$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json) Hash identifier: R2caCc/ureuut149yVXo8PujJu2+uvCEFuTBgeA1Cp4= Subject key identifier: 54:FB:68:1B:EB:6A:39:2B:C1:6C:18:03:43:09:AB:E4:B8:B4:56:4D Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Certificate serial: 019FA8CFF8CB3DB3BC390A4DD4A64A65C6A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft Manifest number: 1A37 Signing time: Tue 28 Jul 2026 13:00:29 +0000 Manifest this update: Tue 28 Jul 2026 13:00:29 +0000 Manifest next update: Wed 29 Jul 2026 13:00:29 +0000 Files and hashes: 1: 3mj4BF15-QsrQeXNqlhp9O0RF8Q.roa (hash: vXL9dy1/SgEnnpISMc/F/t6U8c7+bWH7fiwFFAUniPU=) 2: AA7Y4sCR7PrpDI85YfPbvxgzrAg.roa (hash: 1b9YLade5wRVtuNh+CLPpHprAJRfPxZf9fkGpaZl+nY=) 3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: vkLNz1agsDRdbrBUZsI1LHX7/zLNl7KpZ71Dvu3QihM=) 4: _OICBSukGvCLBbc9uyxx5OyhMb4.roa (hash: 7AuBd8gg+SvdGvOadXKAAwMx3Pu5AWWquX3/J1ObTWQ=) 5: dDIM-ljTCDKhWIxv1515WUGeQvk.roa (hash: /ksxNXhqwhx98qeq21Eca7WB/KLYXy3qx2dkD35mKTc=) 6: kFLjuN4_tRjI-IILkJq8lcLpDdc.roa (hash: lQTRIEBvMUBY3vX80dFs9U0bSNDBYvB6Uew+srrzZ9A=) 7: pyNvgkFzsg9fIZYcAGIp4TK5i6Q.roa (hash: Z5COLPZ8sBgmHRYMdI9Jy6cVnommi6Y2ZY1mY2+lzkA=) 8: qrG9XLPl84E40eGjaluMQlHH30g.roa (hash: JZCVwj3aTdfzcFTKEfr0xBq4Umu2aHhpSpk1hh5GgSQ=) 9: sNbxwr_VlMceIOoORfjNh48fthg.roa (hash: og1IfOlO+B5tux3x/JdwIjbchpmcSQUOsvTa4SrXgws=) 10: sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (hash: R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:cf:f8:cb:3d:b3:bc:39:0a:4d:d4:a6:4a:65:c6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Validity Not Before: Jul 28 13:00:29 2026 GMT Not After : Jul 29 13:00:29 2026 GMT Subject: CN=54fb681beb6a392bc16c18034309abe4b8b4564d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:57:f7:bc:b5:61:cc:47:d4:80:02:b2:3f: 3a:97:f9:f7:d2:07:e3:d7:ff:51:54:36:21:c1:55: 5f:c1:9c:ee:70:ca:20:f6:6b:57:75:ad:95:1c:55: 52:2f:09:7e:88:3e:a3:a7:29:a2:f8:1a:d2:9d:a0: cc:1b:88:2f:0c:78:3e:73:69:b2:eb:19:ba:8a:9f: 0a:52:00:ea:a1:80:b2:1b:c5:60:09:61:6a:3e:42: 7f:a5:e2:b1:7d:23:40:d2:d0:e6:b8:c7:d3:2e:8a: 47:63:1f:01:29:97:df:4d:31:2f:53:3f:8a:70:f6: 12:0b:65:5a:92:ed:d5:2b:85:bd:42:52:5b:87:64: be:66:35:71:39:84:4b:40:c8:1d:27:40:d1:ee:56: 1a:ca:fa:a9:57:41:fe:a5:dc:33:8c:2d:aa:11:3e: 57:b5:15:80:74:de:67:48:17:74:46:a4:bf:f4:f1: f9:e9:72:d2:a2:1a:ae:96:af:7b:83:20:2c:05:41: e6:d0:f2:2d:da:f5:44:63:8d:70:21:75:3c:e9:b7: 