$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json) Hash identifier: B1YFu39MrGxlB9fuFmR5yTycAw8hiX7uVwfNOQZ/GDs= Subject key identifier: 1F:F6:60:AB:E7:06:9E:74:F2:D8:F0:B4:04:71:5A:77:80:C2:9B:A0 Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019DCDBE1EEFEFAB00637526036F8CAE478A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft Manifest number: 1907 Signing time: Mon 27 Apr 2026 07:01:22 +0000 Manifest this update: Mon 27 Apr 2026 07:01:22 +0000 Manifest next update: Tue 28 Apr 2026 07:01:22 +0000 Files and hashes: 1: 0lpbV27AN-RWXlo8EoDNHkn_WFo.roa (hash: 6Kk8nKuXT+iDhxODfuxvlj4oC1k4gGbREeQuyIoqN44=) 2: 3a7na1VrOyD4j9eANMYFxWbuuXA.roa (hash: zi3twxBdnTcqBHYcetTlSiGtn2VDXgmL6wD/jF3qYjQ=) 3: 3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa (hash: AfMPl1I4FCjIX3coVGZnaX03RsdIkobHgk2ozUg0CRU=) 4: KrEjWh12m9Ky0XdHMs-AV4DW__Q.roa (hash: htLgSYFv0aza897YRzqYZzsiSWGM3XLxPit9x6cKCoM=) 5: QFNxEKmMB0w9c_fcbUm6kZIgIiU.roa (hash: yRObraxWQ+KSiz/NMpv1EAHhy6xFZ3g/Tjjo6DSAkhE=) 6: SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa (hash: KVtsT0fMQgVAG+EfM+vPhmS8z1w+vo6LbjbuGgZDfvk=) 7: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: yhrkZfhWTVBE6MYLNYwRWaBbOYk9vYBIbIv7O2SKYMw=) 8: UYXgcCIK5zcKT9TlB3oRxLcPw4c.roa (hash: ZKu5onIAs6YBld/h2tSRXhaOsFitxQIlAPhxGco8hos=) 9: UvcJIP9GU_V2Mt4tyf-MC05D4z4.roa (hash: Irba1/9xm6DmXZQD7UmL9JlVgVcOaYu4q1AwZlIIIho=) 10: XfkL7_PpVycbprVLaH4OE4tT8zw.roa (hash: Oii2pbC7CFv3HCPeNrmN9q1EffMqA0bBjcOQLdxIuL0=) 11: _K246O-pbv3LImR_NbGl0Uuk0ms.roa (hash: 4aM+aELc7GT7SUF0gs3npOnDB0xgu8gqvceBuJ4g3W0=) 12: aDqWfD8qVv5mTmy_YKlw0knE910.roa (hash: Nt6HJPyyJEcO8XZlWiN2Qky5erL1hvtr6Hh2B65imCI=) 13: cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa (hash: oSg1p4d3f/Ek/TgEvq1Kl3nuuVmFt2QEXW8+ntmYEbw=) 14: dX-rNWvNzQQp4mkv-p-E7vQ4jvE.roa (hash: tzroMUcOp9V01Z5SuKmv3L+kiGKSKimIDzFfo75M/VM=) 15: e2-M3_roN4thnHrSRcYhd3A5tEE.roa (hash: HtHoJrcFJ7Tr7k+ozWHjO7whHbckIcy4WmHKQ/7ZFj4=) 16: hJ_DSrWaO3ObBm5-hhe295ZUGZU.roa (hash: sBGo0ebfgaJ7zl4GXpc60jYy9/bgceVEOmE1IuNRiO8=) 17: hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa (hash: X6Ep2QeB8bOGHavV+XJT5rALDucLiATYg1DR3vQrIUc=) 18: iI_SDTDKoORMx-kq45a1qjOTuZk.roa (hash: J2K/cush+bx+VMhqbDSKLYwVdG3Sbi2stgQnJe6Lx8g=) 19: kwWZWud0oDxj9bqRYQSnO1fTRms.roa (hash: pxOltO+Vbwb+oDFmvBF+y18EOaW3vQK3U1vDji5y33Q=) 20: m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa (hash: n8StrjuRMyFGihImcOgaJXRS+zodWuJUHk2aQxkkkuU=) 21: niKMcxvkNHwtFE1swRnZRa7V130.roa (hash: 5BhfKtNxHPXceWh2gh+NnT77omNb+6j7lXfyG61q2BY=) 22: o5XpHbYzECM8PxBWg33FKmpPLyo.roa (hash: /s+OXvlcKVVirwj5hJhUGVZIhqNKlLQOjzuXK++kB0A=) 23: ptwWAfUIQhVLhqDQn5RDQ5c7CTA.roa (hash: Nd7kZjPWVNNkDzbbN1dtVJihtNFnEpHnC+VpDFqPs8A=) 24: xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa (hash: 944aX9Q9tSThrEugzQqJaCWIZrVcCyB9vKNFlU0FXPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:be:1e:ef:ef:ab:00:63:75:26:03:6f:8c:ae:47:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Apr 27 07:01:22 2026 GMT Not After : Apr 28 