$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: L8sQujOr3iKIUtQlvHiIn3IATPdLs3fvdATdJcMUnOw= Subject key identifier: CE:15:CF:11:BE:3E:97:BD:E1:BB:25:64:37:8F:5A:B7:97:9B:D6:87 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019CE1EBCC0528D79CFE62EC328771EEB483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 1879 Signing time: Thu 12 Mar 2026 12:00:52 +0000 Manifest this update: Thu 12 Mar 2026 12:00:52 +0000 Manifest next update: Fri 13 Mar 2026 12:00:52 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 3: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 4: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 5: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 6: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 7: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 8: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: lUPY5se6StTM4dL4zTfJZ712IOU+UuuFENOhqO19LIk=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e1:eb:cc:05:28:d7:9c:fe:62:ec:32:87:71:ee:b4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Mar 12 12:00:52 2026 GMT Not After : Mar 13 12:00:52 2026 GMT Subject: CN=ce15cf11be3e97bde1bb2564378f5ab7979bd687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:70:ed:9e:4d:fa:1b:c8:91:a1:ad:61:73: c7:0d:5d:67:07:72:fc:33:db:85:15:db:73:fa:d5: a7:43:46:51:94:0a:16:ae:87:dd:7c:96:6d:d4:6f: 5e:b4:e4:6f:17:41:ea:28:81:88:6f:22:5c:61:5f: b0:3b:72:d6:1a:20:86:79:1b:08:05:9f:e6:50:c6: d6:59:5e:02:1e:2e:45:4b:78:b7:40:68:b4:54:31: 70:a9:46:90:e9:e1:8e:2f:e0:bd:91:53:ab:54:1d: 46:4d:cc:ba:6a:b7:99:14:df:6d:bc:7c:14:e4:75: 5d:7c:5c:7d:f7:4e:48:03:b0:c2:55:10:6d:4d:7b: 76:3f:ff:41:d9:b3:47:93:97:d4:9b:2f:eb:7f:ce: 6b:4b:2e:a9:ce:1b:36:be:03:d6:8b:7e:6d:a5:4c: 9f:25:3b:88:18:e0:09:74:bc:c2:90:62:3d:ff:52: 10:8d:56:a2:77:79:ff:2d:39:b9:44:47:28:56:e8: d3:11:16:50:c8:e9:14:c9:c1:12:6e:1d:55:c0:99: db:0d:29:fd:ac:29:ad:62:ba:3c:e1:fe:1f:17:c1: 31:d4:5a:6b:02:f3:49:71:eb:bf:54:1e:0e:9b:c3: c6:04:d5:97:94:0f:e7:93:4e:bf:4c:97:6c:4b:3f: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:15:CF:11:BE:3E:97:BD:E1:BB:25:64:37:8F:5A:B7:97:9B:D6:87 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fb:8b:f7:5f:e3:fb:ad:74:3e:9b:98:76:12:0d:0b:5c:3d: 6a:25:00:15:73:93:07:dd:3e:62:1f:ad:31:1a:57:13:bc:16: 3f:c4:99:f8:8a:8e:b4:d9:30:a1:f2:9f:84:7a:d1:06:23:36: bf:ef:62:ac:b4:29:66:db:77:d1:ae:c7:28:af:22:25:e5:c3: 62:f3:65:71:f6:fa:41:13:70:c0:3f:2e:22:cf:e2:41:c5:fb: cb:18:95:36:7e:17:1f:f4:6a:70:a7:6a:77:e9:2c:23:07:2e: c4:20:ac:60:62:67:70:48:ae:a6:aa:7a:1d:ef:c0:2a:92:b6: d4:63:1c:83:27:1d:f3:e1:79:ec:92:02:7a:29:89:af:39:76: 86:c4:ea:74:bb:bd:4d:21:87:99:4c:55:42:3f:3c:1c:3a:19: 62:00:14:89:9d:95:26:7d:84:04:09:d7:ed:18:ef:ef:03:ed: b5:27:5d:6d:0e:ce:52:cf:bb:ce:09:de:73:97:96:59:46:9d: ea:8b:66:41:89:bb:5a:6d:db:a6:24:d4:ad:8b:b3:a5:06:5d: fc:01:96:df:ae:ef:ae:43:e7:5d:c4:91:80:54:b6:6d:1c:b1: c0:7e:2e:76:31:d4:4f:b2:74:4e:93:1b:16:bf:ef:d5:4c:fd: 3b:eb:a6:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzh68wFKNec/mLsModx7rSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwMzEyMTIwMDUyWhcNMjYwMzEzMTIwMDUyWjAzMTEwLwYDVQQD EyhjZTE1Y2YxMWJlM2U5N2JkZTFiYjI1NjQzNzhmNWFiNzk3OWJkNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTpw7Z5N+hvIkaGtYXPHDV1nB3L8 M9uFFdtz+tWnQ0ZRlAoWrofdfJZt1G9etORvF0HqKIGIbyJcYV+wO3LWGiCGeRsI BZ/mUMbWWV4CHi5FS3i3QGi0VDFwqUaQ6eGOL+C9kVOrVB1GTcy6areZFN9tvHwU 5HVdfFx9905IA7DCVRBtTXt2P/9B2bNHk5fUmy/rf85rSy6pzhs2vgPWi35tpUyf JTuIGOAJdLzCkGI9/1IQjVaid3n/LTm5REcoVujTERZQyOkUycESbh1VwJnbDSn9 rCmtYro84f4fF8Ex1FprAvNJceu/VB4Om8PGBNWXlA/nk06/TJdsSz9imQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4VzxG+Ppe94bslZDePWreXm9aHMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfuL91/j +610PpuYdhINC1w9aiUAFXOTB90+Yh+tMRpXE7wWP8SZ+IqOtNkwofKfhHrRBiM2 v+9irLQpZtt30a7HKK8iJeXDYvNlcfb6QRNwwD8uIs/iQcX7yxiVNn4XH/RqcKdq d+ksIwcuxCCsYGJncEiupqp6He/AKpK21GMcgycd8+F57JICeimJrzl2hsTqdLu9 TSGHmUxVQj88HDoZYgAUiZ2VJn2EBAnX7Rjv7wPttSddbQ7OUs+7zgnec5eWWUad 6otmQYm7Wm3bpiTUrYuzpQZd/AGW367vrkPnXcSRgFS2bRyxwH4udjHUT7J0TpMb Fr/v1Uz9O+umzA== -----END CERTIFICATE-----Generated at Thu Mar 12 16:43:10 2026 by rpki-client