$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json) Hash identifier: +5WQkMdEdD5pB9GRg4m0dakneiEPfi9g2oTAKBSxw9I= Subject key identifier: 0E:FA:56:5C:75:97:FB:BF:E8:B9:2E:56:7D:6E:5A:DC:A0:F9:BC:DC Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Certificate serial: 01A0BEB17834B3DD19D870D9FEAAF4912801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft Manifest number: 1A71 Signing time: Sun 20 Sep 2026 12:01:36 +0000 Manifest this update: Sun 20 Sep 2026 12:01:36 +0000 Manifest next update: Mon 21 Sep 2026 12:01:36 +0000 Files and hashes: 1: 0no4Vc5DkKZYTC4yxk61gsFYDZA.roa (hash: wq/WrUkZs3OtH/QkSRuveBH4UlpgsUWQZCql0jNW35Y=) 2: 1-38yfpnm5QQccaJ3BYrPwcGEn-Y.roa (hash: aaV0qNhXF0a2/gX3F54s9c7XzLno7e4lLil7lqYHNaY=) 3: BtjheHtMrVrls5cRXqprBV_cY_E.roa (hash: 0/bLQWtIHEPcsIkY5+SuruKHSF6pye9PcBvY10R3rFA=) 4: JLTJ_djmepytzX8zTui4177ccPU.roa (hash: v8YNZSAHqPj+CfPDJGHMubfC0jWuRi99PbF/4ydAFi4=) 5: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=) 6: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: iHwCrwiQ2WBIVnbSrELhIfbQiQGMNyAOAVlq3TA3Hxg=) 7: WPTN1Qq7x_RqdVcQNEvPIzif6aA.roa (hash: +avq0PdtOR9oSirda5avrWksxY2pCBwlBFfwZM2VWyY=) 8: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=) 9: ZO3SDQJ8Tgygw4lm8Ab9Ya2PFI4.roa (hash: QdCqVsfYcPHetvPtJZR0l6d2Gvhz4bpPU1rfVRCV7bk=) 10: btNWOWDT0MwxaxnuKalIShgF76M.roa (hash: +XzTFhG5C/Y9XMQYyxlHrlhbiNm3k0WsQB2hF0bjvaI=) 11: chjNAC8nAY_1idgxZ4cutOeVbAY.roa (hash: jS+FDp72Ee84TtCvWXMWI7/kBBph6ZyKnK6dpccqwmo=) 12: hoZTO9mv6MsZdKUR4WewOWkJHu0.roa (hash: TciugumYbNba/50JkI/u3vPvv8vRYLWuyNSqNmxgJH8=) 13: osbxv89WG8GbWZUQ2Vkdc-Z5YJE.roa (hash: vhxwONMLn7WciOAysVcpRznbCMOzeYXuHzUh/oH5ncU=) 14: yHfpA5v5XvIUSQkOxCDHupjOIlQ.roa (hash: H4Qtsg+GBGW5oyl9RggzStvYTM8q9EciUOsORu9E3dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:b1:78:34:b3:dd:19:d8:70:d9:fe:aa:f4:91:28:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Validity Not Before: Sep 20 12:01:36 2026 GMT Not After : Sep 21 12:01:36 2026 GMT Subject: CN=0efa565c7597fbbfe8b92e567d6e5adca0f9bcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:05:0f:39:ec:6c:54:6f:de:8c:a1:2c:f8: 02:95:b5:ad:5a:f4:9b:da:01:14:cb:f8:2e:52:04: 10:c1:bd:54:bd:87:fd:1f:a2:37:85:bd:4e:06:cb: ee:bc:fd:a7:74:4a:ab:80:61:7a:84:b0:35:64:73: 0c:af:2a:64:14:2e:66:43:c0:f3:6e:db:c8:8b:2b: b4:c4:55:72:7f:98:26:64:54:6f:fc:56:1d:e3:3e: fd:48:3d:cf:59:8a:20:93:b3:ff:fc:35:8c:e8:81: 40:56:b5:05:17:7f:87:e8:1e:eb:f8:9e:5b:7b:29: a6:6f:c1:4d:49:ea:19:9b:cf:c0:04:56:34:41:fb: 12:9f:cc:34:58:c8:ec:df:32:ed:58:c4:b1:68:06: 63:f3:58:aa:0d:f0:f5:2b:de:e7:20:47:46:5c:2c: 