$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: 8Zmh7wx15FnZcSrIupFDesT+IdGufeT9nuebkSCUooA= Subject key identifier: 95:59:06:A4:28:C2:02:CE:54:7B:05:FC:84:D4:90:02:87:25:43:9C Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019FABD18BBBA5A1FED9C049C35A41D8F4F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 19FE Signing time: Wed 29 Jul 2026 03:01:04 +0000 Manifest this update: Wed 29 Jul 2026 03:01:04 +0000 Manifest next update: Thu 30 Jul 2026 03:01:04 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 0Va2x4Qd63us7kRWmkpIgs4VavE.roa (hash: mlH17TsTBWEMs6AwiTvf9MSqSgOdSNOB7ebIvjxdVCU=) 3: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 4: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 5: CxwFpKnVRB1YipI_w1rOdL2Rr_0.roa (hash: Sqj7uyxBPWvN499fr3Zl2IE3H+X3USQ46cvMPtYbWbI=) 6: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: h9mvSnLDstJwbCDY3oSsJGiSSXqMIXjPX6KWSlwSa8w=) 7: ZVNRgss5mTKJwhbB1mo1GGQyJRE.roa (hash: HjXOusJwIaZmZ+GD57QVPopBj5EraNR3jwZ+HMzM4p0=) 8: bEXar_PDdc_u4-EMnGh7tX0LHVg.roa (hash: tWOJsXIwz8NLZyOMtnHMC60APgOJn7JZ0y3xyIP4Gu4=) 9: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 10: kTrZwWya8vKsPzaTCCVly2aeBF0.roa (hash: GYxaPQmLs3qRxZhpYVXS6A4uk/iHpf3iWjyGg7/VHF4=) 11: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) 12: uEnRng83DMivtU9u64kgfGid_Hs.roa (hash: vmYhF39wCahPYTq1VZ0x6GUk7X7pQ26ryeKoN/cfjf4=) 13: xEmv6iMzO6ox8HZNasxgI207Ico.roa (hash: hvgnhFfU21tndV9juMrzdngLR+nEgCJ6x3FzWgGB75g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:d1:8b:bb:a5:a1:fe:d9:c0:49:c3:5a:41:d8:f4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Jul 29 03:01:04 2026 GMT Not After : Jul 30 03:01:04 2026 GMT Subject: CN=955906a428c202ce547b05fc84d490028725439c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:5d:21:ea:6a:85:6f:38:a7:de:36:3f:a5: ea:be:ee:31:3c:86:46:8b:5c:4a:0d:9b:e9:60:6d: 48:c2:9c:3a:5d:38:d4:65:d3:ca:9f:8c:c6:94:77: ec:26:d4:70:4a:c0:39:3e:85:22:bf:75:c5:0b:5c: df:6b:e6:db:a2:fd:b6:11:da:90:f8:15:b4:6f:75: 2d:d3:25:84:b3:5e:c9:a6:f3:2d:2c:c6:b7:ce:e9: 9a:5b:f8:73:28:0f:c3:ea:cd:dd:26:c8:30:6f:59: c1:71:07:3f:ec:ab:29:2c:eb:db:60:bf:af:7e:78: 3d:bc:76:fd:a5:52:a6:fa:94:c1:ff:02:7a:4b:34: ba:cc:5a:57:85:b2:3d:35:97:ea:ec:94:6c:4e:60: f1:23:4c:4f:92:32:5d:c7:21:3a:e1:76:58:fe:96: fe:81:da:b0:76:e4:e0:4a:98:d2:f1:ab:1a:bd:45: b6:2c:6c:31:28:61:0c:01:20:e6:a5:27:bf:91:15: 2a:90:10:3c:3e:af:8d:ed:c2:8a:72:58:e3:a0:61: a1:2c:c4:77:bb:5b:9f:49:50:5c:dc:ed:75:85:d8: 2a:f9:57:a6:52:18:f1:3f:37:31:c1:9a:3a:00:98: 38:fd:f7:f4:50:9c:fb:2b:14:55:2d:c9:f0:87:b1: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:59:06:A4:28:C2:02:CE:54:7B:05:FC:84:D4:90:02:87:25:43:9C X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:8f:6c:d3:95:85:37:9f:64:0b:06:44:ce:2c:7a:e0:94:06: 46:f3:76:5c:67:8f:62:5b:4d:cf:a3:f9:9b:1a:cf:76:5a:36: 17:34:b9:43:6b:15:95:c2:a4:2d:eb:95:0f:8a:d6:ef:73:bd: c3:f0:c4:35:4c:db:15:51:06:56:3d:5c:e0:02:74:45:3b:48: 9d:bd:30:c4:c5:b0:b2:17:ad:34:e8:9d:6d:dd:c1:be:44:4a: 61:0a:49:d4:ae:a2:e9:fa:43:b1:ac:f6:12:7d:8d:bd:eb:03: 8d:42:33:69:bb:67:bd:ac:67:47:05:64:6b:78:d7:c4:28:30: d1:bd:0b:f1:73:af:07:f5:d8:60:1d:b7:37:c2:54:e5:a6:b4: 2e:da:09:8f:4d:df:ef:fc:ed:a3:81:45:95:7f:8a:5a:35:7b: 44:0d:28:5a:cb:d6:d6:01:a5:43:89:12:35:d2:1a:3d:02:fd: 21:9a:ac:cb:42:97:af:84:c9:16:46:48:0a:b7:f1:34:83:71: 49:b1:0d:82:4b:3c:37:21:4e:9e:bb:6f:e6:42:53:6d:10:77: 41:93:1c:14:f6:fa:77:51:4e:fa:4c:d6:16:84:9a:9e:78:b9: 4a:d6:93:42:59:5b:96:c0:dc:df:cb:72:12:34:52:d8:8d:f1: 48:b6:41:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+r0Yu7paH+2cBJw1pB2PT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwNzI5MDMwMTA0WhcNMjYwNzMwMDMwMTA0WjAzMTEwLwYDVQQD Eyg5NTU5MDZhNDI4YzIwMmNlNTQ3YjA1ZmM4NGQ0OTAwMjg3MjU0MzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/9dIepqhW84p942P6Xqvu4xPIZG i1xKDZvpYG1Iwpw6XTjUZdPKn4zGlHfsJtRwSsA5PoUiv3XFC1zfa+bbov22EdqQ +BW0b3Ut0yWEs17JpvMtLMa3zumaW/hzKA/D6s3dJsgwb1nBcQc/7KspLOvbYL+v fng9vHb9pVKm+pTB/wJ6SzS6zFpXhbI9NZfq7JRsTmDxI0xPkjJdxyE64XZY/pb+ gdqwduTgSpjS8asavUW2LGwxKGEMASDmpSe/kRUqkBA8Pq+N7cKKcljjoGGhLMR3 u1ufSVBc3O11hdgq+VemUhjxPzcxwZo6AJg4/ff0UJz7KxRVLcnwh7HeLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVZBqQowgLOVHsF/ITUkAKHJUOcMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhY9s05WF N59kCwZEzix64JQGRvN2XGePYltNz6P5mxrPdlo2FzS5Q2sVlcKkLeuVD4rW73O9 w/DENUzbFVEGVj1c4AJ0RTtInb0wxMWwshetNOidbd3BvkRKYQpJ1K6i6fpDsaz2 En2NvesDjUIzabtnvaxnRwVka3jXxCgw0b0L8XOvB/XYYB23N8JU5aa0LtoJj03f 7/zto4FFlX+KWjV7RA0oWsvW1gGlQ4kSNdIaPQL9IZqsy0KXr4TJFkZICrfxNINx SbENgks8NyFOnrtv5kJTbRB3QZMcFPb6d1FO+kzWFoSanni5StaTQllblsDc38ty EjRS2I3xSLZBjQ== -----END CERTIFICATE-----Generated at Wed Jul 29 06:32:48 2026 by rpki-client