$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: kBO9ZlGNANZIVPw5s4PRY/Shl5CVCGSbcFweNi1OoZY= Subject key identifier: D7:DE:DC:D7:1C:AC:08:39:86:B8:F0:15:6E:84:4C:78:B9:BB:D4:62 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 01A0C4B318330420C7EDD9C878D54146BEDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 19B0 Signing time: Mon 21 Sep 2026 16:01:06 +0000 Manifest this update: Mon 21 Sep 2026 16:01:06 +0000 Manifest next update: Tue 22 Sep 2026 16:01:06 +0000 Files and hashes: 1: 47sWOPTHnZb9BF-ya3p9tYZmQl0.roa (hash: RBzAZuMSt44/uQERR1k3fKGneZwh+1kpWY7wx6/NCk0=) 2: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 3: IoSQ968prEWE2iPAfiHq62Q9HRQ.roa (hash: sMFfoE8ew6Os6X7T5w3iP4CHenQCaCmWxqa3HE4kDyg=) 4: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 5: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 6: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 7: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 8: SHESg-pXJr_Het0W-3cbbUvLLUk.roa (hash: eBtq6k5xafILrBSAzCCl8DxL+vNsikVlShGU83ALNOQ=) 9: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: 4gp4wm6w5EmK1lsjUaVpUTVlIkhRnN8KEtWTD4+jVBM=) 10: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 11: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 12: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 13: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 14: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:b3:18:33:04:20:c7:ed:d9:c8:78:d5:41:46:be:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Sep 21 16:01:06 2026 GMT Not After : Sep 22 16:01:06 2026 GMT Subject: CN=d7dedcd71cac083986b8f0156e844c78b9bbd462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:58:88:31:b6:4d:73:41:12:51:5e:e2:55: 87:17:74:96:9d:66:fb:ee:38:45:ae:66:07:17:e8: 9f:4c:9b:a1:f8:84:7e:5b:b2:d9:29:47:3b:c3:94: 0c:f7:d1:88:c0:ac:c7:19:37:cf:02:f8:b9:b9:de: 87:6c:a4:9d:10:6d:3e:cd:6e:1c:c9:1f:0b:d8:b6: b4:41:37:07:e8:fd:bf:66:d9:97:44:bf:9c:81:c7: cc:8d:d0:ef:06:34:58:fe:31:56:2c:64:f8:50:fb: 11:21:7e:28:1d:86:09:f7:d2:0d:4b:62:05:d4:48: a6:c6:a7:79:12:43:7c:6b:b0:f7:d4:cc:2c:70:36: 33:fd:fb:11:08:75:88:c7:58:a1:b9:a9:79:2a:59: cd:b2:dd:66:ef:b5:ec:4d:f1:a4:ca:5a:44:27:9d: cf:0e:2b:97:45:be:a7:68:8f:26:67:26:98:b2:88: 42:89:43:02:6f:4c:49:54:dc:d5:d2:0e:f9:29:de: db:cd:54:95:51:e7:54:87:1c:40:13:9c:7f:9e:31: 5d:f6:77:d0:6f:cd:67:2c:12:ab:13:8c:dd:79:d1: cc:16:90:d7:8e:f3:c5:94:51:61:13:91:10:92:b2: 26:fa:ab:20:3e:5b:d8:6e:8b:cb:74:8a:96:05:31: b1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DE:DC:D7:1C:AC:08:39:86:B8:F0:15:6E:84:4C:78:B9:BB:D4:62 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4f:91:0d:01:f0:84:ce:a1:ff:3d:97:58:63:e9:e0:1a:a4: d3:a2:c6:80:f8:7c:21:c9:a9:56:7a:9a:1a:85:b4:13:e6:93: 02:2c:37:74:8f:ad:6b:b4:35:ec:2a:6b:ee:b5:b0:c8:50:42: 98:d3:66:95:27:cf:76:3b:cc:8b:d3:70:02:03:d3:f8:5b:2b: b4:bd:f0:37:fc:ff:67:d1:4e:8c:3f:48:92:64:20:86:39:77: 5d:af:39:e7:f3:a5:7a:79:62:d9:39:de:70:3e:cd:cb:1a:4c: 5e:f5:c2:9c:eb:4e:80:7f:66:12:63:12:e4:85:80:0a:82:86: c7:fa:8c:49:1e:6e:d7:dd:2b:8b:41:c5:2a:9e:ee:2c:a0:a7: 41:a4:7c:bb:05:63:f5:10:d1:d2:46:fb:b7:d4:10:1e:2e:1f: c9:ea:45:23:3c:d2:a9:ed:de:c1:88:47:f2:73:85:ec:00:17: 33:f7:b9:b6:5b:5a:3e:c0:ea:11:ee:e6:31:71:cd:d0:df:c8: c0:b4:ba:8c:26:97:36:27:ee:15:8b:2a:ab:a6:ce:be:cb:29: 12:8c:3e:62:fd:58:ea:1a:d0:b4:d5:36:2f:1e:1f:08:ea:48: 52:10:a5:37:b1:6c:cb:61:f1:83:50:08:f7:c1:61:f7:38:96: c6:ed:30:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDEsxgzBCDH7dnIeNVBRr7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwOTIxMTYwMTA2WhcNMjYwOTIyMTYwMTA2WjAzMTEwLwYDVQQD EyhkN2RlZGNkNzFjYWMwODM5ODZiOGYwMTU2ZTg0NGM3OGI5YmJkNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlZYiDG2TXNBElFe4lWHF3SWnWb7 7jhFrmYHF+ifTJuh+IR+W7LZKUc7w5QM99GIwKzHGTfPAvi5ud6HbKSdEG0+zW4c yR8L2La0QTcH6P2/ZtmXRL+cgcfMjdDvBjRY/jFWLGT4UPsRIX4oHYYJ99INS2IF 1Eimxqd5EkN8a7D31MwscDYz/fsRCHWIx1ihual5KlnNst1m77XsTfGkylpEJ53P DiuXRb6naI8mZyaYsohCiUMCb0xJVNzV0g75Kd7bzVSVUedUhxxAE5x/njFd9nfQ b81nLBKrE4zdedHMFpDXjvPFlFFhE5EQkrIm+qsgPlvYbovLdIqWBTGxFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfe3NccrAg5hrjwFW6ETHi5u9RiMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnE+RDQHw hM6h/z2XWGPp4Bqk06LGgPh8IcmpVnqaGoW0E+aTAiw3dI+ta7Q17Cpr7rWwyFBC mNNmlSfPdjvMi9NwAgPT+FsrtL3wN/z/Z9FOjD9IkmQghjl3Xa855/Olenli2Tne cD7NyxpMXvXCnOtOgH9mEmMS5IWACoKGx/qMSR5u190ri0HFKp7uLKCnQaR8uwVj 9RDR0kb7t9QQHi4fyepFIzzSqe3ewYhH8nOF7AAXM/e5tltaPsDqEe7mMXHN0N/I wLS6jCaXNifuFYsqq6bOvsspEow+Yv1Y6hrQtNU2Lx4fCOpIUhClN7Fsy2Hxg1AI 98Fh9ziWxu0wvA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:13 2026 by rpki-client