$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: esDtFN+y2zGA+pDiDj5NSq0m3oAiElF1qtncHNa0n+Q= Subject key identifier: 9E:55:CB:AB:1A:49:F0:A5:5D:7D:AA:37:DF:F7:8B:9E:A0:33:85:81 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 01A17E184965B8C38D6FD5A739BA77702515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 1ADD Signing time: Tue 27 Oct 2026 16:01:23 +0000 Manifest this update: Tue 27 Oct 2026 16:01:23 +0000 Manifest next update: Wed 28 Oct 2026 16:01:23 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: 69GOpdzwlIydOctwPF6_V449w8Q.roa (hash: oepL/u5Uo8sKbDIefmYypO+csLtLFrgJjxhbnTvWVCs=) 3: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 4: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 5: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 6: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 7: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 8: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: 25RdrkIvYJVxiubZHkCvfbW3sjVLHymwIhA5sQVrID8=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7e:18:49:65:b8:c3:8d:6f:d5:a7:39:ba:77:70:25:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Oct 27 16:01:23 2026 GMT Not After : Oct 28 16:01:23 2026 GMT Subject: CN=9e55cbab1a49f0a55d7daa37dff78b9ea0338581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:65:96:23:fc:3a:9a:e9:1d:07:80:bf:cf: e3:d4:91:56:d3:d8:6d:a3:31:e2:53:5c:3c:e4:d4: 06:32:3d:6b:78:b0:10:86:b0:68:89:60:15:06:b4: e1:c0:c7:6e:34:60:27:df:15:d2:1b:18:e2:ff:54: e8:ca:40:97:cb:34:97:19:c2:82:c5:87:61:57:56: 10:f2:45:76:9e:e4:11:96:84:91:b2:4d:cf:71:f0: 6b:c4:b1:20:a6:3e:5c:87:a2:20:45:62:3e:2b:59: 88:e9:1a:50:8b:73:0c:f8:fd:40:2e:68:cf:3b:0f: cc:90:15:31:76:19:e4:f0:98:43:31:67:f9:80:e4: 9b:54:32:59:df:48:2d:84:2d:33:15:f0:f3:d3:fa: 9b:54:08:c6:f7:df:05:7b:23:d0:e4:ac:e2:29:df: cf:74:32:12:aa:7e:0f:07:af:49:ea:8f:bf:18:d0: 92:ff:cf:26:b8:70:c6:15:a9:4c:ea:a8:d3:e1:19: 82:5b:96:2b:6b:7d:03:de:18:66:c4:e3:fe:eb:95: 63:39:23:e0:a3:6d:f7:b8:08:f5:bd:64:ac:c4:69: 4b:b1:7f:18:87:e7:42:c4:9f:b4:81:a2:43:de:4c: d3:1a:93:09:2e:2f:2f:42:69:45:e8:dd:1f:80:12: 6f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:55:CB:AB:1A:49:F0:A5:5D:7D:AA:37:DF:F7:8B:9E:A0:33:85:81 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4b:8b:98:75:8a:ed:91:14:0e:f5:2e:97:a8:24:ef:7d:2f: 4e:7d:61:dc:02:85:65:d5:f2:e3:e2:aa:62:91:20:ed:01:2d: f8:3c:6a:8f:2c:ae:71:d5:c5:43:db:03:09:54:37:70:17:03: ee:b0:1b:c7:6a:86:ed:58:12:3d:46:f1:ae:5b:00:e7:9a:a4: 52:74:15:65:a0:3c:b5:f5:ce:4e:1a:2e:42:c9:f3:41:6d:5d: 55:f1:94:c0:ca:14:41:d1:20:c9:b7:f3:17:75:bc:0e:d8:b1: d9:96:10:b2:4b:43:ed:f2:1a:e1:a2:51:6b:1b:5a:ea:a3:95: b4:e2:9e:07:bf:d4:e5:07:1c:35:6f:1d:3c:0c:90:2a:76:50: b8:e7:51:e6:60:25:01:e4:4b:8e:2e:7e:27:c1:08:0d:3a:82: 66:fe:69:a3:3e:5f:04:59:94:b6:b0:d3:b9:ca:a1:0f:2c:8c: 58:63:bd:83:ff:a9:72:70:9e:65:3b:4e:bf:59:41:38:12:2f: 81:8e:aa:1f:fd:d5:d4:a4:a3:7a:6c:d3:40:5d:b9:e5:ae:01: fd:89:b0:8d:d1:97:31:47:d6:a7:92:8b:9f:7c:e6:31:64:0a: 5b:5c:f4:9e:86:02:99:69:30:c6:84:cc:cb:54:3b:e7:f9:eb: 57:d7:8a:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF+GElluMONb9WnObp3cCUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYxMDI3MTYwMTIzWhcNMjYxMDI4MTYwMTIzWjAzMTEwLwYDVQQD Eyg5ZTU1Y2JhYjFhNDlmMGE1NWQ3ZGFhMzdkZmY3OGI5ZWEwMzM4NTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tJlliP8OprpHQeAv8/j1JFW09ht ozHiU1w85NQGMj1reLAQhrBoiWAVBrThwMduNGAn3xXSGxji/1ToykCXyzSXGcKC xYdhV1YQ8kV2nuQRloSRsk3PcfBrxLEgpj5ch6IgRWI+K1mI6RpQi3MM+P1ALmjP Ow/MkBUxdhnk8JhDMWf5gOSbVDJZ30gthC0zFfDz0/qbVAjG998FeyPQ5KziKd/P dDISqn4PB69J6o+/GNCS/88muHDGFalM6qjT4RmCW5Yra30D3hhmxOP+65VjOSPg o233uAj1vWSsxGlLsX8Yh+dCxJ+0gaJD3kzTGpMJLi8vQmlF6N0fgBJvpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5Vy6saSfClXX2qN9/3i56gM4WBMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEuLmHWK 7ZEUDvUul6gk730vTn1h3AKFZdXy4+KqYpEg7QEt+DxqjyyucdXFQ9sDCVQ3cBcD 7rAbx2qG7VgSPUbxrlsA55qkUnQVZaA8tfXOThouQsnzQW1dVfGUwMoUQdEgybfz F3W8Dtix2ZYQsktD7fIa4aJRaxta6qOVtOKeB7/U5QccNW8dPAyQKnZQuOdR5mAl AeRLji5+J8EIDTqCZv5poz5fBFmUtrDTucqhDyyMWGO9g/+pcnCeZTtOv1lBOBIv gY6qH/3V1KSjemzTQF255a4B/YmwjdGXMUfWp5KLn3zmMWQKW1z0noYCmWkwxoTM y1Q75/nrV9eKYw== -----END CERTIFICATE-----Generated at Tue Oct 27 23:01:20 2026 by rpki-client