$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json) Hash identifier: S23dKrBCP3/LaFfPnUrqxSJ6XpTL3bc2RdWERundDcI= Subject key identifier: BE:18:9A:B2:A2:CF:40:8C:4A:76:11:FA:08:FC:8E:65:4B:A7:59:E8 Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 01A0C2C48EB67A499E83385178B3FEB156AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft Manifest number: 1A8F Signing time: Mon 21 Sep 2026 07:00:56 +0000 Manifest this update: Mon 21 Sep 2026 07:00:56 +0000 Manifest next update: Tue 22 Sep 2026 07:00:56 +0000 Files and hashes: 1: 0lpbV27AN-RWXlo8EoDNHkn_WFo.roa (hash: 6Kk8nKuXT+iDhxODfuxvlj4oC1k4gGbREeQuyIoqN44=) 2: 3a7na1VrOyD4j9eANMYFxWbuuXA.roa (hash: zi3twxBdnTcqBHYcetTlSiGtn2VDXgmL6wD/jF3qYjQ=) 3: 3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa (hash: AfMPl1I4FCjIX3coVGZnaX03RsdIkobHgk2ozUg0CRU=) 4: KrEjWh12m9Ky0XdHMs-AV4DW__Q.roa (hash: htLgSYFv0aza897YRzqYZzsiSWGM3XLxPit9x6cKCoM=) 5: QFNxEKmMB0w9c_fcbUm6kZIgIiU.roa (hash: yRObraxWQ+KSiz/NMpv1EAHhy6xFZ3g/Tjjo6DSAkhE=) 6: SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa (hash: KVtsT0fMQgVAG+EfM+vPhmS8z1w+vo6LbjbuGgZDfvk=) 7: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: h8hXt5uGYfT8+dvXRwfib4iVPH5rRlaLT9+XPkcF3z0=) 8: UYXgcCIK5zcKT9TlB3oRxLcPw4c.roa (hash: ZKu5onIAs6YBld/h2tSRXhaOsFitxQIlAPhxGco8hos=) 9: UvcJIP9GU_V2Mt4tyf-MC05D4z4.roa (hash: Irba1/9xm6DmXZQD7UmL9JlVgVcOaYu4q1AwZlIIIho=) 10: XfkL7_PpVycbprVLaH4OE4tT8zw.roa (hash: Oii2pbC7CFv3HCPeNrmN9q1EffMqA0bBjcOQLdxIuL0=) 11: _K246O-pbv3LImR_NbGl0Uuk0ms.roa (hash: 4aM+aELc7GT7SUF0gs3npOnDB0xgu8gqvceBuJ4g3W0=) 12: aDqWfD8qVv5mTmy_YKlw0knE910.roa (hash: Nt6HJPyyJEcO8XZlWiN2Qky5erL1hvtr6Hh2B65imCI=) 13: cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa (hash: oSg1p4d3f/Ek/TgEvq1Kl3nuuVmFt2QEXW8+ntmYEbw=) 14: dX-rNWvNzQQp4mkv-p-E7vQ4jvE.roa (hash: tzroMUcOp9V01Z5SuKmv3L+kiGKSKimIDzFfo75M/VM=) 15: e2-M3_roN4thnHrSRcYhd3A5tEE.roa (hash: HtHoJrcFJ7Tr7k+ozWHjO7whHbckIcy4WmHKQ/7ZFj4=) 16: hJ_DSrWaO3ObBm5-hhe295ZUGZU.roa (hash: sBGo0ebfgaJ7zl4GXpc60jYy9/bgceVEOmE1IuNRiO8=) 17: hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa (hash: X6Ep2QeB8bOGHavV+XJT5rALDucLiATYg1DR3vQrIUc=) 18: iI_SDTDKoORMx-kq45a1qjOTuZk.roa (hash: J2K/cush+bx+VMhqbDSKLYwVdG3Sbi2stgQnJe6Lx8g=) 19: kwWZWud0oDxj9bqRYQSnO1fTRms.roa (hash: pxOltO+Vbwb+oDFmvBF+y18EOaW3vQK3U1vDji5y33Q=) 20: m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa (hash: n8StrjuRMyFGihImcOgaJXRS+zodWuJUHk2aQxkkkuU=) 21: niKMcxvkNHwtFE1swRnZRa7V130.roa (hash: 5BhfKtNxHPXceWh2gh+NnT77omNb+6j7lXfyG61q2BY=) 22: o5XpHbYzECM8PxBWg33FKmpPLyo.roa (hash: /s+OXvlcKVVirwj5hJhUGVZIhqNKlLQOjzuXK++kB0A=) 23: ptwWAfUIQhVLhqDQn5RDQ5c7CTA.roa (hash: Nd7kZjPWVNNkDzbbN1dtVJihtNFnEpHnC+VpDFqPs8A=) 24: xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa (hash: 944aX9Q9tSThrEugzQqJaCWIZrVcCyB9vKNFlU0FXPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:c4:8e:b6:7a:49:9e:83:38:51:78:b3:fe:b1:56:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Sep 21 07:00:56 2026 GMT Not After : Sep 22 07:00:56 