$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json) Hash identifier: uk5E2oXiGqKUbs89Cbjdt/otwM310ZUdJnNSIK8sDSw= Subject key identifier: 89:B4:63:06:2E:AD:95:D6:1D:7C:C2:65:9D:6E:62:E7:BF:A5:48:E5 Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019E2B83375C408C5AA0988F0BA8416B59C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft Manifest number: 1920 Signing time: Fri 15 May 2026 12:01:19 +0000 Manifest this update: Fri 15 May 2026 12:01:19 +0000 Manifest next update: Sat 16 May 2026 12:01:19 +0000 Files and hashes: 1: 8f6ryTvzxsgcz7a1VrDaHfr6K-s.roa (hash: RW6Oi5z/RcWRGaIQCUZbkdEin/DlQFbS+I/SqrTulAA=) 2: D9XgvWWebov0kTHT7gIL8Ih7bHs.roa (hash: aj3nCPdPkIlGQaAtMeiOa/fgxKRQ1tyiiopMxi8yVr4=) 3: QYAHCBRM8EgpLd4QrnaJwLlcTLc.roa (hash: xqjfeJepdMLIOn6HjKXxzAl/Wm+IlrawB25mUwSfoiA=) 4: RcHUb_7vBCGqZc4v6_mqpbqVtgg.roa (hash: 3AVyDWtRAwLaTj0fPOPIeQe2qLZtznTvofJILaYyw80=) 5: RjTlguRgcAqb5mkC5whD5YBTtos.roa (hash: rBmFvqm9la/6Kn095Es+kobXfpMnMG+qYPPeDl24mPQ=) 6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: 6fv5H6+xUn4ElHEubnbV/D8JhSeTRvMsTIN+XnSfUUA=) 7: Vaa0ZoiDGKk6g5S1K8exhvOjuso.roa (hash: 0JlsZcX72VxzLBMarlq5cR72GCSjJdlrkx349OBiKdo=) 8: eyN-QI1JnaBw_GdK4aR4DdrNlvo.roa (hash: FEmPy+g6KDj1MyKjGKfSJKzYk99+EtTwkcX8ACmfm44=) 9: hbzNsJKUFj9YPemgxueORzyaAR4.roa (hash: sHENi6SxTMQzE9Umyq+oAU2zV4mQDeA2gga98LgBks4=) 10: xdcZpWEbrxMAWI2r6x9fHtNAeos.roa (hash: pQvg5+txs+5H+YwG4r27g6XNgPtuojFD8BoBa08f/h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2b:83:37:5c:40:8c:5a:a0:98:8f:0b:a8:41:6b:59:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: May 15 12:01:19 2026 GMT Not After : May 16 12:01:19 2026 GMT Subject: CN=89b463062ead95d61d7cc2659d6e62e7bfa548e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:ce:50:9a:95:e9:c6:69:47:5d:e9:10:44: 6d:bd:fd:47:bc:55:f5:3a:ce:c2:34:0d:9b:89:81: 85:54:b8:70:7d:f7:25:34:02:19:14:ee:b7:18:e2: fc:d7:5e:c9:9d:57:71:97:be:95:df:82:08:bd:60: ee:b2:12:0e:eb:4d:fc:5e:2e:cc:02:6d:ac:ca:97: 3a:52:67:fe:b0:98:a0:d1:a3:19:18:ce:a5:6d:4a: b9:14:f6:4e:51:ab:53:fc:8b:af:fb:fa:20:49:39: 2f:7b:90:6e:52:13:aa:60:9e:56:c5:bc:cd:f5:93: 46:10:13:75:90:ea:06:76:58:c3:45:85:15:7e:18: 7e:a5:7b:76:62:c6:12:86:91:27:cc:48:95:d2:43: a6:87:42:3a:4f:12:7a:37:93:2b:d7:b1:18:60:a6: 3a:50:06:08:87:24:63:c5:48:99:a3:0b:f5:cb:2a: 68:f8:0f:8a:54:9c:a4:93:6c:98:be:5b:2c:6b:da: