$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json) Hash identifier: 9pkpX3Tf5OyXYd41lV1OvR2+bHZH6c7EXfOZ+XnwnRw= Subject key identifier: 4B:BB:94:C9:7B:86:0D:DF:76:A2:A6:16:50:6A:2F:6C:D4:56:95:9A Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019D99628A311717EFC3DDDF49B133B3678F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft Manifest number: 18EB Signing time: Fri 17 Apr 2026 03:01:05 +0000 Manifest this update: Fri 17 Apr 2026 03:01:05 +0000 Manifest next update: Sat 18 Apr 2026 03:01:05 +0000 Files and hashes: 1: 0lpbV27AN-RWXlo8EoDNHkn_WFo.roa (hash: 6Kk8nKuXT+iDhxODfuxvlj4oC1k4gGbREeQuyIoqN44=) 2: 3a7na1VrOyD4j9eANMYFxWbuuXA.roa (hash: zi3twxBdnTcqBHYcetTlSiGtn2VDXgmL6wD/jF3qYjQ=) 3: 3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa (hash: AfMPl1I4FCjIX3coVGZnaX03RsdIkobHgk2ozUg0CRU=) 4: KrEjWh12m9Ky0XdHMs-AV4DW__Q.roa (hash: htLgSYFv0aza897YRzqYZzsiSWGM3XLxPit9x6cKCoM=) 5: QFNxEKmMB0w9c_fcbUm6kZIgIiU.roa (hash: yRObraxWQ+KSiz/NMpv1EAHhy6xFZ3g/Tjjo6DSAkhE=) 6: SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa (hash: KVtsT0fMQgVAG+EfM+vPhmS8z1w+vo6LbjbuGgZDfvk=) 7: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: 1tob7eyM0bnlBGVT+k0OPBw7q58+8L8KFK7eYcK/SKI=) 8: UYXgcCIK5zcKT9TlB3oRxLcPw4c.roa (hash: ZKu5onIAs6YBld/h2tSRXhaOsFitxQIlAPhxGco8hos=) 9: UvcJIP9GU_V2Mt4tyf-MC05D4z4.roa (hash: Irba1/9xm6DmXZQD7UmL9JlVgVcOaYu4q1AwZlIIIho=) 10: _K246O-pbv3LImR_NbGl0Uuk0ms.roa (hash: 4aM+aELc7GT7SUF0gs3npOnDB0xgu8gqvceBuJ4g3W0=) 11: aDqWfD8qVv5mTmy_YKlw0knE910.roa (hash: Nt6HJPyyJEcO8XZlWiN2Qky5erL1hvtr6Hh2B65imCI=) 12: cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa (hash: oSg1p4d3f/Ek/TgEvq1Kl3nuuVmFt2QEXW8+ntmYEbw=) 13: dX-rNWvNzQQp4mkv-p-E7vQ4jvE.roa (hash: tzroMUcOp9V01Z5SuKmv3L+kiGKSKimIDzFfo75M/VM=) 14: e2-M3_roN4thnHrSRcYhd3A5tEE.roa (hash: HtHoJrcFJ7Tr7k+ozWHjO7whHbckIcy4WmHKQ/7ZFj4=) 15: hJ_DSrWaO3ObBm5-hhe295ZUGZU.roa (hash: sBGo0ebfgaJ7zl4GXpc60jYy9/bgceVEOmE1IuNRiO8=) 16: hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa (hash: X6Ep2QeB8bOGHavV+XJT5rALDucLiATYg1DR3vQrIUc=) 17: iI_SDTDKoORMx-kq45a1qjOTuZk.roa (hash: J2K/cush+bx+VMhqbDSKLYwVdG3Sbi2stgQnJe6Lx8g=) 18: kwWZWud0oDxj9bqRYQSnO1fTRms.roa (hash: pxOltO+Vbwb+oDFmvBF+y18EOaW3vQK3U1vDji5y33Q=) 19: m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa (hash: n8StrjuRMyFGihImcOgaJXRS+zodWuJUHk2aQxkkkuU=) 20: niKMcxvkNHwtFE1swRnZRa7V130.roa (hash: 5BhfKtNxHPXceWh2gh+NnT77omNb+6j7lXfyG61q2BY=) 21: o5XpHbYzECM8PxBWg33FKmpPLyo.roa (hash: /s+OXvlcKVVirwj5hJhUGVZIhqNKlLQOjzuXK++kB0A=) 22: ptwWAfUIQhVLhqDQn5RDQ5c7CTA.roa (hash: Nd7kZjPWVNNkDzbbN1dtVJihtNFnEpHnC+VpDFqPs8A=) 23: xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa (hash: 944aX9Q9tSThrEugzQqJaCWIZrVcCyB9vKNFlU0FXPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:8a:31:17:17:ef:c3:dd:df:49:b1:33:b3:67:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Apr 17 03:01:05 2026 GMT Not After : Apr 18 03:01:05 2026 GMT Subject: