$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: 36LPoa4w/zi0Rzi06gF0XuNfu0+euOCDv7i803tTQus= Subject key identifier: 6F:EF:13:2B:89:96:C9:11:02:B1:6F:B6:1E:3B:4B:EB:B9:EB:94:F1 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019DCF07F818F18CAAAA02BDB8F8F237848E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 18E7 Signing time: Mon 27 Apr 2026 13:01:39 +0000 Manifest this update: Mon 27 Apr 2026 13:01:39 +0000 Manifest next update: Tue 28 Apr 2026 13:01:39 +0000 Files and hashes: 1: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=) 2: cz3i4996YniCM04uBoqxYULZ1OE.roa (hash: nyw3jhYkbjvahgBCKXr44jUJF3r/xMEzYzkBBzdxVio=) 3: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=) 4: dzLIS_uUBmT5ML31y6NFSMyd71k.roa (hash: DlezeaLLQKyU+Fuzh+ngOJx/wOMos/kw2vfD167ugl8=) 5: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=) 6: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=) 7: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=) 8: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: /6llAQRs0qh0yMrlzLroB49IkOUe1RGlq4xYjMOT4Nk=) 9: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=) 10: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:07:f8:18:f1:8c:aa:aa:02:bd:b8:f8:f2:37:84:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Apr 27 13:01:39 2026 GMT Not After : Apr 28 13:01:39 2026 GMT Subject: CN=6fef132b8996c91102b16fb61e3b4bebb9eb94f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:3a:33:86:58:14:fc:e5:17:ab:3d:af:90: 5d:cd:79:f7:27:0a:a3:77:50:6e:72:14:42:4c:a6: 93:f4:bc:22:27:da:0c:8e:2f:d9:7a:48:7c:4f:2b: d7:2d:a1:1b:be:fa:05:d1:31:7a:bc:e1:7e:84:c9: 12:2c:ba:33:a9:06:9e:f1:b1:73:7e:cd:a9:33:4f: b0:2c:dd:e0:a8:cd:4d:a0:8d:cc:bb:9c:db:ef:02: f1:1d:39:36:cc:7a:a9:36:9d:05:af:9d:af:b4:f4: 9c:c3:3f:be:ea:b8:dc:5a:93:43:ec:1b:cf:a8:72: 04:f1:6f:3a:3a:a0:36:b3:50:3a:d2:26:1b:d1:e8: b0:3d:f8:ab:3b:b9:60:d0:e2:5f:b7:7a:32:68:60: ea:cd:ad:20:58:62:2f:0e:15:47:87:6f:1f:3e:74: c0:1a:be:f8:62:c1:55:f8:75:e5:ad:56:96:dc:da: 85:ed:0a:c9:b6:ac:be:eb:8b:29:e9:d7:4f:d3:69: 98:51:83:20:4f:c2:8a:3e:c5:65:e0:86:c2:c7:26: cd:b6:2c:19:0b:14:ef:0f:4a:4d:13:2b:c0:77:7d: 53:ee:51:d7:4f:c1:38:6d:67:08:a9:c8:c1:be:66: e8:d8:28:a6:77:25:98:44:9b:8b:9e:38:91:b1:4b: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EF:13:2B:89:96:C9:11:02:B1:6F:B6:1E:3B:4B:EB:B9:EB:94:F1 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8a:6f:fa:bf:f5:b8:07:4c:cc:fd:40:0f:39:31:c9:64:79: 8f:16:27:f8:f4:6d:61:47:e7:9a:4e:93:f5:a6:1b:3a:78:ad: 4b:25:32:e4:99:30:70:da:92:06:4f:4b:8c:d0:b1:3a:67:10: 44:1c:74:79:09:98:65:22:75:28:fc:32:cf:32:a4:cd:3f:25: a9:ed:6b:da:fa:2e:23:7c:94:f4:2b:27:88:da:f4:df:b5:7f: b9:08:4f:c7:0a:e0:4b:4b:c0:26:9e:96:1d:83:72:46:01:4b: e2:11:34:8c:20:7b:91:32:d4:a8:e0:5a:3e:38:7d:b6:51:53: 75:5a:c9:7f:bf:e6:5c:1d:42:01:4e:ae:9b:c1:7d:b4:94:70: eb:d0:4f:39:16:5d:55:ea:7d:08:41:a5:99:84:3e:81:16:f9: a9:39:6f:5a:2e:df:ec:f1:ab:67:d2:34:35:00:43:8d:61:98: 2e:60:3d:ca:0e:2e:96:d1:9b:56:30:8e:4c:27:77:ac:76:90: 5e:16:37:1a:1f:8c:85:c0:5f:c7:03:67:8f:68:f5:27:07:2a: 0e:c9:b9:52:37:98:ee:71:6b:1d:16:96:72:58:ac:81:ce:3e: 25:29:5f:0c:9b:41:58:41:f1:e7:7d:e2:70:e2:86:b8:18:f7: 1c:1f:90:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PB/gY8YyqqgK9uPjyN4SOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwNDI3MTMwMTM5WhcNMjYwNDI4MTMwMTM5WjAzMTEwLwYDVQQD Eyg2ZmVmMTMyYjg5OTZjOTExMDJiMTZmYjYxZTNiNGJlYmI5ZWI5NGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRs6M4ZYFPzlF6s9r5BdzXn3Jwqj d1BuchRCTKaT9LwiJ9oMji/Zekh8TyvXLaEbvvoF0TF6vOF+hMkSLLozqQae8bFz fs2pM0+wLN3gqM1NoI3Mu5zb7wLxHTk2zHqpNp0Fr52vtPScwz++6rjcWpND7BvP qHIE8W86OqA2s1A60iYb0eiwPfirO7lg0OJft3oyaGDqza0gWGIvDhVHh28fPnTA Gr74YsFV+HXlrVaW3NqF7QrJtqy+64sp6ddP02mYUYMgT8KKPsVl4IbCxybNtiwZ CxTvD0pNEyvAd31T7lHXT8E4bWcIqcjBvmbo2CimdyWYRJuLnjiRsUt9bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/vEyuJlskRArFvth47S+u565TxMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4pv+r/1 uAdMzP1ADzkxyWR5jxYn+PRtYUfnmk6T9aYbOnitSyUy5JkwcNqSBk9LjNCxOmcQ RBx0eQmYZSJ1KPwyzzKkzT8lqe1r2vouI3yU9CsniNr037V/uQhPxwrgS0vAJp6W HYNyRgFL4hE0jCB7kTLUqOBaPjh9tlFTdVrJf7/mXB1CAU6um8F9tJRw69BPORZd Vep9CEGlmYQ+gRb5qTlvWi7f7PGrZ9I0NQBDjWGYLmA9yg4ultGbVjCOTCd3rHaQ XhY3Gh+MhcBfxwNnj2j1JwcqDsm5UjeY7nFrHRaWclisgc4+JSlfDJtBWEHx533i cOKGuBj3HB+QBw== -----END CERTIFICATE-----Generated at Mon Apr 27 23:39:22 2026 by rpki-client