$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: NmCjQXeMMB3av3rZykWWNrHOtrDmBSKRpde2RsTtCSs= Subject key identifier: C8:A3:36:FA:7A:31:3E:D3:95:20:73:A6:3F:4C:02:A1:7E:1E:26:94 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019D996233985D2D1931B6385ED6C92A3047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 18D8 Signing time: Fri 17 Apr 2026 03:00:42 +0000 Manifest this update: Fri 17 Apr 2026 03:00:42 +0000 Manifest next update: Sat 18 Apr 2026 03:00:42 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 3: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 4: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 5: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 6: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 7: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 8: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: QATEHNtljxvkYYEozDiPlJf7EB45vSM36Yse2GaT43o=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:33:98:5d:2d:19:31:b6:38:5e:d6:c9:2a:30:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Apr 17 03:00:42 2026 GMT Not After : Apr 18 03:00:42 2026 GMT Subject: CN=c8a336fa7a313ed3952073a63f4c02a17e1e2694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:10:07:02:fa:08:4c:dd:b5:40:28:16:76:a7: aa:b8:92:25:0a:c0:df:88:fb:81:c1:9d:c4:c8:8f: 64:c5:3b:0c:cf:99:53:4d:66:d6:3e:0f:4d:1d:7b: 40:b4:46:e7:c3:14:65:7e:9f:4b:ee:56:f5:6d:66: 8b:dc:b2:1f:aa:0b:54:5c:26:b0:79:54:a8:9b:cd: ea:4c:59:c8:22:02:0d:30:37:7f:ad:60:fa:59:c4: ec:eb:26:33:98:d6:69:a7:b4:9e:b1:1d:1f:17:9f: e5:69:77:3f:d6:78:32:62:66:97:44:11:a6:ad:56: 0a:e5:7c:70:03:a3:62:ec:31:a0:61:ef:17:f3:f2: 7e:ac:c1:b2:8f:69:e3:a9:98:aa:92:1f:95:9d:fc: 30:72:5d:d5:bf:c4:dc:38:f0:5c:34:41:e5:54:5b: f3:fd:80:80:21:1e:02:4c:d4:3c:29:ea:04:f2:f2: 95:eb:af:71:92:6c:82:b1:cc:66:9d:00:4e:be:16: d1:08:2d:be:83:ce:20:be:42:64:d7:9b:0c:d0:73: e9:e3:17:8c:96:6b:13:17:70:8c:4d:2b:2e:aa:0d: c3:9d:2f:5b:01:b6:af:4c:79:94:ff:27:25:90:1d: 5f:b5:7c:31:ec:25:56:21:de:74:cc:80:e3:49:2d: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A3:36:FA:7A:31:3E:D3:95:20:73:A6:3F:4C:02:A1:7E:1E:26:94 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:32:d4:b1:c9:57:65:64:c7:73:8a:f1:d0:ac:ee:1c:10:37: 52:f1:8c:07:61:27:d9:eb:bc:39:43:36:dd:b0:02:2f:91:12: f0:fc:75:db:b5:5e:27:3b:7f:d4:da:1a:8d:68:3f:67:5d:f2: 6c:8c:aa:1e:15:4d:c2:0c:07:dd:67:f3:c9:19:8e:13:ee:24: f3:9e:6a:3e:45:48:39:2b:4a:79:62:bf:7d:25:38:ad:90:71: e4:b3:b6:48:77:95:82:40:6b:4d:2f:63:59:d8:fb:8e:a7:c5: 64:4a:ea:27:81:82:74:63:de:ac:97:b4:7a:39:49:88:29:f0: 19:ec:25:b2:28:cf:64:a4:ff:9c:d1:17:cc:1b:88:98:13:17: f7:1b:27:a9:55:be:03:6b:c1:e1:f5:2b:cb:22:01:ba:c5:14: 46:bd:12:ab:a9:04:9a:b3:81:a8:6e:42:07:8b:45:4c:95:ae: ce:cb:09:8f:05:95:58:13:55:98:18:ff:02:2b:98:e9:98:e0: b2:68:d3:54:89:fe:57:d0:45:a4:3a:3b:35:c2:bf:f5:bc:c1: 4a:54:91:11:29:e3:60:2b:34:33:26:59:28:1a:ca:e2:44:eb: fd:48:8d:93:d2:b5:a6:d3:49:8e:4d:1c:bd:12:4e:50:de:e0: 69:5f:6a:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYjOYXS0ZMbY4XtbJKjBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwNDE3MDMwMDQyWhcNMjYwNDE4MDMwMDQyWjAzMTEwLwYDVQQD EyhjOGEzMzZmYTdhMzEzZWQzOTUyMDczYTYzZjRjMDJhMTdlMWUyNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxAHAvoITN21QCgWdqequJIlCsDf iPuBwZ3EyI9kxTsMz5lTTWbWPg9NHXtAtEbnwxRlfp9L7lb1bWaL3LIfqgtUXCaw eVSom83qTFnIIgINMDd/rWD6WcTs6yYzmNZpp7SesR0fF5/laXc/1ngyYmaXRBGm rVYK5XxwA6Ni7DGgYe8X8/J+rMGyj2njqZiqkh+Vnfwwcl3Vv8TcOPBcNEHlVFvz /YCAIR4CTNQ8KeoE8vKV669xkmyCscxmnQBOvhbRCC2+g84gvkJk15sM0HPp4xeM lmsTF3CMTSsuqg3DnS9bAbavTHmU/yclkB1ftXwx7CVWId50zIDjSS3bIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMijNvp6MT7TlSBzpj9MAqF+HiaUMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTLUsclX ZWTHc4rx0KzuHBA3UvGMB2En2eu8OUM23bACL5ES8Px127VeJzt/1NoajWg/Z13y bIyqHhVNwgwH3WfzyRmOE+4k855qPkVIOStKeWK/fSU4rZBx5LO2SHeVgkBrTS9j Wdj7jqfFZErqJ4GCdGPerJe0ejlJiCnwGewlsijPZKT/nNEXzBuImBMX9xsnqVW+ A2vB4fUryyIBusUURr0Sq6kEmrOBqG5CB4tFTJWuzssJjwWVWBNVmBj/AiuY6Zjg smjTVIn+V9BFpDo7NcK/9bzBSlSRESnjYCs0MyZZKBrK4kTr/UiNk9K1ptNJjk0c vRJOUN7gaV9qJw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:02:11 2026 by rpki-client