$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: gtOYQueQkF6BRl840Ab0873xtKiLTkjqiLJMtw47730= Subject key identifier: EF:E8:E5:8A:B3:64:68:F8:E5:AE:40:80:07:E2:5B:C9:7C:2E:17:48 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019D2AA98DD935F4B59873DA409570234A19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 18AD Signing time: Thu 26 Mar 2026 15:00:48 +0000 Manifest this update: Thu 26 Mar 2026 15:00:48 +0000 Manifest next update: Fri 27 Mar 2026 15:00:48 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 1-mot6mikLp_MDl0b7kmHUwF8vnM.roa (hash: XgWK76sOAKa1F05WWdrvMpLFcLfu8IIa8P7y+0SOUIQ=) 3: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 4: 5CBz7J_rxqKIErWJdNCTyxWORk4.roa (hash: NgQqsHixRjLE1PxJ9k04+GOCbvcPmM6kd6jLKzVPJ4A=) 5: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 6: CxwFpKnVRB1YipI_w1rOdL2Rr_0.roa (hash: Sqj7uyxBPWvN499fr3Zl2IE3H+X3USQ46cvMPtYbWbI=) 7: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: eGNKSomVeUTRKPGT3pHGTsqAFj67G/9poCONW7dbsy8=) 8: bEXar_PDdc_u4-EMnGh7tX0LHVg.roa (hash: tWOJsXIwz8NLZyOMtnHMC60APgOJn7JZ0y3xyIP4Gu4=) 9: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 10: o4wjR8pZMB50VMWQpLsPi-iVTDE.roa (hash: ATIz3XapJ04NxEJg4iAdFVY462a3mfpQBCW4sSM6kew=) 11: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) 12: oW0C-k4390azUSS_-13XzI_AVfY.roa (hash: rzcyrGergvNW2GLz+g1GX+/P72a2swYsTQgABXmO4lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:a9:8d:d9:35:f4:b5:98:73:da:40:95:70:23:4a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Mar 26 15:00:48 2026 GMT Not After : Mar 27 15:00:48 2026 GMT Subject: CN=efe8e58ab36468f8e5ae408007e25bc97c2e1748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:10:9d:a8:56:44:dd:fd:c6:f0:1a:e1:79: 4b:b9:56:f5:32:73:52:7a:cb:35:c7:79:8e:3e:65: 96:9a:58:32:60:73:8b:37:75:e3:1f:e2:4e:45:a4: 40:f0:68:4c:ac:8e:a3:7d:98:53:58:01:71:f7:8b: ae:3c:76:ba:a5:7d:e0:5e:88:51:b5:9e:ec:95:92: f6:11:02:4c:d7:d8:79:a3:17:83:6a:79:a1:84:e6: 79:63:88:4c:04:de:ef:c4:6f:76:4b:45:45:33:64: 8e:48:b0:23:1f:eb:aa:f7:1d:45:74:91:8c:88:f2: ef:ba:0a:02:72:5d:7c:22:cf:07:21:00:92:bf:0c: c5:df:17:5d:55:0d:e6:04:87:82:70:db:06:b2:f5: cb:1b:02:1d:1c:02:ad:81:68:f2:96:1b:67:52:bd: 86:72:62:85:0e:52:6f:6d:81:b7:01:73:57:b5:de: bd:79:ba:6d:c5:4c:b4:d4:f1:cc:40:93:20:5b:23: 13:db:88:4b:17:1c:0e:f4:a7:c5:e1:9e:33:a4:08: 31:ad:d4:90:eb:46:89:55:69:ea:08:8e:59:62:b0: fe:8f:21:26:bf:09:15:e4:00:8f:28:17:b6:0a:6a: 30:ce:6f:38:6c:8b:2e:34:9b:58:82:d8:89:cf:6c: eb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E8:E5:8A:B3:64:68:F8:E5:AE:40:80:07:E2:5B:C9:7C:2E:17:48 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1f:cf:3c:40:9c:cd:bc:cd:60:b9:d2:75:dd:4b:72:df:06: 8d:c8:75:94:51:a3:72:96:0e:5e:3f:f6:2f:99:20:a3:20:98: 18:f2:82:d1:3f:a1:c7:78:67:87:c9:68:70:1d:e5:23:92:47: 11:05:dc:e4:a8:f1:7a:2b:5c:66:ad:06:27:e6:4a:86:87:b8: 6c:0e:15:e9:f3:88:9e:20:00:76:ff:66:f4:45:ac:9c:d0:ca: 2f:8c:a2:9e:d1:b0:77:c9:4b:8e:55:80:de:aa:b6:81:cd:ff: 80:40:28:5f:ac:fb:56:84:93:13:50:fd:08:7a:f7:57:0f:b4: ed:bc:e9:5b:25:12:6b:fc:10:d1:2f:a4:5c:e8:f6:96:65:8e: 7f:63:d4:8a:7d:13:75:ce:b3:4a:42:8b:b1:0e:40:85:2a:56: e0:75:e9:91:9e:6a:2a:64:88:dd:32:b9:c3:37:a4:bc:8d:d2: 79:56:d4:91:eb:85:f2:c8:a8:29:90:c0:e3:b1:f7:12:3f:e6: c5:f9:30:21:3c:97:a5:6b:e2:3c:a9:f7:59:df:e1:ae:79:e8: 37:35:47:e2:99:6e:12:b3:a2:ca:52:e2:82:86:90:eb:82:69: a2:c6:47:dc:85:c3:bb:11:30:b6:6b:c5:ae:c0:04:81:e3:ac: 75:db:7f:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qqY3ZNfS1mHPaQJVwI0oZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMzI2MTUwMDQ4WhcNMjYwMzI3MTUwMDQ4WjAzMTEwLwYDVQQD EyhlZmU4ZTU4YWIzNjQ2OGY4ZTVhZTQwODAwN2UyNWJjOTdjMmUxNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO0QnahWRN39xvAa4XlLuVb1MnNS ess1x3mOPmWWmlgyYHOLN3XjH+JORaRA8GhMrI6jfZhTWAFx94uuPHa6pX3gXohR tZ7slZL2EQJM19h5oxeDanmhhOZ5Y4hMBN7vxG92S0VFM2SOSLAjH+uq9x1FdJGM iPLvugoCcl18Is8HIQCSvwzF3xddVQ3mBIeCcNsGsvXLGwIdHAKtgWjylhtnUr2G cmKFDlJvbYG3AXNXtd69ebptxUy01PHMQJMgWyMT24hLFxwO9KfF4Z4zpAgxrdSQ 60aJVWnqCI5ZYrD+jyEmvwkV5ACPKBe2Cmowzm84bIsuNJtYgtiJz2zrGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/o5YqzZGj45a5AgAfiW8l8LhdIMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGh/PPECc zbzNYLnSdd1Lct8Gjch1lFGjcpYOXj/2L5kgoyCYGPKC0T+hx3hnh8locB3lI5JH EQXc5KjxeitcZq0GJ+ZKhoe4bA4V6fOIniAAdv9m9EWsnNDKL4yintGwd8lLjlWA 3qq2gc3/gEAoX6z7VoSTE1D9CHr3Vw+07bzpWyUSa/wQ0S+kXOj2lmWOf2PUin0T dc6zSkKLsQ5AhSpW4HXpkZ5qKmSI3TK5wzekvI3SeVbUkeuF8sioKZDA47H3Ej/m xfkwITyXpWviPKn3Wd/hrnnoNzVH4pluErOiylLigoaQ64JposZH3IXDuxEwtmvF rsAEgeOsddt/tQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:16 2026 by rpki-client