
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File: tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier: yqno/96rJM5SPT7Dqm1M+T84PHxa9Mn1nSvSvdyEcls=
Subject key identifier: 13:9E:06:76:A8:9A:20:A9:13:35:69:E3:98:D8:0D:75:7B:74:19:96
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019CAA215FBEFB04BFAC0936BE3F00EE0CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number: 19A2
Signing time: Sun 01 Mar 2026 16:00:39 +0000
Manifest this update: Sun 01 Mar 2026 16:00:39 +0000
Manifest next update: Mon 02 Mar 2026 16:00:39 +0000
Files and hashes: 1: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
2: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
3: 6Iosru2rgefqb-G1dkNZm3eQBbo.roa (hash: 1dV8hYXsGdshFlGk0ddmJ5AcxJeAQGJGdw+VePlaJr0=)
4: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
5: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
6: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
7: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
8: IuaBqY2GadGcg3FDyUG5eeweXtw.roa (hash: HkIMLZemJswFZ1lLlbUgk4yP8IDP4ASfJ/qPNB+Uu+w=)
9: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
10: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
11: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
12: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
13: R_ebvm8_dQqwHiuttmlwT7UcgGA.roa (hash: gVZwLP3R55gVNwUakpUJWOO1ZTkbRigReVPhDpAd5Vw=)
14: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
15: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
16: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
17: _0-U_dvkW7gAc4cTDIIkcm_9VOw.roa (hash: MWzK0oFmUyO4WRUo2MGNJz+fYJhtySMZ4mGR30tXxn0=)
18: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
19: bsx4FJoKXOBGtYfRQPeaP9fokuA.roa (hash: q36gfKZfIIkmCBj7MHa3B98hJW+E9SLJkVHBSknoDJo=)
20: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=)
21: e3eeqT3cCwDCA1Wba-cDtdvjPLs.roa (hash: DQ/1l9qivav8e0VLlV11+1m2yKf9RukIg46+miwwKSI=)
22: ei7gbLOT6z2qtdrScoHSrhXAc_Q.roa (hash: trEQXC8j4Fo/aHPIGgfrdhYdoDgInVHSvuOtLPmlVZY=)
23: h4B19M4fJna6bjarmHanNvdxzRk.roa (hash: mU49wrIx2TGe4N7KBWJ6hapg0RSH+SuZHSziFTcOhFs=)
24: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
25: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
26: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
27: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=)
28: kWnM6EJkJSvkftfeSMQK2jPRvW4.roa (hash: GH4eT2I8lHO3lE4vIWCSS4R08KHPn9HZscNvGp+IydQ=)
29: m5jHreeQ4z9KRhKurDrnV0MKOgE.roa (hash: 3hVvPZGhCr8fr8Ag3CkkypFJXNKDQDPy5oAw3gz/NcI=)
30: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
31: o2sA9VQBCh98jD7kTLpD4PtsBkg.roa (hash: KS1RAcviacOoeOngLBb734zDvYnb8VX13fkxf0rGhys=)
32: rKtJGVxfqraAmT6HHUQgk-6ZYls.roa (hash: tfqK4JoN3XUTlLzJPjKH8fXCE/nPd/Ywy0gcF7QvSMA=)
33: sGxBkJsDb4cSDB9YLAQ4WsuWlSM.roa (hash: e/01H24SljJCRbIVQagIuqTJISHsrceaMA0ctl1O+PM=)
34: tml7s1FEM_9KEwjG1ZFBVK9B8KM.roa (hash: n8PMHdIGzbLhBNN6Xpxhp4apLQiZy0TRKprVqL0yAqc=)
35: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: +5JZSWp9Tb2OdUZj2N7p40x5n31jlamannF12sj9niA=)
36: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
37: xoCyTYq3JkKW4BK4zaSxkOZubuM.roa (hash: gtNFd3CA4+aXuTCUqDqV1r9txHsasodxyZ7Ic/3d83E=)
