$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: qHVeGs2SSTz5e4RVRJoqPT7OryMoLX36NSOOeXxAHHs= Subject key identifier: B7:6F:14:6D:96:AB:1A:FF:B5:7D:A8:D7:F5:EE:2E:7E:83:ED:D6:DD Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019D9B87F7F3D2BCCB949DA5F24B33C52C55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1809 Signing time: Fri 17 Apr 2026 13:01:12 +0000 Manifest this update: Fri 17 Apr 2026 13:01:12 +0000 Manifest next update: Sat 18 Apr 2026 13:01:12 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 3: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 4: O9Prh0bHygAMlcVjAjhGkRfKOeM.roa (hash: AnpU4qxSDweY2PLZMgIh1u72ZCwp2xXOzI9oanyv9vI=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: aNs+jzC+KLxWqN/oSD+n40BQDHJ4q8iwCsQNXeKNzeM=) 8: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 9: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 10: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 11: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 12: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:87:f7:f3:d2:bc:cb:94:9d:a5:f2:4b:33:c5:2c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Apr 17 13:01:12 2026 GMT Not After : Apr 18 13:01:12 2026 GMT Subject: CN=b76f146d96ab1affb57da8d7f5ee2e7e83edd6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:66:48:44:e1:a7:79:f1:1a:b4:34:1f:75: 53:84:64:f2:bf:ed:d9:b0:a0:d6:d6:60:6b:00:33: 03:3e:89:49:9e:79:9d:b1:cc:bb:7d:4e:ae:86:56: cd:df:a1:bc:89:91:64:b9:73:3d:c0:10:bf:19:44: 0a:15:5d:60:36:8b:7d:52:80:6a:8f:9a:31:e7:e4: 97:0c:c4:a2:cd:57:33:0f:07:f2:3d:76:0a:e2:a7: d3:66:a4:2f:b5:d0:8d:97:e2:28:4d:bb:42:2f:7e: 7e:8e:db:5d:c0:34:8b:3b:8c:24:a7:77:b0:a3:85: be:ba:ae:64:3a:e1:aa:77:08:51:a7:32:c6:ae:1b: ff:23:41:2d:88:99:d9:ba:a4:05:50:70:43:25:0f: 5b:04:c3:a7:6a:6b:fd:cb:f5:f2:d1:59:00:86:d1: af:f0:e2:95:bf:01:90:09:8f:26:e1:8f:ce:f2:64: 6d:7b:2b:90:9e:6e:c3:79:98:a3:92:44:e6:a8:34: 8a:44:f2:f9:a5:e3:20:03:ee:ac:73:a4:da:1d:83: 33:85:ed:18:9c:a6:40:b3:75:44:62:ca:ac:e3:2a: 80:58:f6:11:f2:c9:4b:fb:2c:01:6b:d3:e0:91:df: ce:e7:c3:46:ee:0e:6d:c6:2e:18:5f:03:85:26:f6: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6F:14:6D:96:AB:1A:FF:B5:7D:A8:D7:F5:EE:2E:7E:83:ED:D6:DD X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4c:83:17:92:ac:20:ec:83:8a:c0:d4:5c:33:12:60:ad:6d: 9d:19:3d:c1:18:1d:e9:b1:2d:2b:e3:b1:ad:ae:2a:5c:70:e8: ee:b4:59:b8:5b:41:b0:7a:8f:f1:58:f8:ce:03:20:49:ac:85: d7:8d:6d:4f:65:63:af:bd:83:36:96:bc:3f:b0:6a:0f:e8:d8: b0:a8:16:a3:af:ba:e5:ad:e6:a6:ff:8b:bc:ba:3e:d1:f1:d6: c9:f4:2f:7e:0c:99:21:e3:b0:46:fd:57:00:f1:f7:69:f1:33: 20:50:c9:b2:c1:0d:d6:3e:9a:58:dd:d1:d2:e1:26:ad:09:ce: a5:c4:1e:1a:28:19:c7:ce:e1:c6:15:9b:ba:b3:c9:02:d4:4b: 39:bf:8c:47:26:e6:8b:cd:7c:eb:ea:72:00:15:aa:03:3b:2c: 02:e2:51:29:10:e3:2f:3e:63:e2:2a:3b:ee:f3:2b:11:31:91: 5f:2a:b3:8a:05:7f:83:25:fe:57:7d:8e:6c:97:51:27:47:72: 51:ba:b3:da:0f:63:3c:94:c6:76:a0:19:b7:b0:11:ad:43:43: 28:25:69:04:27:88:84:8f:13:42:cb:d3:de:c6:5b:b8:c2:a9: e3:ca:7b:02:0e:f9:22:33:e9:9d:cf:d6:3b:79:16:f6:2f:84: bf:53:49:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bh/fz0rzLlJ2l8kszxSxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwNDE3MTMwMTEyWhcNMjYwNDE4MTMwMTEyWjAzMTEwLwYDVQQD EyhiNzZmMTQ2ZDk2YWIxYWZmYjU3ZGE4ZDdmNWVlMmU3ZTgzZWRkNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKBmSEThp3nxGrQ0H3VThGTyv+3Z sKDW1mBrADMDPolJnnmdscy7fU6uhlbN36G8iZFkuXM9wBC/GUQKFV1gNot9UoBq j5ox5+SXDMSizVczDwfyPXYK4qfTZqQvtdCNl+IoTbtCL35+jttdwDSLO4wkp3ew o4W+uq5kOuGqdwhRpzLGrhv/I0EtiJnZuqQFUHBDJQ9bBMOnamv9y/Xy0VkAhtGv 8OKVvwGQCY8m4Y/O8mRteyuQnm7DeZijkkTmqDSKRPL5peMgA+6sc6TaHYMzhe0Y nKZAs3VEYsqs4yqAWPYR8slL+ywBa9Pgkd/O58NG7g5txi4YXwOFJvZarQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdvFG2Wqxr/tX2o1/XuLn6D7dbdMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEyDF5Ks IOyDisDUXDMSYK1tnRk9wRgd6bEtK+Oxra4qXHDo7rRZuFtBsHqP8Vj4zgMgSayF 141tT2Vjr72DNpa8P7BqD+jYsKgWo6+65a3mpv+LvLo+0fHWyfQvfgyZIeOwRv1X APH3afEzIFDJssEN1j6aWN3R0uEmrQnOpcQeGigZx87hxhWburPJAtRLOb+MRybm i8186+pyABWqAzssAuJRKRDjLz5j4io77vMrETGRXyqzigV/gyX+V32ObJdRJ0dy Ubqz2g9jPJTGdqAZt7ARrUNDKCVpBCeIhI8TQsvT3sZbuMKp48p7Ag75IjPpnc/W O3kW9i+Ev1NJmg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:56:56 2026 by rpki-client