$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: TYH+Gw4/ZZ+SsSWYJpHmGruLexF5K/XlxUnSueGbREY= Subject key identifier: 86:5D:D6:74:57:51:E8:6F:3B:ED:EF:15:59:95:2F:22:A1:56:30:A1 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019D28F31A3964EF85E70647B6BFAE777544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 1891 Signing time: Thu 26 Mar 2026 07:01:53 +0000 Manifest this update: Thu 26 Mar 2026 07:01:53 +0000 Manifest next update: Fri 27 Mar 2026 07:01:53 +0000 Files and hashes: 1: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=) 2: cz3i4996YniCM04uBoqxYULZ1OE.roa (hash: nyw3jhYkbjvahgBCKXr44jUJF3r/xMEzYzkBBzdxVio=) 3: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=) 4: dzLIS_uUBmT5ML31y6NFSMyd71k.roa (hash: DlezeaLLQKyU+Fuzh+ngOJx/wOMos/kw2vfD167ugl8=) 5: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=) 6: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=) 7: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=) 8: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: 4bcyLkIFQ6ab5W1TKKNKo+bshh8TWn752MUjjw6iElU=) 9: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=) 10: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 07:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:f3:1a:39:64:ef:85:e7:06:47:b6:bf:ae:77:75:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Mar 26 07:01:53 2026 GMT Not After : Mar 27 07:01:53 2026 GMT Subject: CN=865dd6745751e86f3bedef1559952f22a15630a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:c8:fc:7e:cc:de:07:19:8a:d0:2c:0a:44: 1c:08:70:24:54:7d:57:6d:63:73:e6:ab:a1:83:e3: 58:c5:e6:c5:05:46:80:75:80:5c:28:02:fe:5f:60: 2c:ad:20:c4:15:bf:8d:82:30:96:54:7e:fb:50:b4: 9e:19:7e:2b:33:aa:47:71:f4:39:c4:db:f5:60:bb: f1:25:72:a4:99:c4:99:8f:68:7f:11:d5:54:09:33: 84:6d:47:97:53:bf:b2:c0:91:af:0b:cb:88:0c:cc: 4c:2c:e0:87:a3:44:74:7b:94:2b:cc:3b:4b:06:af: 5a:d8:e8:2c:69:1a:34:f6:8f:9b:65:d8:b5:c5:06: 07:7d:f9:31:98:bf:fb:2b:ae:48:55:5e:01:0a:4c: 49:c2:0f:c6:5f:d3:39:aa:dc:ee:21:6d:b1:0b:84: cb:2d:30:38:23:0f:77:a6:ac:62:d9:36:38:c5:56: 07:b6:4d:c1:f4:33:ae:90:07:df:1e:7a:5f:be:87: d6:1d:68:c8:00:c4:3f:dc:12:e4:10:d9:7e:07:f4: 0e:3e:28:a9:67:49:32:87:a1:7f:9e:e4:32:b7:ed: a7:ed:1b:ec:ec:74:16:87:fe:4d:99:3a:b5:93:40: 76:ed:4b:17:bf:c5:0b:58:57:82:cc:d8:ea:7b:5c: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:D6:74:57:51:E8:6F:3B:ED:EF:15:59:95:2F:22:A1:56:30:A1 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c9:ae:7b:79:83:6c:d6:af:b1:8c:65:32:a1:62:b0:9d:e8: fb:c5:9e:75:e3:97:39:d1:a5:ff:35:0e:c2:75:74:e2:d2:7d: a0:5f:6b:ac:ad:a9:2e:10:df:81:fb:54:f4:de:c3:9a:28:c8: c8:09:30:9f:d4:31:e1:5e:47:83:96:6a:1f:02:2c:a2:3b:56: 40:5c:f8:99:21:41:b3:a0:60:20:95:21:4d:b6:3f:4a:f1:53: d9:9e:ce:80:b7:bc:74:5f:34:11:7e:c9:68:71:30:f6:ac:50: f1:f0:fb:8d:7f:22:7d:9c:81:ca:55:ac:b7:d1:ea:21:6f:62: 22:3b:89:ef:02:99:d5:06:a5:48:91:47:b4:10:42:0f:57:a4: a8:ce:f2:8e:16:fb:a0:2c:1f:4c:4a:52:79:c9:60:21:73:90: 14:73:ee:4e:01:73:a3:67:81:46:b8:74:bd:89:d0:02:e3:cc: ed:39:12:8f:bd:3d:5e:40:11:72:e6:8f:e2:07:1b:bc:ef:3d: ef:4c:20:73:00:a1:c1:4c:44:1b:79:b6:b3:32:20:7d:e3:18: 6b:52:6e:78:ba:61:b9:99:f4:6b:f5:2a:be:fe:89:2d:9a:22: b5:4c:d8:80:1c:a4:a2:3e:0b:57:09:e0:aa:70:33:ba:03:cc: 9d:8c:eb:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0o8xo5ZO+F5wZHtr+ud3VEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwMzI2MDcwMTUzWhcNMjYwMzI3MDcwMTUzWjAzMTEwLwYDVQQD Eyg4NjVkZDY3NDU3NTFlODZmM2JlZGVmMTU1OTk1MmYyMmExNTYzMGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW/I/H7M3gcZitAsCkQcCHAkVH1X bWNz5quhg+NYxebFBUaAdYBcKAL+X2AsrSDEFb+NgjCWVH77ULSeGX4rM6pHcfQ5 xNv1YLvxJXKkmcSZj2h/EdVUCTOEbUeXU7+ywJGvC8uIDMxMLOCHo0R0e5QrzDtL Bq9a2OgsaRo09o+bZdi1xQYHffkxmL/7K65IVV4BCkxJwg/GX9M5qtzuIW2xC4TL LTA4Iw93pqxi2TY4xVYHtk3B9DOukAffHnpfvofWHWjIAMQ/3BLkENl+B/QOPiip Z0kyh6F/nuQyt+2n7Rvs7HQWh/5NmTq1k0B27UsXv8ULWFeCzNjqe1wDCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZd1nRXUehvO+3vFVmVLyKhVjChMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcmue3mD bNavsYxlMqFisJ3o+8WedeOXOdGl/zUOwnV04tJ9oF9rrK2pLhDfgftU9N7DmijI yAkwn9Qx4V5Hg5ZqHwIsojtWQFz4mSFBs6BgIJUhTbY/SvFT2Z7OgLe8dF80EX7J aHEw9qxQ8fD7jX8ifZyBylWst9HqIW9iIjuJ7wKZ1QalSJFHtBBCD1ekqM7yjhb7 oCwfTEpSeclgIXOQFHPuTgFzo2eBRrh0vYnQAuPM7TkSj709XkARcuaP4gcbvO89 70wgcwChwUxEG3m2szIgfeMYa1JueLphuZn0a/Uqvv6JLZoitUzYgBykoj4LVwng qnAzugPMnYzrBA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:57 2026 by rpki-client