$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: rrdkYC4xBiwAlci0sM0DT6QoRti/fK8C8jtW1LPfazE= Subject key identifier: 9F:E4:7B:1F:E4:E5:95:7A:7C:4D:93:74:EC:25:FD:F4:5E:D0:35:1F Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019EC0DB035F6FCB38E28FA9072AEA42C7F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 1971 Signing time: Sat 13 Jun 2026 12:00:38 +0000 Manifest this update: Sat 13 Jun 2026 12:00:38 +0000 Manifest next update: Sun 14 Jun 2026 12:00:38 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 3: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 4: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 5: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 6: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 7: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 8: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: cj6NY6QIHbMnVPGvr15kBON9Sa/K+gtZ3VnSCu7nxR8=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:db:03:5f:6f:cb:38:e2:8f:a9:07:2a:ea:42:c7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jun 13 12:00:38 2026 GMT Not After : Jun 14 12:00:38 2026 GMT Subject: CN=9fe47b1fe4e5957a7c4d9374ec25fdf45ed0351f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:20:e0:f3:72:2b:ad:c9:54:81:57:b2:53: 35:06:a9:62:2e:33:48:47:ae:57:5d:67:16:78:a1: 59:1f:60:e3:a0:d5:51:0a:4d:ce:40:4d:52:32:ed: 06:28:94:33:a2:13:25:6b:7b:c4:d7:a2:4c:d2:26: 9b:23:79:24:bb:a9:c1:2e:bc:12:d0:7b:d3:4f:6f: 7c:42:5b:a1:cf:7b:6f:ec:49:29:3b:29:ef:e4:30: fb:06:72:54:cc:70:09:bb:fa:5d:2e:ae:92:86:48: 10:b9:73:54:5d:5d:f4:24:83:3c:fd:4e:f6:d6:26: 3c:c2:d0:a6:48:93:28:e6:1b:d5:24:a0:32:a1:49: 8d:26:b2:75:09:4c:64:4b:6b:ae:65:04:73:1e:b4: 81:7f:b3:b7:78:26:23:32:63:f4:95:da:0c:dc:c0: 71:41:6d:f5:8d:f4:6c:86:04:8d:6c:27:8d:9d:bb: 97:ef:58:bf:0b:e6:53:55:a5:41:0c:33:2d:fd:0a: 9c:e6:cb:c0:bf:01:70:a1:27:e8:1e:42:e5:8c:fb: 94:2e:b6:cd:66:f5:73:42:7d:b0:66:fb:3c:b6:cd: 5c:eb:dd:e4:54:05:97:39:9d:f1:de:a3:1c:9e:f3: 3b:ef:57:26:fe:a1:59:72:bb:c0:34:0c:5b:b0:77: 21:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E4:7B:1F:E4:E5:95:7A:7C:4D:93:74:EC:25:FD:F4:5E:D0:35:1F X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:eb:1c:b4:2f:09:20:e4:b5:29:d3:25:8c:e9:5a:25:41:5f: af:b6:b6:2c:81:9e:ce:70:10:b9:a6:6c:59:36:de:e0:ba:5f: d9:54:fe:44:82:55:40:99:65:6d:4f:5b:87:28:46:f7:44:2d: 27:6d:81:c0:7e:fc:52:d8:2a:ff:5d:f5:88:d2:ea:29:2a:a2: bc:f1:e6:b6:e0:3c:a5:21:fb:63:39:b3:2d:51:68:24:d1:4c: ba:50:bb:02:63:6e:77:30:ca:2b:b7:e1:cd:e9:c2:9c:ab:43: df:9b:38:93:84:67:dc:02:87:8c:00:b7:9b:5a:76:6d:97:14: 9b:ef:68:0a:3a:80:44:cb:ea:c1:fe:4a:16:1d:be:b0:d8:5d: 7a:4d:76:bb:67:51:b5:4c:f4:24:f4:c7:37:92:7d:dc:25:b8: 8d:d9:59:a6:33:87:17:f4:bf:8c:c3:00:d0:60:b9:0e:e6:b9: 73:5f:b7:e2:85:88:5e:16:65:f9:c2:f8:25:06:60:26:34:25: 01:55:ce:f5:4f:8f:c6:b3:cb:74:23:13:10:df:f0:ae:b8:2d: 02:14:37:ac:99:7a:ac:7d:6f:32:c0:1b:3f:d1:a4:35:f0:40: 68:05:55:2c:c3:e0:ee:83:52:de:65:d8:2d:fe:db:2d:68:c5: a6:0d:03:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7A2wNfb8s44o+pByrqQsf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwNjEzMTIwMDM4WhcNMjYwNjE0MTIwMDM4WjAzMTEwLwYDVQQD Eyg5ZmU0N2IxZmU0ZTU5NTdhN2M0ZDkzNzRlYzI1ZmRmNDVlZDAzNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHUg4PNyK63JVIFXslM1BqliLjNI R65XXWcWeKFZH2DjoNVRCk3OQE1SMu0GKJQzohMla3vE16JM0iabI3kku6nBLrwS 0HvTT298Qluhz3tv7EkpOynv5DD7BnJUzHAJu/pdLq6ShkgQuXNUXV30JIM8/U72 1iY8wtCmSJMo5hvVJKAyoUmNJrJ1CUxkS2uuZQRzHrSBf7O3eCYjMmP0ldoM3MBx QW31jfRshgSNbCeNnbuX71i/C+ZTVaVBDDMt/Qqc5svAvwFwoSfoHkLljPuULrbN ZvVzQn2wZvs8ts1c693kVAWXOZ3x3qMcnvM771cm/qFZcrvANAxbsHch+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/kex/k5ZV6fE2TdOwl/fRe0DUfMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+sctC8J IOS1KdMljOlaJUFfr7a2LIGeznAQuaZsWTbe4Lpf2VT+RIJVQJllbU9bhyhG90Qt J22BwH78Utgq/131iNLqKSqivPHmtuA8pSH7YzmzLVFoJNFMulC7AmNudzDKK7fh zenCnKtD35s4k4Rn3AKHjAC3m1p2bZcUm+9oCjqARMvqwf5KFh2+sNhdek12u2dR tUz0JPTHN5J93CW4jdlZpjOHF/S/jMMA0GC5Dua5c1+34oWIXhZl+cL4JQZgJjQl AVXO9U+PxrPLdCMTEN/wrrgtAhQ3rJl6rH1vMsAbP9GkNfBAaAVVLMPg7oNS3mXY Lf7bLWjFpg0Dlw== -----END CERTIFICATE-----Generated at Sat Jun 13 19:58:43 2026 by rpki-client