$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: 2D2Hv39OKCFK1eJE6pMdrI49WvHmBzAxLYSC6BTx6EY= Subject key identifier: 8A:58:83:DA:5E:D6:06:7F:81:D3:9E:B9:16:08:38:33:53:7B:6F:40 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019FAAF59A9368AC9E049FDE0A324E7F193D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 16CD Signing time: Tue 28 Jul 2026 23:00:50 +0000 Manifest this update: Tue 28 Jul 2026 23:00:50 +0000 Manifest next update: Wed 29 Jul 2026 23:00:50 +0000 Files and hashes: 1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=) 2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: gZcTJjvskxU5O1s7byA/7r+C2ctB6aL5xSDKA+BQQU0=) 3: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=) 4: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=) 5: CiNhwzJsM6ZFV5GCT0q6BXhT6DI.roa (hash: KWZXDRfpaCL2QK5Ff1vICptorEtdR6f4RpWBfQJGxXA=) 6: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=) 7: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=) 8: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=) 9: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=) 10: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=) 11: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=) 12: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=) 13: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=) 14: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=) 15: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=) 16: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=) 17: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=) 18: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=) 19: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=) 20: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:9a:93:68:ac:9e:04:9f:de:0a:32:4e:7f:19:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jul 28 23:00:50 2026 GMT Not After : Jul 29 23:00:50 2026 GMT Subject: CN=8a5883da5ed6067f81d39eb916083833537b6f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c1:02:1b:c9:0c:1a:1e:ad:12:d1:cb:d5:62: f5:e1:7f:16:f5:54:8b:45:0c:a3:3e:42:71:bc:07: 03:3c:63:0c:91:0d:6d:dc:f3:07:4b:a7:28:b8:df: b4:e6:69:a6:a8:dd:23:2b:8a:30:80:64:de:34:c0: ce:1c:a4:a6:af:91:af:a7:82:7c:db:ff:73:af:8c: db:1f:0f:db:f8:8d:c5:e3:58:41:38:37:89:b9:52: 67:4f:1b:39:a8:a8:38:68:fe:b8:87:0f:68:8b:65: 0c:09:b2:03:8d:74:da:53:98:fa:da:28:3f:7c:69: d8:40:0b:35:c2:32:a4:16:b5:e5:d0:17:04:ce:fd: 2e:a2:ff:ee:f4:9b:7a:81:d4:7e:26:ec:9f:78:2b: 34:82:92:01:d4:cb:12:48:ef:53:c9:46:6e:e9:47: 8b:3b:66:50:2e:7e:08:82:0a:ce:c0:5e:f0:9c:93: 4f:b0:3f:df:c8:ce:98:65:a5:5a:b6:af:bf:1d:45: ae:06:9c:75:1f:1d:25:bc:e8:f1:95:6b:f5:e4:09: 0a:91:40:39:41:8d:8e:86:aa:06:98:69:3e:8f:d5: 30:c1:07:94:29:21:a7:7e:cd:38:12:fb:ad:7c:fb: 1b:2d:7f:91:9f:2a:68:b9:3d:1b:9f:14:be:af:b0: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:58:83:DA:5E:D6:06:7F:81:D3:9E:B9:16:08:38:33:53:7B:6F:40 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9b:68:db:82:4f:62:3d:d3:3a:cc:27:75:8d:54:ab:0a:4b: 85:09:89:cc:10:22:1d:2f:bb:a1:f7:5b:e8:69:da:69:27:85: df:90:ff:24:3a:41:46:c7:55:1b:f9:09:26:1c:fb:d3:7e:32: 20:7c:fc:6c:ee:17:9f:65:b4:a3:73:24:15:a1:8a:aa:e6:2f: e8:a0:b6:ca:99:55:c0:f7:9e:7e:8b:ba:4c:26:ba:44:d6:c0: aa:d8:8b:68:34:c9:00:94:45:fe:9c:08:37:2e:a4:40:45:d7: 5e:74:c8:c0:40:31:f2:ad:57:1e:f8:32:ac:bf:32:cf:95:14: 82:e5:28:70:85:79:50:b3:ea:32:b9:96:24:3b:c5:08:96:91: cf:b4:73:bb:58:be:c7:f2:e1:78:78:29:36:2b:6d:f9:d9:88: aa:85:f1:80:32:88:3b:65:59:f0:57:f0:e1:18:4f:c4:77:03: 3f:00:27:7b:e4:e4:3a:e8:76:9b:ba:64:f2:64:bd:4c:a7:f6: 12:51:30:eb:33:71:49:23:3d:e3:53:ce:bd:e0:dc:a0:65:ee: d2:5a:4d:43:ed:ac:68:bb:3d:93:fa:16:ca:9a:21:d9:b8:1b: 10:f9:c1:58:7c:f6:62:85:0c:90:bf:fe:1d:a8:19:9b:b0:ce: a8:2b:66:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9ZqTaKyeBJ/eCjJOfxk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwNzI4MjMwMDUwWhcNMjYwNzI5MjMwMDUwWjAzMTEwLwYDVQQD Eyg4YTU4ODNkYTVlZDYwNjdmODFkMzllYjkxNjA4MzgzMzUzN2I2ZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8ECG8kMGh6tEtHL1WL14X8W9VSL RQyjPkJxvAcDPGMMkQ1t3PMHS6couN+05mmmqN0jK4owgGTeNMDOHKSmr5Gvp4J8 2/9zr4zbHw/b+I3F41hBODeJuVJnTxs5qKg4aP64hw9oi2UMCbIDjXTaU5j62ig/ fGnYQAs1wjKkFrXl0BcEzv0uov/u9Jt6gdR+JuyfeCs0gpIB1MsSSO9TyUZu6UeL O2ZQLn4IggrOwF7wnJNPsD/fyM6YZaVatq+/HUWuBpx1Hx0lvOjxlWv15AkKkUA5 QY2OhqoGmGk+j9UwwQeUKSGnfs04EvutfPsbLX+RnypouT0bnxS+r7DSJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpYg9pe1gZ/gdOeuRYIODNTe29AMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5to24JP Yj3TOswndY1UqwpLhQmJzBAiHS+7ofdb6GnaaSeF35D/JDpBRsdVG/kJJhz7034y IHz8bO4Xn2W0o3MkFaGKquYv6KC2yplVwPeefou6TCa6RNbAqtiLaDTJAJRF/pwI Ny6kQEXXXnTIwEAx8q1XHvgyrL8yz5UUguUocIV5ULPqMrmWJDvFCJaRz7Rzu1i+ x/LheHgpNitt+dmIqoXxgDKIO2VZ8Ffw4RhPxHcDPwAne+TkOuh2m7pk8mS9TKf2 ElEw6zNxSSM941POveDcoGXu0lpNQ+2saLs9k/oWypoh2bgbEPnBWHz2YoUMkL/+ HagZm7DOqCtmPA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:12:46 2026 by rpki-client