$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: l2Q9TWIOCRMYcPJ7bz6gBc9aiYch9V/d5IDoH0szBJA= Subject key identifier: A3:CF:7D:8F:30:4F:26:82:AC:30:BA:5C:B3:19:66:F2:88:2B:55:3A Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019D9A06F889111F176374C103D8E13CF39E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 0182 Signing time: Fri 17 Apr 2026 06:00:41 +0000 Manifest this update: Fri 17 Apr 2026 06:00:41 +0000 Manifest next update: Sat 18 Apr 2026 06:00:41 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: 7uWcDC13PzLD1OEpUWvZBQ6OX+17hXHvSTMB6O3KvhA=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:06:f8:89:11:1f:17:63:74:c1:03:d8:e1:3c:f3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Apr 17 06:00:41 2026 GMT Not After : Apr 18 06:00:41 2026 GMT Subject: CN=a3cf7d8f304f2682ac30ba5cb31966f2882b553a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2f:23:3c:10:27:22:04:c2:7f:ab:b4:4a:3b: 14:4d:5f:01:fd:b7:e3:91:40:ea:5d:22:35:bb:9e: ad:f1:96:6e:44:c1:9a:13:40:58:ef:e8:49:d7:0b: 52:bc:00:45:6d:bf:69:64:54:6d:5e:4a:54:1a:c8: 29:3c:03:83:89:a5:f1:7c:ad:dc:b1:ee:25:4f:4b: 6d:6b:61:92:c5:0b:79:f7:fe:1d:c9:1a:36:80:79: 40:eb:a5:ff:9a:83:e5:b1:c8:28:d0:b1:2a:70:4e: f7:e9:76:7f:5e:ea:96:0c:be:09:81:02:51:e6:54: 30:1d:3a:ef:a0:60:66:a3:80:ed:9d:9e:41:c8:2e: b4:bc:e7:9c:a5:7f:52:2d:d4:75:e2:56:8f:8d:3d: 48:20:e0:b0:1e:91:80:b4:f8:24:6d:c0:c7:a4:a6: 24:6b:e6:b2:fa:80:b3:68:70:c8:08:f4:f0:8e:da: 37:b8:59:b2:d1:f2:ec:08:6a:ed:29:b2:dc:3d:b0: 0b:24:81:47:ff:64:8e:95:13:f9:3a:41:d8:4e:89: 45:3c:ba:4d:3c:e2:53:4b:a0:6c:56:48:f2:e2:73: 14:b3:a7:72:58:ee:35:42:59:0d:63:bd:80:2a:10: b6:06:b6:97:14:f2:4c:e4:2f:db:81:88:91:32:3b: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CF:7D:8F:30:4F:26:82:AC:30:BA:5C:B3:19:66:F2:88:2B:55:3A X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:59:1d:98:1b:91:c5:ca:2a:82:a7:3c:37:7f:05:2a:04:9c: 09:21:d2:a7:61:82:8d:8a:c2:53:6a:75:dc:1b:26:f6:27:ec: 9f:b3:0c:d3:59:44:99:8c:a6:af:53:52:37:d7:9a:e3:6f:ca: 3a:f5:89:e7:a2:9f:9e:ff:1e:85:b3:1f:4d:59:d4:a6:47:53: 3b:30:86:b6:87:d2:d1:4a:8b:76:54:75:b0:83:12:87:d2:18: 5c:63:c9:f2:a2:53:a8:7c:b7:85:cc:24:07:5c:c9:00:7c:8f: fe:2d:0f:db:97:1a:81:4e:0a:39:4f:91:cd:a7:f6:98:95:62: 6c:9c:93:ac:00:23:88:dd:26:19:9e:5e:5a:e0:30:fc:07:ea: 50:b0:3f:d1:27:c7:e5:f5:73:f7:5d:8d:bc:7a:e8:88:04:49: ea:d2:a1:15:80:01:66:6d:af:c0:f7:a1:f5:fc:dd:3f:f6:36: 2e:73:bb:75:f2:37:bb:15:b7:32:fc:07:87:11:4f:7d:9c:24: 58:52:8b:ba:7d:07:08:2a:10:26:ed:40:22:19:5b:15:26:ed: 87:c9:12:15:bf:f7:89:b3:ca:6d:11:03:ca:1a:9d:1b:36:37: 08:e6:1e:4c:ec:c5:5e:8d:ee:4b:15:18:52:a0:5e:21:72:e1: a6:8d:72:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBviJER8XY3TBA9jhPPOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwNDE3MDYwMDQxWhcNMjYwNDE4MDYwMDQxWjAzMTEwLwYDVQQD EyhhM2NmN2Q4ZjMwNGYyNjgyYWMzMGJhNWNiMzE5NjZmMjg4MmI1NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi8jPBAnIgTCf6u0SjsUTV8B/bfj kUDqXSI1u56t8ZZuRMGaE0BY7+hJ1wtSvABFbb9pZFRtXkpUGsgpPAODiaXxfK3c se4lT0tta2GSxQt59/4dyRo2gHlA66X/moPlscgo0LEqcE736XZ/XuqWDL4JgQJR 5lQwHTrvoGBmo4DtnZ5ByC60vOecpX9SLdR14laPjT1IIOCwHpGAtPgkbcDHpKYk a+ay+oCzaHDICPTwjto3uFmy0fLsCGrtKbLcPbALJIFH/2SOlRP5OkHYTolFPLpN POJTS6BsVkjy4nMUs6dyWO41QlkNY72AKhC2BraXFPJM5C/bgYiRMjsDIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPPfY8wTyaCrDC6XLMZZvKIK1U6MB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklkdmBuR xcoqgqc8N38FKgScCSHSp2GCjYrCU2p13Bsm9ifsn7MM01lEmYymr1NSN9ea42/K OvWJ56Kfnv8ehbMfTVnUpkdTOzCGtofS0UqLdlR1sIMSh9IYXGPJ8qJTqHy3hcwk B1zJAHyP/i0P25cagU4KOU+Rzaf2mJVibJyTrAAjiN0mGZ5eWuAw/AfqULA/0SfH 5fVz912NvHroiARJ6tKhFYABZm2vwPeh9fzdP/Y2LnO7dfI3uxW3MvwHhxFPfZwk WFKLun0HCCoQJu1AIhlbFSbth8kSFb/3ibPKbREDyhqdGzY3COYeTOzFXo3uSxUY UqBeIXLhpo1y1g== -----END CERTIFICATE-----Generated at Fri Apr 17 11:11:59 2026 by rpki-client