07:01:22 2026 GMT Subject: CN=1ff660abe7069e74f2d8f0b404715a7780c29ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:83:90:17:d3:72:6a:79:d5:ec:ac:0a:07: 77:3d:ac:4d:b0:cd:92:de:64:d7:98:7f:de:31:98: 15:74:ef:6f:4c:85:32:1c:6a:49:13:14:90:28:6d: 6b:19:be:78:d5:91:7d:69:95:ee:b5:e3:33:00:00: d0:2e:96:50:77:5d:15:c5:a3:8d:2d:72:63:b5:98: 4a:e5:d8:f9:c5:ce:54:0f:bd:04:46:62:4c:7b:58: 51:54:24:23:9e:3d:84:9f:f3:28:c6:0b:50:a7:5d: 12:22:c6:3b:b4:27:ed:a8:ec:cd:1c:fb:bc:fa:98: 65:e2:a3:10:9e:cb:db:7c:fc:f6:a9:18:2c:80:7d: 5d:3d:0c:99:4c:af:73:89:7b:a0:d2:cb:44:80:41: d4:9e:e3:79:29:53:22:fe:f8:3c:26:40:b9:d7:8f: 25:f8:dd:68:8b:ff:02:48:a9:dc:00:c6:72:fa:22: b0:16:65:5e:a5:ab:6a:e8:22:db:bc:42:0a:94:a1: 73:ba:c0:40:d2:71:15:cc:67:6b:ff:48:f9:4d:e7: 7d:c9:d0:9c:5e:0d:e0:91:5e:33:c6:6e:25:d7:cc: 50:c2:d4:0b:4d:e0:fa:ad:9d:cb:ad:97:3e:c4:7f: 03:4d:40:51:9c:6d:73:2a:80:5f:9d:72:5a:95:d5: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F6:60:AB:E7:06:9E:74:F2:D8:F0:B4:04:71:5A:77:80:C2:9B:A0 X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:74:8d:78:b4:83:ff:3d:1e:9a:c1:c5:d1:fd:e1:97:c2:02: 8c:33:4a:16:31:05:b2:88:7e:02:85:43:a8:d2:f3:b2:5f:8e: 54:89:16:00:fe:89:33:24:47:a2:7c:ca:53:a6:39:6d:67:bc: 7d:1b:35:18:3e:4f:11:e4:fd:f4:dd:67:af:4c:3a:66:7d:98: 02:1e:41:ae:be:86:62:b9:54:51:e1:f1:0a:47:f7:f4:98:5c: 8c:fc:3c:6b:d3:b5:99:a2:80:3f:46:49:ce:ab:97:0e:8a:58: bc:86:8b:10:8d:40:68:f2:1a:e9:f7:b8:b5:12:6c:c7:d1:4b: dd:d9:f6:95:ff:41:cc:16:d0:6d:1a:96:34:8e:a5:be:3e:e4: a5:9f:3e:15:0a:1e:0d:c5:7d:d8:4d:d2:70:6b:28:5c:27:ac: a5:d2:e6:76:62:ef:fa:cb:7a:84:5b:c4:50:fc:ce:d6:8c:45: af:e9:29:17:20:16:26:f2:28:9e:17:15:02:d0:73:39:7b:07: 55:cc:70:87:76:65:dc:1f:26:4e:f1:ea:05:cd:aa:e3:4d:c4: 9d:3a:d7:de:f5:9e:6b:d1:03:87:d7:c0:40:3e:b2:78:fe:5a: ea:10:fa:19:86:ee:0d:cc:86:8e:ab:53:57:8f:a7:4b:d3:6e: 83:d4:79:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3Nvh7v76sAY3UmA2+MrkeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwNDI3MDcwMTIyWhcNMjYwNDI4MDcwMTIyWjAzMTEwLwYDVQQD EygxZmY2NjBhYmU3MDY5ZTc0ZjJkOGYwYjQwNDcxNWE3NzgwYzI5YmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvyDkBfTcmp51eysCgd3PaxNsM2S 3mTXmH/eMZgVdO9vTIUyHGpJExSQKG1rGb541ZF9aZXuteMzAADQLpZQd10VxaON LXJjtZhK5dj5xc5UD70ERmJMe1hRVCQjnj2En/MoxgtQp10SIsY7tCftqOzNHPu8 +phl4qMQnsvbfPz2qRgsgH1dPQyZTK9ziXug0stEgEHUnuN5KVMi/vg8JkC5148l +N1oi/8CSKncAMZy+iKwFmVepatq6CLbvEIKlKFzusBA0nEVzGdr/0j5Ted9ydCc Xg3gkV4zxm4l18xQwtQLTeD6rZ3LrZc+xH8DTUBRnG1zKoBfnXJaldUP3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/2YKvnBp508tjwtARxWneAwpugMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3SNeLSD /z0emsHF0f3hl8ICjDNKFjEFsoh+AoVDqNLzsl+OVIkWAP6JMyRHonzKU6Y5bWe8 fRs1GD5PEeT99N1nr0w6Zn2YAh5Brr6GYrlUUeHxCkf39JhcjPw8a9O1maKAP0ZJ zquXDopYvIaLEI1AaPIa6fe4tRJsx9FL3dn2lf9BzBbQbRqWNI6lvj7kpZ8+FQoe DcV92E3ScGsoXCespdLmdmLv+st6hFvEUPzO1oxFr+kpFyAWJvIonhcVAtBzOXsH Vcxwh3Zl3B8mTvHqBc2q403EnTrX3vWea9EDh9fAQD6yeP5a6hD6GYbuDcyGjqtT V4+nS9Nug9R5fw== -----END CERTIFICATE-----Generated at Mon Apr 27 14:29:58 2026 by rpki-client