$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: rz9Jgl2tj01YTmuiD3zGTGsmXFHOadNqX8oaj4A1B4I= Subject key identifier: 9D:69:62:4C:E1:63:B4:34:C6:07:AE:23:3B:9C:4D:9E:31:2C:5E:68 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019DF9159614AF5BF804667199D1D6F76194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 110B Signing time: Tue 05 May 2026 17:00:34 +0000 Manifest this update: Tue 05 May 2026 17:00:34 +0000 Manifest next update: Wed 06 May 2026 17:00:34 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa (hash: XCZ0JTvoTGZ62Q11PauRxwPTiRMvREV2N/LHqEFLe2w=) 4: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 5: GyehNP3GNMAkeXlLJEWyWCcQtzU.roa (hash: IpYqqZa4sTN+dmYx8FkURhFjGrU2UAuArFl+utDihPQ=) 6: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 7: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: icdJZ7ZWYVmwR9/8WqnvN1+KupDLbhc2mUqoxpCtd9Q=) 8: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 9: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 10: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 11: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f9:15:96:14:af:5b:f8:04:66:71:99:d1:d6:f7:61:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: May 5 17:00:34 2026 GMT Not After : May 6 17:00:34 2026 GMT Subject: CN=9d69624ce163b434c607ae233b9c4d9e312c5e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:3c:69:7d:14:8c:1a:dd:e1:cc:16:4a:41: c2:e8:4c:56:1e:29:b1:43:c0:46:8d:52:39:33:45: 0f:d6:11:d7:a1:dc:10:ac:1d:85:27:4f:b2:3e:b1: 1a:c5:38:86:5a:04:34:56:6b:8f:80:10:02:a1:d5: b4:07:97:f4:e9:13:c9:02:50:ec:65:aa:9e:72:89: 69:45:18:2f:6e:e4:d5:e2:9f:ed:ca:19:2a:78:7f: 78:db:a8:06:15:43:d6:a1:07:fe:c2:d7:3d:c2:71: 04:40:26:49:e1:b1:d7:1b:b6:43:31:7d:db:8d:3a: af:0d:51:8f:ed:ad:b2:03:79:6e:ea:b0:79:db:82: 28:76:5c:93:19:68:d1:18:14:72:1e:73:e1:11:96: 60:e6:f5:47:d5:ba:b8:2d:c1:b4:47:44:c2:6c:ac: 48:00:de:57:6f:12:b3:9d:82:dd:83:c6:43:5d:f6: 38:46:44:d4:07:7d:4c:b7:a3:82:14:e1:5e:ad:f4: 34:41:9a:d9:1c:8b:3c:b0:04:c8:69:b8:51:99:ab: 9a:49:06:cd:59:6b:09:d2:17:53:41:8c:91:14:12: e2:f9:0e:a4:a7:d7:ed:9e:24:97:67:78:43:a6:79: db:f1:12:9e:99:84:29:26:68:06:9c:5c:ad:9c:e1: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:69:62:4C:E1:63:B4:34:C6:07:AE:23:3B:9C:4D:9E:31:2C:5E:68 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:62:31:94:7a:c7:de:2c:b7:57:89:44:c6:32:d1:e7:76:36: c6:75:4d:03:0b:9e:c7:39:3b:28:be:a4:46:48:a6:4b:87:3a: f6:0a:b1:d8:97:25:9e:a6:d0:cb:b9:a8:47:fb:90:b3:00:aa: 4d:5e:d0:c0:df:21:1b:56:fe:da:6e:bb:f5:43:73:5b:9f:32: 3a:af:1c:2c:d4:cc:d5:c1:d1:7b:a2:8b:35:18:f5:d3:b2:89: 4d:64:da:20:d0:55:6d:bf:ca:c2:e1:4f:91:fe:8e:5f:51:42: d5:ca:8b:22:ff:38:71:94:bb:ee:3b:3f:96:08:ee:e9:69:84: 4f:52:6c:fe:04:f4:40:6e:30:5a:3c:6c:06:3d:3f:e8:e5:d3: 53:57:6f:06:73:32:ab:94:c9:98:df:56:76:39:21:b9:4c:58: f3:a9:02:58:aa:ec:47:95:58:8e:e7:9d:cc:68:37:94:8f:c3: 34:10:ca:ad:4d:78:9a:77:f8:25:47:f1:19:19:c3:78:ef:ce: 4e:bc:b9:7d:a9:a0:09:03:27:c3:f0:92:ac:64:e6:c5:a2:36: ed:be:b2:66:40:42:e6:1d:9f:0a:48:6b:18:18:d1:0c:83:13: 3d:cb:0c:02:3c:27:26:2e:37:ae:e2:0d:e2:21:62:48:8c:d4: 28:db:b1:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ35FZYUr1v4BGZxmdHW92GUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwNTA1MTcwMDM0WhcNMjYwNTA2MTcwMDM0WjAzMTEwLwYDVQQD Eyg5ZDY5NjI0Y2UxNjNiNDM0YzYwN2FlMjMzYjljNGQ5ZTMxMmM1ZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurs8aX0UjBrd4cwWSkHC6ExWHimx Q8BGjVI5M0UP1hHXodwQrB2FJ0+yPrEaxTiGWgQ0VmuPgBACodW0B5f06RPJAlDs ZaqecolpRRgvbuTV4p/tyhkqeH9426gGFUPWoQf+wtc9wnEEQCZJ4bHXG7ZDMX3b jTqvDVGP7a2yA3lu6rB524IodlyTGWjRGBRyHnPhEZZg5vVH1bq4LcG0R0TCbKxI AN5XbxKznYLdg8ZDXfY4RkTUB31Mt6OCFOFerfQ0QZrZHIs8sATIabhRmauaSQbN WWsJ0hdTQYyRFBLi+Q6kp9ftniSXZ3hDpnnb8RKemYQpJmgGnFytnOF4kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1pYkzhY7Q0xgeuIzucTZ4xLF5oMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmIxlHrH 3iy3V4lExjLR53Y2xnVNAwuexzk7KL6kRkimS4c69gqx2JclnqbQy7moR/uQswCq TV7QwN8hG1b+2m679UNzW58yOq8cLNTM1cHRe6KLNRj107KJTWTaINBVbb/KwuFP kf6OX1FC1cqLIv84cZS77js/lgju6WmET1Js/gT0QG4wWjxsBj0/6OXTU1dvBnMy q5TJmN9WdjkhuUxY86kCWKrsR5VYjuedzGg3lI/DNBDKrU14mnf4JUfxGRnDeO/O Try5famgCQMnw/CSrGTmxaI27b6yZkBC5h2fCkhrGBjRDIMTPcsMAjwnJi43ruIN 4iFiSIzUKNuxSw== -----END CERTIFICATE-----Generated at Wed May 6 00:20:41 2026 by rpki-client