2026 GMT Subject: CN=be189ab2a2cf408c4a7611fa08fc8e654ba759e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1e:ae:53:62:e2:3d:3d:d8:22:4c:b0:9f:0e: 86:f0:bb:7b:5b:da:0b:37:a5:cc:21:ff:6c:7d:ee: 96:ab:e5:26:51:9a:61:ae:40:5e:ff:2e:3e:e9:c1: 8e:7c:e4:86:bc:94:51:fb:ee:f0:47:8e:76:7d:38: b8:41:eb:4f:cc:82:db:f7:89:b0:f9:1f:aa:5c:ff: 2e:e4:30:78:68:92:92:30:25:db:7b:85:5f:6c:d6: 47:55:f0:3f:b7:40:ce:eb:12:1b:23:28:4a:91:f2: bb:17:40:92:f7:35:3c:36:e8:97:71:18:5a:e4:1c: 88:c6:54:8d:14:bb:44:eb:c8:56:14:1d:15:5c:f9: 46:46:62:25:dc:7c:f7:6c:c2:30:0b:31:40:c6:a8: 24:7b:de:82:e8:bf:6f:1e:b3:0f:d8:3a:42:ec:45: b1:9a:14:b5:58:98:7c:c8:72:5b:e0:c6:53:1b:d5: a0:a5:c4:df:1f:c2:d0:15:f6:da:24:c7:e7:46:82: c1:16:87:5b:fc:4d:4e:a5:28:40:78:d7:3f:76:51: 47:fc:5f:32:e5:67:af:6a:ed:a9:29:92:bb:8e:29: ba:44:ca:e9:98:58:53:c4:b8:36:0d:b0:99:10:1f: 6f:c0:a3:47:6f:b2:67:63:90:6b:4a:c6:d1:fd:24: 05:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:18:9A:B2:A2:CF:40:8C:4A:76:11:FA:08:FC:8E:65:4B:A7:59:E8 X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:1a:22:04:db:91:78:ce:50:e3:81:ce:17:2e:24:c9:e4:fe: 71:ef:f4:df:ff:c1:3e:8b:25:c9:ec:9d:60:ac:ac:69:91:9e: 1c:31:10:83:c5:b3:90:b7:7a:32:34:7f:b0:6f:fa:0e:b3:fa: 51:88:fc:50:80:b9:12:37:a5:80:d0:3c:03:2d:1d:42:f2:a1: 45:bd:23:3c:09:00:4d:33:9e:cd:71:0d:2a:ae:d0:32:d2:a0: c4:2d:23:f8:9d:ff:1a:54:4a:18:ec:e4:88:f5:ee:61:f7:16: 7c:0f:bb:f5:7a:cc:42:f6:36:b6:9f:59:1d:1e:e1:f4:c3:66: 6e:fb:96:db:68:12:0a:95:d7:2e:5e:cd:ab:72:26:e2:dd:19: 16:d0:c2:b6:81:73:f2:6e:12:70:1b:b9:4f:9b:72:4b:5a:a4: fe:a9:bd:c9:45:ce:e2:1f:c8:b7:8a:d3:8f:05:32:4b:f7:46: a8:74:c4:77:be:54:00:ed:e1:74:c2:b1:63:e4:a3:24:e8:db: a4:12:28:fc:f7:f5:bd:84:a5:72:1e:0d:54:db:a9:23:22:8e: 45:b7:0d:f4:fa:b7:48:0f:ea:8a:ec:09:e2:3b:60:ed:8b:cc: e3:25:6b:f4:4a:0e:1f:0d:be:0a:f6:13:30:fc:60:19:59:cf: f5:ca:58:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCxI62ekmegzhReLP+sVasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwOTIxMDcwMDU2WhcNMjYwOTIyMDcwMDU2WjAzMTEwLwYDVQQD EyhiZTE4OWFiMmEyY2Y0MDhjNGE3NjExZmEwOGZjOGU2NTRiYTc1OWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h6uU2LiPT3YIkywnw6G8Lt7W9oL N6XMIf9sfe6Wq+UmUZphrkBe/y4+6cGOfOSGvJRR++7wR452fTi4QetPzILb94mw +R+qXP8u5DB4aJKSMCXbe4VfbNZHVfA/t0DO6xIbIyhKkfK7F0CS9zU8NuiXcRha 5ByIxlSNFLtE68hWFB0VXPlGRmIl3Hz3bMIwCzFAxqgke96C6L9vHrMP2DpC7EWx mhS1WJh8yHJb4MZTG9WgpcTfH8LQFfbaJMfnRoLBFodb/E1OpShAeNc/dlFH/F8y 5Wevau2pKZK7jim6RMrpmFhTxLg2DbCZEB9vwKNHb7JnY5BrSsbR/SQF8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4YmrKiz0CMSnYR+gj8jmVLp1noMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRoiBNuR eM5Q44HOFy4kyeT+ce/03//BPoslyeydYKysaZGeHDEQg8WzkLd6MjR/sG/6DrP6 UYj8UIC5EjelgNA8Ay0dQvKhRb0jPAkATTOezXENKq7QMtKgxC0j+J3/GlRKGOzk iPXuYfcWfA+79XrMQvY2tp9ZHR7h9MNmbvuW22gSCpXXLl7Nq3Im4t0ZFtDCtoFz 8m4ScBu5T5tyS1qk/qm9yUXO4h/It4rTjwUyS/dGqHTEd75UAO3hdMKxY+SjJOjb pBIo/Pf1vYSlch4NVNupIyKORbcN9Pq3SA/qiuwJ4jtg7YvM4yVr9EoOHw2+CvYT MPxgGVnP9cpYyA== -----END CERTIFICATE-----Generated at Mon Sep 21 10:41:09 2026 by rpki-client