$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: YmGPgCARFO4uSV1ntZZGpVA/Cf6WxO3mNIiXx1tgtwE= Subject key identifier: 69:A9:C7:C2:C3:29:59:5B:FA:76:F6:A9:CA:77:80:BD:72:D2:13:84 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019CADFE4096355C3220793C812291119840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 1540 Signing time: Mon 02 Mar 2026 10:00:46 +0000 Manifest this update: Mon 02 Mar 2026 10:00:46 +0000 Manifest next update: Tue 03 Mar 2026 10:00:46 +0000 Files and hashes: 1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=) 2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: bMNMm1DVbRyC20Ml1vPmaPEJQwBugeP90qBI6cqfATI=) 3: 7pQQkDgyHd9o7yqZVlBZ4xtQ0fY.roa (hash: xZK00iWUDxNKvXeXgverCH60vwnzNexd4AxkHPVf2aU=) 4: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=) 5: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=) 6: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=) 7: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=) 8: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=) 9: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=) 10: PE77Z5wen-eVZ16iGf2_1c1Jaws.roa (hash: h7zUrN0KBvEcmYXd1dCIRMPxZTqT4501CRk4u67n9zo=) 11: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=) 12: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=) 13: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=) 14: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=) 15: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=) 16: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=) 17: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=) 18: qLE7D4CG3mYVkl8oS9Fzc5SexMc.roa (hash: JyfpyyKWFy47CPyUQtytdwQPJBc0llD8HdRl1HrFy6k=) 19: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=) 20: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=) 21: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:fe:40:96:35:5c:32:20:79:3c:81:22:91:11:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Mar 2 10:00:46 2026 GMT Not After : Mar 3 10:00:46 2026 GMT Subject: CN=69a9c7c2c329595bfa76f6a9ca7780bd72d21384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:cf:26:9e:cc:ed:e7:93:0b:c5:e0:78:23: 9a:7d:8f:71:c1:59:d2:ce:7c:70:24:34:fb:30:91: 26:df:b7:8b:45:ea:9a:81:6d:dc:5f:e4:51:2c:c3: 1c:43:ea:31:61:1f:ed:fa:a3:8c:32:85:52:9c:41: 90:8f:b1:32:48:28:d3:8c:d9:7f:74:b4:a5:1c:6d: 80:3a:43:e8:85:46:01:74:0b:27:6e:df:b1:b7:39: f6:f5:e8:a5:64:b4:58:d3:26:4f:3b:69:02:90:08: 2e:8d:84:73:73:4e:3a:5c:f5:be:55:85:05:1c:02: 1b:a9:b8:0c:d9:53:4c:6f:ca:11:69:e7:17:9a:fa: a1:c5:a1:87:2f:5f:f5:69:83:34:41:3d:58:84:db: a6:89:fb:44:7a:bf:7d:c9:59:5e:23:d5:2e:a3:0b: 40:25:04:24:2a:49:25:fb:df:0c:c9:72:e5:ba:9a: 95:05:ef:85:c8:7d:70:65:dc:48:62:16:8f:59:d2: cb:12:dd:7d:ea:33:14:cd:c0:4d:5a:10:8b:3b:b5: d5:ff:ad:08:bf:39:13:10:0c:17:32:ce:c0:a2:d4: 0b:3f:df:2d:35:79:c0:cc:54:62:e3:41:05:7d:75: 73:af:a5:13:68:74:73:fa:d7:60:3d:63:24:a2:ff: 50:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A9:C7:C2:C3:29:59:5B:FA:76:F6:A9:CA:77:80:BD:72:D2:13:84 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2e:03:fd:48:44:07:ff:a3:2c:6b:b4:50:83:1d:c2:a9:aa: 71:7a:56:c8:c9:bd:6b:66:e7:91:e0:43:75:18:e2:de:a9:0d: 72:c7:42:65:fd:f4:6e:11:ad:08:4a:5f:df:6f:75:67:8a:d9: 41:f3:f5:29:bd:21:37:9c:60:f1:1e:b9:fe:2d:45:c5:1e:c1: 40:33:1b:e0:19:c7:c0:ca:95:4d:88:48:76:ff:7e:07:51:c6: 37:0c:c6:c9:46:57:ce:75:a0:81:f0:3e:b2:55:48:aa:ef:80: 7e:9a:a1:ca:29:60:b9:27:38:3d:3f:57:ac:e5:b2:b8:4c:20: 67:5b:3d:44:61:78:41:fb:f9:89:47:f4:7a:1f:fc:a3:35:59: 2d:67:d8:c6:30:8d:e7:29:fd:f2:e0:5b:da:fa:f5:87:e4:53: 15:af:e5:8b:d2:4a:c7:65:e4:f0:35:00:1d:ed:17:0b:ed:09: cf:0c:78:fb:92:51:64:e4:4f:de:be:b5:60:ab:95:f4:9c:5f: 95:25:c6:b1:dd:46:54:7d:d2:f0:48:08:d8:59:08:52:42:e2: dd:c3:25:7c:b5:92:1c:09:ee:17:74:73:cb:9e:7f:ed:2f:7b: b9:14:50:97:86:b9:66:e9:00:e2:fe:1d:2f:97:c2:f0:5a:bd: 6a:85:36:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyt/kCWNVwyIHk8gSKREZhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMzAyMTAwMDQ2WhcNMjYwMzAzMTAwMDQ2WjAzMTEwLwYDVQQD Eyg2OWE5YzdjMmMzMjk1OTViZmE3NmY2YTljYTc3ODBiZDcyZDIxMzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn/PJp7M7eeTC8XgeCOafY9xwVnS znxwJDT7MJEm37eLReqagW3cX+RRLMMcQ+oxYR/t+qOMMoVSnEGQj7EySCjTjNl/ dLSlHG2AOkPohUYBdAsnbt+xtzn29eilZLRY0yZPO2kCkAgujYRzc046XPW+VYUF HAIbqbgM2VNMb8oRaecXmvqhxaGHL1/1aYM0QT1YhNumiftEer99yVleI9UuowtA JQQkKkkl+98MyXLlupqVBe+FyH1wZdxIYhaPWdLLEt196jMUzcBNWhCLO7XV/60I vzkTEAwXMs7AotQLP98tNXnAzFRi40EFfXVzr6UTaHRz+tdgPWMkov9QCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmpx8LDKVlb+nb2qcp3gL1y0hOEMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi4D/UhE B/+jLGu0UIMdwqmqcXpWyMm9a2bnkeBDdRji3qkNcsdCZf30bhGtCEpf3291Z4rZ QfP1Kb0hN5xg8R65/i1FxR7BQDMb4BnHwMqVTYhIdv9+B1HGNwzGyUZXznWggfA+ slVIqu+AfpqhyilguSc4PT9XrOWyuEwgZ1s9RGF4Qfv5iUf0eh/8ozVZLWfYxjCN 5yn98uBb2vr1h+RTFa/li9JKx2Xk8DUAHe0XC+0Jzwx4+5JRZORP3r61YKuV9Jxf lSXGsd1GVH3S8EgI2FkIUkLi3cMlfLWSHAnuF3Rzy55/7S97uRRQl4a5ZukA4v4d L5fC8Fq9aoU2jg== -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:22 2026 by rpki-client