$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: WMhWI8XTK65T8p/wNQM6ACSxvPGljtrwahqQ2LP7o1o= Subject key identifier: BE:57:AD:CE:CC:71:32:2D:1C:5E:3F:5D:30:8B:5C:DE:61:50:7F:79 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019DF5A7019121F416F3CD80C0D35A1C3281 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 1907 Signing time: Tue 05 May 2026 01:00:55 +0000 Manifest this update: Tue 05 May 2026 01:00:55 +0000 Manifest next update: Wed 06 May 2026 01:00:55 +0000 Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=) 2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=) 3: 5gizdFY-AQlhbCdYV0MHkXmuq7M.roa (hash: k9r1XdI4/Lx+2gwOSiva8ziRNB2yu8viuLXNYvO5Vys=) 4: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=) 5: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=) 6: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=) 7: J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa (hash: wcLCauUWs3bEGu09x4ivSvD/ChTk37avzRoy7sqTCsg=) 8: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=) 9: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=) 10: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (hash: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: dZTO0EM2wSUQ4jDEPFODau96rimgRAsn9VJMArH3kNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 May 2026 21:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f5:a7:01:91:21:f4:16:f3:cd:80:c0:d3:5a:1c:32:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: May 5 01:00:55 2026 GMT Not After : May 6 01:00:55 2026 GMT Subject: CN=be57adcecc71322d1c5e3f5d308b5cde61507f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:b9:f8:29:eb:6e:f0:d1:cf:07:70:7d:06: e4:81:c7:ef:a5:00:a0:10:83:a5:39:93:0f:17:02: 56:dc:7b:71:b6:7c:07:70:ad:a1:5a:9f:36:95:09: ff:b0:12:2b:cc:1b:93:16:a1:2f:d6:1f:5d:85:40: b9:93:28:ab:ab:86:1c:36:e0:a8:7f:e4:92:2b:04: 6c:a4:13:07:67:75:0c:d6:37:1d:10:52:00:9b:9d: d2:6a:d8:56:31:eb:50:b3:00:f5:77:d0:df:75:7b: d8:32:cc:dd:63:c5:a9:2e:fa:78:8f:36:81:fb:71: a7:b8:e4:53:c5:5f:83:58:a1:dd:e3:6d:b5:55:57: 53:18:72:3d:3c:7f:f5:2d:7b:b1:9a:af:0b:51:21: c0:8f:17:52:f2:ab:36:9f:66:d8:36:35:52:0c:2b: 20:e2:e0:47:f2:81:a2:fe:5c:c4:1d:fa:32:43:43: 97:c9:ae:f3:3f:c0:5e:9e:6d:d6:88:cf:c4:43:29: b7:24:8d:b4:88:0f:e5:80:ed:31:c5:93:b8:3a:67: eb:bf:cb:9f:fe:74:81:70:bf:6b:82:a0:83:12:4f: ad:79:31:65:f9:89:4e:ed:2e:33:71:ba:67:6d:af: 72:12:b5:32:44:5b:bf:a1:6d:f1:ce:a7:b9:d8:5e: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:57:AD:CE:CC:71:32:2D:1C:5E:3F:5D:30:8B:5C:DE:61:50:7F:79 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:cd:0e:28:25:5c:6d:79:16:f2:3c:9c:f7:df:d7:b8:4e:17: ae:3c:c0:f1:b7:c5:d1:b5:5c:d8:00:7b:bb:a5:40:66:4d:e8: 48:fe:70:05:26:b6:f8:1f:68:ee:b0:3b:4b:84:93:1c:54:e0: 57:54:49:d8:ed:cf:5e:70:c4:1a:e1:e6:28:bf:78:ba:b4:e2: d5:20:72:9f:ba:83:5b:de:4b:0e:d2:d9:10:ee:0e:e3:f1:6f: 6c:18:ea:5e:c2:1b:a1:a5:c3:74:57:9b:08:b5:4a:56:c5:fb: 87:bb:7e:48:19:00:85:80:f9:4a:7a:d5:c1:74:3c:11:5b:24: 3b:ec:aa:35:e6:45:95:b2:73:ed:4c:6a:43:e5:9a:be:18:e3: 83:06:6c:98:0d:bf:ed:2e:8f:a9:ce:c3:79:a3:2a:01:2c:34: 5e:7e:ed:36:e5:88:c2:af:44:b9:a7:e3:5f:5a:03:e1:d3:ac: ac:6a:09:ce:02:6f:25:48:e4:1c:32:1a:a6:63:58:94:aa:c9: 4a:60:c0:06:76:f9:ae:23:b2:94:89:68:86:c4:dd:65:dc:73: 9a:6d:a9:3f:69:79:25:c7:5a:72:37:66:f2:92:b8:cb:bb:0d: 36:91:87:83:0e:5f:d1:e6:65:93:d7:a2:bb:0e:28:c8:52:81: 31:eb:2d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ31pwGRIfQW882AwNNaHDKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwNTA1MDEwMDU1WhcNMjYwNTA2MDEwMDU1WjAzMTEwLwYDVQQD EyhiZTU3YWRjZWNjNzEzMjJkMWM1ZTNmNWQzMDhiNWNkZTYxNTA3Zjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX65+CnrbvDRzwdwfQbkgcfvpQCg EIOlOZMPFwJW3HtxtnwHcK2hWp82lQn/sBIrzBuTFqEv1h9dhUC5kyirq4YcNuCo f+SSKwRspBMHZ3UM1jcdEFIAm53SathWMetQswD1d9DfdXvYMszdY8WpLvp4jzaB +3GnuORTxV+DWKHd4221VVdTGHI9PH/1LXuxmq8LUSHAjxdS8qs2n2bYNjVSDCsg 4uBH8oGi/lzEHfoyQ0OXya7zP8Benm3WiM/EQym3JI20iA/lgO0xxZO4Omfrv8uf /nSBcL9rgqCDEk+teTFl+YlO7S4zcbpnba9yErUyRFu/oW3xzqe52F55kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5Xrc7McTItHF4/XTCLXN5hUH95MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr80OKCVc bXkW8jyc99/XuE4XrjzA8bfF0bVc2AB7u6VAZk3oSP5wBSa2+B9o7rA7S4STHFTg V1RJ2O3PXnDEGuHmKL94urTi1SByn7qDW95LDtLZEO4O4/FvbBjqXsIboaXDdFeb CLVKVsX7h7t+SBkAhYD5SnrVwXQ8EVskO+yqNeZFlbJz7UxqQ+WavhjjgwZsmA2/ 7S6Pqc7DeaMqASw0Xn7tNuWIwq9EuafjX1oD4dOsrGoJzgJvJUjkHDIapmNYlKrJ SmDABnb5riOylIlohsTdZdxzmm2pP2l5Jcdacjdm8pK4y7sNNpGHgw5f0eZlk9ei uw4oyFKBMestIg== -----END CERTIFICATE-----Generated at Tue May 5 05:54:25 2026 by rpki-client