$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft File: TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json) Hash identifier: 6/r/DMGVOJmb7w9dIrlNQfGug4mYidK13G46Swp/ve4= Subject key identifier: 52:71:C9:EC:06:F9:7A:08:C9:CF:15:87:49:C5:27:CD:E6:6D:93:66 Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 01A1DBDCF5D02319524764E9F6E6D1F031B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft Manifest number: 1B0F Signing time: Sat 14 Nov 2026 21:00:53 +0000 Manifest this update: Sat 14 Nov 2026 21:00:53 +0000 Manifest next update: Sun 15 Nov 2026 21:00:53 +0000 Files and hashes: 1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=) 2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=) 3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=) 4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=) 5: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=) 6: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=) 7: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=) 8: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=) 9: Nla7agBLtLBhUJYd4BSJ_hHjtsA.roa (hash: 3XkBRCU+2mmzvrPuLVGji3H2f7WDbAO7Zku6UbrWiI4=) 10: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: 8xOMYaThHLdGoTCj8IfmONk+Hoggj0OWN0+CropY1jc=) 11: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=) 12: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=) 13: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=) 14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=) 15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=) 16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=) 17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=) 18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=) 19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=) 20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=) 21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:dc:f5:d0:23:19:52:47:64:e9:f6:e6:d1:f0:31:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Nov 14 21:00:53 2026 GMT Not After : Nov 15 21:00:53 2026 GMT Subject: CN=5271c9ec06f97a08c9cf158749c527cde66d9366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:14:6c:9f:5a:57:17:c3:94:f1:13:f7:78:ef: 0e:d1:68:db:22:86:17:83:15:ad:da:95:e2:b8:b2: 4c:38:2b:c8:60:18:5f:64:8a:c8:d9:39:d6:7f:2c: 5a:90:3c:6f:ae:b8:08:f7:a8:bc:92:36:4d:0b:60: 25:78:21:2f:52:8a:db:5f:7c:97:cb:b5:5f:78:29: da:83:c1:fa:7d:64:a1:f4:f1:fd:91:e0:82:ce:db: b2:15:0d:20:2b:77:d7:c0:20:c8:84:cf:17:95:c5: 7b:ca:50:67:10:1f:f7:09:02:4d:9e:f1:a1:5e:e5: b6:af:e4:20:50:75:e3:2d:de:d0:32:cb:e8:a4:ab: e3:16:60:9b:46:93:9a:d6:ac:77:45:d5:fc:7c:ca: a5:11:e2:f5:13:07:45:73:5a:62:c4:8a:24:e3:77: 1a:34:43:d9:04:f3:68:93:6d:9f:61:05:1c:2f:1c: 13:a3:3c:53:f4:82:c7:dd:88:71:ea:9c:8b:00:3f: 4e:d6:6f:d6:f4:46:a1:b0:f2:e3:b7:a5:e4:fe:c1: bc:46:82:5e:b1:87:e1:9e:6f:d1:3d:19:ce:99:f7: f3:be:a5:a4:f1:55:dd:e8:4c:ae:fc:c9:bc:c3:db: 8f:b1:b3:ff:d6:e8:5d:3b:0f:21:24:49:c6:cd:b2: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:71:C9:EC:06:F9:7A:08:C9:CF:15:87:49:C5:27:CD:E6:6D:93:66 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:aa:3a:15:c6:fd:23:37:4f:d9:32:37:06:77:14:7a:59:4e: c2:11:5b:00:16:91:b4:f0:b0:ff:a3:59:0b:1d:fd:89:f1:25: 7d:93:96:d5:a9:43:e9:17:a8:fe:80:a2:53:07:0e:a8:78:2f: 5a:c7:28:06:d3:7c:35:85:d2:3a:ae:65:bc:14:ae:9f:a7:c6: fc:ea:fc:fb:c1:9f:ea:b8:ec:f9:3e:e7:33:1e:19:71:34:27: e5:0e:13:06:07:16:5b:5e:26:a8:3e:20:eb:f2:ab:a3:6c:bf: b5:66:27:c2:c2:8d:08:6d:69:3f:54:dc:05:29:4d:a5:12:41: 3b:d2:2a:dd:32:f9:9f:d2:41:98:b8:b6:f8:5f:f2:5d:3b:ee: 06:e6:7c:65:ba:e7:5f:bd:4a:5a:56:01:55:95:61:96:52:6c: f9:77:d3:3c:a3:83:f7:3e:9c:ae:fd:aa:78:23:50:8b:50:53: 9b:fa:ca:b7:d4:44:d7:e0:5f:53:fe:8c:cb:58:c9:27:92:c3: 4c:16:72:d6:14:60:c3:00:7f:e1:27:d2:5a:c7:b4:af:e0:ca: 41:85:4e:d3:20:a0:9d:51:9c:0b:10:f0:9b:73:cf:77:29:ff: 9d:7f:ac:a9:d6:38:f2:8f:3d:5a:e3:92:b6:3e:e9:e1:a8:73: 70:cf:bc:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHb3PXQIxlSR2Tp9ubR8DG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYxMTE0MjEwMDUzWhcNMjYxMTE1MjEwMDUzWjAzMTEwLwYDVQQD Eyg1MjcxYzllYzA2Zjk3YTA4YzljZjE1ODc0OWM1MjdjZGU2NmQ5MzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xRsn1pXF8OU8RP3eO8O0WjbIoYX gxWt2pXiuLJMOCvIYBhfZIrI2TnWfyxakDxvrrgI96i8kjZNC2AleCEvUorbX3yX y7VfeCnag8H6fWSh9PH9keCCztuyFQ0gK3fXwCDIhM8XlcV7ylBnEB/3CQJNnvGh XuW2r+QgUHXjLd7QMsvopKvjFmCbRpOa1qx3RdX8fMqlEeL1EwdFc1pixIok43ca NEPZBPNok22fYQUcLxwTozxT9ILH3Yhx6pyLAD9O1m/W9EahsPLjt6Xk/sG8RoJe sYfhnm/RPRnOmffzvqWk8VXd6Eyu/Mm8w9uPsbP/1uhdOw8hJEnGzbLjXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJxyewG+XoIyc8Vh0nFJ83mbZNmMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA16o6Fcb9 IzdP2TI3BncUellOwhFbABaRtPCw/6NZCx39ifElfZOW1alD6Reo/oCiUwcOqHgv WscoBtN8NYXSOq5lvBSun6fG/Or8+8Gf6rjs+T7nMx4ZcTQn5Q4TBgcWW14mqD4g 6/Kro2y/tWYnwsKNCG1pP1TcBSlNpRJBO9Iq3TL5n9JBmLi2+F/yXTvuBuZ8Zbrn X71KWlYBVZVhllJs+XfTPKOD9z6crv2qeCNQi1BTm/rKt9RE1+BfU/6My1jJJ5LD TBZy1hRgwwB/4SfSWse0r+DKQYVO0yCgnVGcCxDwm3PPdyn/nX+sqdY48o89WuOS tj7p4ahzcM+8Kg== -----END CERTIFICATE-----Generated at Sun Nov 15 02:53:12 2026 by rpki-client