CN=4bbb94c97b860ddf76a2a616506a2f6cd456959a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:57:57:e8:ec:30:c0:5a:7d:45:bc:08:b9: 96:a3:6d:46:c6:c1:c9:b2:21:5f:65:ec:2f:19:cd: 3a:e1:20:f0:39:24:02:b8:8e:e2:97:72:fe:96:b2: b7:0f:c9:ae:94:1b:0a:f5:97:92:2d:5d:d2:7a:03: 09:f4:41:13:21:b4:3f:2e:18:3f:17:3a:31:a3:76: 57:c2:de:c7:2f:0c:5d:1e:13:70:f6:64:f4:29:6e: 79:39:f4:a4:c4:b2:c0:7d:9e:c3:68:82:66:75:f9: 92:bd:46:49:c1:c6:e4:9d:52:2c:0b:44:1e:ad:92: ee:57:2f:5b:b0:aa:0d:79:4a:49:b7:0b:c3:fc:a1: 4f:e9:97:cd:cf:f3:31:11:c5:6a:2e:5d:3d:5f:7d: 70:45:3b:09:5c:bc:0f:40:53:e7:e7:8e:38:05:fc: 1c:cf:f8:e1:e7:4c:a2:c5:28:21:1f:02:4c:74:4f: 56:e3:9f:30:bd:96:87:3b:24:4d:4c:04:89:cd:2b: 0f:a8:aa:1a:16:dd:92:a2:cb:f7:8f:08:e4:77:c0: a9:82:0f:31:46:c5:0a:a9:73:92:9e:9a:64:ea:df: 33:8c:e7:ca:aa:ca:b5:e2:5f:33:8e:02:9a:1f:6b: eb:54:4f:59:4e:ce:df:89:1e:8a:01:c8:97:58:08: 5f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BB:94:C9:7B:86:0D:DF:76:A2:A6:16:50:6A:2F:6C:D4:56:95:9A X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b0:ae:3c:17:b8:95:49:3e:d4:aa:e8:b0:6e:3a:89:9f:d0: 40:75:4f:98:dd:f6:ed:1e:d8:80:69:b2:50:56:06:75:d1:45: 46:51:60:2a:33:59:a5:51:3e:e6:16:69:80:39:ae:8b:01:1a: 76:3d:dd:d5:5e:73:a9:c1:f2:23:c9:6e:02:49:e5:04:3c:dd: cc:85:87:7a:e5:45:d3:ca:26:26:10:0c:23:3a:80:0c:62:28: d8:3f:55:87:2e:d4:a7:0e:79:d1:d7:bc:25:cf:cb:7c:16:5a: ef:5e:98:d3:92:de:59:30:06:60:25:f6:56:9e:18:42:55:82: c1:83:62:0d:2d:ee:a7:17:cd:a9:4f:d9:65:42:73:0d:9d:38: 36:1c:bd:9c:b8:b7:af:00:0c:0d:86:1a:14:2c:55:84:56:1b: 6e:50:f7:c4:33:ac:43:ce:63:a1:5e:29:f1:51:07:5d:37:2f: 8b:f8:02:3d:02:4e:a7:79:4b:b8:69:a1:41:c0:10:15:8a:4a: 94:e9:2e:fe:58:c0:7c:aa:62:5b:59:53:ff:ca:51:3c:b8:e5: 6b:c0:1b:a8:74:6e:e4:d6:27:e8:e4:a5:53:8a:2b:bc:0c:2a: d8:68:03:7d:f6:c0:37:23:73:20:09:99:91:1a:61:ca:b4:87: 0c:eb:4d:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYooxFxfvw93fSbEzs2ePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwNDE3MDMwMTA1WhcNMjYwNDE4MDMwMTA1WjAzMTEwLwYDVQQD Eyg0YmJiOTRjOTdiODYwZGRmNzZhMmE2MTY1MDZhMmY2Y2Q0NTY5NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6NXV+jsMMBafUW8CLmWo21GxsHJ siFfZewvGc064SDwOSQCuI7il3L+lrK3D8mulBsK9ZeSLV3SegMJ9EETIbQ/Lhg/ Fzoxo3ZXwt7HLwxdHhNw9mT0KW55OfSkxLLAfZ7DaIJmdfmSvUZJwcbknVIsC0Qe rZLuVy9bsKoNeUpJtwvD/KFP6ZfNz/MxEcVqLl09X31wRTsJXLwPQFPn5444Bfwc z/jh50yixSghHwJMdE9W458wvZaHOyRNTASJzSsPqKoaFt2Sosv3jwjkd8Cpgg8x RsUKqXOSnppk6t8zjOfKqsq14l8zjgKaH2vrVE9ZTs7fiR6KAciXWAhfdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEu7lMl7hg3fdqKmFlBqL2zUVpWaMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7CuPBe4 lUk+1KrosG46iZ/QQHVPmN327R7YgGmyUFYGddFFRlFgKjNZpVE+5hZpgDmuiwEa dj3d1V5zqcHyI8luAknlBDzdzIWHeuVF08omJhAMIzqADGIo2D9Vhy7Upw550de8 Jc/LfBZa716Y05LeWTAGYCX2Vp4YQlWCwYNiDS3upxfNqU/ZZUJzDZ04Nhy9nLi3 rwAMDYYaFCxVhFYbblD3xDOsQ85joV4p8VEHXTcvi/gCPQJOp3lLuGmhQcAQFYpK lOku/ljAfKpiW1lT/8pRPLjla8AbqHRu5NYn6OSlU4orvAwq2GgDffbANyNzIAmZ kRphyrSHDOtNNw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:24:40 2026 by rpki-client