$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft File: TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json) Hash identifier: wWEWh9E9+JuVeYIzjemVHgb3DvYgk+06tJUpHNYQ91k= Subject key identifier: 97:BF:F2:F3:F4:C1:86:2D:02:19:E7:91:26:11:02:BC:7D:9E:4D:BC Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019D793317A6C9B54619FE139094B7C4883D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft Manifest number: 0BAB Signing time: Fri 10 Apr 2026 21:01:24 +0000 Manifest this update: Fri 10 Apr 2026 21:01:24 +0000 Manifest next update: Sat 11 Apr 2026 21:01:24 +0000 Files and hashes: 1: 2krvIRPRsTOPomVMfCPNZSLLFks.roa (hash: P0BkghxyDkTPiHFvyXDN/scxvrKFV/bbDjO/nIHvYBI=) 2: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=) 3: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=) 4: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=) 5: DbUcvr80clIUT4IVIfDV-VI3N3g.roa (hash: APkVSFKtYlODE7JqxCSucRJZgTgEFA/Qhz55cg0GRaQ=) 6: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=) 7: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=) 8: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=) 9: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=) 10: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=) 11: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=) 12: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=) 13: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: ua8aR+mRT4J/Kl/b0l9GAY6b5dJ5CqnO05neb8z+eys=) 14: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=) 15: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=) 16: Z6Y454y-5irLUB1HnESLpIVfLbQ.roa (hash: tFEKXtRhTAllzQn72vhDbzuqR5U15UaBRpVFyO2xYs0=) 17: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=) 18: _xskEv4E93buhDkLdrQYmZAO0nE.roa (hash: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw=) 19: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=) 20: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=) 21: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=) 22: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=) 23: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (hash: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=) 24: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=) 25: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=) 26: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=) 27: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=) 28: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=) 29: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=) 30: trwy9YK-SnrnYyYORbn93V30iRo.roa (hash: LTdq87i4sWmABMo13psUfyUJvjXH3JCzB1hcKoT/PNU=) 31: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=) 32: zjtl5Y0Z3oogjAq5K4uAfLAq8ro.roa (hash: LpQt/bLNnHWYgd6YNiQU8EA6fFlerNrGYNaE8nt6sMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 21:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:79:33:17:a6:c9:b5:46:19:fe:13:90:94:b7:c4:88:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Apr 10 21:01:24 2026 GMT Not After : Apr 11 