$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: 1AFuO3YfbCX0hZtt62NrWUaBSOB4wjkuMODtijslvEU= Subject key identifier: D2:9A:75:12:81:AB:C8:43:BC:1D:9F:AC:F1:08:60:21:3B:73:26:59 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 01A10E4CA435C4F241C79E8778B8840B9794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 1AB6 Signing time: Mon 05 Oct 2026 23:01:05 +0000 Manifest this update: Mon 05 Oct 2026 23:01:05 +0000 Manifest next update: Tue 06 Oct 2026 23:01:05 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 0Va2x4Qd63us7kRWmkpIgs4VavE.roa (hash: mlH17TsTBWEMs6AwiTvf9MSqSgOdSNOB7ebIvjxdVCU=) 3: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 4: 83juuidbqsnUvKpGJHVrEv2JlUA.roa (hash: iXonloz6Sxmjl01Plu1HC3/Q6qL8IKYvIIBaggc6K1Y=) 5: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 6: P-RJvOmpvYO0dFLhiA5cZu2_-80.roa (hash: mofslfkSbsZHnkehkGW2DT11ckBTZLlQswOwkS2bhAg=) 7: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: XUqZodOYotxYfaVctfSYzShwlnRNSjstnUhI65gTogY=) 8: ZVNRgss5mTKJwhbB1mo1GGQyJRE.roa (hash: HjXOusJwIaZmZ+GD57QVPopBj5EraNR3jwZ+HMzM4p0=) 9: bEXar_PDdc_u4-EMnGh7tX0LHVg.roa (hash: tWOJsXIwz8NLZyOMtnHMC60APgOJn7JZ0y3xyIP4Gu4=) 10: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 11: kTrZwWya8vKsPzaTCCVly2aeBF0.roa (hash: GYxaPQmLs3qRxZhpYVXS6A4uk/iHpf3iWjyGg7/VHF4=) 12: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) 13: xEmv6iMzO6ox8HZNasxgI207Ico.roa (hash: hvgnhFfU21tndV9juMrzdngLR+nEgCJ6x3FzWgGB75g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 20:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:0e:4c:a4:35:c4:f2:41:c7:9e:87:78:b8:84:0b:97:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Oct 5 23:01:05 2026 GMT Not After : Oct 6 23:01:05 2026 GMT Subject: CN=d29a751281abc843bc1d9facf10860213b732659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:82:94:46:e7:cc:2a:41:62:b8:69:a2:e4:21: 2b:74:f2:4a:72:7b:3c:5b:5c:8a:dc:0d:ec:81:4d: 0e:a9:03:a9:24:a5:39:30:1f:ce:9f:ca:77:a4:fe: 0d:48:a8:36:ce:fc:07:63:f4:17:94:17:93:68:51: 20:f8:a1:6a:66:3c:8d:6b:26:a4:16:7a:ad:0e:63: 42:b9:c2:4d:87:a5:be:ac:56:a8:c4:a5:dc:91:9a: 6d:80:06:40:84:50:f8:40:3f:93:31:01:99:72:ef: 29:88:64:f5:2a:fb:db:12:cf:c7:40:5a:32:8f:c8: f1:c0:9e:2e:04:23:f7:a5:9e:c6:2e:58:39:a6:38: 9f:ad:42:27:ec:11:a3:53:3d:aa:8e:d1:30:36:97: 46:46:93:ef:2e:c0:f2:70:37:dc:23:ad:8e:e3:fc: 3b:f9:6c:c9:c7:41:9f:80:b2:e4:8f:fa:7f:28:8b: 