$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: TJ9Safe0zb43MCB0pzZnsscCefcfkJNs4dwNvj3TI64= Subject key identifier: 94:28:9A:44:60:94:8D:12:46:1E:99:A2:BF:3E:EB:ED:53:06:3E:FA Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019D2884DA2227F4D1E88C831E80BA62504E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 18AA Signing time: Thu 26 Mar 2026 05:01:28 +0000 Manifest this update: Thu 26 Mar 2026 05:01:28 +0000 Manifest next update: Fri 27 Mar 2026 05:01:28 +0000 Files and hashes: 1: LSbbMYdiIbKuzkhAXFAGLH6GBd0.roa (hash: GVdnAx+VDnNLGbmaTGIwya+qx7bw2STQGx8OmUTU30Q=) 2: Lbd7OlSYZZwy_6X1BIMG6Koz7d4.roa (hash: tiYUvDBlf1LQU9lfVQg2G8kbpiC1hXVYCRazqiEsZus=) 3: O0rfOGz-McmMnU1eCY2sEgNi7PU.roa (hash: 4rQUZ3pnpaJVp0N8CW/NojdvUgqmwQuyE4ZpcBYicXU=) 4: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: cG6Df1FoSGZqmtZHdX62kfucuWzHn6JxHab+4RMF1Vw=) 5: UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa (hash: bc7atEIrT/sE9wxUJS6KJvtPGbS/vBzLhwKBt1msWHM=) 6: UKBFNmW-avu0y-ZELfNkwrzKuSM.roa (hash: SdZuGRpwFqsC6fwO8VFNthsAajlBrQzgt1h1a3a0ulc=) 7: gaATxSq9HGX7yQm--_dWZbOgZT0.roa (hash: Qix9w4DVsLBDeru6CjO9qF+q42J9rHLmd1kVGLn1F3E=) 8: gzKt63tUYAzMRiZUE4WC4FyD4b8.roa (hash: TUYmXfLyWQJoJEpWCQg5e1O7L83j3Oydl7JqN1+DDy0=) 9: kWTQcrgSZmOTsMHh7K_EG0H2IuE.roa (hash: Hf4S7R+wJUfntE+MhCot7Q15rmGM0xxlIUdL/asz+MU=) 10: mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (hash: uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=) 11: xw5sNJdg-fAA5SZxyPcNG8RXerQ.roa (hash: 7HX82PhpHs162aszA/TYYhyOoOkbbZJvRNVbtyXVetE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:84:da:22:27:f4:d1:e8:8c:83:1e:80:ba:62:50:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Mar 26 05:01:28 2026 GMT Not After : Mar 27 05:01:28 2026 GMT Subject: CN=94289a4460948d12461e99a2bf3eebed53063efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:d8:a7:d2:64:29:8a:20:51:2f:75:72:91: 0d:0d:be:e4:d5:d6:55:ea:e0:04:02:c4:bd:ab:4f: 70:8d:65:0e:70:47:0e:d6:eb:b2:20:11:0e:cd:cf: 82:8b:19:83:e9:e9:7e:63:00:81:b9:02:b1:33:84: cd:6c:c6:a1:de:a4:c4:18:e8:99:5c:9b:0a:b8:29: b1:ac:7e:0e:32:e4:85:1f:4b:bc:81:8a:d5:25:4e: b0:ee:33:98:96:d1:e3:82:3f:46:33:fa:f3:be:f9: 55:b0:17:04:df:67:22:73:23:3f:d5:b7:03:4f:8e: e0:5a:f1:37:e6:17:be:05:5d:0c:f6:ff:d2:e2:d4: d8:a1:e4:e3:4e:3b:08:87:68:42:cb:c9:2f:eb:69: 28:2b:30:94:4e:83:a3:5a:31:0d:eb:cd:25:df:cf: 52:6a:6d:3d:d6:3a:fa:01:d8:ee:d0:ed:d2:3b:4e: 