ea:d2:30:2c:d7:cd:4c:bc:36:68:f8:18:d5:f4:18: 17:de:01:d2:70:6b:51:d0:87:33:03:e2:d6:59:81: 67:7f:74:90:be:2f:21:dc:02:9b:8a:97:62:f1:1f: 41:b9:a4:b7:f2:d5:51:67:f2:1e:38:99:16:ad:47: ff:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B4:63:06:2E:AD:95:D6:1D:7C:C2:65:9D:6E:62:E7:BF:A5:48:E5 X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e7:1a:eb:72:09:df:67:50:8d:0b:f1:81:5c:db:ef:1c:57: b3:76:52:27:62:f9:da:f7:28:13:fa:a4:d8:1f:bc:41:93:a7: eb:5c:36:a1:02:2f:eb:75:93:52:3c:24:d0:ff:ae:80:b4:0b: 3e:2e:30:50:b3:42:49:6d:07:fc:db:bb:9d:b6:11:fd:e2:b2: 64:ed:f8:a5:20:c1:74:22:e0:e4:33:b8:ff:1a:f3:04:24:a5: e1:d7:9a:db:ec:b3:cd:27:45:fe:6f:13:89:71:50:27:b3:c4: e4:0f:32:be:29:ca:18:c0:ab:34:d9:12:fc:a1:fd:fe:7c:fa: f5:da:fa:fb:ad:31:97:df:56:c6:f1:0e:88:7d:62:ac:a2:43: 85:d4:70:7a:f9:76:52:08:10:3c:44:24:3f:0b:f7:c8:bd:c9: 76:fb:58:82:dc:b0:26:71:23:d6:a9:ea:e6:8f:8f:8d:5a:17: 70:71:0c:03:9a:e9:b9:27:b2:dd:41:0f:de:cc:29:e1:d9:69: 3c:4c:76:2b:62:e1:f0:10:86:cb:06:a1:b4:f3:ed:8b:03:b7: af:f2:64:33:e7:2f:0b:35:e7:1c:2a:9a:e0:87:5c:44:d0:6e: 5b:7a:d5:aa:b8:71:47:5f:d7:0d:63:1d:27:4e:28:64:ef:ff: df:4a:f5:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4rgzdcQIxaoJiPC6hBa1nBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwNTE1MTIwMTE5WhcNMjYwNTE2MTIwMTE5WjAzMTEwLwYDVQQD Eyg4OWI0NjMwNjJlYWQ5NWQ2MWQ3Y2MyNjU5ZDZlNjJlN2JmYTU0OGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s/OUJqV6cZpR13pEERtvf1HvFX1 Os7CNA2biYGFVLhwffclNAIZFO63GOL8117JnVdxl76V34IIvWDushIO6038Xi7M Am2sypc6Umf+sJig0aMZGM6lbUq5FPZOUatT/Iuv+/ogSTkve5BuUhOqYJ5WxbzN 9ZNGEBN1kOoGdljDRYUVfhh+pXt2YsYShpEnzEiV0kOmh0I6TxJ6N5Mr17EYYKY6 UAYIhyRjxUiZowv1yypo+A+KVJykk2yYvlssa9rq0jAs181MvDZo+BjV9BgX3gHS cGtR0IczA+LWWYFnf3SQvi8h3AKbipdi8R9BuaS38tVRZ/IeOJkWrUf/UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIm0YwYurZXWHXzCZZ1uYue/pUjlMB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOca63IJ 32dQjQvxgVzb7xxXs3ZSJ2L52vcoE/qk2B+8QZOn61w2oQIv63WTUjwk0P+ugLQL Pi4wULNCSW0H/Nu7nbYR/eKyZO34pSDBdCLg5DO4/xrzBCSl4dea2+yzzSdF/m8T iXFQJ7PE5A8yvinKGMCrNNkS/KH9/nz69dr6+60xl99WxvEOiH1irKJDhdRwevl2 UggQPEQkPwv3yL3JdvtYgtywJnEj1qnq5o+PjVoXcHEMA5rpuSey3UEP3swp4dlp PEx2K2Lh8BCGywahtPPtiwO3r/JkM+cvCzXnHCqa4IdcRNBuW3rVqrhxR1/XDWMd J04oZO//30r1Yg== -----END CERTIFICATE-----Generated at Fri May 15 17:47:11 2026 by rpki-client