$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft File: tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json) Hash identifier: zDgnN9MZG92AVF3Daa5+B1nac3TbvBFIiDeym9gQ9WI= Subject key identifier: F6:C5:12:BE:82:C1:B7:C4:A4:D6:B0:5D:45:4D:73:23:85:C4:5D:C3 Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019D25F1EDCC9815F3BD5D72EFC97AA953E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft Manifest number: 0281 Signing time: Wed 25 Mar 2026 17:01:45 +0000 Manifest this update: Wed 25 Mar 2026 17:01:45 +0000 Manifest next update: Thu 26 Mar 2026 17:01:45 +0000 Files and hashes: 1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=) 2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=) 3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=) 4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=) 5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=) 6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=) 7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=) 8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=) 9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=) 10: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=) 11: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=) 12: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=) 13: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=) 14: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=) 15: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=) 16: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=) 17: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=) 18: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=) 19: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=) 20: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=) 21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: 1obllGNjcWeR7BKogg34plPg+hArVmDFx+sc70vdsXg=) 22: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 17:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:ed:cc:98:15:f3:bd:5d:72:ef:c9:7a:a9:53:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Mar 25 17:01:45 2026 GMT Not After : Mar 26 17:01:45 2026 GMT Subject: CN=f6c512be82c1b7c4a4d6b05d454d732385c45dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:a1:cf:f9:3d:33:ca:54:7c:57:b6:57:17: c8:26:f6:86:e7:61:f6:56:df:7f:9b:f0:c4:58:b8: 74:0c:80:66:58:4d:48:62:5a:53:3d:e2:ff:3e:89: ee:21:c6:85:61:f4:2d:99:b5:d3:dd:10:5e:ba:5f: bb:dd:77:78:01:7a:ed:6e:01:57:11:a8:1e:d2:c4: 21:f7:e9:92:74:f8:0a:f8:5d:a2:1c:f1:77:d5:1e: 7c:12:61:8d:2e:73:04:82:35:99:b7:cb:e9:ee:d4: 94:af:30:9d:8e:df:fe:5e:32:03:d5:18:0a:93:4a: d2:95:75:ff:a0:f0:63:1e:1c:9d:52:8e:9f:98:24: e4:bf:cd:88:dd:fd:60:29:71:a9:f4:1e:ce:c4:f8: ff:b9:6c:dd:49:68:aa:d6:e6:cf:df:27:9e:25:3b: ee:22:00:ec:03:76:76:3c:ca:eb:47:b3:31:ec:0d: 41:e4:b2:12:91:f3:1b:4c:07:5b:a1:e3:be:08:a9: aa:a6:52:92:65:1e:16:92:b9:4b:1a:2d:d3:a0:bc: dc:d1:6e:cf:1a:2c:39:a3:ae:b3:88:1a:5b:a3:9b: b0:c6:62:3a:06:37:09:11:bb:71:5d:17:3e:04:8b: 5e:b1:14:d8:b9:9c:00:20:56:ee:18:4f:48:54:d1: 88:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C5:12:BE:82:C1:B7:C4:A4:D6:B0:5D:45:4D:73:23:85:C4:5D:C3 X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bb:0d:bc:b7:c4:26:3b:b6:74:d1:ea:a0:95:42:0c:d1:83: 41:f1:f3:41:1a:5d:e7:a9:33:54:7e:1a:65:da:59:01:6a:cb: 24:61:76:60:d1:dd:5d:1a:d6:41:58:83:64:d6:44:20:82:6f: 2c:90:6c:75:17:64:de:80:94:bf:0a:51:1a:99:6e:cf:2e:4a: 41:a4:ae:3a:c1:a3:16:a0:4b:b8:51:fb:19:56:80:f1:99:0a: b9:5c:b8:7d:ab:90:5d:f2:ee:f0:ea:83:34:1e:60:f1:1f:9d: d5:73:47:99:93:9d:4e:76:96:5a:b2:cd:cb:1d:a7:fb:ae:dc: b0:be:56:e3:98:c8:4c:1f:27:1c:c4:d5:af:e6:3b:6f:83:f2: 38:d4:a5:ae:fd:7b:35:a1:56:e0:01:53:b5:c0:ff:a7:b8:48: 0d:8c:c0:e8:8d:47:f6:52:e9:af:0a:66:49:c0:67:94:f8:25: 1a:ec:f6:9d:9c:b7:a4:e3:ae:29:7f:e5:54:4f:25:43:7e:b4: 76:57:e5:f8:74:87:8f:53:e8:4e:54:97:1f:72:ed:da:44:c2: 9d:a2:db:08:da:2d:e6:28:38:81:95:3e:32:79:dc:3a:f5:ff: 66:e1:e1:8b:43:80:00:bb:c8:a6:37:38:cd:14:00:63:23:02: 7f:13:47:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8e3MmBXzvV1y78l6qVPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMzI1MTcwMTQ1WhcNMjYwMzI2MTcwMTQ1WjAzMTEwLwYDVQQD EyhmNmM1MTJiZTgyYzFiN2M0YTRkNmIwNWQ0NTRkNzMyMzg1YzQ1ZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Iihz/k9M8pUfFe2VxfIJvaG52H2 Vt9/m/DEWLh0DIBmWE1IYlpTPeL/PonuIcaFYfQtmbXT3RBeul+73Xd4AXrtbgFX Eage0sQh9+mSdPgK+F2iHPF31R58EmGNLnMEgjWZt8vp7tSUrzCdjt/+XjID1RgK k0rSlXX/oPBjHhydUo6fmCTkv82I3f1gKXGp9B7OxPj/uWzdSWiq1ubP3yeeJTvu IgDsA3Z2PMrrR7Mx7A1B5LISkfMbTAdboeO+CKmqplKSZR4WkrlLGi3ToLzc0W7P Giw5o66ziBpbo5uwxmI6BjcJEbtxXRc+BItesRTYuZwAIFbuGE9IVNGIPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbFEr6CwbfEpNawXUVNcyOFxF3DMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbsNvLfE Jju2dNHqoJVCDNGDQfHzQRpd56kzVH4aZdpZAWrLJGF2YNHdXRrWQViDZNZEIIJv LJBsdRdk3oCUvwpRGpluzy5KQaSuOsGjFqBLuFH7GVaA8ZkKuVy4fauQXfLu8OqD NB5g8R+d1XNHmZOdTnaWWrLNyx2n+67csL5W45jITB8nHMTVr+Y7b4PyONSlrv17 NaFW4AFTtcD/p7hIDYzA6I1H9lLprwpmScBnlPglGuz2nZy3pOOuKX/lVE8lQ360 dlfl+HSHj1PoTlSXH3Lt2kTCnaLbCNot5ig4gZU+MnncOvX/ZuHhi0OAALvIpjc4 zRQAYyMCfxNH6w== -----END CERTIFICATE-----Generated at Thu Mar 26 05:00:48 2026 by rpki-client