$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft File: tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json) Hash identifier: TZpn/Jj+3iYlHn/wwvifeV3kkwMobnyuDl0dQ3F0plM= Subject key identifier: 28:CA:14:61:77:C8:C3:F9:E4:F9:EF:CA:2D:CF:B1:D5:1E:D3:C7:40 Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019CAE358735DC079F10657D40B8C78B9D38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft Manifest number: 0243 Signing time: Mon 02 Mar 2026 11:01:09 +0000 Manifest this update: Mon 02 Mar 2026 11:01:09 +0000 Manifest next update: Tue 03 Mar 2026 11:01:09 +0000 Files and hashes: 1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=) 2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=) 3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=) 4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=) 5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=) 6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=) 7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=) 8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=) 9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=) 10: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=) 11: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=) 12: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=) 13: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=) 14: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=) 15: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=) 16: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=) 17: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=) 18: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=) 19: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=) 20: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=) 21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: 3ak6sjBLlxBR63785jExe96HmEmyIi3/hE275EuC9bA=) 22: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:35:87:35:dc:07:9f:10:65:7d:40:b8:c7:8b:9d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Mar 2 11:01:09 2026 GMT Not After : Mar 3 11:01:09 2026 GMT Subject: CN=28ca146177c8c3f9e4f9efca2dcfb1d51ed3c740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:e0:85:b5:5b:00:81:14:78:45:f0:6e:be: bd:75:34:9a:0c:55:2c:4f:65:1c:65:36:a9:a3:db: 97:68:ee:03:d2:59:55:52:4f:9e:e2:5e:f9:f4:35: 71:13:03:97:fe:91:1f:38:f8:d5:ad:7b:fb:e6:a6: 53:a3:a9:f1:22:6a:a6:29:26:f5:3b:ae:3b:86:34: 56:e3:8f:cd:35:0e:a2:2a:b4:a0:3a:46:7d:fe:38: d0:56:e4:52:af:9d:0e:82:ad:cb:ea:b6:95:d2:a8: 2c:43:66:c6:10:9c:54:af:64:0b:b5:2a:e1:91:c2: 95:ea:93:29:30:62:88:a0:61:05:a5:7e:55:1c:82: 95:af:d6:57:54:61:70:8e:4f:e0:17:f6:87:df:fb: e6:5e:a9:9d:12:0c:14:f0:9d:07:76:5c:a3:dd:5b: a7:5e:a0:77:15:ee:8f:4d:75:7a:d8:ab:ba:3d:1e: de:63:65:18:9a:f9:08:27:34:63:65:8f:cf:85:67: 60:bd:f3:92:28:ae:2b:43:e8:c4:ae:84:46:0d:ab: 73:40:6e:b1:4d:0d:84:f7:c0:7d:a8:68:d5:8e:e8: 83:fb:22:a5:0a:e3:e9:78:be:4a:ca:21:84:72:89: a2:42:9f:d7:61:b6:b8:1b:6c:96:3a:e0:c3:1d:07: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CA:14:61:77:C8:C3:F9:E4:F9:EF:CA:2D:CF:B1:D5:1E:D3:C7:40 X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d1:28:0b:8d:37:77:e2:be:58:55:b4:c5:cb:40:96:51:67: 66:ae:2e:fb:1e:3e:83:f6:b5:00:38:2b:73:94:a1:4b:3b:eb: 6a:66:d3:94:7a:3d:19:52:68:45:3b:fb:f8:d4:1e:69:f0:07: ef:ba:09:af:12:ab:af:53:1f:e3:a4:7f:c1:10:6f:a9:d1:41: 0e:b6:a6:00:b7:c1:9d:52:64:57:7f:ca:cb:4e:79:b3:0a:f3: fe:a1:b1:48:fb:61:99:c6:f4:62:cb:4e:ac:79:9a:7d:59:76: 4b:9a:bc:12:a6:d9:53:06:d8:f6:e6:36:30:3d:de:37:e0:f1: be:1b:ef:bc:26:a0:06:96:d1:79:78:55:e7:6f:fa:1a:75:e9: 50:f2:a1:69:0d:98:4a:72:d8:65:99:b7:52:14:03:07:a8:af: 0c:c6:43:2a:16:43:de:82:37:f2:8c:47:85:e6:60:7f:93:55: 4e:01:15:0d:b2:6f:7e:40:4a:96:7d:b8:8c:4e:8a:c7:72:ea: 74:30:b1:4a:81:cc:9f:23:78:94:e3:a1:7a:ca:3e:19:41:ca: 5d:aa:eb:27:45:7a:2d:d0:e9:fb:4c:d7:5c:2d:38:de:ca:a8: 2f:67:62:b2:fb:9d:62:9b:e9:1f:ff:fb:21:a6:d6:bc:ee:8d: b5:ef:4d:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyuNYc13AefEGV9QLjHi504MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMzAyMTEwMTA5WhcNMjYwMzAzMTEwMTA5WjAzMTEwLwYDVQQD EygyOGNhMTQ2MTc3YzhjM2Y5ZTRmOWVmY2EyZGNmYjFkNTFlZDNjNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP/ghbVbAIEUeEXwbr69dTSaDFUs T2UcZTapo9uXaO4D0llVUk+e4l759DVxEwOX/pEfOPjVrXv75qZTo6nxImqmKSb1 O647hjRW44/NNQ6iKrSgOkZ9/jjQVuRSr50Ogq3L6raV0qgsQ2bGEJxUr2QLtSrh kcKV6pMpMGKIoGEFpX5VHIKVr9ZXVGFwjk/gF/aH3/vmXqmdEgwU8J0Hdlyj3Vun XqB3Fe6PTXV62Ku6PR7eY2UYmvkIJzRjZY/PhWdgvfOSKK4rQ+jEroRGDatzQG6x TQ2E98B9qGjVjuiD+yKlCuPpeL5KyiGEcomiQp/XYba4G2yWOuDDHQfhwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjKFGF3yMP55Pnvyi3PsdUe08dAMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9EoC403 d+K+WFW0xctAllFnZq4u+x4+g/a1ADgrc5ShSzvrambTlHo9GVJoRTv7+NQeafAH 77oJrxKrr1Mf46R/wRBvqdFBDramALfBnVJkV3/Ky055swrz/qGxSPthmcb0YstO rHmafVl2S5q8EqbZUwbY9uY2MD3eN+DxvhvvvCagBpbReXhV52/6GnXpUPKhaQ2Y SnLYZZm3UhQDB6ivDMZDKhZD3oI38oxHheZgf5NVTgEVDbJvfkBKln24jE6Kx3Lq dDCxSoHMnyN4lOOheso+GUHKXarrJ0V6LdDp+0zXXC043sqoL2disvudYpvpH//7 IabWvO6Nte9NkA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:16 2026 by rpki-client