$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: qtGGKLY/q6UO62xAMeiX+QEEleGxogRjma3IHe6JC64= Subject key identifier: DB:A4:A2:8C:3F:A0:1B:5D:FE:E7:40:61:01:30:60:8C:FA:55:DF:50 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 01A0F60D44C9272DF7DA5ED2CDD812883119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 1A8D Signing time: Thu 01 Oct 2026 06:00:59 +0000 Manifest this update: Thu 01 Oct 2026 06:00:59 +0000 Manifest next update: Fri 02 Oct 2026 06:00:59 +0000 Files and hashes: 1: 1-gK4FaKQ6vCAd3HD5KMC9zT6LvU.roa (hash: D6YtWc2enJG4JcbTf9d9A2vAeRzN30+OR3FCjqsua4Q=) 2: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=) 3: DQ1yVesejJpDnZvd2JLWH_7gAEU.roa (hash: iuHd9st9MGEOE3UuhPG4vRJ6eBtZs6iPypxGkfqTQSM=) 4: JlpCz-c9i9-Z_17K8F7XjOHLpJ4.roa (hash: MTi7TKa3n0d3E8E52eS58cc9MxnhlLc9ovB9GkQrKSk=) 5: MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa (hash: 8slM4ZyNMUTgbPryNd+oyqvRv0X2KMYBpAbZ2g9V2+s=) 6: Pxzwfsnla9WCGgA_5yVN5NBVL14.roa (hash: dRusvivPw89AhWLw883YVx7O+/W5uw+jCzc5VJhBOks=) 7: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=) 8: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=) 9: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=) 10: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=) 11: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: hSyRAU9K65m4tIezvWO16w5inaPW+0tQiTZ0iZz35js=) 12: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=) 13: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Oct 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f6:0d:44:c9:27:2d:f7:da:5e:d2:cd:d8:12:88:31:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Oct 1 06:00:59 2026 GMT Not After : Oct 2 06:00:59 2026 GMT Subject: CN=dba4a28c3fa01b5dfee740610130608cfa55df50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c7:ce:e8:f6:b7:13:f4:7d:52:17:d8:f9:43: 1e:ee:96:df:a8:2c:de:64:d3:e2:29:0b:62:62:6c: a9:fd:ba:15:af:91:02:0e:e2:19:2c:a1:ee:6d:04: de:e1:26:12:a6:e0:42:90:96:88:a7:df:8e:ce:67: 57:7b:ac:77:8a:73:f6:89:49:ce:72:e0:ac:5b:d6: 19:a7:d1:90:ee:7c:54:d9:db:cc:79:84:87:62:de: 36:39:e4:c1:82:ec:ee:41:f1:9a:bc:46:7c:86:a1: 83:a5:ac:ce:e4:a8:93:a0:d2:64:4a:01:7c:03:2a: 58:b0:3f:f6:6c:3e:67:e5:b0:dd:df:dc:5d:05:9f: dc:f8:a8:bd:73:88:81:ff:f0:62:98:d3:9e:73:7e: 6c:ba:e7:ba:aa:71:31:c7:e2:6a:67:e8:31:86:f4: 15:8f:64:8f:ec:7f:db:83:85:c6:02:36:86:ae:b3: c6:fc:aa:db:7f:87:25:d2:ec:81:12:de:a0:69:31: 3b:9f:3b:27:c3:d7:10:dd:1f:19:09:2c:82:db:9c: bc:5f:56:cd:2e:85:a2:70:7c:e7:b4:68:86:98:63: 3e:bd:0c:60:64:10:6b:be:43:f9:8e:7d:08:c4:7f: ef:26:21:ab:0b:fd:f6:d5:67:81:92:e6:2b:8d:9b: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A4:A2:8C:3F:A0:1B:5D:FE:E7:40:61:01:30:60:8C:FA:55:DF:50 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:dc:d9:a0:e5:5b:15:24:0c:38:e8:e5:c9:f6:37:18:81:2a: 67:01:13:81:5f:29:c3:4d:6e:3d:8e:d5:0a:17:0c:24:a7:a2: a2:7a:f4:ab:4c:53:66:8e:67:1f:fb:14:ea:df:84:5b:fe:9b: 4c:ce:27:76:99:bd:63:40:bd:c6:a6:5e:75:5d:91:f2:a9:09: aa:aa:6a:62:75:1f:1f:e9:c4:ca:81:73:b9:ca:72:57:39:58: 7c:4a:75:26:50:ac:51:f6:21:9e:dc:8c:ab:e1:a8:8c:a4:e3: 6d:f6:1b:7b:cf:15:bc:09:53:3f:2c:0f:ec:98:7f:0b:b7:8f: 06:db:a6:52:c3:c7:23:33:7c:87:37:1a:09:c6:b5:14:fa:48: a6:78:09:63:3e:45:df:d6:69:36:66:a1:eb:28:70:e6:14:55: 3a:35:e9:3e:3a:f3:f9:e8:0e:7b:cb:a0:de:1d:66:f4:cb:05: be:57:e9:41:e5:e8:17:3d:7f:ff:8b:13:29:f9:07:58:82:56: 87:22:e6:f8:3e:eb:11:a5:31:ab:ca:94:fc:6a:03:c1:3f:cc: 56:d0:7c:2b:74:e5:de:b9:b7:11:86:dd:dd:9e:c7:2e:5a:df: 77:2b:d5:a7:ae:a2:cd:ff:4c:ff:2b:3b:45:cc:b6:c5:1e:15: 79:8a:77:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaD2DUTJJy332l7SzdgSiDEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYxMDAxMDYwMDU5WhcNMjYxMDAyMDYwMDU5WjAzMTEwLwYDVQQD EyhkYmE0YTI4YzNmYTAxYjVkZmVlNzQwNjEwMTMwNjA4Y2ZhNTVkZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MfO6Pa3E/R9UhfY+UMe7pbfqCze ZNPiKQtiYmyp/boVr5ECDuIZLKHubQTe4SYSpuBCkJaIp9+OzmdXe6x3inP2iUnO cuCsW9YZp9GQ7nxU2dvMeYSHYt42OeTBguzuQfGavEZ8hqGDpazO5KiToNJkSgF8 AypYsD/2bD5n5bDd39xdBZ/c+Ki9c4iB//BimNOec35suue6qnExx+JqZ+gxhvQV j2SP7H/bg4XGAjaGrrPG/Krbf4cl0uyBEt6gaTE7nzsnw9cQ3R8ZCSyC25y8X1bN LoWicHzntGiGmGM+vQxgZBBrvkP5jn0IxH/vJiGrC/321WeBkuYrjZvDYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNukoow/oBtd/udAYQEwYIz6Vd9QMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9zZoOVb FSQMOOjlyfY3GIEqZwETgV8pw01uPY7VChcMJKeionr0q0xTZo5nH/sU6t+EW/6b TM4ndpm9Y0C9xqZedV2R8qkJqqpqYnUfH+nEyoFzucpyVzlYfEp1JlCsUfYhntyM q+GojKTjbfYbe88VvAlTPywP7Jh/C7ePBtumUsPHIzN8hzcaCca1FPpIpngJYz5F 39ZpNmah6yhw5hRVOjXpPjrz+egOe8ug3h1m9MsFvlfpQeXoFz1//4sTKfkHWIJW hyLm+D7rEaUxq8qU/GoDwT/MVtB8K3Tl3rm3EYbd3Z7HLlrfdyvVp66izf9M/ys7 Rcy2xR4VeYp3eQ== -----END CERTIFICATE-----Generated at Thu Oct 1 13:32:30 2026 by rpki-client