$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: 4oo0WRFrB0E6EojXsRv3emAkSwrssU0MNJrZn2vmXFE= Subject key identifier: 8B:86:68:F7:AF:39:FC:7D:0B:7E:6A:47:A4:31:A1:CF:CF:F8:16:3C Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019DCF75DE6980A3978C9C2E780D64A5F7EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 18F4 Signing time: Mon 27 Apr 2026 15:01:41 +0000 Manifest this update: Mon 27 Apr 2026 15:01:41 +0000 Manifest next update: Tue 28 Apr 2026 15:01:41 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 3: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 4: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 5: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 6: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 7: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 8: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: Y9qeCtqBGEtkFM1DN0bprtszrslW0BfwqMGo7+5WBg0=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:75:de:69:80:a3:97:8c:9c:2e:78:0d:64:a5:f7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Apr 27 15:01:41 2026 GMT Not After : Apr 28 15:01:41 2026 GMT Subject: CN=8b8668f7af39fc7d0b7e6a47a431a1cfcff8163c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e7:c1:43:82:0a:7f:47:e1:6c:ba:73:7c:17: 8e:c4:4b:1a:c4:c2:9d:24:5a:df:de:ae:5e:04:ae: d6:ad:57:89:12:f2:d6:6a:6c:f8:87:32:60:e0:01: a2:c2:90:23:4b:53:70:eb:51:23:fb:bc:43:53:43: 85:2c:c3:c2:63:56:d4:a3:ae:24:8d:28:2e:a9:22: 8f:c3:75:ef:2c:3e:b7:02:dc:ab:6e:d9:13:d5:f8: 44:6c:75:a3:fb:62:78:c4:81:ce:41:7c:9f:00:71: 89:44:07:b0:67:38:a5:da:5c:dd:0b:64:a5:c7:e5: 1f:1c:0f:5b:55:f8:df:63:68:e4:2f:35:77:d4:5c: 93:8c:e1:0e:b4:22:40:92:46:a3:c9:b9:7a:e7:57: 08:bb:01:cb:f9:e7:da:81:be:e2:31:63:4d:d6:ae: 81:62:5b:ad:75:aa:a2:c4:75:f6:70:48:e9:37:1d: e2:95:57:ef:97:f2:e4:7e:cf:d5:f1:26:19:ba:ca: 49:68:9f:c8:9e:eb:fe:b6:d6:97:b5:88:c9:e3:71: 96:49:df:6f:a6:06:cb:ad:af:55:b5:67:f4:e2:41: 9e:b8:ef:b8:e9:75:1d:22:a4:cd:37:50:fc:c5:6e: f0:57:ee:ed:40:c7:74:ef:ba:44:c8:45:59:d5:8f: bc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:86:68:F7:AF:39:FC:7D:0B:7E:6A:47:A4:31:A1:CF:CF:F8:16:3C X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3e:2f:68:05:dd:f2:28:2c:2c:cf:cd:92:6e:33:cd:0e:b6: 89:1c:a3:0e:71:e3:81:92:f1:44:6b:06:a5:e4:43:f6:c5:8d: 27:d7:4c:f2:7d:ca:8c:99:99:8e:e1:52:06:5a:6d:27:d5:8e: 9b:4a:f1:83:84:4c:07:0d:3b:8b:c6:5a:fe:62:f6:cb:55:8c: 50:f8:64:df:15:f6:e2:34:86:89:38:93:01:21:34:49:b3:5c: 87:d6:75:09:27:d8:73:7a:cc:5e:6b:1d:bd:65:ce:d8:11:74: bf:6d:c9:e1:fa:02:d2:77:14:6c:30:c4:ec:0e:2d:ca:99:ac: dc:5c:4b:e3:c4:4b:38:f5:e8:af:1e:99:06:9d:4a:9c:75:80: c4:62:6b:6e:09:5c:bc:c3:b2:f5:0f:9f:db:f1:b9:6c:03:f4: 28:ea:d9:93:8d:62:09:82:4f:37:9d:6a:be:31:76:50:74:f7: 82:62:fd:d7:fd:ab:2c:29:ae:81:f4:d6:3e:ad:ee:3d:e3:ad: 23:0b:85:01:09:1a:cb:59:5d:bf:a7:f2:19:7a:ec:75:a4:c8: 63:4b:76:d6:92:62:f1:87:2f:2c:fa:cc:4f:be:fb:7d:71:ad: 55:65:45:b9:a7:31:dc:5d:2b:83:e0:22:d8:28:8a:f2:70:15: f5:64:3e:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3Pdd5pgKOXjJwueA1kpffuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwNDI3MTUwMTQxWhcNMjYwNDI4MTUwMTQxWjAzMTEwLwYDVQQD Eyg4Yjg2NjhmN2FmMzlmYzdkMGI3ZTZhNDdhNDMxYTFjZmNmZjgxNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OfBQ4IKf0fhbLpzfBeOxEsaxMKd JFrf3q5eBK7WrVeJEvLWamz4hzJg4AGiwpAjS1Nw61Ej+7xDU0OFLMPCY1bUo64k jSguqSKPw3XvLD63AtyrbtkT1fhEbHWj+2J4xIHOQXyfAHGJRAewZzil2lzdC2Sl x+UfHA9bVfjfY2jkLzV31FyTjOEOtCJAkkajybl651cIuwHL+efagb7iMWNN1q6B YlutdaqixHX2cEjpNx3ilVfvl/Lkfs/V8SYZuspJaJ/Inuv+ttaXtYjJ43GWSd9v pgbLra9VtWf04kGeuO+46XUdIqTNN1D8xW7wV+7tQMd077pEyEVZ1Y+8vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuGaPevOfx9C35qR6Qxoc/P+BY8MB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALD4vaAXd 8igsLM/Nkm4zzQ62iRyjDnHjgZLxRGsGpeRD9sWNJ9dM8n3KjJmZjuFSBlptJ9WO m0rxg4RMBw07i8Za/mL2y1WMUPhk3xX24jSGiTiTASE0SbNch9Z1CSfYc3rMXmsd vWXO2BF0v23J4foC0ncUbDDE7A4typms3FxL48RLOPXorx6ZBp1KnHWAxGJrbglc vMOy9Q+f2/G5bAP0KOrZk41iCYJPN51qvjF2UHT3gmL91/2rLCmugfTWPq3uPeOt IwuFAQkay1ldv6fyGXrsdaTIY0t21pJi8YcvLPrMT777fXGtVWVFuacx3F0rg+Ai 2CiK8nAV9WQ+6w== -----END CERTIFICATE-----Generated at Mon Apr 27 17:40:58 2026 by rpki-client