$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json) Hash identifier: 7pbFWx/bkq3Yb3FjexeKuTms5H7b7BsIEWMXb7RfrV4= Subject key identifier: C2:E4:B2:4A:A7:3A:53:12:37:4B:11:15:31:67:27:4A:2A:90:40:7B Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019D28BBEE2C1C873EDCC55496742E78838D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft Manifest number: 189A Signing time: Thu 26 Mar 2026 06:01:37 +0000 Manifest this update: Thu 26 Mar 2026 06:01:37 +0000 Manifest next update: Fri 27 Mar 2026 06:01:37 +0000 Files and hashes: 1: 8f6ryTvzxsgcz7a1VrDaHfr6K-s.roa (hash: RW6Oi5z/RcWRGaIQCUZbkdEin/DlQFbS+I/SqrTulAA=) 2: D9XgvWWebov0kTHT7gIL8Ih7bHs.roa (hash: aj3nCPdPkIlGQaAtMeiOa/fgxKRQ1tyiiopMxi8yVr4=) 3: QYAHCBRM8EgpLd4QrnaJwLlcTLc.roa (hash: xqjfeJepdMLIOn6HjKXxzAl/Wm+IlrawB25mUwSfoiA=) 4: RcHUb_7vBCGqZc4v6_mqpbqVtgg.roa (hash: 3AVyDWtRAwLaTj0fPOPIeQe2qLZtznTvofJILaYyw80=) 5: RjTlguRgcAqb5mkC5whD5YBTtos.roa (hash: rBmFvqm9la/6Kn095Es+kobXfpMnMG+qYPPeDl24mPQ=) 6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: pweLIw5XwJTj26rafVenSDvXiKMkbXd6eaHhqafjoyA=) 7: Vaa0ZoiDGKk6g5S1K8exhvOjuso.roa (hash: 0JlsZcX72VxzLBMarlq5cR72GCSjJdlrkx349OBiKdo=) 8: eyN-QI1JnaBw_GdK4aR4DdrNlvo.roa (hash: FEmPy+g6KDj1MyKjGKfSJKzYk99+EtTwkcX8ACmfm44=) 9: hbzNsJKUFj9YPemgxueORzyaAR4.roa (hash: sHENi6SxTMQzE9Umyq+oAU2zV4mQDeA2gga98LgBks4=) 10: xdcZpWEbrxMAWI2r6x9fHtNAeos.roa (hash: pQvg5+txs+5H+YwG4r27g6XNgPtuojFD8BoBa08f/h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:ee:2c:1c:87:3e:dc:c5:54:96:74:2e:78:83:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Mar 26 06:01:37 2026 GMT Not After : Mar 27 06:01:37 2026 GMT Subject: CN=c2e4b24aa73a5312374b11153167274a2a90407b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:dc:26:d3:73:c1:7d:81:7e:df:bf:ba:0a: f3:05:3f:28:d4:60:07:f0:65:65:6f:5d:d6:35:ad: ba:06:ed:fd:75:5e:8f:de:d0:e5:a5:c0:c7:dc:11: 87:f5:cb:26:f3:cd:90:86:c7:e5:98:71:ee:f1:90: be:33:16:4c:6b:fb:69:6d:b8:9a:63:d1:45:06:7f: a4:7a:fa:d5:34:7f:2b:67:97:fd:de:50:c1:4b:5f: f7:24:e8:39:b7:90:95:49:a6:f3:1d:89:78:51:66: db:09:15:3d:55:c9:c7:02:e4:fa:cc:d0:ec:32:c4: ff:a3:ed:79:6b:52:5a:cc:3f:ef:c1:1f:cc:5e:34: ba:18:fc:19:3c:de:4e:f6:e4:e2:a2:01:27:59:2c: 30:63:15:b1:c3:d2:e4:f5:76:d3:33:c5:2b:f1:07: 5e:a9:e0:b2:a1:82:5c:79:1a:3c:6f:b0:2e:b5:8b: 6d:2b:e9:3b:cf:33:41:75:a1:26:51:0d:f9:b2:31: 