$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: KXm7Srx60z7UPsWZkj5fvNC9igRkIhn4mBIwc4R6R4g= Subject key identifier: 19:86:FB:92:B7:A3:F2:A8:59:F3:E5:81:38:98:DD:1A:1B:C7:E5:C4 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019D27728500FAFC91BB972E82653343C34A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 189D Signing time: Thu 26 Mar 2026 00:01:49 +0000 Manifest this update: Thu 26 Mar 2026 00:01:49 +0000 Manifest next update: Fri 27 Mar 2026 00:01:49 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 3: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 4: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 5: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 6: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 7: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 8: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: HD2PdBKRUwEv3t9NVKB9+yQDp3UlZw+dQwB8+cMZVJE=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:85:00:fa:fc:91:bb:97:2e:82:65:33:43:c3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Mar 26 00:01:49 2026 GMT Not After : Mar 27 00:01:49 2026 GMT Subject: CN=1986fb92b7a3f2a859f3e5813898dd1a1bc7e5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:86:74:dc:a6:c1:06:fd:6c:8e:d0:96:37: 0b:38:93:71:6c:da:36:d8:51:41:18:73:4a:a4:ce: f4:55:6a:87:d8:27:bb:97:3e:aa:2d:6f:0b:38:a1: 7c:a6:60:e2:c2:da:7d:4b:0a:0c:86:08:cd:a1:f7: 8a:7a:f9:80:08:57:6a:96:a0:34:8f:2d:66:78:e0: 3b:21:ed:b7:2a:9b:ee:30:b0:1d:37:e3:36:c4:35: e4:ad:07:ae:8f:77:f5:8a:3d:0a:e3:cc:0f:91:c7: 50:2d:ca:fc:48:20:15:b1:e0:0d:c3:d9:96:ca:e2: 03:44:25:41:55:6f:c2:1e:04:7e:ae:02:4d:fd:ef: 9d:06:b1:7b:ac:7d:97:ee:b0:c9:09:6e:b3:39:78: 79:91:69:ee:78:a3:eb:4d:3e:54:86:7d:12:9d:d3: 2e:b5:e1:3c:3a:f8:b2:99:3c:60:a0:7e:c9:ea:d5: c0:3c:21:29:ae:d6:4d:87:b6:13:58:02:f1:28:97: 6b:7d:e3:17:0b:e6:40:79:d3:2f:f6:f1:3e:2b:ba: 0a:57:e4:1d:97:0d:ae:30:64:c4:26:89:e5:e1:74: 6d:ff:3a:9b:8d:73:12:93:7e:d7:c2:53:e4:65:dc: 3d:63:b3:5f:77:8a:34:5f:b8:7b:1c:16:3f:a9:1f: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:86:FB:92:B7:A3:F2:A8:59:F3:E5:81:38:98:DD:1A:1B:C7:E5:C4 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:84:49:fd:33:a0:3f:79:b6:87:0f:21:20:80:18:f6:c1:d4: 0c:33:48:a4:f6:d0:27:7f:b6:2e:fd:fb:97:09:52:aa:7d:3c: 92:3c:c1:53:33:c1:8d:81:c1:3e:f0:fc:b8:45:49:bc:4b:af: 9d:a6:3b:92:23:97:7d:1f:42:fb:57:c7:d6:2d:ff:ca:2b:8e: 93:0a:4f:21:4c:23:ea:35:c0:ef:25:d6:5f:b6:ed:d8:94:02: c1:a6:04:f4:47:f3:85:db:45:10:4b:3a:ee:47:a4:3d:02:50: c1:bf:fd:13:5d:3d:26:39:7a:6b:c2:d4:6f:b1:dd:2f:95:51: b0:00:08:01:45:49:4c:c1:73:e0:5a:e4:62:12:3d:04:5a:44: 1f:ad:a0:ad:66:c8:bb:05:26:ef:30:f0:a8:29:30:52:ba:57: ce:d4:d0:57:ed:bf:e5:94:84:89:b7:79:0d:d8:ae:ee:7e:45: 0d:a5:e1:f0:0d:d4:15:ea:c1:b8:c7:6f:4b:86:9f:b0:85:d3: 34:95:2c:a4:9f:93:b3:a9:4d:af:02:d4:1c:47:c6:f3:f8:cd: 9a:81:1b:ad:22:14:90:08:81:4e:8d:4d:e5:05:9f:be:d0:5f: 3a:84:09:bb:0e:65:ee:07:57:94:c3:73:87:bb:6a:5e:fa:46: 52:5e:2c:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncoUA+vyRu5cugmUzQ8NKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwMzI2MDAwMTQ5WhcNMjYwMzI3MDAwMTQ5WjAzMTEwLwYDVQQD EygxOTg2ZmI5MmI3YTNmMmE4NTlmM2U1ODEzODk4ZGQxYTFiYzdlNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgCGdNymwQb9bI7QljcLOJNxbNo2 2FFBGHNKpM70VWqH2Ce7lz6qLW8LOKF8pmDiwtp9SwoMhgjNofeKevmACFdqlqA0 jy1meOA7Ie23KpvuMLAdN+M2xDXkrQeuj3f1ij0K48wPkcdQLcr8SCAVseANw9mW yuIDRCVBVW/CHgR+rgJN/e+dBrF7rH2X7rDJCW6zOXh5kWnueKPrTT5Uhn0SndMu teE8OviymTxgoH7J6tXAPCEprtZNh7YTWALxKJdrfeMXC+ZAedMv9vE+K7oKV+Qd lw2uMGTEJonl4XRt/zqbjXMSk37XwlPkZdw9Y7Nfd4o0X7h7HBY/qR9ohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmG+5K3o/KoWfPlgTiY3Robx+XEMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoRJ/TOg P3m2hw8hIIAY9sHUDDNIpPbQJ3+2Lv37lwlSqn08kjzBUzPBjYHBPvD8uEVJvEuv naY7kiOXfR9C+1fH1i3/yiuOkwpPIUwj6jXA7yXWX7bt2JQCwaYE9EfzhdtFEEs6 7kekPQJQwb/9E109Jjl6a8LUb7HdL5VRsAAIAUVJTMFz4FrkYhI9BFpEH62grWbI uwUm7zDwqCkwUrpXztTQV+2/5ZSEibd5Ddiu7n5FDaXh8A3UFerBuMdvS4afsIXT NJUspJ+Ts6lNrwLUHEfG8/jNmoEbrSIUkAiBTo1N5QWfvtBfOoQJuw5l7gdXlMNz h7tqXvpGUl4sug== -----END CERTIFICATE-----Generated at Thu Mar 26 12:17:16 2026 by rpki-client