$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: +8K+BlLu5TNcmKqZzxHtLQg1G074R3tcpPnpc+4I8Mc= Subject key identifier: 07:90:0C:4D:39:26:7E:8D:20:1C:8A:CB:C1:DB:69:3C:40:15:94:3A Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019E9137EA258A187AD1B9E832F7D2B0DED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 0202 Signing time: Thu 04 Jun 2026 06:00:21 +0000 Manifest this update: Thu 04 Jun 2026 06:00:21 +0000 Manifest next update: Fri 05 Jun 2026 06:00:21 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: hhY6SzxGJvmLkz3CQ9eTt3FCQVnZukZAkPkHrOmOQ8g=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 06:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:91:37:ea:25:8a:18:7a:d1:b9:e8:32:f7:d2:b0:de:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jun 4 06:00:21 2026 GMT Not After : Jun 5 06:00:21 2026 GMT Subject: CN=07900c4d39267e8d201c8acbc1db693c4015943a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:ad:ec:e2:57:87:e9:09:bb:87:24:71:93: ac:f9:a1:ed:15:4b:3e:87:a0:a9:86:0e:d2:cd:85: 14:97:82:45:df:3d:61:69:ee:8c:6f:7f:5b:f7:0b: 69:1d:06:2d:d9:e3:73:70:3e:97:9e:52:9e:8d:8a: 8f:65:77:da:1c:9f:27:3c:f9:ed:82:c4:9e:ee:aa: 64:1d:62:f0:0e:3e:ff:c3:83:4c:14:db:b6:d6:b0: 3b:08:5f:28:9e:e6:e4:da:5c:a0:9f:b8:b5:77:e3: 36:d3:fa:b5:2a:eb:e2:9f:f9:a4:86:f1:0c:b2:b1: 41:ff:1d:b4:c2:c5:9f:e9:37:db:62:9b:6b:f8:bd: d7:74:ea:6a:1d:de:42:34:67:64:2c:be:e4:a8:44: 72:69:01:b2:a6:52:3f:17:bb:25:18:9a:ac:7d:67: e1:0f:bd:f3:b8:9b:10:aa:19:ab:be:31:80:e8:9c: c3:40:ef:2e:f6:ee:cd:d9:fe:05:12:ce:0c:9e:41: 5f:59:69:e2:39:30:e2:36:4f:41:d4:a1:3f:56:1f: 8a:64:81:b8:00:e2:17:c8:c0:a2:eb:2d:f9:56:13: f8:07:90:05:ed:c9:59:35:01:f1:11:ec:59:60:e7: c3:76:fe:42:6f:2c:92:19:27:28:f1:cc:69:d2:3b: f5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:90:0C:4D:39:26:7E:8D:20:1C:8A:CB:C1:DB:69:3C:40:15:94:3A X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cb:35:33:52:3d:52:62:38:41:3c:02:0d:84:0b:9f:9c:36: ca:7f:30:22:42:57:a5:8d:66:78:30:8f:b4:00:fe:4f:8a:a8: 8e:35:89:a3:62:4e:1e:79:ea:5c:02:59:44:fc:05:99:cd:4c: 93:bd:64:ad:46:73:e0:0e:47:5c:38:51:87:84:f4:5f:bd:31: 43:91:89:09:44:d0:9c:95:34:a2:36:d6:32:cb:4f:03:3f:34: a2:a6:86:5e:1a:51:9b:0a:c7:bb:fb:f3:99:92:08:83:f6:4d: 7e:77:dd:19:be:10:e6:d6:c2:56:f2:97:75:cb:7e:3f:df:7f: b5:67:66:72:2c:f4:2f:57:57:b8:e8:ca:02:ed:c4:03:c5:c1: 63:88:4d:36:41:2e:89:bc:4a:3a:55:6b:78:96:ff:d4:9c:57: 03:f3:20:0e:39:d5:7c:15:7f:c4:e1:17:9e:e0:22:61:84:94: 6f:73:27:8b:cc:04:94:d7:73:9a:08:a9:ab:9b:75:f8:db:fc: bd:53:fd:6d:72:e5:ac:57:05:7f:de:79:8e:66:c5:86:bd:0b: c6:e6:19:45:93:0f:eb:3b:ef:ba:20:3c:b7:ac:1b:e4:bc:ae: 43:f4:96:5a:87:95:cf:39:f9:fb:42:77:ee:17:6a:29:9e:70: c9:d3:53:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6RN+olihh60bnoMvfSsN7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwNjA0MDYwMDIxWhcNMjYwNjA1MDYwMDIxWjAzMTEwLwYDVQQD EygwNzkwMGM0ZDM5MjY3ZThkMjAxYzhhY2JjMWRiNjkzYzQwMTU5NDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUmt7OJXh+kJu4ckcZOs+aHtFUs+ h6Cphg7SzYUUl4JF3z1hae6Mb39b9wtpHQYt2eNzcD6XnlKejYqPZXfaHJ8nPPnt gsSe7qpkHWLwDj7/w4NMFNu21rA7CF8onubk2lygn7i1d+M20/q1Kuvin/mkhvEM srFB/x20wsWf6TfbYptr+L3XdOpqHd5CNGdkLL7kqERyaQGyplI/F7slGJqsfWfh D73zuJsQqhmrvjGA6JzDQO8u9u7N2f4FEs4MnkFfWWniOTDiNk9B1KE/Vh+KZIG4 AOIXyMCi6y35VhP4B5AF7clZNQHxEexZYOfDdv5CbyySGSco8cxp0jv1FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeQDE05Jn6NIByKy8HbaTxAFZQ6MB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPss1M1I9 UmI4QTwCDYQLn5w2yn8wIkJXpY1meDCPtAD+T4qojjWJo2JOHnnqXAJZRPwFmc1M k71krUZz4A5HXDhRh4T0X70xQ5GJCUTQnJU0ojbWMstPAz80oqaGXhpRmwrHu/vz mZIIg/ZNfnfdGb4Q5tbCVvKXdct+P99/tWdmciz0L1dXuOjKAu3EA8XBY4hNNkEu ibxKOlVreJb/1JxXA/MgDjnVfBV/xOEXnuAiYYSUb3Mni8wElNdzmgipq5t1+Nv8 vVP9bXLlrFcFf955jmbFhr0LxuYZRZMP6zvvuiA8t6wb5LyuQ/SWWoeVzzn5+0J3 7hdqKZ5wydNTJg== -----END CERTIFICATE-----Generated at Thu Jun 4 12:13:50 2026 by rpki-client