$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: JaoDEVkvvtw2EdibCXvyLxDdcd93uZ5/7c4Zyrx+x/c= Subject key identifier: 20:D5:F3:47:02:66:4F:EF:FA:55:4F:84:6B:AA:91:AC:4F:C0:31:D1 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 01A1DA26658055B18747E1E06EC62A08155F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1A41 Signing time: Sat 14 Nov 2026 13:01:51 +0000 Manifest this update: Sat 14 Nov 2026 13:01:51 +0000 Manifest next update: Sun 15 Nov 2026 13:01:51 +0000 Files and hashes: 1: 3FT0Q8HYAJshK2YTHraizTTtl68.roa (hash: pANleIvpMGxlEA0HNwGBfCJZkP0QnPfNivkJewRQ0Wo=) 2: 47sWOPTHnZb9BF-ya3p9tYZmQl0.roa (hash: RBzAZuMSt44/uQERR1k3fKGneZwh+1kpWY7wx6/NCk0=) 3: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 4: IoSQ968prEWE2iPAfiHq62Q9HRQ.roa (hash: sMFfoE8ew6Os6X7T5w3iP4CHenQCaCmWxqa3HE4kDyg=) 5: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 6: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 7: PAW1JoIrhuPRvpT3zzJGVAqnrcc.roa (hash: dgbWSId+v8ufGyfsNbvXuLSNu4xPAIPhGm4OyMRj1/M=) 8: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 9: SHESg-pXJr_Het0W-3cbbUvLLUk.roa (hash: eBtq6k5xafILrBSAzCCl8DxL+vNsikVlShGU83ALNOQ=) 10: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: /VMYynNyJPYTIV/9OExbwu7i3h2/nVTFt2pKOdzs3B4=) 11: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 12: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 13: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 14: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 15: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:26:65:80:55:b1:87:47:e1:e0:6e:c6:2a:08:15:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Nov 14 13:01:51 2026 GMT Not After : Nov 15 13:01:51 2026 GMT Subject: CN=20d5f34702664feffa554f846baa91ac4fc031d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:96:8e:9c:15:8d:f3:4b:0f:5d:6f:67:3b: ae:4e:fc:c1:69:70:21:dd:1c:6c:1f:a7:d0:38:69: 6d:81:95:94:c1:54:b0:4a:60:d0:ba:98:8b:8d:ef: 3a:ac:f1:81:05:bb:80:3e:0b:1b:5a:0a:95:ef:50: 46:f3:2c:e3:32:e3:e8:d1:58:0b:d2:e6:2c:18:1d: 1d:75:47:95:69:67:1d:51:09:0a:4a:b7:a3:f7:fc: 3a:fe:a2:a2:be:32:4d:dd:f6:24:35:82:f5:9c:e9: 00:3a:e7:8d:09:44:5d:29:df:76:33:d2:a7:99:44: de:c5:7c:f3:f0:d6:b2:7e:c9:0e:86:1c:c7:c1:5d: 4e:4f:47:a6:8f:09:05:5f:5a:f3:ee:0e:ee:2b:d3: 84:8b:94:f1:0b:ac:97:5d:bf:2a:56:d2:eb:af:fb: c9:39:c8:17:18:c3:e1:c4:89:1c:cf:a0:bc:30:cc: cf:68:07:1f:3c:65:57:e2:4c:b0:9b:bb:93:01:a6: 43:14:af:44:a2:ef:7b:a0:dc:7b:01:0a:cd:b5:21: 78:0f:d3:ff:de:1e:10:7d:02:2a:7a:30:66:6e:5f: 9a:98:21:c7:52:4f:84:97:4d:57:0c:56:2b:1d:b7: bd:79:35:b0:df:c4:cf:c4:6c:c8:37:49:27:bf:5d: c7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:F3:47:02:66:4F:EF:FA:55:4F:84:6B:AA:91:AC:4F:C0:31:D1 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1a:52:ad:f2:84:dd:46:2c:18:98:e7:74:77:f1:b3:30:62: 00:e1:a7:d6:7a:cc:55:05:b9:ed:d1:e1:66:9a:99:9c:8a:49: bf:da:40:a2:17:9c:c5:7e:66:b9:4d:46:6e:6e:52:30:e4:cd: 6e:19:42:e6:ec:5f:3f:ee:42:8f:f5:b2:7b:da:fb:20:15:88: fe:f0:2f:27:fd:2e:18:88:05:e1:9e:17:0d:d3:fc:27:23:87: 1a:a6:39:a7:25:21:e9:f4:af:df:66:03:d7:fe:2f:97:20:6e: e3:e4:fe:1f:14:1b:be:13:4d:a0:ec:30:86:0e:a3:48:21:40: 78:eb:b1:9c:20:a4:94:cb:11:09:f2:4e:24:d1:13:61:f6:8b: e5:da:df:1f:8a:b1:4d:ff:1f:fa:4c:2e:7f:46:fa:7d:2b:f9: c5:32:00:dc:26:66:04:44:b4:cd:3e:fe:d0:8b:39:c0:b1:65: 62:c7:72:9f:5b:1f:ef:4e:64:ad:94:ff:f4:a9:47:2d:f2:05: c0:b5:e0:73:67:08:44:3f:7f:15:56:15:a6:81:d2:35:ad:d8: c1:5f:ff:4f:1c:db:4a:e8:ee:9c:bc:a9:8d:2a:f6:c1:26:f1: f1:70:68:ea:d9:94:55:35:e7:5e:73:71:bb:06:16:a3:ae:79: d7:13:54:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHaJmWAVbGHR+HgbsYqCBVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYxMTE0MTMwMTUxWhcNMjYxMTE1MTMwMTUxWjAzMTEwLwYDVQQD EygyMGQ1ZjM0NzAyNjY0ZmVmZmE1NTRmODQ2YmFhOTFhYzRmYzAzMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AyWjpwVjfNLD11vZzuuTvzBaXAh 3RxsH6fQOGltgZWUwVSwSmDQupiLje86rPGBBbuAPgsbWgqV71BG8yzjMuPo0VgL 0uYsGB0ddUeVaWcdUQkKSrej9/w6/qKivjJN3fYkNYL1nOkAOueNCURdKd92M9Kn mUTexXzz8NayfskOhhzHwV1OT0emjwkFX1rz7g7uK9OEi5TxC6yXXb8qVtLrr/vJ OcgXGMPhxIkcz6C8MMzPaAcfPGVX4kywm7uTAaZDFK9Eou97oNx7AQrNtSF4D9P/ 3h4QfQIqejBmbl+amCHHUk+El01XDFYrHbe9eTWw38TPxGzIN0knv13H2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDV80cCZk/v+lVPhGuqkaxPwDHRMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxpSrfKE 3UYsGJjndHfxszBiAOGn1nrMVQW57dHhZpqZnIpJv9pAohecxX5muU1Gbm5SMOTN bhlC5uxfP+5Cj/Wye9r7IBWI/vAvJ/0uGIgF4Z4XDdP8JyOHGqY5pyUh6fSv32YD 1/4vlyBu4+T+HxQbvhNNoOwwhg6jSCFAeOuxnCCklMsRCfJOJNETYfaL5drfH4qx Tf8f+kwuf0b6fSv5xTIA3CZmBES0zT7+0Is5wLFlYsdyn1sf705krZT/9KlHLfIF wLXgc2cIRD9/FVYVpoHSNa3YwV//TxzbSujunLypjSr2wSbx8XBo6tmUVTXnXnNx uwYWo6551xNUZA== -----END CERTIFICATE-----Generated at Sat Nov 14 20:52:46 2026 by rpki-client