93:2f:ad:b6:1f:45:d7:e5:f0:e0:62:ce:9a:95:5a: e3:62:42:cf:22:8b:18:7d:b0:97:ab:73:13:56:60: 67:13:7b:38:63:9a:ea:0c:ac:17:59:67:53:39:f2: 1e:9c:8b:b2:0c:df:3d:b8:29:25:c7:ed:92:c6:6e: e5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E4:B2:4A:A7:3A:53:12:37:4B:11:15:31:67:27:4A:2A:90:40:7B X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:10:34:d5:dc:e1:e4:32:70:78:bf:a2:1d:95:99:67:1f:76: be:70:24:01:4f:e2:70:40:85:b8:8a:14:17:cb:b1:c0:04:57: b2:3a:29:11:99:c3:74:90:69:62:c5:38:1a:86:d2:4a:34:44: 20:66:27:e4:3c:b4:9c:5d:48:68:a2:1d:89:e6:62:95:3e:0d: e7:f5:3e:9e:94:00:54:98:b1:ec:cb:d5:01:6b:db:d9:dd:50: 5f:f3:bd:32:58:18:b7:3a:59:cc:71:cd:9d:37:06:c7:92:77: 72:53:7b:94:c2:f2:2f:e4:1e:91:03:17:80:a7:4c:14:50:76: 7c:b3:98:6d:6b:e7:32:ae:e7:1b:6a:2b:ef:99:91:27:b3:04: b9:5a:2d:0d:32:69:b9:a5:29:6f:bc:17:ae:93:01:ba:53:3f: b8:36:c8:9f:0a:d8:ad:d4:4f:be:28:18:15:3e:ae:2e:63:24: fb:65:00:3a:00:57:5f:8f:34:ae:ef:ed:33:7d:06:69:7c:c5: 06:1f:16:28:32:de:e8:a6:34:5b:09:46:eb:06:5d:fd:63:7c: 5d:35:07:2a:16:98:59:07:1d:92:0e:4b:b5:ac:05:03:7d:13: 22:4f:d7:ce:22:27:fd:e7:8d:ce:cc:ff:f4:6f:1f:9e:e3:d5: 44:99:a0:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou+4sHIc+3MVUlnQueIONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwMzI2MDYwMTM3WhcNMjYwMzI3MDYwMTM3WjAzMTEwLwYDVQQD EyhjMmU0YjI0YWE3M2E1MzEyMzc0YjExMTUzMTY3Mjc0YTJhOTA0MDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS3cJtNzwX2Bft+/ugrzBT8o1GAH 8GVlb13WNa26Bu39dV6P3tDlpcDH3BGH9csm882QhsflmHHu8ZC+MxZMa/tpbbia Y9FFBn+kevrVNH8rZ5f93lDBS1/3JOg5t5CVSabzHYl4UWbbCRU9VcnHAuT6zNDs MsT/o+15a1JazD/vwR/MXjS6GPwZPN5O9uTiogEnWSwwYxWxw9Lk9XbTM8Ur8Qde qeCyoYJceRo8b7AutYttK+k7zzNBdaEmUQ35sjGTL622H0XX5fDgYs6alVrjYkLP IosYfbCXq3MTVmBnE3s4Y5rqDKwXWWdTOfIenIuyDN89uCklx+2Sxm7lNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLkskqnOlMSN0sRFTFnJ0oqkEB7MB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhA01dzh 5DJweL+iHZWZZx92vnAkAU/icECFuIoUF8uxwARXsjopEZnDdJBpYsU4GobSSjRE IGYn5Dy0nF1IaKIdieZilT4N5/U+npQAVJix7MvVAWvb2d1QX/O9MlgYtzpZzHHN nTcGx5J3clN7lMLyL+QekQMXgKdMFFB2fLOYbWvnMq7nG2or75mRJ7MEuVotDTJp uaUpb7wXrpMBulM/uDbInwrYrdRPvigYFT6uLmMk+2UAOgBXX480ru/tM30GaXzF Bh8WKDLe6KY0WwlG6wZd/WN8XTUHKhaYWQcdkg5LtawFA30TIk/XziIn/eeNzsz/ 9G8fnuPVRJmg/g== -----END CERTIFICATE-----Generated at Thu Mar 26 10:34:54 2026 by rpki-client