38: y8utpL3cM7zCx1Fhe9N07v3iiSE.roa (hash: Z5Pf+xhpAVmx/4aRGgIsXBtgaV9RserBgzo3xepCieo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:5f:be:fb:04:bf:ac:09:36:be:3f:00:ee:0c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 1 16:00:39 2026 GMT
Not After : Mar 2 16:00:39 2026 GMT
Subject: CN=139e0676a89a20a9133569e398d80d757b741996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:12:c6:6d:5c:4b:12:25:81:6a:13:e8:e6:
9b:48:0a:c4:80:8a:f0:da:72:c9:c7:9e:ff:7f:76:
17:6d:16:1f:68:67:3c:99:57:ac:a8:f9:dc:42:c7:
49:5f:b3:da:4f:35:46:27:b3:32:bd:27:0f:71:99:
9e:77:e1:8a:5c:be:01:2e:2e:cc:1f:f1:e1:59:d5:
b8:a8:48:5f:e5:d6:60:73:d3:ff:60:b1:f5:1d:e4:
30:09:19:95:2c:16:2b:cd:a0:70:56:d4:a9:b1:71:
0a:ae:ef:9b:6b:e7:f3:73:e1:c8:f4:f9:71:ba:9e:
15:b3:2e:6a:c7:00:80:36:19:75:08:b4:4f:04:db:
e9:9c:f2:ec:9e:53:84:8d:32:40:8c:c4:56:e9:bd:
59:4a:5f:08:d4:4a:6e:51:31:6b:88:5e:5c:c1:4e:
07:5a:0d:11:a2:a7:01:20:e4:11:56:e8:33:31:a9:
16:cc:96:63:67:3b:85:7c:c0:f3:5b:d1:57:a8:89:
58:7a:ec:2c:e1:2c:25:1c:20:5e:41:72:80:10:45:
cf:ee:d9:d6:36:9d:fd:cb:8a:35:9e:b1:58:e8:5a:
97:55:50:6a:4e:46:8f:d3:98:43:11:6e:7b:e4:1f:
1d:46:35:eb:c4:e4:6d:d9:cd:90:4b:25:d4:bb:b8:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9E:06:76:A8:9A:20:A9:13:35:69:E3:98:D8:0D:75:7B:74:19:96
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d8:f4:45:35:18:67:be:24:b4:8b:2c:38:c6:68:c1:d3:81:
a7:4a:d0:ee:85:46:07:4c:3d:39:55:b6:88:63:08:ea:18:50:
d5:17:4e:de:e6:cc:c4:64:23:f6:50:92:f6:81:e0:3b:e0:55:
7c:21:84:7e:08:31:e7:f2:30:71:ad:4e:f2:b6:a6:29:34:7e:
6b:43:ac:1b:b8:54:14:2a:2b:1e:0c:7e:54:a7:cc:2f:e2:9a:
f5:9f:52:d7:68:db:b0:07:fe:89:47:cb:c0:af:71:b0:c4:bc:
80:fc:d6:1a:49:42:ec:c0:45:d5:99:3b:f6:d0:8b:fd:d2:32:
77:99:8d:11:8b:b2:5f:6a:64:d3:4f:02:0a:0d:92:3d:3a:15:
a9:12:a0:88:86:60:ec:1a:09:9c:ca:9c:dc:ee:b5:8c:86:26:
3c:15:8c:d2:e6:c1:1f:f1:48:83:1d:05:56:59:aa:72:7c:f4:
8d:79:3d:36:bc:81:fa:ce:47:f8:bd:dd:57:6f:db:a7:5b:bf:
d8:a4:b2:c9:3f:9f:d7:50:cb:6c:bf:d3:c4:41:65:03:15:8b:
f5:ee:9b:fc:b6:6d:48:ff:98:bb:bc:eb:a8:6d:4b:4e:86:dd:
78:ad:a8:0f:67:e3:f4:e3:a8:46:07:dd:85:6b:7b:54:1d:65:
4c:24:87:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIV+++wS/rAk2vj8A7gzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwMzAxMTYwMDM5WhcNMjYwMzAyMTYwMDM5WjAzMTEwLwYDVQQD
EygxMzllMDY3NmE4OWEyMGE5MTMzNTY5ZTM5OGQ4MGQ3NTdiNzQxOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LQSxm1cSxIlgWoT6OabSArEgIrw
2nLJx57/f3YXbRYfaGc8mVesqPncQsdJX7PaTzVGJ7MyvScPcZmed+GKXL4BLi7M
H/HhWdW4qEhf5dZgc9P/YLH1HeQwCRmVLBYrzaBwVtSpsXEKru+ba+fzc+HI9Plx
up4Vsy5qxwCANhl1CLRPBNvpnPLsnlOEjTJAjMRW6b1ZSl8I1EpuUTFriF5cwU4H
Wg0RoqcBIOQRVugzMakWzJZjZzuFfMDzW9FXqIlYeuws4SwlHCBeQXKAEEXP7tnW
Np39y4o1nrFY6FqXVVBqTkaP05hDEW575B8dRjXrxORt2c2QSyXUu7gscQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOeBnaomiCpEzVp45jYDXV7dBmWMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONj0RTUY
Z74ktIssOMZowdOBp0rQ7oVGB0w9OVW2iGMI6hhQ1RdO3ubMxGQj9lCS9oHgO+BV
fCGEfggx5/Iwca1O8ramKTR+a0OsG7hUFCorHgx+VKfML+Ka9Z9S12jbsAf+iUfL
wK9xsMS8gPzWGklC7MBF1Zk79tCL/dIyd5mNEYuyX2pk008CCg2SPToVqRKgiIZg
7BoJnMqc3O61jIYmPBWM0ubBH/FIgx0FVlmqcnz0jXk9NryB+s5H+L3dV2/bp1u/
2KSyyT+f11DLbL/TxEFlAxWL9e6b/LZtSP+Yu7zrqG1LTobdeK2oD2fj9OOoRgfd
hWt7VB1lTCSHYA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:10:31 2026 by rpki-client