DeGWuBII7wDdMVowQZGJyVYWSAsGuDpvOtw=) 13: dmSFnJG8tpUAWfzyfkfxeOXBvEw.roa (hash: 2mYA9QNq//dbjFbk3bWUMlFN1KuLEJxjVXMiQX0jL5Q=) 14: m7EcG31gk4Uw0te4eJF9ztt2Hng.roa (hash: gFwk97kClWvXn+FH8Ous9hr20EHIEHjhNxf5KUqro/8=) 15: vGXTEVlZEvvy_OO65LppPnLWzds.roa (hash: qVUACJdOYqZMXJXhZVtMk9bckrNCEf6pmzMIUiKZwR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:6b:82:8d:1f:76:69:4c:82:b8:67:e8:1c:e0:f2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Mar 1 22:01:15 2026 GMT Not After : Mar 2 22:01:15 2026 GMT Subject: CN=18b1b9bd95257a890cc46cfaa18a1063a9030461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:b8:29:38:f3:65:68:3d:5b:c0:2a:83:77: 28:20:2e:3e:ec:c5:9c:e7:8e:e8:ac:e1:b4:ff:89: d8:ef:8d:ba:0a:3a:21:25:a8:f8:04:4f:4d:39:d3: a6:97:9b:9e:0d:85:f3:20:31:3c:e2:8e:bb:97:76: d0:69:0c:e9:5f:ca:11:42:0c:2e:10:bd:8d:63:c0: 6a:87:b0:95:09:09:01:18:6c:9f:be:0a:42:9a:ae: ab:1d:da:ed:26:34:17:20:dc:a0:cc:0f:98:75:07: 23:7f:76:33:6c:a8:e1:f3:20:b2:19:dd:81:8b:5a: cc:8d:32:cd:fc:27:af:17:5b:7c:0c:17:a2:c7:46: e5:fb:dc:db:80:fc:c6:a2:c1:11:1b:2c:87:80:7c: ef:52:a5:2c:57:7c:83:9f:c1:b3:f1:02:dd:8f:70: 9c:43:9b:28:56:b9:32:a8:3d:9c:0f:e0:9c:4e:97: 0b:21:8c:17:6c:f0:83:25:bd:30:a4:2c:f9:e1:a6: 0d:af:52:69:07:7c:96:eb:fe:e0:47:ce:01:15:de: 77:52:57:46:3e:bd:d0:f8:ad:a1:55:67:55:ac:06: 29:7a:4a:47:22:f0:ef:80:48:e3:0c:61:08:86:9b: ff:94:3c:cf:70:7e:ef:13:83:8f:b9:46:db:e7:bf: 33:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B1:B9:BD:95:25:7A:89:0C:C4:6C:FA:A1:8A:10:63:A9:03:04:61 X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:7f:40:8b:c8:6d:a1:39:68:db:6c:49:a9:12:77:28:cd:c1: 28:f4:ea:ec:d7:86:a4:2f:3b:e7:b4:00:fa:79:52:25:01:44: 3e:a1:eb:f6:d1:80:2c:83:58:e4:b1:51:50:c6:3f:51:3e:58: 42:80:b1:ae:aa:c6:89:52:4b:08:cb:98:82:89:b8:35:56:d7: cc:3b:0f:db:5d:ed:0f:0f:ae:9d:0a:dc:96:d3:95:88:0c:5a: da:cb:fc:bb:79:3a:13:32:f0:19:b6:e8:0c:78:e2:31:a0:0a: 86:04:1a:8d:34:4c:d0:bf:f5:23:ba:b9:50:22:4c:09:41:b8: bd:94:39:a2:24:8a:4f:f2:64:88:7b:1a:7d:aa:e7:b4:49:b5: 25:ef:d5:01:ec:55:82:e5:e6:1d:11:39:3f:a6:e0:d6:bc:71: d6:88:ba:d9:bf:a5:a8:e2:9c:f4:5f:f6:5b:52:62:6f:f3:18: d0:e4:48:e5:67:53:db:a1:52:87:77:82:6d:5f:5e:8a:00:38: f8:b0:75:f1:6e:e9:53:1e:86:73:53:f4:ec:dc:3f:1d:23:08: 44:f2:fe:c4:78:98:66:40:9f:3d:fb:1b:6f:a7:89:68:b5:ad: 12:06:38:de:c6:19:8c:c9:f2:7c:68:f9:dd:6d:19:86:ad:03: fd:1c:98:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyra4KNH3ZpTIK4Z+gc4PIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjYwMzAxMjIwMTE1WhcNMjYwMzAyMjIwMTE1WjAzMTEwLwYDVQQD EygxOGIxYjliZDk1MjU3YTg5MGNjNDZjZmFhMThhMTA2M2E5MDMwNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucG4KTjzZWg9W8Aqg3coIC4+7MWc 547orOG0/4nY7426CjohJaj4BE9NOdOml5ueDYXzIDE84o67l3bQaQzpX8oRQgwu EL2NY8Bqh7CVCQkBGGyfvgpCmq6rHdrtJjQXINygzA+YdQcjf3YzbKjh8yCyGd2B i1rMjTLN/CevF1t8DBeix0bl+9zbgPzGosERGyyHgHzvUqUsV3yDn8Gz8QLdj3Cc Q5soVrkyqD2cD+CcTpcLIYwXbPCDJb0wpCz54aYNr1JpB3yW6/7gR84BFd53UldG Pr3Q+K2hVWdVrAYpekpHIvDvgEjjDGEIhpv/lDzPcH7vE4OPuUbb578zZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBixub2VJXqJDMRs+qGKEGOpAwRhMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFn9Ai8ht oTlo22xJqRJ3KM3BKPTq7NeGpC8757QA+nlSJQFEPqHr9tGALINY5LFRUMY/UT5Y QoCxrqrGiVJLCMuYgom4NVbXzDsP213tDw+unQrcltOViAxa2sv8u3k6EzLwGbbo DHjiMaAKhgQajTRM0L/1I7q5UCJMCUG4vZQ5oiSKT/JkiHsafarntEm1Je/VAexV guXmHRE5P6bg1rxx1oi62b+lqOKc9F/2W1Jib/MY0ORI5WdT26FSh3eCbV9eigA4 +LB18W7pUx6Gc1P07Nw/HSMIRPL+xHiYZkCfPfsbb6eJaLWtEgY43sYZjMnyfGj5 3W0Zhq0D/RyYUA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:33:54 2026 by rpki-client