$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json) Hash identifier: bNxwOM3gg2LSM7f3X5+jX7hX1Y2ueN/BiyIo+Z5hqu8= Subject key identifier: 8E:CB:0F:F7:4E:61:A6:01:0B:85:67:14:A6:AE:6C:06:99:58:FE:6C Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Certificate serial: 01A1BF1B9D73436FC659401AEC77C71066D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft Manifest number: 1AFA Signing time: Mon 09 Nov 2026 07:00:20 +0000 Manifest this update: Mon 09 Nov 2026 07:00:20 +0000 Manifest next update: Tue 10 Nov 2026 07:00:20 +0000 Files and hashes: 1: 0no4Vc5DkKZYTC4yxk61gsFYDZA.roa (hash: wq/WrUkZs3OtH/QkSRuveBH4UlpgsUWQZCql0jNW35Y=) 2: BtjheHtMrVrls5cRXqprBV_cY_E.roa (hash: 0/bLQWtIHEPcsIkY5+SuruKHSF6pye9PcBvY10R3rFA=) 3: JLTJ_djmepytzX8zTui4177ccPU.roa (hash: v8YNZSAHqPj+CfPDJGHMubfC0jWuRi99PbF/4ydAFi4=) 4: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=) 5: Ozbzz5cCZT3-JtjIBY3w2h06wAE.roa (hash: 4N0auQq4y8TtyxVi2sUcVu9Oi/I79WPO9q+AG8b+dvE=) 6: S-xpvTfe2PvsRXaln09DzsrWDdE.roa (hash: Q3/9aVjL0eREXtwdx951wmOB3uEdiLjhnjXc+EgEZO8=) 7: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: LTcijob77BcQLUrDDTThHl5l+AlYi1SgUGb1no0Nc7A=) 8: WPTN1Qq7x_RqdVcQNEvPIzif6aA.roa (hash: +avq0PdtOR9oSirda5avrWksxY2pCBwlBFfwZM2VWyY=) 9: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=) 10: ZO3SDQJ8Tgygw4lm8Ab9Ya2PFI4.roa (hash: QdCqVsfYcPHetvPtJZR0l6d2Gvhz4bpPU1rfVRCV7bk=) 11: osbxv89WG8GbWZUQ2Vkdc-Z5YJE.roa (hash: vhxwONMLn7WciOAysVcpRznbCMOzeYXuHzUh/oH5ncU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 02:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:bf:1b:9d:73:43:6f:c6:59:40:1a:ec:77:c7:10:66:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Validity Not Before: Nov 9 07:00:20 2026 GMT Not After : Nov 10 07:00:20 2026 GMT Subject: CN=8ecb0ff74e61a6010b856714a6ae6c069958fe6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1a:de:d4:ca:aa:d2:7e:be:1b:b6:f2:ab:be: a6:e3:7a:76:3d:ca:a2:52:a0:bb:0e:16:d2:7a:62: 77:be:3d:4c:45:79:c2:60:95:16:3e:4b:31:e2:89: 8a:f3:94:8f:44:87:83:31:59:d5:fe:5f:81:b5:11: 9d:dc:35:76:74:35:6b:43:e9:7b:8f:e3:24:dc:f6: e5:95:b8:54:53:25:06:6b:a9:b3:eb:d9:00:a2:80: 24:84:75:ad:93:b7:8a:26:65:9c:77:67:e0:88:51: 27:b0:1a:ce:5b:03:cb:fe:dd:ac:2f:ec:dd:78:20: a9:5b:a0:6e:cc:20:a1:8d:73:4c:78:4d:56:89:f0: 87:19:34:dd:03:20:20:be:6e:70:5f:e9:d4:8b:d4: c0:e2:2c:84:0a:23:f4:dc:8e:e9:bb:08:d1:ff:7b: 06:3a:3f:15:24:43:52:fd:5d:b9:ad:87:99:b9:d6: 58:b5:33:fa:67:be:5e:56:e5:2c:92:c8:17:22:1c: 