$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: vCkhG7+YQy7FIk9EBHscW7p0pinPNfGStoKYOvFbyDY= Subject key identifier: 63:9F:3B:D8:EC:AE:9A:1C:24:53:17:DE:C3:3E:4D:5D:50:E3:9D:D3 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019E2091368A14B099A160BBFB70F1518A9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 192D Signing time: Wed 13 May 2026 09:00:48 +0000 Manifest this update: Wed 13 May 2026 09:00:48 +0000 Manifest next update: Thu 14 May 2026 09:00:48 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 1-mot6mikLp_MDl0b7kmHUwF8vnM.roa (hash: XgWK76sOAKa1F05WWdrvMpLFcLfu8IIa8P7y+0SOUIQ=) 3: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 4: 5CBz7J_rxqKIErWJdNCTyxWORk4.roa (hash: NgQqsHixRjLE1PxJ9k04+GOCbvcPmM6kd6jLKzVPJ4A=) 5: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 6: CxwFpKnVRB1YipI_w1rOdL2Rr_0.roa (hash: Sqj7uyxBPWvN499fr3Zl2IE3H+X3USQ46cvMPtYbWbI=) 7: Sy1XXaKv9JrEyY29f5xuY6WPTZ4.roa (hash: QzQzh3Bmon/hK1H7MVc4u0jpNg3xapgmcfibGio31+E=) 8: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: MyyJdGr9WrKoeZLs9wf6to90/+B8xYGiWjikSrAbiK8=) 9: bEXar_PDdc_u4-EMnGh7tX0LHVg.roa (hash: tWOJsXIwz8NLZyOMtnHMC60APgOJn7JZ0y3xyIP4Gu4=) 10: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 11: kTrZwWya8vKsPzaTCCVly2aeBF0.roa (hash: GYxaPQmLs3qRxZhpYVXS6A4uk/iHpf3iWjyGg7/VHF4=) 12: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:20:91:36:8a:14:b0:99:a1:60:bb:fb:70:f1:51:8a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: May 13 09:00:48 2026 GMT Not After : May 14 09:00:48 2026 GMT Subject: CN=639f3bd8ecae9a1c245317dec33e4d5d50e39dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:9b:05:76:3a:50:8f:61:a9:ef:37:9a:dc: fa:00:65:23:f4:de:5b:99:74:89:89:85:48:9c:06: 3a:c4:df:a9:36:14:11:4b:f1:a1:36:f0:eb:f8:65: 72:1b:42:5e:11:64:d1:7a:4b:0c:e0:63:f9:ff:43: 89:65:72:ec:d4:2d:6e:e2:3e:1e:61:a7:bf:01:9c: 5f:94:46:39:00:e4:a4:31:47:00:a6:19:9f:cb:1a: 72:f6:09:63:85:64:d9:62:88:4f:c5:41:e5:de:48: d5:d0:09:f2:84:9c:e0:58:64:2d:67:e3:93:f2:8f: f3:9e:bd:55:99:40:78:07:f3:6b:e4:52:04:b8:3a: 65:74:cf:a7:ff:74:10:63:09:85:80:7b:d0:03:c9: 9e:4b:36:97:bf:d2:76:52:67:65:a6:a6:57:1f:fc: d4:1a:6b:dd:d6:15:0c:7d:73:8f:7d:42:f5:5f:54: 11:9d:ca:92:e6:e9:d0:e1:54:bc:5e:12:26:ae:47: 47:8b:be:8c:1a:af:7b:1e:80:05:bd:ff:aa:23:cb: b7:f5:41:fd:e7:7d:e7:8c:35:91:a1:30:b4:06:73: ee:b3:6f:62:11:a1:f5:c7:fd:a6:6a:57:ea:a6:45: a8:8d:da:d7:6f:47:48:21:63:88:2d:f1:81:51:8b: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9F:3B:D8:EC:AE:9A:1C:24:53:17:DE:C3:3E:4D:5D:50:E3:9D:D3 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0e:25:4e:6c:d8:80:8a:da:b2:9a:d5:dc:dd:6a:2f:04:de: a2:ec:5e:b0:79:8d:c9:9f:95:63:0d:20:7e:1c:38:f5:b6:36: e7:94:21:c0:c8:63:9e:5a:31:5a:dc:27:64:1c:1f:a6:93:f4: 30:af:cf:6e:2e:99:38:4e:dd:0f:d7:99:97:92:0b:c8:01:35: b6:74:07:b1:7e:d4:67:05:f8:0d:f5:ab:77:25:02:0e:a2:6a: 9f:90:4e:3e:db:ce:6c:01:c9:af:ae:40:38:6d:2d:aa:78:00: b3:cc:6d:0d:0c:54:97:e5:f0:1c:91:d3:5a:6b:28:c5:5c:9d: dc:65:cb:36:33:d3:99:8e:33:8e:03:e7:12:0c:3c:43:15:d3: e4:35:45:14:95:32:d0:a2:97:15:cc:ff:40:5d:47:7c:ab:86: 6a:ae:cd:82:1a:8b:d5:49:ec:23:8e:f0:67:bb:4c:17:50:39: e8:e4:fd:2a:2d:8f:21:aa:76:c3:86:39:6b:a4:96:16:44:ee: 20:f7:f9:53:a4:41:f8:89:dc:7f:1c:21:21:ba:13:5e:72:1f: 08:77:25:34:f6:85:3d:a1:a0:33:35:49:e5:67:91:2f:b0:c3: 81:41:d1:33:39:c4:99:36:ba:35:e0:e6:6a:41:fc:90:47:9d: 5d:27:36:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4gkTaKFLCZoWC7+3DxUYqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwNTEzMDkwMDQ4WhcNMjYwNTE0MDkwMDQ4WjAzMTEwLwYDVQQD Eyg2MzlmM2JkOGVjYWU5YTFjMjQ1MzE3ZGVjMzNlNGQ1ZDUwZTM5ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmybBXY6UI9hqe83mtz6AGUj9N5b mXSJiYVInAY6xN+pNhQRS/GhNvDr+GVyG0JeEWTReksM4GP5/0OJZXLs1C1u4j4e Yae/AZxflEY5AOSkMUcAphmfyxpy9gljhWTZYohPxUHl3kjV0AnyhJzgWGQtZ+OT 8o/znr1VmUB4B/Nr5FIEuDpldM+n/3QQYwmFgHvQA8meSzaXv9J2UmdlpqZXH/zU Gmvd1hUMfXOPfUL1X1QRncqS5unQ4VS8XhImrkdHi76MGq97HoAFvf+qI8u39UH9 533njDWRoTC0BnPus29iEaH1x/2malfqpkWojdrXb0dIIWOILfGBUYueNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOfO9jsrpocJFMX3sM+TV1Q453TMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg4lTmzY gIrasprV3N1qLwTeouxesHmNyZ+VYw0gfhw49bY255QhwMhjnloxWtwnZBwfppP0 MK/Pbi6ZOE7dD9eZl5ILyAE1tnQHsX7UZwX4DfWrdyUCDqJqn5BOPtvObAHJr65A OG0tqngAs8xtDQxUl+XwHJHTWmsoxVyd3GXLNjPTmY4zjgPnEgw8QxXT5DVFFJUy 0KKXFcz/QF1HfKuGaq7NghqL1UnsI47wZ7tMF1A56OT9Ki2PIap2w4Y5a6SWFkTu IPf5U6RB+IncfxwhIboTXnIfCHclNPaFPaGgMzVJ5WeRL7DDgUHRMznEmTa6NeDm akH8kEedXSc2Yg== -----END CERTIFICATE-----Generated at Wed May 13 16:02:35 2026 by rpki-client