$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft File: TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json) Hash identifier: guBjRQzqs1pLRpbZWi/q0DLU82ZWaYO+O2ZPqqPMl80= Subject key identifier: 16:B0:EB:95:FB:F8:DF:85:7D:2E:CC:A5:78:C1:0A:33:D3:8C:E5:97 Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 019DCE2B614A8709DA6357EA570A85D5312A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft Manifest number: 18E8 Signing time: Mon 27 Apr 2026 09:00:42 +0000 Manifest this update: Mon 27 Apr 2026 09:00:42 +0000 Manifest next update: Tue 28 Apr 2026 09:00:42 +0000 Files and hashes: 1: DgOoOQQXCFOOiAboGyt3uJYGrX8.roa (hash: ttv6R+EWnpLDn0WbmgVmCLHJJB9im8Fg+Aestwf1Mxs=) 2: GlJSwTi2Fb0SaJjKLlqTY5SYTLI.roa (hash: Vhct9Hz5giaL8GbiD0lTZ+WsxND/eXGjAzq9jIuUyys=) 3: K_QMKdjdYGYO_K6jBRKDt9oPc-4.roa (hash: P33wrBWs2yJaqJ2LTURN/ha1UtuTGC+nJ+QNsu/z4d0=) 4: MPWMs16X005RVT9AI90Avga642Q.roa (hash: 2eWuFyAXp4gRIWiCS/+RGWaGItW02AaBBH51MmBYwwo=) 5: T89jwcM0aDv58J1uGaX_TI1vK9A.roa (hash: sG3D4TH7MLn7FU34onFGq465WOEDiHFkUuDacxXJOgg=) 6: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: Nz3gozuA7/fSTEPjl2jKu1e91uIEGZjevxCcRmcuXxA=) 7: X72Ta738C-LIMFvd1WFhI8hgB0M.roa (hash: v6AOZV930gaDano00ylIK8U0A/h3KnVoUcoteShVPsI=) 8: XtIJQiHXMFZdv3to7hzaFPe58CM.roa (hash: 0ywEoOgBomhFv9aUHIMG9mVJhsMccKkONYTnJ5FZ8MI=) 9: axYuvA_IMKhkXuc6tRXhlKz3RRY.roa (hash: AwD9qt83+cS+6XicWrhYgc1AHug+bQVZTsrb4VEe+DQ=) 10: uPeS0JTvQdvC1wREAs91Vli5Rnw.roa (hash: cPJXBJyczJ2xoLaeFVUtLWLl9YC0lFU4+Af1eOE64/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:2b:61:4a:87:09:da:63:57:ea:57:0a:85:d5:31:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Apr 27 09:00:42 2026 GMT Not After : Apr 28 09:00:42 2026 GMT Subject: CN=16b0eb95fbf8df857d2ecca578c10a33d38ce597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:da:d0:67:7c:31:38:08:44:f0:e2:10:c6: b9:ae:28:cf:52:92:cf:ae:b1:1a:b2:e0:04:4c:c5: 44:c3:94:24:9f:82:d0:f4:7b:67:13:41:19:3f:35: cb:2e:60:4a:b9:c0:75:32:d5:45:18:0c:42:f7:e8: 4c:04:4f:6c:c7:ec:99:0c:ab:d0:c6:7e:69:26:89: d4:1f:7f:d7:d4:41:10:e8:e5:4b:2c:62:69:e6:59: cd:17:f3:1f:65:54:10:d0:e6:71:c5:06:97:93:35: ff:1b:aa:23:96:54:f1:22:cc:90:3a:76:23:3c:bf: 0f:81:6e:5f:9c:7f:b6:41:76:a1:a5:09:3e:52:a2: 9b:31:85:8c:dd:31:38:7e:66:a4:85:94:e7:d4:31: 26:b0:92:6a:e6:d7:1b:75:f3:7b:88:55:64:96:d1: ae:83:85:ed:40:41:d5:61:48:c9:5c:b4:e9:bf:16: b2:af:66:c2:b4:86:11:6d:70:bc:fa:8b:72:20:29: b2:b4:3d:6b:38:d9:a5:e0:e1:a5:8e:7d:6c:59:9f: 6b:41:3e:1c:48:bb:5b:2e:98:3b:d6:9f:ed:bd:fa: 82:43:c5:db:bf:8e:28:fb:61:fe:39:c8:f9:0e:e5: 34:52:30:7d:d2:1a:82:06:35:f7:5e:8e:b1:1a:04: 5e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B0:EB:95:FB:F8:DF:85:7D:2E:CC:A5:78:C1:0A:33:D3:8C:E5:97 X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:97:ac:28:4a:4a:b5:38:5d:79:76:ff:c9:91:46:0f:c3:15: 6c:6d:97:bd:47:89:77:10:14:06:41:e8:c3:d2:d4:99:f4:3d: 2b:c5:6c:83:ac:63:c6:1a:17:1a:f4:0e:d7:24:9d:03:45:bb: 27:d6:5a:1f:88:f7:41:ea:2d:24:ba:6d:27:3f:21:f5:44:74: 82:d4:00:aa:73:e7:b2:16:72:e0:54:cd:1f:f5:63:e3:e8:56: 9c:02:2d:10:d6:01:12:86:a8:f7:cb:1d:02:51:95:c0:9b:02: f9:67:d9:b2:ab:8f:e6:dd:4a:a6:11:8c:a1:01:d6:93:a0:6b: f8:3d:fb:02:1e:51:fb:9c:64:3f:f5:6f:66:4b:3f:21:2a:ec: 49:c5:09:dd:fc:91:9d:ed:2a:e0:59:e1:fc:1c:c3:c2:6d:f9: 3d:50:3d:9d:7a:ad:43:2c:bc:08:b4:0c:72:9e:9f:03:41:aa: 82:b4:56:7e:12:b1:4f:4f:84:96:47:1d:26:73:90:46:2a:ea: 5c:5d:b5:b4:9a:13:2e:d3:ef:fb:a7:14:e7:13:92:f3:e4:6c: bb:2a:18:ea:f9:c4:a2:6d:cb:5a:54:ee:b1:bb:6c:a8:fa:5d: 68:11:31:7d:49:55:23:48:83:05:5b:4a:4f:be:e4:da:55:fc: c7:9c:14:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OK2FKhwnaY1fqVwqF1TEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjYwNDI3MDkwMDQyWhcNMjYwNDI4MDkwMDQyWjAzMTEwLwYDVQQD EygxNmIwZWI5NWZiZjhkZjg1N2QyZWNjYTU3OGMxMGEzM2QzOGNlNTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPDa0Gd8MTgIRPDiEMa5rijPUpLP rrEasuAETMVEw5Qkn4LQ9HtnE0EZPzXLLmBKucB1MtVFGAxC9+hMBE9sx+yZDKvQ xn5pJonUH3/X1EEQ6OVLLGJp5lnNF/MfZVQQ0OZxxQaXkzX/G6ojllTxIsyQOnYj PL8PgW5fnH+2QXahpQk+UqKbMYWM3TE4fmakhZTn1DEmsJJq5tcbdfN7iFVkltGu g4XtQEHVYUjJXLTpvxayr2bCtIYRbXC8+otyICmytD1rONml4OGljn1sWZ9rQT4c SLtbLpg71p/tvfqCQ8Xbv44o+2H+Ocj5DuU0UjB90hqCBjX3Xo6xGgReYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaw65X7+N+FfS7MpXjBCjPTjOWXMB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5esKEpK tThdeXb/yZFGD8MVbG2XvUeJdxAUBkHow9LUmfQ9K8Vsg6xjxhoXGvQO1ySdA0W7 J9ZaH4j3QeotJLptJz8h9UR0gtQAqnPnshZy4FTNH/Vj4+hWnAItENYBEoao98sd AlGVwJsC+WfZsquP5t1KphGMoQHWk6Br+D37Ah5R+5xkP/VvZks/ISrsScUJ3fyR ne0q4Fnh/BzDwm35PVA9nXqtQyy8CLQMcp6fA0GqgrRWfhKxT0+ElkcdJnOQRirq XF21tJoTLtPv+6cU5xOS8+RsuyoY6vnEom3LWlTusbtsqPpdaBExfUlVI0iDBVtK T77k2lX8x5wU4w== -----END CERTIFICATE-----Generated at Mon Apr 27 12:39:33 2026 by rpki-client