06:39:cc:09:ac:1a:b6:8f:fd:51:12:7c:1d:d4:bb: 02:91:72:5a:36:46:70:4f:65:3b:f2:2c:aa:84:41: 92:e3:bf:8c:c2:87:49:6d:a2:b3:02:0a:29:e3:90: 08:b3:ab:dc:db:6c:3c:4d:19:d0:e7:65:c5:72:2c: f7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CB:0F:F7:4E:61:A6:01:0B:85:67:14:A6:AE:6C:06:99:58:FE:6C X509v3 Authority Key Identifier: keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:de:63:ec:ac:a8:44:2b:4b:bc:04:a2:f3:81:aa:9f:ce:1c: 4e:16:f5:69:0a:33:8c:1f:8f:0d:7e:88:7b:ef:b2:08:fe:87: ee:b0:b4:4e:0c:38:7f:5a:0e:3d:f8:d9:fc:d9:6b:f1:36:72: 36:3e:b7:f7:7b:19:6c:33:35:31:f4:0f:08:c9:d0:c2:bb:f4: d7:2b:6c:20:b3:7c:81:93:d1:a5:30:df:b4:e2:47:f1:ed:db: b2:5c:90:59:e7:9e:3c:d3:d1:ab:69:3e:59:15:85:d6:90:88: fa:a2:df:b3:bc:e2:f3:8b:3f:b5:74:ee:34:d8:30:0c:cc:0d: 2c:a7:9a:bd:ec:83:9b:8e:4a:8a:26:23:f7:88:0f:40:87:b6: 19:b2:af:aa:4e:94:ed:cc:f6:f7:fb:d3:c4:00:7d:2f:4e:8c: 66:1b:a0:db:cb:18:e5:76:23:1d:df:d9:03:bd:09:50:85:ad: 3b:35:80:bb:b0:b2:1b:fa:c5:76:2a:77:08:17:ad:01:82:98: 9a:bd:56:5d:c4:cb:72:11:dd:9b:80:bc:9a:af:3e:b4:c0:90: db:15:8a:cc:a9:dd:65:f3:d6:e1:64:b0:61:e3:5a:86:d8:d3: 40:6b:63:38:01:47:dd:75:ac:98:46:ca:a6:92:2e:86:30:ad: cd:7e:61:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaG/G51zQ2/GWUAa7HfHEGbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2 ZDYzNDkwHhcNMjYxMTA5MDcwMDIwWhcNMjYxMTEwMDcwMDIwWjAzMTEwLwYDVQQD Eyg4ZWNiMGZmNzRlNjFhNjAxMGI4NTY3MTRhNmFlNmMwNjk5NThmZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBre1Mqq0n6+G7byq76m43p2Pcqi UqC7DhbSemJ3vj1MRXnCYJUWPksx4omK85SPRIeDMVnV/l+BtRGd3DV2dDVrQ+l7 j+Mk3PbllbhUUyUGa6mz69kAooAkhHWtk7eKJmWcd2fgiFEnsBrOWwPL/t2sL+zd eCCpW6BuzCChjXNMeE1WifCHGTTdAyAgvm5wX+nUi9TA4iyECiP03I7puwjR/3sG Oj8VJENS/V25rYeZudZYtTP6Z75eVuUsksgXIhwGOcwJrBq2j/1REnwd1LsCkXJa NkZwT2U78iyqhEGS47+MwodJbaKzAgop45AIs6vc22w8TRnQ52XFciz3DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7LD/dOYaYBC4VnFKaubAaZWP5sMB8GA1UdIwQY MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct MTY2ZmI5ZGI2ZGIzLzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASd5j7Kyo RCtLvASi84Gqn84cThb1aQozjB+PDX6Ie++yCP6H7rC0Tgw4f1oOPfjZ/Nlr8TZy Nj6393sZbDM1MfQPCMnQwrv01ytsILN8gZPRpTDftOJH8e3bslyQWeeePNPRq2k+ WRWF1pCI+qLfs7zi84s/tXTuNNgwDMwNLKeaveyDm45KiiYj94gPQIe2GbKvqk6U 7cz29/vTxAB9L06MZhug28sY5XYjHd/ZA70JUIWtOzWAu7CyG/rFdip3CBetAYKY mr1WXcTLchHdm4C8mq8+tMCQ2xWKzKndZfPW4WSwYeNahtjTQGtjOAFH3XWsmEbK ppIuhjCtzX5hpw== -----END CERTIFICATE-----Generated at Mon Nov 9 10:45:37 2026 by rpki-client