$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: 1ecqYl6GLAS27VcPL2SVsaUTyfOTieVPVyoDS8oKkW4= Subject key identifier: 5C:67:52:63:A0:F1:D0:BE:C4:D0:A4:69:77:28:49:C5:7D:68:06:9C Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019CAC7E01E8A67994C4C02F26B468663940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 185F Signing time: Mon 02 Mar 2026 03:01:05 +0000 Manifest this update: Mon 02 Mar 2026 03:01:05 +0000 Manifest next update: Tue 03 Mar 2026 03:01:05 +0000 Files and hashes: 1: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 2: 93F83tT2Wunj2ibLPRWbOwsrgjw.roa (hash: JbaoQPD70k3GYUMe5PmYVrd4g7l0SgbWLphprt9qBGY=) 3: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 4: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 5: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: SFciEpO6IgfYkLxqIVRAplWXZIagTHq+U23iL3f5pf0=) 6: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 7: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 8: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 9: e_Y8m6hQnaU1_F275I-kuLokN-4.roa (hash: IKlSVsHkmxTdflTQC2UglUrzLaalL2q7STsM2XkFnP4=) 10: hB5dwzE-8jl9eMnVeqctFOx2T7M.roa (hash: aOmUGLttRikI04KddCkVaiXTdQZBZHrIgCYCo3rRy5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:7e:01:e8:a6:79:94:c4:c0:2f:26:b4:68:66:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Mar 2 03:01:05 2026 GMT Not After : Mar 3 03:01:05 2026 GMT Subject: CN=5c675263a0f1d0bec4d0a469772849c57d68069c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:e9:38:c9:84:a1:26:a9:70:a9:b6:e6:86: 57:2b:16:57:2e:ee:cd:9d:2f:9f:55:3c:c4:d3:b2: 19:0e:61:1b:9f:e7:15:f0:a8:68:f3:b1:63:08:ff: ba:3f:30:77:41:f7:6f:c8:dc:4d:40:a8:53:d3:79: 9c:bc:61:db:e7:2a:03:b6:9e:d8:1d:d1:8e:0d:46: e5:d6:cb:62:35:21:8f:c9:21:4f:5e:51:64:11:7e: 9c:55:e9:0e:e7:c1:68:18:05:82:d3:12:f9:4f:af: 3b:b7:ad:88:d3:bb:91:11:3a:17:9a:3a:49:df:60: fe:ac:b2:8e:b9:b1:06:7c:90:67:ba:02:66:48:e3: d8:c3:da:4b:15:a5:ca:2e:14:4c:88:91:e9:8e:94: 6f:3a:ff:ec:50:cc:3a:c6:4a:69:4c:dd:9f:fc:d9: d6:76:bf:e8:b9:ab:bd:cf:fc:84:5e:79:19:29:f4: 78:33:f2:a4:67:07:27:3e:36:a1:54:d1:c3:29:4e: 38:2e:17:5f:e1:2c:db:6b:67:2e:63:45:2c:04:8b: 12:01:90:ce:4a:7b:e3:b6:5d:ce:68:eb:c0:0e:80: 1b:b3:bf:6b:29:2f:d7:9e:78:ad:4d:c9:fb:2c:9c: 77:0e:63:00:aa:e6:c3:32:29:5e:96:0d:bf:79:c4: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:67:52:63:A0:F1:D0:BE:C4:D0:A4:69:77:28:49:C5:7D:68:06:9C X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:19:1c:97:a0:c7:9f:bd:ab:a8:35:e5:5e:5b:3d:e4:31:e4: 1c:8c:88:e9:84:90:90:a1:f9:ec:7f:66:b3:53:92:b8:01:e3: 6b:d3:44:47:9d:34:ca:cb:60:7a:c4:68:c0:24:6c:53:b8:95: b6:5e:c8:cf:4b:52:87:d0:fc:00:42:59:28:ca:3f:62:72:3b: b9:b1:18:56:a5:11:24:49:7b:4e:94:f8:06:9e:6c:82:f3:e1: 0f:32:a0:12:6c:20:cf:b8:fc:2a:ed:70:d7:97:70:8f:a1:09: a2:52:2a:eb:74:37:36:31:de:9e:05:87:84:78:1a:74:d7:b7: cb:a0:9a:68:f8:3f:02:07:e5:06:dd:57:0e:21:ae:9f:90:40: 9d:e0:f8:a0:22:db:95:8b:a1:ab:c6:b6:30:12:50:94:bb:25: bc:6b:3c:7c:43:d0:33:a0:f5:87:c7:c4:8f:1b:e4:70:43:32: bb:2d:bb:d5:16:e3:c9:d7:2c:43:39:08:c3:40:2b:00:68:f8: 9c:10:07:3b:7e:78:2e:c4:1f:ab:a2:5c:50:64:a5:ce:c1:12: b7:d4:24:79:89:17:ea:f6:57:f0:46:d4:39:80:e5:62:73:a5: b4:96:ce:7d:5f:66:04:7e:07:26:ef:d1:7e:ed:cf:8c:3e:3b: eb:49:20:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysfgHopnmUxMAvJrRoZjlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwMzAyMDMwMTA1WhcNMjYwMzAzMDMwMTA1WjAzMTEwLwYDVQQD Eyg1YzY3NTI2M2EwZjFkMGJlYzRkMGE0Njk3NzI4NDljNTdkNjgwNjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbvpOMmEoSapcKm25oZXKxZXLu7N nS+fVTzE07IZDmEbn+cV8Kho87FjCP+6PzB3QfdvyNxNQKhT03mcvGHb5yoDtp7Y HdGODUbl1stiNSGPySFPXlFkEX6cVekO58FoGAWC0xL5T687t62I07uREToXmjpJ 32D+rLKOubEGfJBnugJmSOPYw9pLFaXKLhRMiJHpjpRvOv/sUMw6xkppTN2f/NnW dr/ouau9z/yEXnkZKfR4M/KkZwcnPjahVNHDKU44Lhdf4Szba2cuY0UsBIsSAZDO Snvjtl3OaOvADoAbs79rKS/XnnitTcn7LJx3DmMAqubDMilelg2/ecQyBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxnUmOg8dC+xNCkaXcoScV9aAacMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxkcl6DH n72rqDXlXls95DHkHIyI6YSQkKH57H9ms1OSuAHja9NER500ystgesRowCRsU7iV tl7Iz0tSh9D8AEJZKMo/YnI7ubEYVqURJEl7TpT4Bp5sgvPhDzKgEmwgz7j8Ku1w 15dwj6EJolIq63Q3NjHengWHhHgadNe3y6CaaPg/AgflBt1XDiGun5BAneD4oCLb lYuhq8a2MBJQlLslvGs8fEPQM6D1h8fEjxvkcEMyuy271RbjydcsQzkIw0ArAGj4 nBAHO354LsQfq6JcUGSlzsESt9QkeYkX6vZX8EbUOYDlYnOltJbOfV9mBH4HJu/R fu3PjD4760kgKw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:58 2026 by rpki-client