$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: n53hk+bZobLHbpVx4Jcjnv/r+xq+Bh8XP3PBz+E2U8U= Subject key identifier: 15:E4:BD:C5:3F:E0:0E:2E:DF:85:F9:15:C6:EE:C0:C1:90:C9:80:94 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 01A13DEF0E40E8791A4BD8F0B187A7947DAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 17A1 Signing time: Thu 15 Oct 2026 05:00:39 +0000 Manifest this update: Thu 15 Oct 2026 05:00:39 +0000 Manifest next update: Fri 16 Oct 2026 05:00:39 +0000 Files and hashes: 1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=) 2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: 6KYpWAH6ARV4qAS0noyvIVuOvQsecWfAfhMqEyKaMY4=) 3: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=) 4: CiNhwzJsM6ZFV5GCT0q6BXhT6DI.roa (hash: KWZXDRfpaCL2QK5Ff1vICptorEtdR6f4RpWBfQJGxXA=) 5: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=) 6: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=) 7: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=) 8: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=) 9: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=) 10: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=) 11: gkudlEGyzvKioGOIttwgOUCTM10.roa (hash: +/8v705rI0CYapeUgxKV7obdyQ0ff71n7lzoEsW/vus=) 12: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=) 13: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=) 14: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=) 15: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=) 16: qk7uT5aAa_csmyx9Uuzf5YCpEf4.roa (hash: LoXBLhoXU5lN7weMYQ1jPtIKrd6AvSiXKfSjf4AAclo=) 17: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=) 18: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=) 19: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Oct 2026 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:3d:ef:0e:40:e8:79:1a:4b:d8:f0:b1:87:a7:94:7d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Oct 15 05:00:39 2026 GMT Not After : Oct 16 05:00:39 2026 GMT Subject: CN=15e4bdc53fe00e2edf85f915c6eec0c190c98094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:ce:b9:5b:b6:bf:d5:8d:b2:90:da:dc:03: 77:37:eb:95:26:66:55:d3:0c:2e:f8:86:3e:30:21: 94:f5:34:c1:0e:2d:d6:3a:a2:63:14:f0:21:2c:dd: 86:a8:bf:dc:d7:51:87:50:58:43:ce:b4:49:57:65: 8e:9d:5f:1b:1f:d0:da:67:22:50:2a:10:77:77:fb: a3:54:07:6c:b5:66:7a:2b:3a:24:6f:b2:41:c8:e5: 10:3e:f5:6b:5a:69:52:02:7c:db:f8:5a:c1:c4:79: bc:02:6a:a3:00:af:a8:67:98:a8:79:9f:e8:7c:a9: d7:8f:49:ae:bb:ff:ee:dd:17:b0:ef:ea:a6:f2:ec: 4b:54:0d:f0:3b:97:0a:d3:26:4a:a4:af:30:43:38: fc:8c:b2:cb:cf:ba:98:9d:e7:c2:2e:a0:b6:c9:aa: 94:28:68:81:ac:6c:26:8f:87:aa:bf:99:98:2f:b2: 26:fb:a3:ea:31:09:b8:fe:f8:5a:52:0f:0f:42:4e: d2:84:b2:e7:63:fe:38:4a:4a:27:33:9f:c1:48:c6: a8:d8:bc:63:46:f8:8e:90:af:2e:38:97:5b:00:f3: b2:b8:9e:ba:13:b0:f5:9b:6f:2d:64:67:c4:07:5a: ca:58:4b:ee:7c:41:fc:a8:6e:5e:3c:9c:76:b9:40: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E4:BD:C5:3F:E0:0E:2E:DF:85:F9:15:C6:EE:C0:C1:90:C9:80:94 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8d:f6:52:b9:3a:41:35:e8:42:a4:2c:80:da:5a:d7:0d:a6: ad:9f:2d:2a:70:35:f0:59:23:23:00:b7:9b:c6:2b:d0:17:7f: fa:0c:5f:84:e9:a6:f3:e0:22:45:86:f6:cc:83:56:9f:cf:9f: f7:af:0b:d0:4c:5b:b8:6d:9b:64:e7:67:ac:3f:6c:7f:f9:8f: 3d:d8:f1:07:90:f6:d1:e8:bb:ac:72:4a:68:ce:29:23:9f:8a: a2:1e:0b:1a:9e:27:71:bd:bf:74:14:97:af:34:20:ec:18:df: 05:0e:63:fe:0f:19:90:ae:e6:94:d6:ee:40:f8:b9:96:34:5f: b7:d8:47:6e:43:40:bc:e2:be:11:c3:82:7b:62:82:ce:6a:5f: 85:b8:ac:03:9a:10:28:1d:31:68:66:b1:74:49:b4:4a:06:af: 43:b1:27:56:4a:25:9f:d9:f9:57:9d:ee:12:51:9e:18:4a:9f: 64:23:85:fc:7c:72:d0:9e:99:93:7f:14:f6:a8:c1:c3:81:ce: 5e:99:a8:9b:2b:59:6b:ca:d6:dc:73:99:23:d0:46:e0:be:ef: 15:9b:ee:cb:94:c0:bf:22:8b:85:00:cc:ec:db:15:55:5b:51: b0:61:75:de:03:83:a4:4f:74:3c:a1:12:55:2e:74:2b:60:bb: 18:43:08:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE97w5A6HkaS9jwsYenlH2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYxMDE1MDUwMDM5WhcNMjYxMDE2MDUwMDM5WjAzMTEwLwYDVQQD EygxNWU0YmRjNTNmZTAwZTJlZGY4NWY5MTVjNmVlYzBjMTkwYzk4MDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvbOuVu2v9WNspDa3AN3N+uVJmZV 0wwu+IY+MCGU9TTBDi3WOqJjFPAhLN2GqL/c11GHUFhDzrRJV2WOnV8bH9DaZyJQ KhB3d/ujVAdstWZ6Kzokb7JByOUQPvVrWmlSAnzb+FrBxHm8AmqjAK+oZ5ioeZ/o fKnXj0muu//u3Rew7+qm8uxLVA3wO5cK0yZKpK8wQzj8jLLLz7qYnefCLqC2yaqU KGiBrGwmj4eqv5mYL7Im+6PqMQm4/vhaUg8PQk7ShLLnY/44SkonM5/BSMao2Lxj RviOkK8uOJdbAPOyuJ66E7D1m28tZGfEB1rKWEvufEH8qG5ePJx2uUAF7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXkvcU/4A4u34X5FcbuwMGQyYCUMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgI32Urk6 QTXoQqQsgNpa1w2mrZ8tKnA18FkjIwC3m8Yr0Bd/+gxfhOmm8+AiRYb2zINWn8+f 968L0ExbuG2bZOdnrD9sf/mPPdjxB5D20ei7rHJKaM4pI5+Koh4LGp4ncb2/dBSX rzQg7BjfBQ5j/g8ZkK7mlNbuQPi5ljRft9hHbkNAvOK+EcOCe2KCzmpfhbisA5oQ KB0xaGaxdEm0SgavQ7EnVkoln9n5V53uElGeGEqfZCOF/Hxy0J6Zk38U9qjBw4HO XpmomytZa8rW3HOZI9BG4L7vFZvuy5TAvyKLhQDM7NsVVVtRsGF13gODpE90PKES VS50K2C7GEMIOQ== -----END CERTIFICATE-----Generated at Thu Oct 15 14:24:45 2026 by rpki-client