$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: wiUXvl7XfJxcGGS2Sy+LyRdKVTNt2CbHlZg72Sf66PQ= Subject key identifier: 9A:86:E8:D8:1B:07:67:B9:4C:2F:1F:36:7E:13:05:46:50:82:41:8E Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019FF911619192F4D6ECB0C27AEF44A661DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 1A26 Signing time: Thu 13 Aug 2026 03:01:33 +0000 Manifest this update: Thu 13 Aug 2026 03:01:33 +0000 Manifest next update: Fri 14 Aug 2026 03:01:33 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 0Va2x4Qd63us7kRWmkpIgs4VavE.roa (hash: mlH17TsTBWEMs6AwiTvf9MSqSgOdSNOB7ebIvjxdVCU=) 3: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 4: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 5: CxwFpKnVRB1YipI_w1rOdL2Rr_0.roa (hash: Sqj7uyxBPWvN499fr3Zl2IE3H+X3USQ46cvMPtYbWbI=) 6: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: 2P8gylnDuWorKaZ8YdOr11F2mn8W0BL3nxZyw90REys=) 7: ZVNRgss5mTKJwhbB1mo1GGQyJRE.roa (hash: HjXOusJwIaZmZ+GD57QVPopBj5EraNR3jwZ+HMzM4p0=) 8: bEXar_PDdc_u4-EMnGh7tX0LHVg.roa (hash: tWOJsXIwz8NLZyOMtnHMC60APgOJn7JZ0y3xyIP4Gu4=) 9: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 10: kTrZwWya8vKsPzaTCCVly2aeBF0.roa (hash: GYxaPQmLs3qRxZhpYVXS6A4uk/iHpf3iWjyGg7/VHF4=) 11: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) 12: uEnRng83DMivtU9u64kgfGid_Hs.roa (hash: vmYhF39wCahPYTq1VZ0x6GUk7X7pQ26ryeKoN/cfjf4=) 13: xEmv6iMzO6ox8HZNasxgI207Ico.roa (hash: hvgnhFfU21tndV9juMrzdngLR+nEgCJ6x3FzWgGB75g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f9:11:61:91:92:f4:d6:ec:b0:c2:7a:ef:44:a6:61:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Aug 13 03:01:33 2026 GMT Not After : Aug 14 03:01:33 2026 GMT Subject: CN=9a86e8d81b0767b94c2f1f367e1305465082418e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:07:b2:11:63:58:7e:cf:97:23:43:1d:70: 2a:7e:be:7d:e3:c7:2a:55:86:ea:07:f1:25:b8:9b: a6:7c:cf:ac:e3:77:3e:96:b8:d0:25:cb:c3:78:80: 0e:4a:37:ef:11:4c:95:96:fe:40:ac:47:90:b1:95: 51:16:f3:32:47:5a:b9:7e:d5:a2:40:5e:eb:76:25: 1c:1a:01:be:97:91:09:94:78:00:50:bf:b8:11:19: 58:d9:38:05:00:d6:f4:6c:db:56:b8:c4:32:88:fe: 7c:ac:15:f9:1b:17:c7:b3:e0:cf:4a:f5:82:93:e7: f3:fd:e4:93:99:ec:c2:5e:a4:dd:3e:a5:94:f7:13: b8:86:3d:10:c7:da:22:13:4c:a4:d7:ca:0b:06:e4: 27:00:f0:6d:e7:ef:c5:ee:0e:14:3d:18:ce:d4:c5: 9b:c5:f4:66:95:76:56:0f:29:41:11:fb:ba:3b:da: 