$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json) Hash identifier: P0n9FIHV+v2hxbjGnyVbuKnoxyKME5+sdkiZNb/QMpk= Subject key identifier: E5:38:C0:E5:03:40:CF:DE:A9:C4:0D:31:7D:43:52:7E:A3:99:85:0E Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019D984FF2A27122529CFD2858177C445789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft Manifest number: 1922 Signing time: Thu 16 Apr 2026 22:01:09 +0000 Manifest this update: Thu 16 Apr 2026 22:01:09 +0000 Manifest next update: Fri 17 Apr 2026 22:01:09 +0000 Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: dA9G251mSsdXu/NDNnQkhpNXyqLAxCm09wIzwuiUk5g=) 2: Ag8PtnWef9Jjygitlapzl1WkaOk.roa (hash: 9A+m0ywKHQ9X0yIcDNpMyk+gIgGJO1T1SrWi1hfPGJ4=) 3: Ahsz-tNL3LF_YjxGflfsbWY2EXY.roa (hash: IDB823/zK/udBkADZfcrEWPlrqEtUTwrSKR6Szbuvag=) 4: B6KVvgx5TM8VN3l8pwcEtXd1Zv0.roa (hash: 8nF8dktPdwqwoKApiZ3hvMdTDPbdz2wRKZCsJzWa0NI=) 5: Bz-AfMa85eWkZNOrQ8AduwTrGHk.roa (hash: hYYEh5FGyL5aK//nZPDyJMy19miNyCvxO45xo/IvtK4=) 6: GD4tXWh9oTy1WxS2wPaeKNWcmUI.roa (hash: mBNcX/WqJfjCB2Cyrf9v4sQvKsy+5c3ghnc3nDATeAw=) 7: JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa (hash: UPvHDY+QZmptAo1aMBQZCt3JHBBqlqPm63jjsEBEq9k=) 8: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=) 9: QE7hnRKM-pIX463UZ_tra0EKYOg.roa (hash: fsT9JglSf+xfQNMVUetiVbQpKYSJUuYkpRqKMcd4NGU=) 10: Qgo-jNupET7F8UuDNqpiTrUhr_Q.roa (hash: v6myRWOIyHvBSB5K6wXjkQvrFI1AFI2YvdioGAkLuFI=) 11: QwIS_xAxWtopy8QdyOOJFylqkIU.roa (hash: OfO0CFoPGD7TTheq/CPc7zZN8HOmEOMjrSqe/DUDRF0=) 12: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=) 13: __54GV--xkNhcsWTWR4Sow7KAjk.roa (hash: 5MLv+rLnlx/QUtDdL3D5ql7lHnTAtxpfal6x2OJAn38=) 14: fBTFHnUcRAtyGAdRJfnv6GUqyj8.roa (hash: auv9a0uJJR7wurJYNrtnpCQbXoxt1QEVkQ8kZNtsP2o=) 15: mbIkGihwjuboGIVKC0tZ7oHHPhc.roa (hash: 1Cu0ESEYvBPrRtfmCpvpIDVTZSIKogHdIvPnCiwhpZo=) 16: vGXTEVlZEvvy_OO65LppPnLWzds.roa (hash: qVUACJdOYqZMXJXhZVtMk9bckrNCEf6pmzMIUiKZwR4=) 17: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:4f:f2:a2:71:22:52:9c:fd:28:58:17:7c:44:57:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Apr 16 22:01:09 2026 GMT Not After : Apr 17 22:01:09 2026 GMT Subject: CN=e538c0e50340cfdea9c40d317d43527ea399850e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:34:70:4d:12:42:7e:c6:15:4c:ae:96:7a: 61:ec:4c:a6:bb:77:ee:fa:92:1a:6e:63:57:6c:ba: 97:ea:e4:ed:a5:36:d4:c7:20:ad:65:c2:a7:3f:48: 92:e2:1b:52:05:c4:c1:af:95:8d:fb:b3:f5:42:33: ad:64:44:24:bb:c4:01:23:be:ff:20:cc:9c:6d:b2: a9:d9:b3:a6:57:87:e1:69:4a:a9:54:d3:4f:bc:4f: f6:1f:7c:3d:9c:24:71:fa:27:51:f0:e2:04:3b:af: d6:75:a1:d7:b2:f4:45:42:be:8e:a2:0d:9e:78:42: 11:a2:4b:6f:9b:10:4d:db:a9:28:a0:1b:fa:0c:93: 1e:a9:12:35:07:60:5d:7f:4e:b9:0e:a8:78:d1:f0: aa:01:d7:2c:d1:09:ba:50:bf:39:f6:f9:71:f3:23: a7:99:ec:1e:ba:d4:6b:3f:5e:01:d5:54:6d:f6:2d: 64:a2:0b:38:46:02:fe:bb:c4:2e:62:c8:7d:94:08: 14:0a:51:a2:16:ef:3a:de:48:ba:4a:04:00:19:30: f2:06:f0:d4:57:01:ba:8f:94:c3:64:e1:6a:c6:c2: 01:d1:29:42:b2:24:41:50:c3:8c:a5:8c:0f:ee:48: 56:bb:73:45:18:39:4f:29:30:d5:51:9c:9a:3f:8a: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:38:C0:E5:03:40:CF:DE:A9:C4:0D:31:7D:43:52:7E:A3:99:85:0E X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:28:20:d5:60:43:44:40:cb:d6:6a:ab:a1:ae:fc:cf:27:98: b5:99:d8:13:26:0a:c3:ed:34:41:ea:e1:df:29:5e:34:ee:36: 2f:e1:7b:72:63:3e:71:8c:c7:50:e4:7a:0b:06:b0:76:63:28: 9e:22:f4:5d:90:4e:12:21:7c:09:b7:6e:1c:e2:a5:ec:79:aa: ad:57:04:fa:67:79:db:a9:57:51:af:bc:74:14:89:42:a4:51: bc:3a:f0:45:79:dc:d0:d4:cc:38:d4:fe:a6:02:67:61:ae:78: 9a:79:2b:54:54:ae:58:2a:78:30:c5:1e:65:12:ed:79:19:46: 9b:8a:b9:cd:b0:2d:f9:c6:27:91:aa:6c:ef:60:95:30:e7:76: b9:83:d2:71:58:1b:4b:c0:b1:b3:db:71:0f:e7:49:ad:cd:92: f4:65:4d:f0:9c:a1:b1:6a:72:1f:ef:b7:aa:b0:ab:f5:e6:11: 5b:d2:b8:6e:0e:06:56:0b:58:39:43:1c:76:36:bf:23:8d:cc: dd:07:d9:15:34:9d:bb:83:95:aa:74:46:46:8d:62:12:56:a6: 7d:10:97:29:6d:58:47:b4:f1:3e:63:fb:b2:35:ee:b4:99:4f: 9c:04:7c:e7:0e:5b:38:1d:bd:b6:c3:a9:59:e8:92:51:5f:6d: 11:8d:d6:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YT/KicSJSnP0oWBd8RFeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjYwNDE2MjIwMTA5WhcNMjYwNDE3MjIwMTA5WjAzMTEwLwYDVQQD EyhlNTM4YzBlNTAzNDBjZmRlYTljNDBkMzE3ZDQzNTI3ZWEzOTk4NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxo0cE0SQn7GFUyulnph7Eymu3fu +pIabmNXbLqX6uTtpTbUxyCtZcKnP0iS4htSBcTBr5WN+7P1QjOtZEQku8QBI77/ IMycbbKp2bOmV4fhaUqpVNNPvE/2H3w9nCRx+idR8OIEO6/WdaHXsvRFQr6Oog2e eEIRoktvmxBN26kooBv6DJMeqRI1B2Bdf065Dqh40fCqAdcs0Qm6UL859vlx8yOn meweutRrP14B1VRt9i1kogs4RgL+u8QuYsh9lAgUClGiFu863ki6SgQAGTDyBvDU VwG6j5TDZOFqxsIB0SlCsiRBUMOMpYwP7khWu3NFGDlPKTDVUZyaP4oo6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU4wOUDQM/eqcQNMX1DUn6jmYUOMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSgg1WBD REDL1mqroa78zyeYtZnYEyYKw+00Qerh3yleNO42L+F7cmM+cYzHUOR6CwawdmMo niL0XZBOEiF8CbduHOKl7HmqrVcE+md526lXUa+8dBSJQqRRvDrwRXnc0NTMONT+ pgJnYa54mnkrVFSuWCp4MMUeZRLteRlGm4q5zbAt+cYnkaps72CVMOd2uYPScVgb S8Cxs9txD+dJrc2S9GVN8JyhsWpyH++3qrCr9eYRW9K4bg4GVgtYOUMcdja/I43M 3QfZFTSdu4OVqnRGRo1iElamfRCXKW1YR7TxPmP7sjXutJlPnAR85w5bOB29tsOp WeiSUV9tEY3WgQ== -----END CERTIFICATE-----Generated at Fri Apr 17 03:42:37 2026 by rpki-client