$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: rsnLglcgnf/iyWmxxiOhG4aXcS4FflE7kkuS3ptTKY8= Subject key identifier: 90:CF:3E:FF:76:EE:C4:45:3E:A5:DF:AB:1A:D0:B8:AA:1D:B3:24:61 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 01A1311024BACE34B37F3632EE843070246E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 1AC8 Signing time: Mon 12 Oct 2026 17:01:43 +0000 Manifest this update: Mon 12 Oct 2026 17:01:43 +0000 Manifest next update: Tue 13 Oct 2026 17:01:43 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 0Va2x4Qd63us7kRWmkpIgs4VavE.roa (hash: mlH17TsTBWEMs6AwiTvf9MSqSgOdSNOB7ebIvjxdVCU=) 3: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 4: 83juuidbqsnUvKpGJHVrEv2JlUA.roa (hash: iXonloz6Sxmjl01Plu1HC3/Q6qL8IKYvIIBaggc6K1Y=) 5: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 6: P-RJvOmpvYO0dFLhiA5cZu2_-80.roa (hash: mofslfkSbsZHnkehkGW2DT11ckBTZLlQswOwkS2bhAg=) 7: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: CQZKXNB8GXT4k2UXfYe2WX93j9nYe+xnsn9kuC3ikho=) 8: ZVNRgss5mTKJwhbB1mo1GGQyJRE.roa (hash: HjXOusJwIaZmZ+GD57QVPopBj5EraNR3jwZ+HMzM4p0=) 9: bEXar_PDdc_u4-EMnGh7tX0LHVg.roa (hash: tWOJsXIwz8NLZyOMtnHMC60APgOJn7JZ0y3xyIP4Gu4=) 10: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 11: kTrZwWya8vKsPzaTCCVly2aeBF0.roa (hash: GYxaPQmLs3qRxZhpYVXS6A4uk/iHpf3iWjyGg7/VHF4=) 12: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) 13: xEmv6iMzO6ox8HZNasxgI207Ico.roa (hash: hvgnhFfU21tndV9juMrzdngLR+nEgCJ6x3FzWgGB75g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 17:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:31:10:24:ba:ce:34:b3:7f:36:32:ee:84:30:70:24:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Oct 12 17:01:43 2026 GMT Not After : Oct 13 17:01:43 2026 GMT Subject: CN=90cf3eff76eec4453ea5dfab1ad0b8aa1db32461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:62:84:f1:a7:53:38:78:7f:a0:e3:e0:71: 39:d3:d7:6e:61:f8:90:60:fa:e1:26:3c:82:9a:45: 49:9e:aa:d3:c8:88:1e:32:48:d2:f1:66:99:c3:89: 6c:fc:1d:b8:7f:cb:b7:54:58:2f:78:a8:8d:6b:f6: ff:0c:76:40:e1:3f:2b:24:8c:1d:1e:d9:5e:20:58: 43:70:62:09:d0:4f:f8:f4:5d:53:1e:a7:f3:25:e4: f5:f5:34:c0:22:bc:57:af:fc:3a:1d:21:0d:0a:f7: a1:e8:08:92:bb:3c:bf:b4:c8:3e:9d:46:3d:57:89: 88:65:ab:22:01:f0:e7:a5:1e:f9:b0:34:4a:2d:c1: 35:a0:9f:3c:a4:0a:a4:08:12:17:24:52:2d:8c:c4: 5e:16:28:1b:ce:40:8c:62:de:ad:60:69:7a:26:ec: 4d:89:2c:ba:90:e6:1b:88:17:b6:21:74:ec:eb:42: c2:98:a1:e7:a9:43:07:06:bb:1f:03:84:a3:8b:a1: 49:c2:10:e8:ee:c6:2d:d6:4a:d5:d3:36:5c:07:92: b7:5a:4c:22:97:e5:20:cb:2a:f3:4b:78:34:0f:81: a5:54:31:cf:92:9d:01:3f:2e:c3:c1:23:1a:6b:8a: d2:b4:21:4c:34:1d:83:6c:76:6a:ac:bb:fc:f8:53: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CF:3E:FF:76:EE:C4:45:3E:A5:DF:AB:1A:D0:B8:AA:1D:B3:24:61 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fc:ab:33:7c:d0:23:d0:89:5d:7c:c6:52:81:c3:78:8a:2e: 61:98:8b:95:8e:ee:c3:f7:9a:32:bc:e9:10:37:33:f3:27:50: ba:85:72:00:7c:61:bf:04:8f:27:cc:a2:79:0f:64:2f:c9:e7: 35:d6:60:b9:d1:7d:82:ad:5e:12:55:78:62:70:13:01:64:74: ec:fb:26:90:d1:13:13:0d:e3:b7:7c:e2:43:74:f3:0c:97:f3: ba:8b:26:a6:c8:d7:cc:d8:9b:fb:78:82:17:15:ca:52:9f:6e: db:28:90:29:20:59:a6:c2:7a:50:23:2e:29:a3:23:f2:d5:a1: d4:cb:49:86:71:74:b4:f3:b6:10:a5:00:82:52:f2:9f:68:98: 95:36:b7:7d:75:99:22:da:69:99:f7:1b:f3:74:08:47:bd:28: e5:5f:4f:ff:66:7c:e1:88:98:68:8c:e2:05:19:57:0d:50:61: 04:da:cd:95:40:56:49:34:43:d3:7f:64:41:27:24:a4:5d:f9: ce:19:1b:66:18:84:0b:ee:64:b6:0f:5e:e5:e8:b5:c3:c5:02: 24:76:bf:10:45:d7:db:c9:cd:97:dc:26:76:37:0c:fb:bf:ff: 5d:6f:13:77:8d:ab:3f:6e:be:16:37:3d:0b:7e:4e:89:07:14: e0:ae:68:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaExECS6zjSzfzYy7oQwcCRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYxMDEyMTcwMTQzWhcNMjYxMDEzMTcwMTQzWjAzMTEwLwYDVQQD Eyg5MGNmM2VmZjc2ZWVjNDQ1M2VhNWRmYWIxYWQwYjhhYTFkYjMyNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc1ihPGnUzh4f6Dj4HE509duYfiQ YPrhJjyCmkVJnqrTyIgeMkjS8WaZw4ls/B24f8u3VFgveKiNa/b/DHZA4T8rJIwd HtleIFhDcGIJ0E/49F1THqfzJeT19TTAIrxXr/w6HSENCveh6AiSuzy/tMg+nUY9 V4mIZasiAfDnpR75sDRKLcE1oJ88pAqkCBIXJFItjMReFigbzkCMYt6tYGl6JuxN iSy6kOYbiBe2IXTs60LCmKHnqUMHBrsfA4Sji6FJwhDo7sYt1krV0zZcB5K3Wkwi l+UgyyrzS3g0D4GlVDHPkp0BPy7DwSMaa4rStCFMNB2DbHZqrLv8+FMeHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDPPv927sRFPqXfqxrQuKodsyRhMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvyrM3zQ I9CJXXzGUoHDeIouYZiLlY7uw/eaMrzpEDcz8ydQuoVyAHxhvwSPJ8yieQ9kL8nn NdZgudF9gq1eElV4YnATAWR07PsmkNETEw3jt3ziQ3TzDJfzuosmpsjXzNib+3iC FxXKUp9u2yiQKSBZpsJ6UCMuKaMj8tWh1MtJhnF0tPO2EKUAglLyn2iYlTa3fXWZ Itppmfcb83QIR70o5V9P/2Z84YiYaIziBRlXDVBhBNrNlUBWSTRD039kQSckpF35 zhkbZhiEC+5ktg9e5ei1w8UCJHa/EEXX28nNl9wmdjcM+7//XW8Td42rP26+Fjc9 C35OiQcU4K5oCQ== -----END CERTIFICATE-----Generated at Tue Oct 13 03:50:27 2026 by rpki-client