13:5c:27:09:60:82:11:a1:45:45:25:da:24:cd:a0: 33:91:de:e7:e3:b0:68:36:fa:99:2b:d3:50:e9:e4: 07:17:94:f8:62:3e:a0:e9:6e:5e:d9:71:ff:14:4c: cb:f6:20:30:f8:a3:f7:d3:87:4a:19:6f:bf:58:2a: 7a:90:ed:0e:3a:43:08:92:7e:bc:5f:a0:0f:11:5f: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:86:E8:D8:1B:07:67:B9:4C:2F:1F:36:7E:13:05:46:50:82:41:8E X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e5:a0:06:61:2e:e8:57:62:e9:26:72:1f:a0:cc:23:eb:30: f1:d2:26:a5:5b:28:ab:32:35:a0:ee:fe:ae:f0:36:82:d8:7f: 44:3e:44:55:0f:16:8c:f1:6e:17:fa:c6:76:72:df:33:65:0e: fc:89:bf:17:ad:19:1f:1f:c7:06:20:25:ff:1c:72:d9:ff:80: fc:98:c1:11:81:f6:67:f6:13:a8:3e:52:e8:a5:65:80:da:b2: 43:5a:bd:6f:0d:5a:b6:93:27:47:d4:16:ab:81:97:b7:a6:1e: c6:8d:ca:ff:42:0a:75:ef:b6:ab:12:1b:2d:94:b6:13:93:40: 41:e6:44:ff:28:c4:b2:eb:d8:df:72:95:06:e7:7c:f0:b2:57: 46:75:27:df:bd:24:67:0f:4b:74:0e:75:3f:56:fe:66:07:60: 93:5d:f9:d1:06:93:bd:f5:d9:8e:89:80:04:93:82:cb:d6:e4: 81:4a:2d:9d:56:88:92:63:1b:5c:b4:96:b9:ce:5e:f1:34:f6: bd:02:f5:4d:e9:b6:93:82:77:ad:15:c4:4d:f3:c0:b5:20:33: 26:e5:d5:88:32:be:b6:8c:71:76:57:c3:8c:9d:5c:e0:0f:08: 97:8d:01:0d:3c:d6:36:a0:74:aa:2e:f6:55:1b:b9:1d:44:15: 0e:eb:a0:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/5EWGRkvTW7LDCeu9EpmHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwODEzMDMwMTMzWhcNMjYwODE0MDMwMTMzWjAzMTEwLwYDVQQD Eyg5YTg2ZThkODFiMDc2N2I5NGMyZjFmMzY3ZTEzMDU0NjUwODI0MThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjUHshFjWH7PlyNDHXAqfr5948cq VYbqB/EluJumfM+s43c+lrjQJcvDeIAOSjfvEUyVlv5ArEeQsZVRFvMyR1q5ftWi QF7rdiUcGgG+l5EJlHgAUL+4ERlY2TgFANb0bNtWuMQyiP58rBX5GxfHs+DPSvWC k+fz/eSTmezCXqTdPqWU9xO4hj0Qx9oiE0yk18oLBuQnAPBt5+/F7g4UPRjO1MWb xfRmlXZWDylBEfu6O9oTXCcJYIIRoUVFJdokzaAzkd7n47BoNvqZK9NQ6eQHF5T4 Yj6g6W5e2XH/FEzL9iAw+KP304dKGW+/WCp6kO0OOkMIkn68X6APEV9dkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqG6NgbB2e5TC8fNn4TBUZQgkGOMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOWgBmEu 6Fdi6SZyH6DMI+sw8dImpVsoqzI1oO7+rvA2gth/RD5EVQ8WjPFuF/rGdnLfM2UO /Im/F60ZHx/HBiAl/xxy2f+A/JjBEYH2Z/YTqD5S6KVlgNqyQ1q9bw1atpMnR9QW q4GXt6Yexo3K/0IKde+2qxIbLZS2E5NAQeZE/yjEsuvY33KVBud88LJXRnUn370k Zw9LdA51P1b+Zgdgk1350QaTvfXZjomABJOCy9bkgUotnVaIkmMbXLSWuc5e8TT2 vQL1Tem2k4J3rRXETfPAtSAzJuXViDK+toxxdlfDjJ1c4A8Il40BDTzWNqB0qi72 VRu5HUQVDuugIw== -----END CERTIFICATE-----Generated at Thu Aug 13 09:45:13 2026 by rpki-client