3e:44:71:93:5d:71:fc:8f:46:0f:93:54:fa:00:28: 85:b3:46:6c:a8:5c:34:2c:5d:ac:6a:5f:93:84:49: 73:24:e1:35:09:ec:04:af:b7:0e:3b:18:fe:a1:2d: 6d:6d:e5:3c:b6:00:e2:16:3e:5b:13:47:d4:34:59: 29:e4:6d:1d:03:de:82:e1:0c:5d:1a:98:4c:b7:f7: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9A:75:12:81:AB:C8:43:BC:1D:9F:AC:F1:08:60:21:3B:73:26:59 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:31:0a:0b:5c:c3:0a:f0:0e:9d:b9:91:c7:15:57:bb:ee:d3: b5:f8:b9:a8:a6:ce:84:bf:2c:8d:e0:ea:ee:48:52:ee:b8:16: 49:50:7a:b7:b0:e5:10:e8:a9:85:e6:64:a7:7a:1d:b1:c3:ef: e4:ff:0c:49:1f:a4:37:fa:df:06:ab:0f:16:c9:5c:e4:9b:32: e4:5c:a2:c1:87:70:cc:3a:93:1b:e4:ec:ae:df:55:0d:48:5f: eb:e2:b1:52:11:ae:04:2d:c3:bf:63:2c:4a:0c:ca:dc:b2:6d: f8:6c:0c:78:8a:a1:a8:49:76:99:95:61:82:e1:f1:99:3e:58: f7:5e:da:5f:a3:80:d7:6f:03:88:93:5c:fd:ed:dd:58:50:23: 40:37:40:a9:1c:8e:28:74:6d:78:1f:cb:67:fd:79:c0:7f:e0: 8b:27:6a:8d:7a:47:a2:80:ba:c5:dd:da:1c:fd:e1:fe:78:e3: 71:65:6f:d7:4a:f7:9a:7c:29:39:91:bd:b0:7f:1a:ff:f2:81: 03:75:36:7e:39:97:63:f6:c5:6a:f3:6f:d5:12:4f:16:32:49: f5:4e:72:90:db:80:0e:81:ea:db:3f:08:32:e3:f0:28:65:49: 4d:d5:b4:f7:73:df:fb:cf:45:9f:7d:e7:b3:46:46:8f:c1:bc: 34:ff:10:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEOTKQ1xPJBx56HeLiEC5eUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYxMDA1MjMwMTA1WhcNMjYxMDA2MjMwMTA1WjAzMTEwLwYDVQQD EyhkMjlhNzUxMjgxYWJjODQzYmMxZDlmYWNmMTA4NjAyMTNiNzMyNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oKURufMKkFiuGmi5CErdPJKcns8 W1yK3A3sgU0OqQOpJKU5MB/On8p3pP4NSKg2zvwHY/QXlBeTaFEg+KFqZjyNayak FnqtDmNCucJNh6W+rFaoxKXckZptgAZAhFD4QD+TMQGZcu8piGT1KvvbEs/HQFoy j8jxwJ4uBCP3pZ7GLlg5pjifrUIn7BGjUz2qjtEwNpdGRpPvLsDycDfcI62O4/w7 +WzJx0GfgLLkj/p/KIs+RHGTXXH8j0YPk1T6ACiFs0ZsqFw0LF2sal+ThElzJOE1 CewEr7cOOxj+oS1tbeU8tgDiFj5bE0fUNFkp5G0dA96C4QxdGphMt/fDzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKadRKBq8hDvB2frPEIYCE7cyZZMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzEKC1zD CvAOnbmRxxVXu+7Ttfi5qKbOhL8sjeDq7khS7rgWSVB6t7DlEOipheZkp3odscPv 5P8MSR+kN/rfBqsPFslc5Jsy5FyiwYdwzDqTG+Tsrt9VDUhf6+KxUhGuBC3Dv2Ms SgzK3LJt+GwMeIqhqEl2mZVhguHxmT5Y917aX6OA128DiJNc/e3dWFAjQDdAqRyO KHRteB/LZ/15wH/giydqjXpHooC6xd3aHP3h/njjcWVv10r3mnwpOZG9sH8a//KB A3U2fjmXY/bFavNv1RJPFjJJ9U5ykNuADoHq2z8IMuPwKGVJTdW093Pf+89Fn33n s0ZGj8G8NP8QrA== -----END CERTIFICATE-----Generated at Tue Oct 6 03:36:58 2026 by rpki-client