$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: LJw2YLVCI5M7b1tPYKlCcMKjePWQ+ZNdybzzC6rf4Ms= Subject key identifier: 97:9D:30:A6:C0:9B:FC:59:1D:78:C0:3A:15:D3:09:8A:73:06:F4:5E Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 01A1122A06360107E41236FF32C80CA0A862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 1AB8 Signing time: Tue 06 Oct 2026 17:01:46 +0000 Manifest this update: Tue 06 Oct 2026 17:01:46 +0000 Manifest next update: Wed 07 Oct 2026 17:01:46 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 0Va2x4Qd63us7kRWmkpIgs4VavE.roa (hash: mlH17TsTBWEMs6AwiTvf9MSqSgOdSNOB7ebIvjxdVCU=) 3: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 4: 83juuidbqsnUvKpGJHVrEv2JlUA.roa (hash: iXonloz6Sxmjl01Plu1HC3/Q6qL8IKYvIIBaggc6K1Y=) 5: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 6: P-RJvOmpvYO0dFLhiA5cZu2_-80.roa (hash: mofslfkSbsZHnkehkGW2DT11ckBTZLlQswOwkS2bhAg=) 7: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: PTqHqwdM9AXNupiBLrVskNb9hQEbuD/BmxCvviCauP8=) 8: ZVNRgss5mTKJwhbB1mo1GGQyJRE.roa (hash: HjXOusJwIaZmZ+GD57QVPopBj5EraNR3jwZ+HMzM4p0=) 9: bEXar_PDdc_u4-EMnGh7tX0LHVg.roa (hash: tWOJsXIwz8NLZyOMtnHMC60APgOJn7JZ0y3xyIP4Gu4=) 10: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 11: kTrZwWya8vKsPzaTCCVly2aeBF0.roa (hash: GYxaPQmLs3qRxZhpYVXS6A4uk/iHpf3iWjyGg7/VHF4=) 12: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) 13: xEmv6iMzO6ox8HZNasxgI207Ico.roa (hash: hvgnhFfU21tndV9juMrzdngLR+nEgCJ6x3FzWgGB75g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 13:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:12:2a:06:36:01:07:e4:12:36:ff:32:c8:0c:a0:a8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Oct 6 17:01:46 2026 GMT Not After : Oct 7 17:01:46 2026 GMT Subject: CN=979d30a6c09bfc591d78c03a15d3098a7306f45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fb:4c:88:80:4c:dd:1d:d2:2e:1d:8c:e6:3f: a3:65:95:0b:e3:1c:0a:12:4b:13:61:de:7f:ec:49: c3:91:30:4a:c5:45:24:e6:82:c0:86:d1:7a:05:92: 07:88:e7:b6:9a:2d:85:52:91:96:13:09:7b:51:b3: 04:61:79:af:2f:11:bf:8f:0f:6b:ba:11:b9:ef:e5: 0a:82:79:48:21:6f:9c:06:28:53:ee:03:d1:b4:bf: e3:37:ce:d3:8d:74:cc:4c:c4:48:1c:bc:fa:ad:dc: 44:44:c7:37:06:3f:86:39:6a:5b:c4:1d:43:47:af: 7e:e1:cb:8c:03:25:19:d5:77:83:c1:23:3d:86:d3: 6c:3e:1b:d2:11:69:de:63:9e:dd:b3:fa:58:a7:05: 61:db:de:94:40:f5:ea:7e:14:c0:19:fc:c2:53:dd: bc:37:43:2e:a3:15:23:31:e1:7c:f2:4a:c4:5c:5f: 