$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft File: tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json) Hash identifier: XZlY64xzorgvK1RLZ8+fglk1TauWxq4FeUHHfjpw4Lk= Subject key identifier: E7:A8:32:DC:9C:54:CA:19:4D:5E:81:B6:41:EE:D1:93:61:2A:89:74 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 01A15A42A3FF962010839947D1BEA8E2298A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft Manifest number: 1C60 Signing time: Tue 20 Oct 2026 17:01:19 +0000 Manifest this update: Tue 20 Oct 2026 17:01:19 +0000 Manifest next update: Wed 21 Oct 2026 17:01:19 +0000 Files and hashes: 1: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=) 2: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=) 3: 1r6bXIGDmDWtd1m4UhQC4lrcrks.roa (hash: tjUWdsAWvbp8hp0qlvMGR4d39UT7qb+7OYtwOus5140=) 4: 3g3AwnbeaqZPr3A9brFAbY3P3dE.roa (hash: 8aOH2/zU5FPPODRcb0ddkOMfY7MVnHVcuObzyJ5jOSg=) 5: 5FC50pkU1E72pxyO1nEXEesXTqA.roa (hash: 9QcTgjCEi8AdzWRryyEXjK5VA6gvDY8vKOVvNFB3v0k=) 6: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=) 7: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=) 8: 9DpA3Zhij4iEPYu7haA1YIOqXMo.roa (hash: 7BabnBdFjs0bo4OkSb+3suEDrQswo6ddE0I0n82UnLs=) 9: AslLusFgDFPPE7t41smLzW6s-Ls.roa (hash: rq5TrcLRyuOEA3h5a7I8IJzcKULtSjHcKrfXhJxVLNo=) 10: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=) 11: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=) 12: JoJlYz2K0ovQy7smFBgKyLQVeWU.roa (hash: L1jhiYEVihQMcnNCUfULpjv8zsle3Sydel4k2GtlzUo=) 13: Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa (hash: VPXWtkcRoqenTFTGsnbFju9ExWbFs0kC7hYX+4JSVX8=) 14: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=) 15: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=) 16: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=) 17: ORZDsHph5eHXFHRzWNh5a9BXHBE.roa (hash: pZ63MWL54t3M8TTURqSwCxfa7MbN1Q+ESSbwXqAgw+g=) 18: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=) 19: VzM1aG3yNVkeQkrZee6u4OpvzC0.roa (hash: z7C5HZSPq/ZYXJLA4/UFUVo7PstPgze0oL1hcp4+WsY=) 20: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=) 21: Z2DHR1sumS0RA2QWTG0U4Jj74Q4.roa (hash: GJtGGgvojDwXFlZv8aLVok2bhFiJ4o3T2AhZH4yUbsE=) 22: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=) 23: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=) 24: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=) 25: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=) 26: ekzOqt3czUs7Mi7O02eCqgUuxFM.roa (hash: vKijkLHD9I3QgOkLK59eBNEwCmJEZDSCnEGFMDeFAwQ=) 27: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=) 28: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=) 29: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=) 30: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=) 31: kSJ0K9mgMWfPHSjXmF1pTIk9k1g.roa (hash: cR+B2aSbgK9oYsX7XVgQQUC65hAlxi75/D9//6oPh48=) 32: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=) 33: nvmiHh7hvoXBMF2l9Luau9aPlyM.roa (hash: qhfMJQhMoSz8x8qUio2M4noD+p0a/clSmOw00cUm+dQ=) 34: phY6ZCk8aqSttC6-yTKQykjbTyE.roa (hash: exlZn0QuTXCMh9FQhgXHs9KQ4ozOsEVMgXXaoQJ4z6o=) 35: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: Y/Ih0J7Z++8vU2FpArF9XZahqD5wOLvd2tmh6PN8Kd8=) 36: v3lcN-3PJkV6JRmB5czMMfO4dqU.roa (hash: sg2KAw7ZZXyDTNYMhZ7i5rf1DVb+oQd2B7G+i5csZW0=) 37: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=) 38: yzuwddNzEHdV_Lc1M-GQA5ujTLc.roa (hash: iZhWIdBEhDzzocSdGm+JQEz2XIS0V/kkEk7VEoR+oiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5a:42:a3:ff:96:20:10:83:99:47:d1:be:a8:e2:29:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Oct 20 17:01:19 2026 GMT Not After : Oct 21 17:01:19 2026 GMT Subject: CN=e7a832dc9c54ca194d5e81b641eed193612a8974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:8e:06:c4:33:ea:b4:6f:e7:9b:3a:83:c7: 84:ca:82:db:b9:03:08:84:23:16:60:10:77:b1:65: 62:b8:d0:e1:20:93:ef:72:0c:a5:6d:7a:bd:73:05: 8d:c7:b0:63:d4:5a:b7:77:1b:3a:aa:eb:66:e7:26: 4a:75:ff:39:1c:40:bf:40:5f:2e:ae:42:10:72:30: 11:53:aa:b2:fc:1f:81:36:49:f4:3b:6c:13:8d:da: 38:ea:76:7e:91:80:9a:99:79:64:5e:0b:b5:e8:d6: 17:14:f8:af:e8:e0:a8:d0:ff:46:f1:79:4d:0d:4e: ea:9e:cc:e2:7d:1a:53:77:dc:d5:e8:fa:20:37:c6: b3:09:5c:fe:91:91:06:99:d9:1d:7a:32:17:8f:6e: b7:32:5e:f7:6a:15:df:56:02:89:d1:e0:07:b4:fb: 98:84:72:cd:fd:a6:99:33:cb:3f:1c:e9:9f:27:08: 54:2e:a1:89:ec:a1:13:0d:fa:b0:0c:73:cf:a9:2c: 53:27:d9:f8:d1:06:f2:a5:33:b5:56:00:16:13:b2: 28:09:83:94:12:71:04:1f:94:4b:6d:3b:de:e9:cd: 3f:fd:db:b6:5f:51:f4:0c:01:67:b8:79:dc:05:7b: 33:9f:25:d8:3d:d4:fd:2c:e9:6e:f3:bf:e9:07:69: b3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A8:32:DC:9C:54:CA:19:4D:5E:81:B6:41:EE:D1:93:61:2A:89:74 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e7:9e:61:35:0a:db:50:50:86:9e:2b:6b:16:09:d4:2a:e7: c9:d1:c6:5e:15:f2:63:47:72:94:d8:d7:63:68:f2:d9:4c:5a: ed:46:9b:6f:92:9a:a5:af:2d:5d:1d:c0:47:9b:14:84:a3:e3: 2e:23:6e:a8:7b:5e:23:eb:bb:5c:73:a2:14:99:a5:e7:b5:90: ef:f5:cd:1e:86:2f:08:cb:7a:f6:8f:a5:aa:99:c9:e1:0e:1b: 1a:b7:0c:1a:fd:44:1f:28:56:f0:fb:2e:b4:09:32:04:50:b7: 55:78:27:03:08:b9:5d:a5:e2:36:9b:34:ee:ab:e2:4a:85:73: 83:9b:4c:92:06:79:5f:f8:c2:a7:6f:23:d2:54:63:87:5e:ba: bb:0e:41:a0:e8:38:74:0b:14:8d:1c:3e:8b:98:c6:0b:35:b0: f8:e6:13:e0:08:92:0e:86:c2:7b:75:3a:99:3d:e5:5f:f3:66: 1a:a3:97:ce:3c:42:bf:25:69:20:fa:4b:58:e7:4e:ac:62:1b: 00:fd:50:ef:43:ac:95:c3:b6:68:e9:e2:40:0d:44:75:9b:9c: 6e:2a:2a:b5:c6:66:94:ce:cb:61:58:d1:be:71:4a:bb:95:bf: 90:89:df:99:18:f3:73:49:4b:d6:a0:0d:9e:08:cb:de:83:3d: 12:c7:2b:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFaQqP/liAQg5lH0b6o4imKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYxMDIwMTcwMTE5WhcNMjYxMDIxMTcwMTE5WjAzMTEwLwYDVQQD EyhlN2E4MzJkYzljNTRjYTE5NGQ1ZTgxYjY0MWVlZDE5MzYxMmE4OTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzuOBsQz6rRv55s6g8eEyoLbuQMI hCMWYBB3sWViuNDhIJPvcgylbXq9cwWNx7Bj1Fq3dxs6qutm5yZKdf85HEC/QF8u rkIQcjARU6qy/B+BNkn0O2wTjdo46nZ+kYCamXlkXgu16NYXFPiv6OCo0P9G8XlN DU7qnszifRpTd9zV6PogN8azCVz+kZEGmdkdejIXj263Ml73ahXfVgKJ0eAHtPuY hHLN/aaZM8s/HOmfJwhULqGJ7KETDfqwDHPPqSxTJ9n40QbypTO1VgAWE7IoCYOU EnEEH5RLbTve6c0//du2X1H0DAFnuHncBXsznyXYPdT9LOlu87/pB2mzaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeoMtycVMoZTV6BtkHu0ZNhKol0MB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeeeYTUK 21BQhp4raxYJ1CrnydHGXhXyY0dylNjXY2jy2Uxa7Uabb5Kapa8tXR3AR5sUhKPj LiNuqHteI+u7XHOiFJml57WQ7/XNHoYvCMt69o+lqpnJ4Q4bGrcMGv1EHyhW8Psu tAkyBFC3VXgnAwi5XaXiNps07qviSoVzg5tMkgZ5X/jCp28j0lRjh166uw5BoOg4 dAsUjRw+i5jGCzWw+OYT4AiSDobCe3U6mT3lX/NmGqOXzjxCvyVpIPpLWOdOrGIb AP1Q70OslcO2aOniQA1EdZucbioqtcZmlM7LYVjRvnFKu5W/kInfmRjzc0lL1qAN ngjL3oM9EscrDQ== -----END CERTIFICATE-----Generated at Tue Oct 20 23:48:11 2026 by rpki-client