21:01:24 2026 GMT Subject: CN=97bff2f3f4c1862d0219e791261102bc7d9e4dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3b:34:0f:d2:82:ad:19:84:cd:3a:e4:1e:3a: 88:e8:8a:94:5c:81:d8:c0:24:07:30:a0:b4:8a:26: 05:3a:94:a8:2e:62:02:60:f8:e8:17:9c:ab:77:46: 0f:4b:fe:b2:0a:59:64:15:b0:ab:a1:bc:94:a7:06: b7:75:34:e7:bb:ad:7b:34:e4:f2:95:83:29:cc:08: 48:bd:73:83:0a:cf:07:35:3d:84:b6:ac:da:80:66: 64:c7:96:71:48:fa:5c:4b:bf:8f:a7:79:40:86:b9: 42:66:46:27:2f:5a:a7:66:56:f8:f6:98:fe:35:45: e6:86:d0:ef:db:be:a1:78:8e:a0:53:c6:c3:6d:3c: fd:ac:f3:b6:55:f5:ef:6e:01:ec:8a:0b:33:d6:ab: 9f:bd:b2:05:2a:cd:a2:b5:0d:d6:47:96:1b:3f:4c: 82:ae:bf:aa:99:cf:4f:17:ed:9e:b2:09:68:21:6c: fb:8a:29:b8:ab:80:77:54:dd:85:d5:8b:6a:e5:68: 07:14:13:33:34:89:c5:e5:56:f6:9b:e5:83:4b:51: 88:e6:d1:20:35:40:61:eb:f4:23:9a:6c:57:f7:f2: 70:fa:74:1a:29:b3:6b:44:5a:cf:d5:df:50:d0:c2: 55:68:b5:c3:d1:3c:b3:33:39:a2:cd:ff:b0:19:d9: dd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BF:F2:F3:F4:C1:86:2D:02:19:E7:91:26:11:02:BC:7D:9E:4D:BC X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e6:40:0b:a8:6c:11:ff:0c:46:96:a8:b6:ff:79:b8:50:98: bd:91:4a:b6:54:0c:1f:25:38:00:85:5e:e5:d5:3e:d9:c9:4d: eb:d4:08:24:64:41:98:12:ca:ef:de:5c:fa:62:48:a2:02:8a: dd:c6:0a:9a:c8:c0:e9:4d:dc:b8:be:96:a0:79:21:57:fe:8f: 36:ab:81:f8:de:c9:21:be:31:08:ca:e1:fb:4e:6c:5c:17:83: 73:6b:8c:33:98:c2:51:a6:19:7b:19:42:93:7b:34:55:c8:50: 80:f9:4b:c8:85:49:96:66:ab:ed:82:66:93:f2:7c:c3:c3:28: b2:5b:09:00:a0:a8:f0:28:0c:3b:a9:c3:ce:e0:b5:f9:8e:7a: 44:4e:72:8c:a7:f7:ab:83:b1:5c:d0:db:43:25:58:fb:f3:6c: 8b:96:57:76:4d:c2:00:cf:03:f8:84:c4:e9:05:30:15:7b:0c: 73:03:76:17:36:ab:5b:a1:e8:bf:c8:3c:90:b6:c4:49:21:f1: ec:35:d9:a4:5f:ed:b1:ea:d4:a5:99:d2:67:fe:bc:6d:ef:b2: 80:58:53:87:eb:ca:e6:24:63:cd:4e:70:f0:38:51:3f:a7:87: d6:e2:33:81:63:ba:1b:8d:92:0f:42:18:78:f4:dc:d8:e7:5a: fd:a0:6a:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ15MxemybVGGf4TkJS3xIg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwNDEwMjEwMTI0WhcNMjYwNDExMjEwMTI0WjAzMTEwLwYDVQQD Eyg5N2JmZjJmM2Y0YzE4NjJkMDIxOWU3OTEyNjExMDJiYzdkOWU0ZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzs0D9KCrRmEzTrkHjqI6IqUXIHY wCQHMKC0iiYFOpSoLmICYPjoF5yrd0YPS/6yCllkFbCrobyUpwa3dTTnu617NOTy lYMpzAhIvXODCs8HNT2EtqzagGZkx5ZxSPpcS7+Pp3lAhrlCZkYnL1qnZlb49pj+ NUXmhtDv276heI6gU8bDbTz9rPO2VfXvbgHsigsz1qufvbIFKs2itQ3WR5YbP0yC rr+qmc9PF+2esgloIWz7iim4q4B3VN2F1Ytq5WgHFBMzNInF5Vb2m+WDS1GI5tEg NUBh6/QjmmxX9/Jw+nQaKbNrRFrP1d9Q0MJVaLXD0TyzMzmizf+wGdndJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe/8vP0wYYtAhnnkSYRArx9nk28MB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+ZAC6hs Ef8MRpaotv95uFCYvZFKtlQMHyU4AIVe5dU+2clN69QIJGRBmBLK795c+mJIogKK 3cYKmsjA6U3cuL6WoHkhV/6PNquB+N7JIb4xCMrh+05sXBeDc2uMM5jCUaYZexlC k3s0VchQgPlLyIVJlmar7YJmk/J8w8MoslsJAKCo8CgMO6nDzuC1+Y56RE5yjKf3 q4OxXNDbQyVY+/Nsi5ZXdk3CAM8D+ITE6QUwFXsMcwN2FzarW6Hov8g8kLbESSHx 7DXZpF/tserUpZnSZ/68be+ygFhTh+vK5iRjzU5w8DhRP6eH1uIzgWO6G42SD0IY ePTc2Oda/aBqbA== -----END CERTIFICATE-----Generated at Sat Apr 11 04:07:36 2026 by rpki-client