0c:07:6a:f3:fd:06:91:48:94:1b:4f:bb:14:64:fd: bc:f8:56:e8:05:93:16:0f:c5:91:0b:f8:23:df:aa: 8c:af:f6:54:7f:19:31:24:e6:b5:8b:0d:c5:2c:84: e8:0c:58:5f:d5:ef:bc:ee:cc:1e:7d:10:83:25:0d: 62:4f:2f:96:c4:48:47:26:cc:2b:8b:d9:25:39:57: 08:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9D:30:A6:C0:9B:FC:59:1D:78:C0:3A:15:D3:09:8A:73:06:F4:5E X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:bb:d8:2e:ac:ea:b2:cd:e0:9a:f2:9e:82:e0:0a:ac:5d:6b: 6a:fc:79:e5:31:ea:4b:8e:1e:88:d5:d0:87:6b:d6:d4:3d:cc: 0b:19:a6:3f:f8:4e:72:b2:ca:75:65:5d:24:fb:41:aa:17:b9: 22:1d:51:54:2a:49:bf:e7:8b:5e:8d:41:df:be:25:bb:63:4b: 8e:9c:b1:28:0a:e7:81:2f:92:43:94:23:0d:e4:9e:eb:45:67: fb:3c:26:f6:77:25:08:69:9f:5f:16:d0:47:b9:82:b9:9d:a3: dd:63:af:2f:09:93:cb:76:bf:09:df:46:f5:6f:e8:e1:81:d5: e0:a7:d9:13:eb:e6:da:bb:d6:e6:04:f1:f3:41:bf:ab:bf:56: 23:c0:35:f7:c1:bd:98:f9:05:bf:67:0b:37:91:d8:ad:3d:80: 5a:19:77:bf:9e:2a:8c:64:21:3b:2b:51:85:30:c0:ad:79:01: db:02:cd:1e:67:e6:09:74:5b:ce:ac:3e:d3:5b:0b:0d:d6:e7: 94:0e:2f:dd:9b:a2:1c:35:05:0b:50:34:c8:e5:40:2e:ba:ff: 01:ea:58:bb:b0:63:90:8f:84:50:23:d2:47:d5:b8:2d:4f:39: f9:b6:ee:17:11:2a:64:50:a4:97:4f:da:ad:d2:fe:2c:14:81: c5:9a:89:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaESKgY2AQfkEjb/MsgMoKhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYxMDA2MTcwMTQ2WhcNMjYxMDA3MTcwMTQ2WjAzMTEwLwYDVQQD Eyg5NzlkMzBhNmMwOWJmYzU5MWQ3OGMwM2ExNWQzMDk4YTczMDZmNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvtMiIBM3R3SLh2M5j+jZZUL4xwK EksTYd5/7EnDkTBKxUUk5oLAhtF6BZIHiOe2mi2FUpGWEwl7UbMEYXmvLxG/jw9r uhG57+UKgnlIIW+cBihT7gPRtL/jN87TjXTMTMRIHLz6rdxERMc3Bj+GOWpbxB1D R69+4cuMAyUZ1XeDwSM9htNsPhvSEWneY57ds/pYpwVh296UQPXqfhTAGfzCU928 N0MuoxUjMeF88krEXF8MB2rz/QaRSJQbT7sUZP28+FboBZMWD8WRC/gj36qMr/ZU fxkxJOa1iw3FLIToDFhf1e+87swefRCDJQ1iTy+WxEhHJswri9klOVcInQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJedMKbAm/xZHXjAOhXTCYpzBvReMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLvYLqzq ss3gmvKeguAKrF1ravx55THqS44eiNXQh2vW1D3MCxmmP/hOcrLKdWVdJPtBqhe5 Ih1RVCpJv+eLXo1B374lu2NLjpyxKArngS+SQ5QjDeSe60Vn+zwm9nclCGmfXxbQ R7mCuZ2j3WOvLwmTy3a/Cd9G9W/o4YHV4KfZE+vm2rvW5gTx80G/q79WI8A198G9 mPkFv2cLN5HYrT2AWhl3v54qjGQhOytRhTDArXkB2wLNHmfmCXRbzqw+01sLDdbn lA4v3ZuiHDUFC1A0yOVALrr/AepYu7BjkI+EUCPSR9W4LU85+bbuFxEqZFCkl0/a rdL+LBSBxZqJJA== -----END CERTIFICATE-----Generated at Tue Oct 6 21:25:41 2026 by rpki-client