$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json) Hash identifier: tOQeoGK1veMMwE1lOZJe26dZanP4HPxOsM287BmxRB4= Subject key identifier: 09:DE:31:0A:BB:92:04:78:17:3D:61:14:24:C1:02:C8:7E:91:4E:7E Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Certificate serial: 01A0CDECAB8164034FC94CC7DA5B58838F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft Manifest number: 1AD0 Signing time: Wed 23 Sep 2026 11:00:34 +0000 Manifest this update: Wed 23 Sep 2026 11:00:34 +0000 Manifest next update: Thu 24 Sep 2026 11:00:34 +0000 Files and hashes: 1: 3mj4BF15-QsrQeXNqlhp9O0RF8Q.roa (hash: vXL9dy1/SgEnnpISMc/F/t6U8c7+bWH7fiwFFAUniPU=) 2: 70hrIJb71j9X4fpmOp9ZdXpiYbo.roa (hash: Z5s8D4Bcjh7dxrbzSCt6bkmdTngOg/wM1fo6Ekix090=) 3: DxXB1sVQddkWlIQL7M2Ft26ZYDs.roa (hash: aIKudkaShc6wqjcTHt+BKsEmLCkGpXtihIIuVaZi7po=) 4: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: /Yfqpm6LztG7rXLQvBA4Oc08fbEleTUTnhWdssUvLTc=) 5: dDIM-ljTCDKhWIxv1515WUGeQvk.roa (hash: /ksxNXhqwhx98qeq21Eca7WB/KLYXy3qx2dkD35mKTc=) 6: kFLjuN4_tRjI-IILkJq8lcLpDdc.roa (hash: lQTRIEBvMUBY3vX80dFs9U0bSNDBYvB6Uew+srrzZ9A=) 7: n8dvRB_IxQYW2HaCkZPqC764yy4.roa (hash: V6JYAy1QkjclNMb/hsYOaNTig8bDfvc3itb4t3/ahSw=) 8: qrG9XLPl84E40eGjaluMQlHH30g.roa (hash: JZCVwj3aTdfzcFTKEfr0xBq4Umu2aHhpSpk1hh5GgSQ=) 9: sNbxwr_VlMceIOoORfjNh48fthg.roa (hash: og1IfOlO+B5tux3x/JdwIjbchpmcSQUOsvTa4SrXgws=) 10: sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (hash: R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:ec:ab:81:64:03:4f:c9:4c:c7:da:5b:58:83:8f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Validity Not Before: Sep 23 11:00:34 2026 GMT Not After : Sep 24 11:00:34 2026 GMT Subject: CN=09de310abb920478173d611424c102c87e914e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:30:c2:a8:1b:c7:ef:bd:37:83:4a:17:80:3a: 48:4a:1d:38:6b:d0:2e:fb:c0:b7:d8:f6:28:61:d4: 56:ed:98:11:e7:81:e5:8a:8d:a5:d9:12:69:69:3a: 8c:d7:a6:f3:db:1c:c5:cb:87:54:1f:5a:2f:1f:c9: 8a:0d:55:0e:a5:dd:b9:a5:61:33:55:0b:f6:55:15: 0f:34:b9:b8:d5:43:62:b2:5d:ff:45:cb:c3:a6:7b: 4a:47:30:33:73:69:14:0f:1e:37:de:29:43:69:93: 1b:ff:14:32:42:f8:d6:2d:b2:b5:50:ca:a3:b5:b4: cf:8d:91:0f:fd:ca:03:4e:f0:c4:65:f2:4a:50:35: 64:da:54:c4:87:96:0b:6b:ae:2e:0c:71:3b:dd:0d: ea:ae:7c:73:10:7b:52:2b:5a:99:c1:ab:3a:92:2f: 93:9b:5b:f7:0e:d8:73:ee:6f:f2:d5:0a:a2:ba:11: f6:5e:33:a4:b7:12:e1:df:1c:51:f1:0c:52:5e:8b: 3f:e5:fc:3b:50:d5:28:65:51:4c:97:80:ef:4b:32: ed:c6:38:38:32:50:7e:f5:a7:24:85:d4:ac:96:f0: 99:60:fa:6a:2f:03:3c:0c:bb:32:ae:2b:f0:f3:57: 58:a0:00:0f:90:3f:10:fe:95:bd:30:b6:5d:fa:a4: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DE:31:0A:BB:92:04:78:17:3D:61:14:24:C1:02:C8:7E:91:4E:7E X509v3 Authority Key Identifier: keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f3:81:4f:05:51:d7:29:71:fe:a0:65:ca:9f:61:7a:e4:3e: 28:68:24:70:c9:aa:97:09:9d:5b:cd:20:98:4c:7f:fe:a7:bf: c3:c8:ed:7b:9b:81:e7:53:c2:fb:b2:7d:1c:9e:bd:e0:04:5a: 2e:2e:a9:b7:2e:59:bc:14:1f:e0:fe:af:a1:e2:1a:e8:42:2d: 24:db:63:d2:27:50:e6:c2:f2:35:49:85:c2:8d:25:f4:41:ae: d9:4c:4a:a0:73:25:5d:62:5c:22:57:b2:cb:72:dd:f1:93:a3: 9d:c4:a2:48:f4:3a:2f:7f:df:51:48:2e:cc:f4:47:4e:89:ed: 47:6b:24:99:bd:f5:37:80:fc:fb:cf:6f:2c:fb:a6:f3:1e:b6: 92:11:6a:c6:7b:3c:40:09:ed:fe:52:08:61:b2:d6:64:26:74: ad:4a:e8:fe:64:73:52:68:c2:ed:fd:eb:9b:74:93:9b:00:3e: 75:86:fe:94:b0:a5:05:2a:e3:f8:17:39:8c:88:26:0d:b6:ba: e5:29:bc:4a:14:e0:fa:8e:71:58:8b:63:b8:28:84:a8:da:e2: d9:03:59:aa:e1:fa:42:77:14:57:13:4e:53:09:fe:0a:81:14: 99:d5:75:a5:d5:99:a1:f1:9f:1c:0d:71:d5:6d:df:3f:a4:08: 83:ee:6e:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDN7KuBZANPyUzH2ltYg49CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm ZTc0ZjkwHhcNMjYwOTIzMTEwMDM0WhcNMjYwOTI0MTEwMDM0WjAzMTEwLwYDVQQD EygwOWRlMzEwYWJiOTIwNDc4MTczZDYxMTQyNGMxMDJjODdlOTE0ZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TDCqBvH7703g0oXgDpISh04a9Au +8C32PYoYdRW7ZgR54Hlio2l2RJpaTqM16bz2xzFy4dUH1ovH8mKDVUOpd25pWEz VQv2VRUPNLm41UNisl3/RcvDpntKRzAzc2kUDx433ilDaZMb/xQyQvjWLbK1UMqj tbTPjZEP/coDTvDEZfJKUDVk2lTEh5YLa64uDHE73Q3qrnxzEHtSK1qZwas6ki+T m1v3Dthz7m/y1QqiuhH2XjOktxLh3xxR8QxSXos/5fw7UNUoZVFMl4DvSzLtxjg4 MlB+9ackhdSslvCZYPpqLwM8DLsyrivw81dYoAAPkD8Q/pW9MLZd+qRrsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAneMQq7kgR4Fz1hFCTBAsh+kU5+MB8GA1UdIwQY MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt ZWI1YTYyN2U3NmEzLzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevOBTwVR 1ylx/qBlyp9heuQ+KGgkcMmqlwmdW80gmEx//qe/w8jte5uB51PC+7J9HJ694ARa Li6pty5ZvBQf4P6voeIa6EItJNtj0idQ5sLyNUmFwo0l9EGu2UxKoHMlXWJcIley y3Ld8ZOjncSiSPQ6L3/fUUguzPRHTontR2skmb31N4D8+89vLPum8x62khFqxns8 QAnt/lIIYbLWZCZ0rUro/mRzUmjC7f3rm3STmwA+dYb+lLClBSrj+Bc5jIgmDba6 5Sm8ShTg+o5xWItjuCiEqNri2QNZquH6QncUVxNOUwn+CoEUmdV1pdWZofGfHA1x 1W3fP6QIg+5uCw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:41:01 2026 by rpki-client