$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: tAJrDcQHtxp8y2Kd2z889puRK4lcH/rA2C/0LsLneNU= Subject key identifier: 04:A6:5A:C9:F2:D7:9F:3F:AC:4C:B7:97:C8:E7:A8:47:E8:D3:F0:8A Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019CA869D73408E67BF47CD7DAC48A416C1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 1857 Signing time: Sun 01 Mar 2026 08:00:34 +0000 Manifest this update: Sun 01 Mar 2026 08:00:34 +0000 Manifest next update: Mon 02 Mar 2026 08:00:34 +0000 Files and hashes: 1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=) 5: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 6: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=) 7: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 8: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: tJ6CsFLQC3qP1PvLhAuSheVi+YvQda5BgEsep9nMocM=) 9: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=) 10: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=) 11: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:69:d7:34:08:e6:7b:f4:7c:d7:da:c4:8a:41:6c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Mar 1 08:00:34 2026 GMT Not After : Mar 2 08:00:34 2026 GMT Subject: CN=04a65ac9f2d79f3fac4cb797c8e7a847e8d3f08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ba:53:25:59:7d:77:c1:73:67:f1:f9:b3:b1: a9:b0:9d:4b:37:00:4b:68:ab:69:6c:6c:cb:e0:04: 4a:9b:e6:2c:94:66:f2:1a:9d:e5:db:fd:a9:ff:77: fd:e0:72:d4:8c:6f:59:c4:95:38:a3:d5:b0:9e:66: 5e:8e:04:17:7c:42:c3:19:0b:17:0d:07:8b:7a:5c: 82:b4:7e:fe:f7:76:d8:64:4c:ed:ee:8a:ab:aa:e7: 16:ec:15:cb:f9:e6:1a:7a:8a:8b:3e:ab:2f:ee:8f: 2d:79:56:51:c4:bd:3f:14:60:df:d9:6d:44:fb:ad: 36:32:73:b7:c2:da:c5:e6:eb:4a:10:a6:97:82:d0: 45:68:68:36:59:e5:c2:a9:53:09:3b:37:d5:53:58: d2:76:ce:57:0e:e6:0d:c8:5c:fa:3a:a9:f1:67:f4: dc:89:34:39:b4:22:8d:6f:08:39:c5:22:0e:7b:eb: 09:08:11:61:0b:c6:a5:21:df:82:a8:54:61:f5:fe: 6b:3c:67:58:9a:9d:f6:6e:4d:2e:02:1a:dd:ba:8e: 53:cd:25:7d:18:a9:62:de:a4:03:83:8f:9e:00:39: b3:3e:70:d7:86:ea:f6:51:b0:fb:37:5f:16:94:fd: b2:03:1d:77:0d:21:d8:d2:1a:e2:02:8e:36:fd:26: c7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A6:5A:C9:F2:D7:9F:3F:AC:4C:B7:97:C8:E7:A8:47:E8:D3:F0:8A X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:51:28:39:52:62:fe:3c:d7:73:03:94:73:dd:69:ff:f1:f6: 18:54:2c:bb:90:35:9a:bd:0f:42:1f:23:94:bd:9c:1d:c4:ee: da:f0:7d:c5:26:30:fb:8f:ed:64:16:d8:5b:d4:27:db:7f:25: ed:d6:a9:d3:64:f8:57:55:5f:60:56:a9:b6:e1:d9:cb:d4:91: 04:54:24:d4:b6:4a:1a:d1:cd:6d:3c:e6:67:24:5e:7a:1a:75: 5c:22:4f:14:d9:77:1d:a2:af:d0:e4:a5:0b:b3:84:4b:c7:47: a0:46:85:07:3f:d9:5a:0a:27:6e:6f:f5:b0:a0:ce:28:4e:44: 43:0b:f5:99:b4:72:85:ef:36:02:29:4b:93:b4:73:e0:61:e6: cd:e1:49:ad:bc:21:1c:25:0e:e9:47:e4:a9:c4:68:7b:33:41: 3f:24:52:49:b5:dd:66:04:eb:cc:5e:a6:20:76:58:b2:d2:9c: f0:93:9b:44:01:72:ac:f2:a0:ca:5c:fe:4c:5f:ba:c3:6b:d6: 6f:77:7f:e5:42:fe:96:a6:2f:ba:ef:e6:49:87:4f:ea:7a:b1: d4:c6:d4:74:1d:ac:3c:43:df:cf:20:67:5f:f2:3f:91:69:1c: dc:06:c3:67:7d:8f:cf:dd:2c:82:97:ac:24:cc:a2:40:9e:c2: f3:b5:e6:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyoadc0COZ79HzX2sSKQWwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwMzAxMDgwMDM0WhcNMjYwMzAyMDgwMDM0WjAzMTEwLwYDVQQD EygwNGE2NWFjOWYyZDc5ZjNmYWM0Y2I3OTdjOGU3YTg0N2U4ZDNmMDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLpTJVl9d8FzZ/H5s7GpsJ1LNwBL aKtpbGzL4ARKm+YslGbyGp3l2/2p/3f94HLUjG9ZxJU4o9WwnmZejgQXfELDGQsX DQeLelyCtH7+93bYZEzt7oqrqucW7BXL+eYaeoqLPqsv7o8teVZRxL0/FGDf2W1E +602MnO3wtrF5utKEKaXgtBFaGg2WeXCqVMJOzfVU1jSds5XDuYNyFz6OqnxZ/Tc iTQ5tCKNbwg5xSIOe+sJCBFhC8alId+CqFRh9f5rPGdYmp32bk0uAhrduo5TzSV9 GKli3qQDg4+eADmzPnDXhur2UbD7N18WlP2yAx13DSHY0hriAo42/SbHewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASmWsny158/rEy3l8jnqEfo0/CKMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlEoOVJi /jzXcwOUc91p//H2GFQsu5A1mr0PQh8jlL2cHcTu2vB9xSYw+4/tZBbYW9Qn238l 7dap02T4V1VfYFaptuHZy9SRBFQk1LZKGtHNbTzmZyReehp1XCJPFNl3HaKv0OSl C7OES8dHoEaFBz/ZWgonbm/1sKDOKE5EQwv1mbRyhe82AilLk7Rz4GHmzeFJrbwh HCUO6UfkqcRoezNBPyRSSbXdZgTrzF6mIHZYstKc8JObRAFyrPKgylz+TF+6w2vW b3d/5UL+lqYvuu/mSYdP6nqx1MbUdB2sPEPfzyBnX/I/kWkc3AbDZ32Pz90sgpes JMyiQJ7C87Xm7w== -----END CERTIFICATE-----Generated at Sun Mar 1 18:23:58 2026 by rpki-client