$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: uuArpcNWa3/TqxnhOEIt+ZZb/Jk4QJ1aH8ZKgkJmVYU= Subject key identifier: AB:94:9D:54:B7:C9:98:A8:E8:98:80:CC:AE:ED:62:0A:35:8B:B5:99 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019D333E7D77267A8494E02C00D790E5DE1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 17D3 Signing time: Sat 28 Mar 2026 07:00:26 +0000 Manifest this update: Sat 28 Mar 2026 07:00:26 +0000 Manifest next update: Sun 29 Mar 2026 07:00:26 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 3: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 4: O9Prh0bHygAMlcVjAjhGkRfKOeM.roa (hash: AnpU4qxSDweY2PLZMgIh1u72ZCwp2xXOzI9oanyv9vI=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: bPaAjQIeJaYcELg5G+vQVDBGcKYv/1AB04DFTDcK3w8=) 8: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 9: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 10: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 11: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 12: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:33:3e:7d:77:26:7a:84:94:e0:2c:00:d7:90:e5:de:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Mar 28 07:00:26 2026 GMT Not After : Mar 29 07:00:26 2026 GMT Subject: CN=ab949d54b7c998a8e89880ccaeed620a358bb599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4c:11:f2:b4:d6:7f:fc:86:fd:0e:fc:3e:4c: 87:38:b9:7a:5a:96:a5:f9:60:b6:f0:77:6f:52:49: a3:0a:53:d7:6f:5d:ad:ed:bf:ad:30:90:89:54:f3: 4b:f8:ae:35:e3:7f:8d:38:95:f4:66:a8:77:24:dc: 97:7b:ac:8c:fb:9d:49:1e:1e:5d:54:a1:cc:17:25: a3:f7:e1:61:28:0f:72:53:1c:e9:dd:57:37:97:15: e3:23:1d:a0:d0:cd:c2:fb:d1:92:46:04:80:32:a3: 1b:d7:3e:01:f5:ab:0c:6b:5a:4b:f7:70:d1:f4:3d: 23:fe:d2:75:d7:89:91:fd:69:4d:e8:0b:20:fd:55: da:ae:21:62:37:55:9c:c7:5b:ab:77:f3:0d:9a:b7: c4:54:24:eb:09:42:9a:44:10:85:8f:14:ee:7f:4c: 0f:86:c7:38:87:61:cf:68:ab:36:a2:05:6c:40:0f: 69:29:55:ed:36:65:d7:cd:a9:bf:cb:16:1a:86:cb: fc:1f:6e:4f:db:bd:fd:b0:16:83:51:58:8b:cd:3c: d9:50:07:72:0f:8d:e0:73:a1:c0:2c:eb:d9:52:ce: 1d:98:a3:17:f8:81:f3:69:88:25:8c:19:3b:65:24: 74:7e:6c:62:d0:52:d1:b9:38:d5:b5:e5:fb:d8:93: 42:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:94:9D:54:B7:C9:98:A8:E8:98:80:CC:AE:ED:62:0A:35:8B:B5:99 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7b:9d:46:a1:7e:6d:a7:79:e6:5d:a8:61:86:57:8d:da:f7: ca:20:20:d6:12:25:4e:32:ba:0d:fd:12:12:cb:5a:35:51:7b: aa:07:33:ae:0e:f9:8a:7a:c7:b0:5b:d3:6c:65:b0:b0:b0:e9: f3:30:cb:9f:4c:da:f5:a8:06:09:4a:4e:18:6c:ee:8d:2c:a8: e7:38:12:e2:08:6d:ff:94:21:13:cb:5a:11:57:54:06:22:ca: f7:e9:fb:38:b8:46:64:87:ff:6e:36:5e:40:e6:f0:82:11:a7: 64:9a:bf:81:0b:65:9e:2f:5e:12:f5:7f:82:23:30:aa:98:f3: 7e:2b:f6:a8:2c:ef:43:e5:b8:fa:74:0d:45:09:c3:0f:d7:93: bc:ec:4c:00:46:12:50:fa:c1:1e:e7:ec:37:1b:cf:33:28:5c: 63:20:b7:e9:0a:f0:74:03:62:85:d4:d3:91:45:32:e1:89:d0: db:44:ea:37:50:5f:ce:55:f1:c0:b5:58:9e:a3:a0:25:71:a6: e1:51:0a:ba:3c:70:0e:34:3c:5d:e7:b2:ff:a0:67:5e:88:47: 2d:31:c0:49:6d:12:94:4d:6e:84:ad:b9:ff:4f:2f:d4:39:87: d8:61:d0:66:46:52:c6:d8:2f:5c:80:a6:76:09:4a:f4:2b:94: c0:0f:91:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0zPn13JnqElOAsANeQ5d4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwMzI4MDcwMDI2WhcNMjYwMzI5MDcwMDI2WjAzMTEwLwYDVQQD EyhhYjk0OWQ1NGI3Yzk5OGE4ZTg5ODgwY2NhZWVkNjIwYTM1OGJiNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkwR8rTWf/yG/Q78PkyHOLl6Wpal +WC28HdvUkmjClPXb12t7b+tMJCJVPNL+K4143+NOJX0Zqh3JNyXe6yM+51JHh5d VKHMFyWj9+FhKA9yUxzp3Vc3lxXjIx2g0M3C+9GSRgSAMqMb1z4B9asMa1pL93DR 9D0j/tJ114mR/WlN6Asg/VXariFiN1Wcx1urd/MNmrfEVCTrCUKaRBCFjxTuf0wP hsc4h2HPaKs2ogVsQA9pKVXtNmXXzam/yxYahsv8H25P2739sBaDUViLzTzZUAdy D43gc6HALOvZUs4dmKMX+IHzaYgljBk7ZSR0fmxi0FLRuTjVteX72JNCUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuUnVS3yZio6JiAzK7tYgo1i7WZMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHudRqF+ bad55l2oYYZXjdr3yiAg1hIlTjK6Df0SEstaNVF7qgczrg75inrHsFvTbGWwsLDp 8zDLn0za9agGCUpOGGzujSyo5zgS4ght/5QhE8taEVdUBiLK9+n7OLhGZIf/bjZe QObwghGnZJq/gQtlni9eEvV/giMwqpjzfiv2qCzvQ+W4+nQNRQnDD9eTvOxMAEYS UPrBHufsNxvPMyhcYyC36QrwdANihdTTkUUy4YnQ20TqN1BfzlXxwLVYnqOgJXGm 4VEKujxwDjQ8Xeey/6BnXohHLTHASW0SlE1uhK25/08v1DmH2GHQZkZSxtgvXICm dglK9CuUwA+RTw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:03 2026 by rpki-client