$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: MmlZxljmrC07eELL+edL2E7Xodr6XAAiifh3bdWf2yg= Subject key identifier: 7B:C1:53:E6:F2:73:D2:36:22:C6:48:A0:71:DD:63:C3:CB:58:C5:89 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 01A0C6A1384376EBE15BA176E8751095CF4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 1A7E Signing time: Tue 22 Sep 2026 01:00:49 +0000 Manifest this update: Tue 22 Sep 2026 01:00:49 +0000 Manifest next update: Wed 23 Sep 2026 01:00:49 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: 69GOpdzwlIydOctwPF6_V449w8Q.roa (hash: oepL/u5Uo8sKbDIefmYypO+csLtLFrgJjxhbnTvWVCs=) 3: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 4: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 5: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 6: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 7: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 8: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: Jxpkms5VZaSyMDPGZqrihUu6i8boTam5HkmsITJG6C0=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:a1:38:43:76:eb:e1:5b:a1:76:e8:75:10:95:cf:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Sep 22 01:00:49 2026 GMT Not After : Sep 23 01:00:49 2026 GMT Subject: CN=7bc153e6f273d23622c648a071dd63c3cb58c589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:75:56:54:0a:8a:35:e1:79:ad:a4:ed:75: 59:36:c4:c9:0f:ef:b8:43:81:d7:84:61:57:5d:7d: c0:ed:15:25:83:9b:47:52:84:49:5e:41:c6:b5:95: b8:43:96:67:c6:1c:6a:43:4c:c7:2a:27:40:42:9f: 9e:60:f5:b9:bf:97:a6:ab:c0:6b:d3:cd:bb:bf:16: 83:21:6a:d2:87:63:e4:d3:04:3f:cb:7a:00:73:b9: 9e:57:91:e3:69:52:7e:76:e3:0a:b7:90:f4:80:89: 48:1a:de:b7:33:c6:cd:0b:99:a3:2a:ee:c5:3e:00: 58:f3:5e:5e:e8:69:08:48:92:c0:92:76:dc:29:2c: 3a:4d:46:11:a1:39:34:f4:b4:19:20:12:26:04:ad: 77:2b:e7:35:0b:cb:6f:a9:ce:fa:4c:c6:56:d1:fe: be:84:28:ed:1f:aa:8d:83:82:79:ba:5d:4c:24:c9: 94:dc:7f:25:c5:1d:18:a2:ea:9f:24:e7:84:24:1e: 30:b6:d7:aa:49:14:7b:55:c8:ec:d4:f6:72:c6:10: 86:f7:a1:0c:5b:56:2a:62:b4:2a:dd:65:4e:7c:42: fb:5b:6d:0f:9e:e2:95:ca:93:b8:2a:c3:4c:c7:7e: 7d:00:56:55:7e:c7:48:d9:9e:6c:19:41:94:1a:e8: 6b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C1:53:E6:F2:73:D2:36:22:C6:48:A0:71:DD:63:C3:CB:58:C5:89 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:0c:50:3c:f1:8a:dd:38:a1:43:97:9e:4d:2b:0b:28:48:1a: ab:b0:73:6f:aa:a8:2b:6d:b4:02:15:7b:bd:67:9a:0d:08:d1: c1:0d:5a:94:20:66:51:94:5a:8c:8b:ca:16:b8:d0:14:74:62: 0c:f7:6e:77:41:fd:1d:06:d6:ad:51:6c:42:fe:fc:be:c2:c0: b3:92:8b:bf:f9:c9:23:15:1f:e9:6b:a2:92:44:2f:8c:48:ba: bf:a7:6a:d7:5f:ca:19:06:a8:60:8c:78:1f:3a:f6:33:51:af: 9a:65:27:e5:1f:95:01:a5:29:2f:bb:db:76:40:a9:01:e8:a5: b8:24:99:07:10:6c:6a:67:5c:a2:99:38:34:72:00:c3:ed:b1: 18:45:c3:1a:48:61:a2:4d:46:13:c6:8d:36:a3:db:15:40:2a: 80:36:1c:f2:e2:96:ad:72:9e:aa:37:8d:2c:19:ef:db:62:42: ca:8b:30:2b:50:96:42:06:14:77:16:f9:d3:e5:59:37:80:04: 27:07:89:11:e1:31:d8:c7:de:cd:3e:9f:0c:9f:0d:94:37:ab: 83:46:d7:33:71:ea:9e:0d:0a:95:41:30:51:c6:4d:ef:83:86: 47:32:85:01:f2:df:f8:3b:94:27:be:51:69:22:c4:c7:46:99: d1:39:42:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDGoThDduvhW6F26HUQlc9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwOTIyMDEwMDQ5WhcNMjYwOTIzMDEwMDQ5WjAzMTEwLwYDVQQD Eyg3YmMxNTNlNmYyNzNkMjM2MjJjNjQ4YTA3MWRkNjNjM2NiNThjNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCZ1VlQKijXhea2k7XVZNsTJD++4 Q4HXhGFXXX3A7RUlg5tHUoRJXkHGtZW4Q5ZnxhxqQ0zHKidAQp+eYPW5v5emq8Br 0827vxaDIWrSh2Pk0wQ/y3oAc7meV5HjaVJ+duMKt5D0gIlIGt63M8bNC5mjKu7F PgBY815e6GkISJLAknbcKSw6TUYRoTk09LQZIBImBK13K+c1C8tvqc76TMZW0f6+ hCjtH6qNg4J5ul1MJMmU3H8lxR0YouqfJOeEJB4wtteqSRR7Vcjs1PZyxhCG96EM W1YqYrQq3WVOfEL7W20PnuKVypO4KsNMx359AFZVfsdI2Z5sGUGUGuhrHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvBU+byc9I2IsZIoHHdY8PLWMWJMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgxQPPGK 3TihQ5eeTSsLKEgaq7Bzb6qoK220AhV7vWeaDQjRwQ1alCBmUZRajIvKFrjQFHRi DPdud0H9HQbWrVFsQv78vsLAs5KLv/nJIxUf6WuikkQvjEi6v6dq11/KGQaoYIx4 Hzr2M1GvmmUn5R+VAaUpL7vbdkCpAeiluCSZBxBsamdcopk4NHIAw+2xGEXDGkhh ok1GE8aNNqPbFUAqgDYc8uKWrXKeqjeNLBnv22JCyoswK1CWQgYUdxb50+VZN4AE JweJEeEx2MfezT6fDJ8NlDerg0bXM3Hqng0KlUEwUcZN74OGRzKFAfLf+DuUJ75R aSLEx0aZ0TlC/g== -----END CERTIFICATE-----Generated at Tue Sep 22 07:47:16 2026 by rpki-client