$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: 0IkT/NA9RvNWMnyhW5HpX6dG7D7Ln6V180wPRhwul3o= Subject key identifier: 5E:F1:7E:94:7A:51:0B:DD:A6:1F:5C:65:F8:EC:1D:3C:56:76:C3:DE Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019D9BE7E4EA17A651C4FC74301BB9732E63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 15BC Signing time: Fri 17 Apr 2026 14:45:58 +0000 Manifest this update: Fri 17 Apr 2026 14:45:58 +0000 Manifest next update: Sat 18 Apr 2026 14:45:58 +0000 Files and hashes: 1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=) 2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: /wsZtCl56Ln9IUgXNPtR4LVf6r/840nJO0njh5+kR+c=) 3: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=) 4: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=) 5: CiNhwzJsM6ZFV5GCT0q6BXhT6DI.roa (hash: KWZXDRfpaCL2QK5Ff1vICptorEtdR6f4RpWBfQJGxXA=) 6: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=) 7: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=) 8: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=) 9: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=) 10: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=) 11: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=) 12: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=) 13: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=) 14: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=) 15: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=) 16: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=) 17: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=) 18: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=) 19: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=) 20: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:e7:e4:ea:17:a6:51:c4:fc:74:30:1b:b9:73:2e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Apr 17 14:45:58 2026 GMT Not After : Apr 18 14:45:58 2026 GMT Subject: CN=5ef17e947a510bdda61f5c65f8ec1d3c5676c3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:51:88:cc:f1:cd:4d:3b:9a:9f:c8:8b:23:a9: fc:d3:9b:9d:96:c3:29:b1:35:6f:c9:ca:2d:c8:8d: cd:de:50:44:68:4f:7a:2c:b9:f7:d6:6e:ec:be:9f: 2d:23:c7:a9:a2:56:b9:b6:6e:37:cb:b6:f0:e2:de: 7c:89:27:23:7c:5f:6a:ac:c6:9e:0c:6d:d9:aa:cb: 68:ae:24:71:ac:48:30:30:4e:6a:53:3b:5e:e5:ad: e3:17:08:2b:17:c7:91:a1:18:26:fa:7e:f7:26:f1: c6:af:fc:32:64:eb:10:ef:6d:5a:48:1c:a5:75:02: 16:28:0f:47:5e:ef:04:3a:9c:44:9d:16:2e:12:e6: f3:21:82:41:8b:d0:d8:04:87:84:c7:36:86:90:0d: 80:dd:85:76:1b:7f:14:fa:3b:8f:39:f0:ae:8a:ca: 91:44:e3:a7:cc:8b:d4:10:40:25:93:f7:09:7e:42: 50:7c:83:5d:e1:8a:44:b2:67:00:1f:e8:69:f9:2e: 32:5f:60:46:00:67:84:b9:5a:a4:1a:a5:01:1e:e6: 98:4d:ee:c3:2c:84:c4:bd:1e:15:8f:62:15:a0:c9: 54:3f:45:c5:22:aa:5e:21:df:4f:dc:bc:0b:b7:f3: 34:92:c0:7f:a5:2b:cc:05:c3:94:15:05:2f:3d:22: 4c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F1:7E:94:7A:51:0B:DD:A6:1F:5C:65:F8:EC:1D:3C:56:76:C3:DE X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6e:47:0c:9c:0c:36:b1:6c:c7:91:1c:fa:12:c6:38:8c:33: 16:a9:00:1c:54:0a:f1:c6:ab:ab:9b:95:18:f5:c1:b7:eb:16: 0a:2d:ca:88:8c:73:1c:67:32:a3:52:99:87:df:4f:34:79:5b: 77:f7:53:65:b6:1e:ed:d9:be:80:83:39:0b:ce:b9:b3:83:c4: cb:4b:ed:77:61:d7:10:67:b9:dd:d5:86:cc:08:65:62:0b:e4: ef:23:d7:51:03:c9:65:c1:eb:d3:60:29:7b:20:80:76:0d:d7: b9:71:f7:27:ad:6a:b3:a3:f3:d6:4f:9c:f8:54:82:9c:c3:11: 59:30:03:cb:b4:87:e6:e1:67:a8:73:fd:3f:da:95:3b:9c:4b: eb:a4:ce:de:d0:9a:7a:2a:7b:50:02:8f:ba:1e:e6:06:0c:2f: 2d:26:2e:cb:05:ef:ed:ee:ce:9d:c7:9a:16:a9:b3:a2:3b:56: 7b:c1:16:fe:dc:0e:40:aa:c4:0b:a4:d5:2b:89:f9:16:cd:2a: e5:9e:2a:f9:89:32:22:64:8c:f4:ce:60:5f:1e:06:cf:2a:63: e1:57:18:03:2f:ae:d6:b4:20:20:fc:a1:63:66:45:0a:d9:b1: 97:4d:61:e1:21:05:60:da:5c:fb:39:f0:cb:0d:6d:f5:c1:31: 0f:57:2c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2b5+TqF6ZRxPx0MBu5cy5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwNDE3MTQ0NTU4WhcNMjYwNDE4MTQ0NTU4WjAzMTEwLwYDVQQD Eyg1ZWYxN2U5NDdhNTEwYmRkYTYxZjVjNjVmOGVjMWQzYzU2NzZjM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VGIzPHNTTuan8iLI6n805udlsMp sTVvycotyI3N3lBEaE96LLn31m7svp8tI8epola5tm43y7bw4t58iScjfF9qrMae DG3ZqstoriRxrEgwME5qUzte5a3jFwgrF8eRoRgm+n73JvHGr/wyZOsQ721aSByl dQIWKA9HXu8EOpxEnRYuEubzIYJBi9DYBIeExzaGkA2A3YV2G38U+juPOfCuisqR ROOnzIvUEEAlk/cJfkJQfINd4YpEsmcAH+hp+S4yX2BGAGeEuVqkGqUBHuaYTe7D LITEvR4Vj2IVoMlUP0XFIqpeId9P3LwLt/M0ksB/pSvMBcOUFQUvPSJMNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7xfpR6UQvdph9cZfjsHTxWdsPeMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMm5HDJwM NrFsx5Ec+hLGOIwzFqkAHFQK8carq5uVGPXBt+sWCi3KiIxzHGcyo1KZh99PNHlb d/dTZbYe7dm+gIM5C865s4PEy0vtd2HXEGe53dWGzAhlYgvk7yPXUQPJZcHr02Ap eyCAdg3XuXH3J61qs6Pz1k+c+FSCnMMRWTADy7SH5uFnqHP9P9qVO5xL66TO3tCa eip7UAKPuh7mBgwvLSYuywXv7e7OnceaFqmzojtWe8EW/twOQKrEC6TVK4n5Fs0q 5Z4q+YkyImSM9M5gXx4Gzypj4VcYAy+u1rQgIPyhY2ZFCtmxl01h4SEFYNpc+znw yw1t9cExD1csaA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:24:30 2026 by rpki-client