1a:05:f7:cf:3d:89:71:c2:dd:42:4d:b4:fd:4b:b1: d0:8d:7e:f9:56:80:d3:af:74:fa:bb:82:03:c6:af: 54:bd:f3:c3:a2:41:8f:4b:b9:0b:52:9e:4a:e8:cf: aa:c3:c4:0f:be:ad:04:b5:07:ab:c6:28:ae:dc:8f: 25:a0:1f:d7:e7:bb:23:e0:58:43:b1:18:aa:a4:74: 89:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:28:9A:44:60:94:8D:12:46:1E:99:A2:BF:3E:EB:ED:53:06:3E:FA X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ce:dc:a8:c3:df:8b:c2:f0:6b:8a:15:c8:99:b5:a0:4f:13: 42:44:13:34:b7:bc:3c:2f:5f:23:11:27:11:28:8e:79:c0:70: cd:06:b5:08:33:d8:38:52:86:39:5b:d2:7a:92:93:3c:f9:18: 76:0c:f5:7d:cb:f1:5e:8b:4d:1f:ed:4c:bf:22:20:7e:65:e7: e6:c8:7f:ee:4e:ea:09:cb:76:29:df:08:97:ef:cf:b9:1e:dc: fa:5f:7e:32:7a:8c:6f:0b:a3:f1:d3:e3:5b:d0:58:42:fc:eb: 65:65:3d:3a:e3:1b:61:b3:82:92:ef:c1:e6:73:98:c3:97:40: 79:38:34:73:5b:7c:67:a2:6d:8c:02:f4:46:54:73:12:59:f2: f2:4e:d3:81:b1:66:4a:fd:97:9c:a5:eb:72:4a:d9:70:38:b2: 5c:82:11:63:18:f1:3c:a0:c7:26:eb:fb:4a:68:34:f1:c4:67: d8:a6:a4:ba:d3:2e:8a:cf:72:87:91:1f:70:ab:c8:c8:84:84: 0d:05:89:a7:d5:eb:eb:f9:c7:88:8b:90:64:ad:05:36:aa:9b: 79:d9:df:d7:69:4a:11:2b:6a:4a:4e:8a:8e:74:0b:7a:1f:7a: 19:a5:92:0b:20:35:62:ad:72:2d:3e:7a:90:1f:bf:02:00:d8: ef:4c:c1:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ohNoiJ/TR6IyDHoC6YlBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYwMzI2MDUwMTI4WhcNMjYwMzI3MDUwMTI4WjAzMTEwLwYDVQQD Eyg5NDI4OWE0NDYwOTQ4ZDEyNDYxZTk5YTJiZjNlZWJlZDUzMDYzZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP7Yp9JkKYogUS91cpENDb7k1dZV 6uAEAsS9q09wjWUOcEcO1uuyIBEOzc+CixmD6el+YwCBuQKxM4TNbMah3qTEGOiZ XJsKuCmxrH4OMuSFH0u8gYrVJU6w7jOYltHjgj9GM/rzvvlVsBcE32cicyM/1bcD T47gWvE35he+BV0M9v/S4tTYoeTjTjsIh2hCy8kv62koKzCUToOjWjEN680l389S am091jr6Adju0O3SO04aBffPPYlxwt1CTbT9S7HQjX75VoDTr3T6u4IDxq9UvfPD okGPS7kLUp5K6M+qw8QPvq0EtQerxiiu3I8loB/X57sj4FhDsRiqpHSJuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQomkRglI0SRh6Zor8+6+1TBj76MB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOc7cqMPf i8Lwa4oVyJm1oE8TQkQTNLe8PC9fIxEnESiOecBwzQa1CDPYOFKGOVvSepKTPPkY dgz1fcvxXotNH+1MvyIgfmXn5sh/7k7qCct2Kd8Il+/PuR7c+l9+MnqMbwuj8dPj W9BYQvzrZWU9OuMbYbOCku/B5nOYw5dAeTg0c1t8Z6JtjAL0RlRzElny8k7TgbFm Sv2XnKXrckrZcDiyXIIRYxjxPKDHJuv7Smg08cRn2KakutMuis9yh5EfcKvIyISE DQWJp9Xr6/nHiIuQZK0FNqqbednf12lKEStqSk6KjnQLeh96GaWSCyA1Yq1yLT56 kB+/AgDY70zB2g== -----END CERTIFICATE-----Generated at Thu Mar 26 07:26:39 2026 by rpki-client