$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft File: TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json) Hash identifier: bdva+twXC7DBDzxIjpC8OjuzHwpErDH0Dzk/EDm5wTo= Subject key identifier: 2F:B3:20:45:8D:E1:D8:A7:53:09:FC:4A:14:8C:FE:07:32:33:9D:28 Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019D3F42F919A783B9586A71F9044A9E9D9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft Manifest number: 0B8D Signing time: Mon 30 Mar 2026 15:00:46 +0000 Manifest this update: Mon 30 Mar 2026 15:00:46 +0000 Manifest next update: Tue 31 Mar 2026 15:00:46 +0000 Files and hashes: 1: 2krvIRPRsTOPomVMfCPNZSLLFks.roa (hash: P0BkghxyDkTPiHFvyXDN/scxvrKFV/bbDjO/nIHvYBI=) 2: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=) 3: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=) 4: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=) 5: DbUcvr80clIUT4IVIfDV-VI3N3g.roa (hash: APkVSFKtYlODE7JqxCSucRJZgTgEFA/Qhz55cg0GRaQ=) 6: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=) 7: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=) 8: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=) 9: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=) 10: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=) 11: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=) 12: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=) 13: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: ++8tY37m2OAzDT8ZgMkSyEiiOaU2qqfPdzl7zMFAkkc=) 14: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=) 15: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=) 16: Z6Y454y-5irLUB1HnESLpIVfLbQ.roa (hash: tFEKXtRhTAllzQn72vhDbzuqR5U15UaBRpVFyO2xYs0=) 17: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=) 18: _xskEv4E93buhDkLdrQYmZAO0nE.roa (hash: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw=) 19: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=) 20: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=) 21: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=) 22: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=) 23: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (hash: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=) 24: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=) 25: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=) 26: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=) 27: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=) 28: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=) 29: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=) 30: trwy9YK-SnrnYyYORbn93V30iRo.roa (hash: LTdq87i4sWmABMo13psUfyUJvjXH3JCzB1hcKoT/PNU=) 31: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=) 32: zjtl5Y0Z3oogjAq5K4uAfLAq8ro.roa (hash: LpQt/bLNnHWYgd6YNiQU8EA6fFlerNrGYNaE8nt6sMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 31 Mar 2026 14:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3f:42:f9:19:a7:83:b9:58:6a:71:f9:04:4a:9e:9d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Mar 30 15:00:46 2026 GMT Not After : Mar 31 15:00:46 2026 GMT Subject: CN=2fb320458de1d8a75309fc4a148cfe0732339d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:88:33:82:eb:3f:4c:59:35:b9:cd:f0:59: fe:09:a5:b4:24:3b:b7:6b:2a:f6:f8:ac:87:e3:b6: 40:9b:24:ab:77:0d:18:ee:d0:d9:27:b5:ed:7d:b7: 9c:02:03:ca:5b:3f:90:05:27:ef:20:53:cf:5d:c1: 08:64:74:27:76:f7:9e:c0:a8:51:c7:02:9f:7b:a0: 9f:cf:c9:b4:f9:bf:43:eb:2d:bc:5d:5f:d1:41:1b: aa:92:40:33:77:f2:d1:fb:cb:77:01:6c:5e:84:5f: bc:91:1b:21:d4:c8:f4:89:ef:aa:77:c2:82:6d:dd: fc:17:40:85:e0:29:f9:c7:ac:7a:6e:df:63:e0:f6: 65:fa:7e:e6:15:48:fa:53:f4:67:70:a2:c0:f9:75: aa:8e:60:48:b8:f6:9c:5f:79:02:d5:71:8d:76:3d: 72:86:c1:38:b7:ac:d0:05:2f:f6:94:92:55:5e:ff: f7:c9:8d:57:fd:dc:41:5f:86:4d:06:3d:2b:85:fa: 29:23:c9:9d:c1:4e:a4:0d:6d:9f:ec:f9:fa:51:7a: a0:39:db:b4:0d:e1:19:ba:0e:77:67:54:1a:6c:b9: 16:6f:06:0b:9e:a0:a1:de:19:7c:ae:69:c6:1b:15: c5:b7:e4:c8:b8:13:8c:77:6f:bb:2d:2f:94:08:81: ee:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B3:20:45:8D:E1:D8:A7:53:09:FC:4A:14:8C:FE:07:32:33:9D:28 X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:65:74:5c:e7:0a:a6:f8:98:51:e1:73:b2:7a:8d:34:4e:12: 6d:f3:b1:7a:41:9c:70:0a:1b:84:d5:45:5d:51:14:17:53:49: c4:d4:72:9f:0a:d4:99:25:1b:17:3d:8a:56:c5:7d:1b:2a:e3: 15:99:b1:a4:5d:e5:e4:4b:4c:55:e5:4b:21:82:9b:a5:14:d6: 28:1c:12:65:35:da:ae:75:3d:52:96:34:70:6d:c2:4a:c4:62: 5e:64:8c:01:3a:84:64:0a:e2:62:7e:00:5f:86:1f:b3:4b:de: 72:21:15:02:a4:c3:5d:1d:9d:09:b7:a8:b3:60:aa:54:21:37: 80:a0:b0:e9:0d:ff:43:47:d5:5c:a6:25:ce:3d:15:dc:be:e3: 4f:1d:f4:84:5e:78:21:60:8c:b9:52:ee:b9:9d:57:1f:f6:68: e0:d1:cc:90:61:d6:8e:31:d1:9c:c4:0b:35:ec:1c:18:38:40: 2b:5b:85:7d:0d:2c:85:1c:96:16:f0:70:34:95:6e:3f:10:9e: 97:63:ca:45:4a:39:b1:85:64:fc:4e:6d:38:47:2c:60:19:fa: 36:ea:92:d6:f9:f7:fb:17:dd:83:5f:52:e6:88:69:eb:de:eb: 5b:ae:a9:5e:e4:84:f2:6d:5b:42:11:d3:07:9f:92:7c:00:74: a6:39:0e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0/QvkZp4O5WGpx+QRKnp2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMzMwMTUwMDQ2WhcNMjYwMzMxMTUwMDQ2WjAzMTEwLwYDVQQD EygyZmIzMjA0NThkZTFkOGE3NTMwOWZjNGExNDhjZmUwNzMyMzM5ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKGIM4LrP0xZNbnN8Fn+CaW0JDu3 ayr2+KyH47ZAmySrdw0Y7tDZJ7XtfbecAgPKWz+QBSfvIFPPXcEIZHQndveewKhR xwKfe6Cfz8m0+b9D6y28XV/RQRuqkkAzd/LR+8t3AWxehF+8kRsh1Mj0ie+qd8KC bd38F0CF4Cn5x6x6bt9j4PZl+n7mFUj6U/RncKLA+XWqjmBIuPacX3kC1XGNdj1y hsE4t6zQBS/2lJJVXv/3yY1X/dxBX4ZNBj0rhfopI8mdwU6kDW2f7Pn6UXqgOdu0 DeEZug53Z1QabLkWbwYLnqCh3hl8rmnGGxXFt+TIuBOMd2+7LS+UCIHuXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+zIEWN4dinUwn8ShSM/gcyM50oMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGV0XOcK pviYUeFzsnqNNE4SbfOxekGccAobhNVFXVEUF1NJxNRynwrUmSUbFz2KVsV9Gyrj FZmxpF3l5EtMVeVLIYKbpRTWKBwSZTXarnU9UpY0cG3CSsRiXmSMATqEZAriYn4A X4Yfs0veciEVAqTDXR2dCbeos2CqVCE3gKCw6Q3/Q0fVXKYlzj0V3L7jTx30hF54 IWCMuVLuuZ1XH/Zo4NHMkGHWjjHRnMQLNewcGDhAK1uFfQ0shRyWFvBwNJVuPxCe l2PKRUo5sYVk/E5tOEcsYBn6NuqS1vn3+xfdg19S5ohp697rW66pXuSE8m1bQhHT B5+SfAB0pjkO0Q== -----END CERTIFICATE-----Generated at Mon Mar 30 18:05:07 2026 by rpki-client