$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft File: TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json) Hash identifier: xjA153XNQm2DApZW+OuF0rmPiHFAXfBLbqtSvjSF6Ls= Subject key identifier: 70:CB:CB:51:B2:69:3F:A6:41:D3:BB:11:86:C6:00:8C:74:02:AF:01 Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019D9A06AD6C54CCE0C609DEE6FA8CE29CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft Manifest number: 0BBC Signing time: Fri 17 Apr 2026 06:00:21 +0000 Manifest this update: Fri 17 Apr 2026 06:00:21 +0000 Manifest next update: Sat 18 Apr 2026 06:00:21 +0000 Files and hashes: 1: 2krvIRPRsTOPomVMfCPNZSLLFks.roa (hash: P0BkghxyDkTPiHFvyXDN/scxvrKFV/bbDjO/nIHvYBI=) 2: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=) 3: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=) 4: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=) 5: DbUcvr80clIUT4IVIfDV-VI3N3g.roa (hash: APkVSFKtYlODE7JqxCSucRJZgTgEFA/Qhz55cg0GRaQ=) 6: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=) 7: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=) 8: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=) 9: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=) 10: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=) 11: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=) 12: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=) 13: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: fkRWnVlchvntJpS5VPdBKz157R7CPaPFmRa2VAJCA34=) 14: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=) 15: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=) 16: Z6Y454y-5irLUB1HnESLpIVfLbQ.roa (hash: tFEKXtRhTAllzQn72vhDbzuqR5U15UaBRpVFyO2xYs0=) 17: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=) 18: _xskEv4E93buhDkLdrQYmZAO0nE.roa (hash: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw=) 19: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=) 20: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=) 21: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=) 22: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=) 23: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (hash: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=) 24: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=) 25: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=) 26: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=) 27: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=) 28: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=) 29: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=) 30: trwy9YK-SnrnYyYORbn93V30iRo.roa (hash: LTdq87i4sWmABMo13psUfyUJvjXH3JCzB1hcKoT/PNU=) 31: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=) 32: zjtl5Y0Z3oogjAq5K4uAfLAq8ro.roa (hash: LpQt/bLNnHWYgd6YNiQU8EA6fFlerNrGYNaE8nt6sMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:06:ad:6c:54:cc:e0:c6:09:de:e6:fa:8c:e2:9c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Apr 17 06:00:21 2026 GMT Not After : Apr 18 06:00:21 2026 GMT Subject: CN=70cbcb51b2693fa641d3bb1186c6008c7402af01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:5a:69:cd:ba:b6:9b:bb:fc:75:04:c8:7d: 50:e3:8e:cc:61:7e:b0:9e:b0:7a:f4:3d:a6:ec:1e: 75:d2:16:95:35:2a:4f:ef:9b:67:34:76:05:84:f7: c0:49:0c:97:8f:34:d6:bd:aa:f2:4c:63:d9:fe:d3: c4:81:6d:f1:f0:96:5f:39:c5:70:ae:d7:63:81:fa: 46:2a:57:c1:52:52:e5:a0:e0:04:d5:bd:65:d5:b7: 5c:9e:91:e2:65:51:c4:fb:5c:39:88:b8:01:ed:00: 77:12:dc:42:fd:55:5a:a3:b5:d9:4b:2f:5a:c7:59: 78:2f:1e:c6:97:2e:b2:a8:b8:c9:19:ad:b0:51:6b: ca:a8:cb:e9:93:8c:01:66:a9:91:06:9c:f1:4e:ec: 92:24:44:12:ac:5d:6c:49:28:46:e3:87:9e:0f:94: 82:e0:6c:f4:05:7e:52:5c:2c:b5:40:0d:7b:2f:85: b1:4d:45:58:17:b1:27:8c:93:43:f7:bb:70:bd:77: 5d:ce:99:f1:df:c9:18:bd:a5:23:55:f7:f7:b8:b8: d3:4a:94:ea:6d:41:09:b3:e0:e4:c8:b6:41:2c:57: 6a:d9:de:09:9e:dc:b2:95:c7:7e:de:b4:42:ed:87: 8d:82:dd:7b:1d:72:de:6e:f9:3c:9f:a8:60:8c:ab: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CB:CB:51:B2:69:3F:A6:41:D3:BB:11:86:C6:00:8C:74:02:AF:01 X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:79:f3:d6:57:e2:6a:65:b9:c5:94:cb:09:8b:5c:b8:b4:22: 96:d3:79:c3:f0:28:c4:f1:80:4d:f1:bd:0c:bd:14:1f:c8:81: a0:7b:1f:72:cc:2d:57:c4:11:6d:ef:0d:0f:0a:a0:af:24:82: 43:4c:0b:7b:60:ba:c2:c0:bb:d9:a2:1c:29:18:ab:65:5d:72: 55:b4:de:6d:cc:ad:03:dd:4b:b1:63:20:e4:c9:af:4a:73:9c: df:99:74:7c:9c:64:1e:06:5c:e6:1f:e3:c0:6a:6b:d0:b2:4d: d5:74:8d:87:ce:9d:f7:25:bc:b8:fb:1b:08:25:3c:70:9b:80: a2:68:77:25:7f:23:5a:c9:d4:6e:33:04:64:5f:ab:39:87:4e: 45:51:3c:d2:89:32:3d:02:4f:3c:03:21:a4:95:85:7b:76:a9: 88:77:1e:de:9b:1a:bd:a4:8b:10:f3:ec:22:1d:dc:9d:15:be: 0b:3f:55:bb:f0:63:9f:b8:4e:18:08:fc:f6:5a:36:af:49:23: 7a:30:5d:20:ba:25:89:5e:14:6e:41:fd:11:0f:a1:50:5b:49: b2:83:93:fa:ab:a1:10:a8:8c:af:03:8d:4c:12:df:d0:c9:e9: 20:e2:1d:20:9a:ff:ee:67:02:d1:82:34:b4:a9:11:33:03:70: 18:51:36:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBq1sVMzgxgne5vqM4pymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwNDE3MDYwMDIxWhcNMjYwNDE4MDYwMDIxWjAzMTEwLwYDVQQD Eyg3MGNiY2I1MWIyNjkzZmE2NDFkM2JiMTE4NmM2MDA4Yzc0MDJhZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+daac26tpu7/HUEyH1Q447MYX6w nrB69D2m7B510haVNSpP75tnNHYFhPfASQyXjzTWvaryTGPZ/tPEgW3x8JZfOcVw rtdjgfpGKlfBUlLloOAE1b1l1bdcnpHiZVHE+1w5iLgB7QB3EtxC/VVao7XZSy9a x1l4Lx7Gly6yqLjJGa2wUWvKqMvpk4wBZqmRBpzxTuySJEQSrF1sSShG44eeD5SC 4Gz0BX5SXCy1QA17L4WxTUVYF7EnjJND97twvXddzpnx38kYvaUjVff3uLjTSpTq bUEJs+DkyLZBLFdq2d4Jntyylcd+3rRC7YeNgt17HXLebvk8n6hgjKuRXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDLy1GyaT+mQdO7EYbGAIx0Aq8BMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnnz1lfi amW5xZTLCYtcuLQiltN5w/AoxPGATfG9DL0UH8iBoHsfcswtV8QRbe8NDwqgrySC Q0wLe2C6wsC72aIcKRirZV1yVbTebcytA91LsWMg5MmvSnOc35l0fJxkHgZc5h/j wGpr0LJN1XSNh86d9yW8uPsbCCU8cJuAomh3JX8jWsnUbjMEZF+rOYdORVE80oky PQJPPAMhpJWFe3apiHce3psavaSLEPPsIh3cnRW+Cz9Vu/Bjn7hOGAj89lo2r0kj ejBdILoliV4UbkH9EQ+hUFtJsoOT+quhEKiMrwONTBLf0MnpIOIdIJr/7mcC0YI0 tKkRMwNwGFE2dg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:42:54 2026 by rpki-client