81:68:f9:ee:67:ad:0a:3d:43:45:8c:6d:fb:7d:f7: 46:4b:46:2a:cd:3e:64:f1:b9:85:0f:e9:cc:12:50: 9e:0a:a9:39:75:27:ac:82:e6:d2:ff:ae:b6:65:94: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FB:68:1B:EB:6A:39:2B:C1:6C:18:03:43:09:AB:E4:B8:B4:56:4D X509v3 Authority Key Identifier: keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a3:42:ff:5b:98:71:06:63:86:ce:d1:1a:1d:c9:b9:00:d3: a1:4b:f7:86:b1:ba:fe:c2:bc:42:67:0e:26:4c:a1:26:5d:74: 6a:81:82:59:16:6b:18:f4:bd:0b:d1:e1:48:88:8d:3d:89:60: 49:a0:71:77:d1:26:23:cf:83:03:ca:15:95:5a:66:d7:0e:12: de:a1:9a:74:80:0a:25:7e:a3:3c:31:9b:bf:4c:5a:cb:5f:b9: 91:f8:d1:ee:44:5b:7d:02:99:cc:0b:28:12:45:42:17:06:24: 15:6d:b1:c4:dc:e8:8b:00:1e:03:a3:36:be:ec:72:73:7b:4f: 98:d2:68:05:44:c1:85:73:4e:3f:b1:87:94:67:f5:d1:b3:8c: ce:22:ea:2b:e8:fb:8e:32:06:0a:ff:25:f0:8b:1b:6d:8a:31: 1f:76:4f:1c:d1:c1:fe:84:c0:4e:4c:39:85:19:2c:3b:7f:d0: f3:2d:eb:0c:b6:f2:29:d4:51:9b:06:31:28:b0:80:15:58:c8: cb:b7:01:bf:60:5c:b7:09:bd:62:b1:c5:98:3a:79:ef:44:9b: 33:d8:47:81:bd:39:c2:d0:86:ad:6c:ab:09:3c:bc:9f:ee:7f: 2d:3d:f1:4e:95:62:ba:a4:fc:55:74:b2:97:29:5f:58:2b:33: 90:ef:10:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oz/jLPbO8OQpN1KZKZcaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm ZTc0ZjkwHhcNMjYwNzI4MTMwMDI5WhcNMjYwNzI5MTMwMDI5WjAzMTEwLwYDVQQD Eyg1NGZiNjgxYmViNmEzOTJiYzE2YzE4MDM0MzA5YWJlNGI4YjQ1NjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08dX97y1YcxH1IACsj86l/n30gfj 1/9RVDYhwVVfwZzucMog9mtXda2VHFVSLwl+iD6jpymi+BrSnaDMG4gvDHg+c2my 6xm6ip8KUgDqoYCyG8VgCWFqPkJ/peKxfSNA0tDmuMfTLopHYx8BKZffTTEvUz+K cPYSC2Vaku3VK4W9QlJbh2S+ZjVxOYRLQMgdJ0DR7lYayvqpV0H+pdwzjC2qET5X tRWAdN5nSBd0RqS/9PH56XLSohqulq97gyAsBUHm0PIt2vVEY41wIXU86beBaPnu Z60KPUNFjG37ffdGS0YqzT5k8bmFD+nMElCeCqk5dSesgubS/662ZZS4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFT7aBvrajkrwWwYA0MJq+S4tFZNMB8GA1UdIwQY MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt ZWI1YTYyN2U3NmEzLzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6NC/1uY cQZjhs7RGh3JuQDToUv3hrG6/sK8QmcOJkyhJl10aoGCWRZrGPS9C9HhSIiNPYlg SaBxd9EmI8+DA8oVlVpm1w4S3qGadIAKJX6jPDGbv0xay1+5kfjR7kRbfQKZzAso EkVCFwYkFW2xxNzoiwAeA6M2vuxyc3tPmNJoBUTBhXNOP7GHlGf10bOMziLqK+j7 jjIGCv8l8IsbbYoxH3ZPHNHB/oTATkw5hRksO3/Q8y3rDLbyKdRRmwYxKLCAFVjI y7cBv2Bctwm9YrHFmDp570SbM9hHgb05wtCGrWyrCTy8n+5/LT3xTpViuqT8VXSy lylfWCszkO8Q4Q== -----END CERTIFICATE-----Generated at Tue Jul 28 18:11:05 2026 by rpki-client