$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft File: tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json) Hash identifier: 6XD8oC8GmkMHvvdgGMwkq0dya9LGuZ/kEwPY+CPwRHo= Subject key identifier: A2:57:8A:D5:22:4D:2A:CF:0C:2B:FA:8D:A9:3C:50:CD:97:F9:0F:11 Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019D9BBE73F1DCF8DACBE5AEC60BE4DB3D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft Manifest number: 02BE Signing time: Fri 17 Apr 2026 14:00:43 +0000 Manifest this update: Fri 17 Apr 2026 14:00:43 +0000 Manifest next update: Sat 18 Apr 2026 14:00:43 +0000 Files and hashes: 1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=) 2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=) 3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=) 4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=) 5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=) 6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=) 7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=) 8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=) 9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=) 10: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=) 11: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=) 12: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=) 13: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=) 14: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=) 15: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=) 16: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=) 17: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=) 18: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=) 19: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=) 20: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=) 21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: qW3afnFB7mzdpU1TI/Y6YoUw8esWLGrPkCCiyQGT05s=) 22: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:be:73:f1:dc:f8:da:cb:e5:ae:c6:0b:e4:db:3d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Apr 17 14:00:43 2026 GMT Not After : Apr 18 14:00:43 2026 GMT Subject: CN=a2578ad5224d2acf0c2bfa8da93c50cd97f90f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:de:de:9f:ae:b8:4f:b3:3a:12:be:e4:1f: 8e:07:3e:45:39:6f:bd:bb:67:aa:0d:c2:f6:4e:7c: 44:fe:b0:d1:23:2a:bc:f5:84:e6:49:76:b9:28:91: 64:30:e5:50:fd:84:83:ca:c9:9b:6d:39:b8:f7:a3: ea:c9:fc:58:ef:9f:16:20:2d:e2:9a:6f:e0:0e:f2: fe:66:18:28:52:ab:22:d4:ee:6a:d2:fb:4e:b6:bc: 17:0b:35:b1:1b:ed:9e:3f:69:1b:31:94:fa:aa:b3: 62:9e:8b:80:c8:74:2d:ce:e6:74:41:20:a9:9d:58: bd:d7:25:40:26:89:5e:1b:c3:76:07:9f:39:f0:a9: 82:4c:af:4b:df:45:7d:14:9d:1d:f0:6f:9c:15:c5: 52:f5:2d:71:c4:7d:f1:9d:b6:8b:c9:7e:2c:4e:9b: 93:df:a2:39:cb:87:64:89:0e:4d:6a:a9:a5:4d:cd: 50:88:8f:3d:83:a0:7f:a6:e6:5f:12:02:a3:75:90: 41:33:af:20:7c:ab:a9:d7:d6:6f:17:71:1b:6b:af: 32:da:6f:c0:eb:9a:b3:3a:ec:8f:7f:96:8b:d3:4f: d1:0f:2c:31:9b:d0:98:b0:f3:fb:da:c9:20:ec:cb: 0f:62:cd:11:fe:89:a2:1f:f4:8a:45:ae:8a:65:17: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:57:8A:D5:22:4D:2A:CF:0C:2B:FA:8D:A9:3C:50:CD:97:F9:0F:11 X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:98:72:b1:8f:29:cc:62:a4:e5:e4:ea:eb:56:13:2d:bd:6e: b9:7b:6b:18:80:55:09:b8:cb:ab:cf:5b:43:42:5b:9b:7e:bd: 2c:7e:73:2e:05:75:02:17:78:ff:36:50:e0:9b:15:8b:16:37: c1:69:61:ff:d5:64:fc:95:62:c7:a1:ae:4a:d3:b6:93:94:3e: 61:07:95:03:26:d2:1d:88:6f:db:b6:96:8f:73:2f:13:f4:1b: 6c:9f:14:5b:7b:8a:6d:a5:15:ed:f6:60:ac:0a:28:52:04:2c: 02:7c:92:27:cd:55:87:4f:94:94:04:65:80:ed:ed:18:95:95: 39:43:23:b5:2d:6d:d9:de:cc:63:4c:16:5e:ae:72:a8:18:ea: 02:c9:c6:b8:1f:b2:35:c2:e9:d7:22:c5:2e:e0:f5:52:e1:9f: e4:33:ce:cf:b4:0c:99:55:28:42:aa:d9:a5:44:a8:92:ee:9d: f7:31:79:f2:ba:83:0a:73:ea:79:98:9b:1a:ec:54:b8:64:d2: d3:e4:54:21:c5:69:d5:2e:d6:34:e9:36:e6:f5:f4:be:6a:9c: 13:69:b5:bd:3b:65:4b:fa:7b:e0:56:39:3e:98:84:6a:dc:3b: 14:75:fb:28:04:a3:de:d9:a3:f8:30:4a:78:6b:9f:2e:20:a6: d2:56:97:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bvnPx3Pjay+Wuxgvk2z1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwNDE3MTQwMDQzWhcNMjYwNDE4MTQwMDQzWjAzMTEwLwYDVQQD EyhhMjU3OGFkNTIyNGQyYWNmMGMyYmZhOGRhOTNjNTBjZDk3ZjkwZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxTe3p+uuE+zOhK+5B+OBz5FOW+9 u2eqDcL2TnxE/rDRIyq89YTmSXa5KJFkMOVQ/YSDysmbbTm496PqyfxY758WIC3i mm/gDvL+ZhgoUqsi1O5q0vtOtrwXCzWxG+2eP2kbMZT6qrNinouAyHQtzuZ0QSCp nVi91yVAJoleG8N2B5858KmCTK9L30V9FJ0d8G+cFcVS9S1xxH3xnbaLyX4sTpuT 36I5y4dkiQ5NaqmlTc1QiI89g6B/puZfEgKjdZBBM68gfKup19ZvF3Eba68y2m/A 65qzOuyPf5aL00/RDywxm9CYsPP72skg7MsPYs0R/omiH/SKRa6KZRfKpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJXitUiTSrPDCv6jak8UM2X+Q8RMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJhysY8p zGKk5eTq61YTLb1uuXtrGIBVCbjLq89bQ0Jbm369LH5zLgV1Ahd4/zZQ4JsVixY3 wWlh/9Vk/JVix6GuStO2k5Q+YQeVAybSHYhv27aWj3MvE/QbbJ8UW3uKbaUV7fZg rAooUgQsAnySJ81Vh0+UlARlgO3tGJWVOUMjtS1t2d7MY0wWXq5yqBjqAsnGuB+y NcLp1yLFLuD1UuGf5DPOz7QMmVUoQqrZpUSoku6d9zF58rqDCnPqeZibGuxUuGTS 0+RUIcVp1S7WNOk25vX0vmqcE2m1vTtlS/p74FY5PpiEatw7FHX7KASj3tmj+DBK eGufLiCm0laXXQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:34:55 2026 by rpki-client