$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft File: TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json) Hash identifier: KPT8MKVHUr8J0BAirWjMb4foHZn8UaphXyJ9l5BdEWM= Subject key identifier: 09:94:17:0A:EC:D5:53:B8:39:D6:9B:17:8A:A0:9F:F3:3C:3A:4C:AB Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 01A0C557809F17BB77E792F95E319D964CDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft Manifest number: 1A7E Signing time: Mon 21 Sep 2026 19:00:40 +0000 Manifest this update: Mon 21 Sep 2026 19:00:40 +0000 Manifest next update: Tue 22 Sep 2026 19:00:40 +0000 Files and hashes: 1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=) 2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=) 3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=) 4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=) 5: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=) 6: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=) 7: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=) 8: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=) 9: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: pUBmf3i+YsGrbrSpz47BWLNhHa2k8P6ayEPv0ONNeBs=) 10: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=) 11: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=) 12: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=) 13: fk1NDywalDt7uylAx-JbeK2KndA.roa (hash: GjjjXn/c5RKterLew0goE2oPgtQT51gR0GQhu+Gw67E=) 14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=) 15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=) 16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=) 17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=) 18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=) 19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=) 20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=) 21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:57:80:9f:17:bb:77:e7:92:f9:5e:31:9d:96:4c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Sep 21 19:00:40 2026 GMT Not After : Sep 22 19:00:40 2026 GMT Subject: CN=0994170aecd553b839d69b178aa09ff33c3a4cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:3b:fb:52:9c:be:47:5c:fd:45:3e:5a:d4: 55:c6:78:f0:0e:93:63:9c:fe:67:d3:d3:91:6a:90: 1e:44:af:36:04:bd:50:ac:c9:9f:55:da:cb:6f:2a: e6:58:d1:4c:e6:ad:72:6e:8e:07:aa:09:1c:d5:4a: 72:05:fe:3c:0d:67:3b:1b:41:c8:48:6c:e4:47:06: f6:3d:ef:09:7a:e7:d9:b9:ad:70:73:6f:b8:f8:da: 02:e6:58:d4:66:21:2b:53:d3:c5:ca:a5:98:28:ff: 44:6b:b4:16:38:9a:89:7a:6f:ae:9c:62:3e:f1:81: 54:15:1c:26:66:91:84:27:29:66:bb:f5:01:71:e9: 58:fe:92:68:5c:e0:54:04:66:26:1f:e8:d2:f3:cb: 83:ba:52:04:1c:ea:46:50:4b:65:e8:29:12:18:8f: 08:b2:5d:25:94:e1:7a:df:52:7d:d4:5b:14:c7:8d: f1:b6:08:d7:db:01:c9:1f:9c:6e:4b:2b:b4:85:1e: 3d:57:90:29:1c:bf:7e:29:4b:0a:da:d2:2e:13:03: 5a:fa:a4:98:5e:99:37:e0:61:46:43:f8:68:b3:74: 2b:45:64:f1:ae:23:6f:86:54:d4:06:46:49:8f:5d: aa:f5:8a:a0:02:e9:37:33:67:15:34:66:c3:c8:1c: c9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:94:17:0A:EC:D5:53:B8:39:D6:9B:17:8A:A0:9F:F3:3C:3A:4C:AB X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:dc:8f:b9:52:1c:e6:87:6a:a3:b6:53:e6:cc:90:da:1d:62: bc:81:78:fb:59:53:74:a6:41:62:ae:ad:70:f9:7d:92:e6:a3: bd:7c:d1:47:39:72:13:e5:ba:20:7d:8a:ad:2e:8c:d9:18:16: a4:7f:d0:90:12:a0:35:ae:87:2f:ec:89:bc:3c:dc:59:8f:4f: 63:95:c9:ab:88:7a:b3:89:3e:0b:5f:dc:c7:d8:87:0e:0b:de: 4d:d7:b0:9c:48:59:c9:4a:cf:f9:4c:1f:28:ee:de:e6:77:d9: 96:fb:21:07:1d:fe:95:f6:ff:50:14:52:49:8f:c2:0e:51:d1: 0b:ca:eb:1c:5f:60:82:36:85:e0:e4:34:97:99:f9:73:7b:8c: ad:f0:e5:36:f8:61:e6:d0:43:42:ee:b2:0d:ec:3c:5a:90:de: 96:12:f3:cd:fa:8a:02:5e:87:25:95:84:63:6c:2d:d5:72:4b: 9e:86:61:d9:8b:aa:ac:c4:e2:62:d9:b9:b5:8a:91:e2:b4:bc: b6:20:f3:ac:d2:0e:66:2c:da:50:a9:8b:71:a1:3a:d9:82:59: d8:0f:50:82:85:4d:e5:eb:f1:15:36:1a:f8:3d:b1:47:e5:1a: a0:6f:bc:db:d6:f0:31:e6:b4:fe:34:0e:38:bf:06:34:07:18: 34:6a:09:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFV4CfF7t355L5XjGdlkzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwOTIxMTkwMDQwWhcNMjYwOTIyMTkwMDQwWjAzMTEwLwYDVQQD EygwOTk0MTcwYWVjZDU1M2I4MzlkNjliMTc4YWEwOWZmMzNjM2E0Y2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuE7+1Kcvkdc/UU+WtRVxnjwDpNj nP5n09ORapAeRK82BL1QrMmfVdrLbyrmWNFM5q1ybo4Hqgkc1UpyBf48DWc7G0HI SGzkRwb2Pe8JeufZua1wc2+4+NoC5ljUZiErU9PFyqWYKP9Ea7QWOJqJem+unGI+ 8YFUFRwmZpGEJylmu/UBcelY/pJoXOBUBGYmH+jS88uDulIEHOpGUEtl6CkSGI8I sl0llOF631J91FsUx43xtgjX2wHJH5xuSyu0hR49V5ApHL9+KUsK2tIuEwNa+qSY Xpk34GFGQ/hos3QrRWTxriNvhlTUBkZJj12q9YqgAuk3M2cVNGbDyBzJIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmUFwrs1VO4OdabF4qgn/M8OkyrMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtyPuVIc 5odqo7ZT5syQ2h1ivIF4+1lTdKZBYq6tcPl9kuajvXzRRzlyE+W6IH2KrS6M2RgW pH/QkBKgNa6HL+yJvDzcWY9PY5XJq4h6s4k+C1/cx9iHDgveTdewnEhZyUrP+Uwf KO7e5nfZlvshBx3+lfb/UBRSSY/CDlHRC8rrHF9ggjaF4OQ0l5n5c3uMrfDlNvhh 5tBDQu6yDew8WpDelhLzzfqKAl6HJZWEY2wt1XJLnoZh2YuqrMTiYtm5tYqR4rS8 tiDzrNIOZizaUKmLcaE62YJZ2A9QgoVN5evxFTYa+D2xR+UaoG+829bwMea0/jQO OL8GNAcYNGoJQQ== -----END CERTIFICATE-----Generated at Tue Sep 22 05:38:52 2026 by rpki-client