$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: 8tXarkutWkF96/UqZdGsKmbshI1Fa92xNWZC0JWhPCs= Subject key identifier: 1F:2F:EE:2C:E1:5B:A0:40:88:6C:19:0B:67:7F:E4:4F:B6:9C:76:70 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019EB73303FEC9A37DF51CF96846A2736F8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 196C Signing time: Thu 11 Jun 2026 15:00:34 +0000 Manifest this update: Thu 11 Jun 2026 15:00:34 +0000 Manifest next update: Fri 12 Jun 2026 15:00:34 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 3: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 4: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 5: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 6: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 7: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 8: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: K/cQjPBcrW8eTzVNm+5VfNDFRt/QD3SZGYN4YwpDiOU=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:33:03:fe:c9:a3:7d:f5:1c:f9:68:46:a2:73:6f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jun 11 15:00:34 2026 GMT Not After : Jun 12 15:00:34 2026 GMT Subject: CN=1f2fee2ce15ba040886c190b677fe44fb69c7670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:56:96:14:f1:51:dc:86:eb:7a:3f:e2:c0:d4: 25:e5:8a:dc:14:1c:1c:af:f5:a2:d3:d6:f1:16:f5: 56:1b:56:8b:27:e4:a8:aa:9e:9d:77:f4:cd:d1:3d: cc:ea:2f:fc:76:c6:e0:a9:92:af:07:ee:53:34:7b: 50:3a:98:7b:d6:55:af:12:a6:4d:74:2e:76:99:ba: 55:02:c0:c6:1c:b8:af:07:b9:bf:39:04:36:8d:16: 4f:59:b1:23:a0:69:c3:48:bf:b2:9b:35:3a:35:7e: 60:de:62:5c:92:2d:4f:4b:60:3c:2e:c0:4f:c2:40: ec:1f:2f:d9:a6:c8:67:cc:8e:24:ca:6a:79:3d:91: c5:31:69:ea:56:a9:dd:8b:8a:cf:03:99:7e:78:e8: 79:41:67:f3:0c:cc:8b:09:a6:55:e6:50:ef:57:5c: a8:91:30:22:dc:d2:ab:c1:4f:78:92:97:65:12:e7: 49:31:3d:17:90:40:b6:4d:45:17:d7:0c:da:31:45: 99:4a:8d:3e:2f:40:87:be:51:af:1f:71:6f:74:b6: da:45:11:f6:51:e3:49:5e:11:e9:2d:41:cb:25:e3: 94:87:79:51:eb:a6:81:c6:3b:86:5f:39:66:cf:2b: ee:39:06:77:49:60:20:d3:b2:a8:86:b2:77:b8:29: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2F:EE:2C:E1:5B:A0:40:88:6C:19:0B:67:7F:E4:4F:B6:9C:76:70 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:be:2c:18:cf:41:1a:2e:24:57:dd:b6:88:61:cd:34:4f:94: 24:1c:f7:c5:69:84:df:06:ea:a7:b0:1d:e3:f6:ff:b5:fe:fd: 82:65:47:b7:32:2c:28:0c:d3:25:54:9a:d1:c5:4d:a9:62:01: 84:c0:f4:b9:7f:32:8c:72:fb:03:21:d3:96:b3:9b:69:99:33: 31:d1:f9:e5:0a:dc:2e:29:48:25:04:e9:c6:68:78:48:e5:7a: 84:f1:db:a9:3e:23:c8:44:94:88:05:15:b6:55:0c:0c:83:44: de:d3:a2:fa:39:e1:32:bf:b9:df:f5:62:35:0b:f8:6c:d2:6a: 34:a2:b3:cb:a1:55:eb:28:64:59:a4:36:a9:f5:fc:32:15:23: 21:20:90:9f:b5:08:6f:f1:25:6a:de:72:08:f3:c7:2c:a6:08: 97:39:8d:fc:a2:61:12:32:b2:55:48:56:56:c8:2a:9d:19:b3: a5:bb:5e:cf:a9:e0:2e:c8:40:d8:9a:4b:50:fd:b5:65:b2:3e: a6:ba:7f:58:96:fc:00:26:68:56:58:48:e0:40:4b:40:a2:38: 5d:3b:f8:e8:29:f2:29:a5:66:33:73:c7:6b:8e:78:10:c2:df: 18:02:e1:00:6c:a1:30:64:f4:63:0c:ef:91:4a:bc:9f:d7:93: ce:90:bc:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63MwP+yaN99Rz5aEaic2+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwNjExMTUwMDM0WhcNMjYwNjEyMTUwMDM0WjAzMTEwLwYDVQQD EygxZjJmZWUyY2UxNWJhMDQwODg2YzE5MGI2NzdmZTQ0ZmI2OWM3NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VaWFPFR3Ibrej/iwNQl5YrcFBwc r/Wi09bxFvVWG1aLJ+Soqp6dd/TN0T3M6i/8dsbgqZKvB+5TNHtQOph71lWvEqZN dC52mbpVAsDGHLivB7m/OQQ2jRZPWbEjoGnDSL+ymzU6NX5g3mJcki1PS2A8LsBP wkDsHy/ZpshnzI4kymp5PZHFMWnqVqndi4rPA5l+eOh5QWfzDMyLCaZV5lDvV1yo kTAi3NKrwU94kpdlEudJMT0XkEC2TUUX1wzaMUWZSo0+L0CHvlGvH3FvdLbaRRH2 UeNJXhHpLUHLJeOUh3lR66aBxjuGXzlmzyvuOQZ3SWAg07KohrJ3uCnJdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8v7izhW6BAiGwZC2d/5E+2nHZwMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANL4sGM9B Gi4kV922iGHNNE+UJBz3xWmE3wbqp7Ad4/b/tf79gmVHtzIsKAzTJVSa0cVNqWIB hMD0uX8yjHL7AyHTlrObaZkzMdH55QrcLilIJQTpxmh4SOV6hPHbqT4jyESUiAUV tlUMDINE3tOi+jnhMr+53/ViNQv4bNJqNKKzy6FV6yhkWaQ2qfX8MhUjISCQn7UI b/Elat5yCPPHLKYIlzmN/KJhEjKyVUhWVsgqnRmzpbtez6ngLshA2JpLUP21ZbI+ prp/WJb8ACZoVlhI4EBLQKI4XTv46CnyKaVmM3PHa454EMLfGALhAGyhMGT0Ywzv kUq8n9eTzpC8Og== -----END CERTIFICATE-----Generated at Thu Jun 11 23:48:42 2026 by rpki-client