8c:fe:cd:2b:0a:9d:59:0b:6d:76:72:9a:95:2e:c0: 07:d1:20:a1:7e:ce:9f:60:ff:11:42:0e:f0:c3:c0: 1d:68:b3:74:7c:e8:70:9f:f0:90:3d:26:2b:ae:7a: dd:c3:91:0a:b3:1b:63:72:3f:92:83:a1:d8:3a:ee: 76:6c:9f:8b:95:4f:eb:ed:95:5a:2b:97:e3:9b:3b: e1:3e:20:80:23:29:9d:8c:1d:5d:a1:05:c4:e5:39: f6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FA:56:5C:75:97:FB:BF:E8:B9:2E:56:7D:6E:5A:DC:A0:F9:BC:DC X509v3 Authority Key Identifier: keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:61:d7:50:16:02:29:a5:19:73:be:7b:89:9c:b2:92:db:ff: d6:70:5c:30:84:50:50:2b:7a:82:0f:5e:82:b1:d0:a6:e3:52: 12:5a:7b:e2:23:2d:d2:45:36:fe:16:d1:6e:7a:50:32:b7:de: d5:f2:0e:8e:9b:14:43:32:6e:28:07:6b:bf:cf:74:c2:de:76: 5b:9b:be:b8:c1:09:09:91:e1:61:e3:8a:4b:b6:fd:59:0a:1b: 91:86:bc:8c:e2:b0:1e:91:e7:3d:91:65:23:83:31:88:39:e2: 7f:9f:6a:ff:b1:22:a8:f4:ec:53:b1:83:de:40:8f:ef:12:ca: 9e:b0:97:94:09:03:ef:37:66:ff:01:e6:2b:12:d6:d8:b3:37: d6:a3:a8:40:69:a0:22:14:77:d1:bb:96:f7:db:ee:95:5a:95: 5e:ab:e2:20:47:4b:84:d6:9c:b0:79:d7:df:43:b5:da:39:c2: 9e:96:a4:40:ed:06:37:5d:56:2a:7c:c3:aa:fa:c6:f3:fb:35: d0:42:4c:d9:8e:38:e6:4b:19:fd:8d:e9:eb:3d:17:11:4a:65: 43:8b:07:c8:bd:cc:df:ce:4f:9b:3a:9e:07:f1:01:d9:40:39: 3a:38:42:ed:dd:88:5e:98:de:19:76:65:5e:fd:97:15:d7:b6: 68:43:90:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+sXg0s90Z2HDZ/qr0kSgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2 ZDYzNDkwHhcNMjYwOTIwMTIwMTM2WhcNMjYwOTIxMTIwMTM2WjAzMTEwLwYDVQQD EygwZWZhNTY1Yzc1OTdmYmJmZThiOTJlNTY3ZDZlNWFkY2EwZjliY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraMFDznsbFRv3oyhLPgClbWtWvSb 2gEUy/guUgQQwb1UvYf9H6I3hb1OBsvuvP2ndEqrgGF6hLA1ZHMMrypkFC5mQ8Dz btvIiyu0xFVyf5gmZFRv/FYd4z79SD3PWYogk7P//DWM6IFAVrUFF3+H6B7r+J5b eymmb8FNSeoZm8/ABFY0QfsSn8w0WMjs3zLtWMSxaAZj81iqDfD1K97nIEdGXCyM /s0rCp1ZC212cpqVLsAH0SChfs6fYP8RQg7ww8AdaLN0fOhwn/CQPSYrrnrdw5EK sxtjcj+Sg6HYOu52bJ+LlU/r7ZVaK5fjmzvhPiCAIymdjB1doQXE5Tn2iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA76Vlx1l/u/6LkuVn1uWtyg+bzcMB8GA1UdIwQY MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct MTY2ZmI5ZGI2ZGIzLzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2HXUBYC KaUZc757iZyyktv/1nBcMIRQUCt6gg9egrHQpuNSElp74iMt0kU2/hbRbnpQMrfe 1fIOjpsUQzJuKAdrv890wt52W5u+uMEJCZHhYeOKS7b9WQobkYa8jOKwHpHnPZFl I4MxiDnif59q/7EiqPTsU7GD3kCP7xLKnrCXlAkD7zdm/wHmKxLW2LM31qOoQGmg IhR30buW99vulVqVXqviIEdLhNacsHnX30O12jnCnpakQO0GN11WKnzDqvrG8/s1 0EJM2Y445ksZ/Y3p6z0XEUplQ4sHyL3M385PmzqeB/EB2UA5OjhC7d2IXpjeGXZl Xv2XFde2aEOQ2g== -----END CERTIFICATE-----Generated at Sun Sep 20 16:55:04 2026 by rpki-client