$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: 4iFLQjCLYyHebBWClpq3lKDp7beC/Hhnh2YFwaEStYE= Subject key identifier: 0C:E2:BA:ED:E4:FF:0B:64:0E:8E:A2:5A:07:DA:45:8E:49:86:A9:48 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019D28BBBB6DB6EF426AAE5B68B8EF1A858E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 18AC Signing time: Thu 26 Mar 2026 06:01:24 +0000 Manifest this update: Thu 26 Mar 2026 06:01:24 +0000 Manifest next update: Fri 27 Mar 2026 06:01:24 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 1-mot6mikLp_MDl0b7kmHUwF8vnM.roa (hash: XgWK76sOAKa1F05WWdrvMpLFcLfu8IIa8P7y+0SOUIQ=) 3: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 4: 5CBz7J_rxqKIErWJdNCTyxWORk4.roa (hash: NgQqsHixRjLE1PxJ9k04+GOCbvcPmM6kd6jLKzVPJ4A=) 5: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 6: CxwFpKnVRB1YipI_w1rOdL2Rr_0.roa (hash: Sqj7uyxBPWvN499fr3Zl2IE3H+X3USQ46cvMPtYbWbI=) 7: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: a+csz8w0Z+OOgLn4YMB7hOL948U1JEkDIILZlKn6r+g=) 8: bEXar_PDdc_u4-EMnGh7tX0LHVg.roa (hash: tWOJsXIwz8NLZyOMtnHMC60APgOJn7JZ0y3xyIP4Gu4=) 9: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 10: o4wjR8pZMB50VMWQpLsPi-iVTDE.roa (hash: ATIz3XapJ04NxEJg4iAdFVY462a3mfpQBCW4sSM6kew=) 11: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) 12: oW0C-k4390azUSS_-13XzI_AVfY.roa (hash: rzcyrGergvNW2GLz+g1GX+/P72a2swYsTQgABXmO4lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:bb:6d:b6:ef:42:6a:ae:5b:68:b8:ef:1a:85:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Mar 26 06:01:24 2026 GMT Not After : Mar 27 06:01:24 2026 GMT Subject: CN=0ce2baede4ff0b640e8ea25a07da458e4986a948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:18:82:0a:30:5b:68:6f:88:1c:82:ec:d3: b9:10:7b:08:05:26:5a:6f:87:7a:d8:cb:7d:9d:d4: 9c:08:e1:ad:52:35:38:be:87:82:79:dd:37:f3:ad: 5a:f0:62:57:6c:b4:2f:9b:98:54:17:32:8f:26:99: 97:0e:53:6c:eb:7f:9f:2d:37:2c:88:8e:cd:a6:76: df:d5:9e:03:48:8d:83:36:50:ac:27:13:e1:f2:e3: fc:d7:48:f7:2b:85:01:59:98:46:0a:36:ca:20:e0: 6a:21:36:64:6b:52:ff:96:cd:77:89:d9:70:f6:fa: d6:3a:37:96:75:66:a0:9e:b9:96:34:af:94:13:10: 8f:03:37:6f:2a:dd:07:cb:57:68:cf:45:31:2a:5e: 4c:8d:9e:15:dd:83:2a:d9:30:4e:2d:62:ef:bb:7f: 25:ac:14:b4:87:ac:e3:26:04:ff:85:52:2b:3c:28: 2e:2d:be:a4:e4:d7:11:cb:d2:73:9b:90:57:29:ab: 91:eb:93:7c:16:e0:f9:86:53:b7:2e:1c:cc:09:db: 15:85:7f:81:c7:ca:78:25:98:4d:d3:a7:a0:c6:6f: 0f:48:34:e3:dd:89:3d:59:f1:ff:54:8b:41:97:18: a2:09:2b:61:e4:e1:de:93:44:c7:83:88:cc:34:9e: 2c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E2:BA:ED:E4:FF:0B:64:0E:8E:A2:5A:07:DA:45:8E:49:86:A9:48 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:84:c0:69:d0:46:22:00:99:e3:0d:8e:ec:98:82:55:7c:be: 72:1a:4a:cf:70:2d:6c:16:7b:71:a5:04:31:c3:81:c4:a6:cc: 20:51:46:6c:6d:97:f8:ec:2c:2c:31:c7:96:25:7a:5b:42:19: b6:3d:9f:57:ea:2e:72:e2:3b:5c:8e:d5:30:cb:17:eb:b0:0b: e9:07:7e:75:ea:3c:19:d9:b2:a2:19:95:12:82:db:30:68:70: 61:e2:78:18:e4:63:20:3b:fc:1f:02:01:65:f4:71:76:0d:fb: 69:f2:5e:7b:68:de:d2:c4:d9:10:e8:6e:64:dd:ae:a2:2e:1a: a9:ba:56:7d:88:0a:9f:2f:67:0c:b9:70:b4:29:23:65:32:6a: 5a:69:94:fd:7e:f5:08:cb:f5:76:a2:d8:19:d0:83:67:ac:16: 1a:16:39:34:c4:2d:e4:eb:87:8d:ab:a9:ce:bc:87:67:db:42: 8f:16:e1:6c:2e:c3:36:aa:22:fa:07:53:6b:f6:2f:a9:4c:f2: ab:15:16:6b:fd:59:90:ab:a1:64:2a:05:0c:ec:f0:68:18:e4: b2:38:df:72:d2:ff:50:a3:bd:e4:00:fb:f7:2b:68:ca:3f:83: 31:7e:9f:4e:b8:c2:8e:18:68:6e:3a:8b:94:d7:16:cc:8c:3c: fc:17:1b:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou7tttu9Caq5baLjvGoWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMzI2MDYwMTI0WhcNMjYwMzI3MDYwMTI0WjAzMTEwLwYDVQQD EygwY2UyYmFlZGU0ZmYwYjY0MGU4ZWEyNWEwN2RhNDU4ZTQ5ODZhOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9cYggowW2hviByC7NO5EHsIBSZa b4d62Mt9ndScCOGtUjU4voeCed03861a8GJXbLQvm5hUFzKPJpmXDlNs63+fLTcs iI7Npnbf1Z4DSI2DNlCsJxPh8uP810j3K4UBWZhGCjbKIOBqITZka1L/ls13idlw 9vrWOjeWdWagnrmWNK+UExCPAzdvKt0Hy1doz0UxKl5MjZ4V3YMq2TBOLWLvu38l rBS0h6zjJgT/hVIrPCguLb6k5NcRy9Jzm5BXKauR65N8FuD5hlO3LhzMCdsVhX+B x8p4JZhN06egxm8PSDTj3Yk9WfH/VItBlxiiCSth5OHek0THg4jMNJ4sMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAziuu3k/wtkDo6iWgfaRY5JhqlIMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYTAadBG IgCZ4w2O7JiCVXy+chpKz3AtbBZ7caUEMcOBxKbMIFFGbG2X+OwsLDHHliV6W0IZ tj2fV+oucuI7XI7VMMsX67AL6Qd+deo8GdmyohmVEoLbMGhwYeJ4GORjIDv8HwIB ZfRxdg37afJee2je0sTZEOhuZN2uoi4aqbpWfYgKny9nDLlwtCkjZTJqWmmU/X71 CMv1dqLYGdCDZ6wWGhY5NMQt5OuHjaupzryHZ9tCjxbhbC7DNqoi+gdTa/YvqUzy qxUWa/1ZkKuhZCoFDOzwaBjksjjfctL/UKO95AD79ytoyj+DMX6fTrjCjhhobjqL lNcWzIw8/BcbZg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:06:19 2026 by rpki-client