$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json) Hash identifier: OJNPOFxmkBZhBxXRiR/sJ3oBaEkA4WVkr6mW+O1Qc7Y= Subject key identifier: C8:74:AA:6F:8C:F2:61:EB:9C:23:6E:D7:3E:C1:2B:4B:97:81:E5:28 Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Certificate serial: 01A0CD484EDE498F5303F755FE8C9D6440D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft Manifest number: 1A79 Signing time: Wed 23 Sep 2026 08:01:03 +0000 Manifest this update: Wed 23 Sep 2026 08:01:03 +0000 Manifest next update: Thu 24 Sep 2026 08:01:03 +0000 Files and hashes: 1: 0no4Vc5DkKZYTC4yxk61gsFYDZA.roa (hash: wq/WrUkZs3OtH/QkSRuveBH4UlpgsUWQZCql0jNW35Y=) 2: BtjheHtMrVrls5cRXqprBV_cY_E.roa (hash: 0/bLQWtIHEPcsIkY5+SuruKHSF6pye9PcBvY10R3rFA=) 3: JLTJ_djmepytzX8zTui4177ccPU.roa (hash: v8YNZSAHqPj+CfPDJGHMubfC0jWuRi99PbF/4ydAFi4=) 4: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=) 5: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: rMFyAW6yG9C80oxy19P72Ok2CuAKsE2OhrI1idPBYfY=) 6: WPTN1Qq7x_RqdVcQNEvPIzif6aA.roa (hash: +avq0PdtOR9oSirda5avrWksxY2pCBwlBFfwZM2VWyY=) 7: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=) 8: ZO3SDQJ8Tgygw4lm8Ab9Ya2PFI4.roa (hash: QdCqVsfYcPHetvPtJZR0l6d2Gvhz4bpPU1rfVRCV7bk=) 9: btNWOWDT0MwxaxnuKalIShgF76M.roa (hash: +XzTFhG5C/Y9XMQYyxlHrlhbiNm3k0WsQB2hF0bjvaI=) 10: chjNAC8nAY_1idgxZ4cutOeVbAY.roa (hash: jS+FDp72Ee84TtCvWXMWI7/kBBph6ZyKnK6dpccqwmo=) 11: hoZTO9mv6MsZdKUR4WewOWkJHu0.roa (hash: TciugumYbNba/50JkI/u3vPvv8vRYLWuyNSqNmxgJH8=) 12: osbxv89WG8GbWZUQ2Vkdc-Z5YJE.roa (hash: vhxwONMLn7WciOAysVcpRznbCMOzeYXuHzUh/oH5ncU=) 13: yHfpA5v5XvIUSQkOxCDHupjOIlQ.roa (hash: H4Qtsg+GBGW5oyl9RggzStvYTM8q9EciUOsORu9E3dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:48:4e:de:49:8f:53:03:f7:55:fe:8c:9d:64:40:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Validity Not Before: Sep 23 08:01:03 2026 GMT Not After : Sep 24 08:01:03 2026 GMT Subject: CN=c874aa6f8cf261eb9c236ed73ec12b4b9781e528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f2:41:fb:aa:73:94:9c:65:66:3c:88:22:d7: 60:96:b1:6b:67:61:b7:80:2d:6d:5c:a1:0d:48:c0: 15:20:5f:93:44:0a:22:87:59:94:88:ae:4c:65:ad: 89:44:8e:eb:7b:ee:df:dd:36:65:ca:7e:63:c6:f4: ec:a9:0a:4d:57:1e:0e:e4:b9:a6:72:e4:97:2f:80: 51:32:cc:3b:d0:92:37:d0:36:85:d9:03:8c:4f:0a: 5b:5b:8d:a9:19:b1:43:30:d0:16:04:3f:08:ea:16: 4f:07:4d:09:eb:ab:4a:27:41:f5:a7:28:ed:a3:93: 13:0d:47:83:0e:b0:09:c1:52:09:46:ce:03:c3:0e: 0a:c7:b7:1a:5f:06:9f:89:f1:36:1e:2a:1a:9e:59: a3:08:1c:23:ea:89:a7:b0:c1:61:ab:0b:a1:b3:c9: b6:86:73:38:b2:61:3a:60:b3:79:33:96:93:d8:46: 6a:3e:49:78:55:84:b8:d9:0d:ae:0a:65:16:41:82: db:3d:b3:cb:43:14:b4:d6:20:1f:01:c9:bc:c0:8d: ea:75:ed:21:fa:4c:60:49:17:eb:2f:58:91:13:5f: 31:65:4c:4f:e4:f3:9a:83:09:19:2f:68:3e:84:45: 19:f9:98:4d:5a:61:6f:11:b4:91:c4:72:c2:b6:6c: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:74:AA:6F:8C:F2:61:EB:9C:23:6E:D7:3E:C1:2B:4B:97:81:E5:28 X509v3 Authority Key Identifier: keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:90:58:4d:f9:95:88:8b:0c:f4:39:af:42:33:9f:ef:57:7e: 10:9e:2c:e0:6a:0d:43:1e:9f:25:5f:1a:93:5a:c1:a3:a3:9f: 73:32:0d:63:98:ed:19:c1:2d:9f:b7:50:40:30:2e:d0:18:83: b6:36:3d:55:05:f8:7c:c4:c6:e6:2f:2d:64:34:de:a7:7e:5c: 22:89:46:1f:78:26:ba:c3:15:ef:6b:05:03:9e:15:9e:8d:be: 61:24:50:76:09:4f:41:85:4f:bd:e6:fb:7c:84:8c:2b:17:1d: e6:1c:18:e0:a1:c9:e2:5c:86:b3:17:c6:35:e1:ce:6b:ff:be: d0:4e:a9:65:d9:17:2a:03:4c:1f:4c:20:eb:a6:3c:10:3b:30: cc:4b:8b:a0:08:4f:8f:4f:72:37:b0:ec:9c:8c:6a:3f:c0:87: a8:b1:53:9f:20:16:90:66:3b:21:7c:1b:bb:43:b8:39:07:19: 2f:dc:10:7e:85:99:6d:2f:4f:51:3c:3c:7a:85:c0:99:69:21: 81:45:2f:19:5a:8e:c0:9e:a1:c8:0d:7f:c3:cb:eb:48:51:0b: 2c:87:92:c3:20:99:79:93:ca:d5:42:ae:65:c1:e7:10:f2:70: 87:29:f4:1a:92:6d:e0:01:d0:6e:49:c0:27:82:f0:cd:42:3b: e2:a5:a1:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNSE7eSY9TA/dV/oydZEDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2 ZDYzNDkwHhcNMjYwOTIzMDgwMTAzWhcNMjYwOTI0MDgwMTAzWjAzMTEwLwYDVQQD EyhjODc0YWE2ZjhjZjI2MWViOWMyMzZlZDczZWMxMmI0Yjk3ODFlNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vJB+6pzlJxlZjyIItdglrFrZ2G3 gC1tXKENSMAVIF+TRAoih1mUiK5MZa2JRI7re+7f3TZlyn5jxvTsqQpNVx4O5Lmm cuSXL4BRMsw70JI30DaF2QOMTwpbW42pGbFDMNAWBD8I6hZPB00J66tKJ0H1pyjt o5MTDUeDDrAJwVIJRs4Dww4Kx7caXwafifE2HioanlmjCBwj6omnsMFhqwuhs8m2 hnM4smE6YLN5M5aT2EZqPkl4VYS42Q2uCmUWQYLbPbPLQxS01iAfAcm8wI3qde0h +kxgSRfrL1iRE18xZUxP5POagwkZL2g+hEUZ+ZhNWmFvEbSRxHLCtmxiFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh0qm+M8mHrnCNu1z7BK0uXgeUoMB8GA1UdIwQY MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct MTY2ZmI5ZGI2ZGIzLzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpBYTfmV iIsM9DmvQjOf71d+EJ4s4GoNQx6fJV8ak1rBo6OfczINY5jtGcEtn7dQQDAu0BiD tjY9VQX4fMTG5i8tZDTep35cIolGH3gmusMV72sFA54Vno2+YSRQdglPQYVPveb7 fISMKxcd5hwY4KHJ4lyGsxfGNeHOa/++0E6pZdkXKgNMH0wg66Y8EDswzEuLoAhP j09yN7DsnIxqP8CHqLFTnyAWkGY7IXwbu0O4OQcZL9wQfoWZbS9PUTw8eoXAmWkh gUUvGVqOwJ6hyA1/w8vrSFELLIeSwyCZeZPK1UKuZcHnEPJwhyn0GpJt4AHQbknA J4LwzUI74qWhKw== -----END CERTIFICATE-----Generated at Wed Sep 23 13:11:52 2026 by rpki-client