$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: 749P8O2jA+BGW1TmnpV2knKEOhrL+vdf+ELoYlN+HrI= Subject key identifier: 45:34:52:0A:D0:27:29:43:03:49:AD:F4:F2:3D:61:5D:77:3C:78:81 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019D9A7535092F366A3E8EE484C0EE13A4C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 18E0 Signing time: Fri 17 Apr 2026 08:01:05 +0000 Manifest this update: Fri 17 Apr 2026 08:01:05 +0000 Manifest next update: Sat 18 Apr 2026 08:01:05 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9DusrtcNuEKlX3-m9foPJH2szlI.roa (hash: b8raHEJQGNgJfwuoWcURy2P5Ad5oX4Bo6uvIPpzRudA=) 3: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 4: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 5: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: Z0g9jeSw7urjQuMV/QmHOpHcNVa35rh2j8Z58d9EDdw=) 6: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 7: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) 10: mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa (hash: 64Bq4BjaquUNa/q+gUB1JEszW2wTR9StXwwTroa+sNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:75:35:09:2f:36:6a:3e:8e:e4:84:c0:ee:13:a4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Apr 17 08:01:05 2026 GMT Not After : Apr 18 08:01:05 2026 GMT Subject: CN=4534520ad02729430349adf4f23d615d773c7881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:bd:49:a2:70:e0:17:f0:75:33:bd:a1:02: 44:b6:4c:3f:da:2e:ed:cd:a4:72:0c:10:4d:53:b0: 56:1d:07:d6:38:f5:8c:79:78:a0:ae:ec:c7:44:f0: 92:6a:98:bf:61:84:1c:67:1a:a7:32:4d:cf:b6:77: 5d:e1:8d:8c:f3:d0:5b:e2:7d:31:10:5a:29:4d:e1: 4a:e0:f5:85:09:6c:9c:ad:d1:26:14:c9:c6:13:1c: 8e:c1:ae:b5:c2:6a:2a:93:68:d6:e3:25:99:60:bd: 2d:d6:98:4d:83:2a:8b:ec:b9:08:30:fb:fa:ed:c3: f2:3e:38:90:42:1e:f2:5e:54:21:da:63:07:6e:f0: 48:54:ec:cb:4a:ae:0b:db:82:95:0b:a4:36:ba:83: 19:b1:85:6a:9f:70:d5:5b:18:a8:f5:1f:74:a3:0e: 6e:a5:b0:44:3c:36:d9:0e:88:c1:3f:ac:54:0f:03: 43:fa:70:d7:c8:32:7e:0d:49:f8:c5:0c:97:08:ca: a3:5b:2c:18:f3:03:bf:02:60:6f:24:e7:ea:78:5b: 20:9a:30:e3:34:35:76:5a:57:ee:fa:be:bc:d8:21: 5e:f8:53:ee:e8:09:c4:ec:bf:0d:68:70:8d:01:32: 19:7a:cb:01:6a:32:8b:96:fb:d8:4e:2e:60:64:d2: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:34:52:0A:D0:27:29:43:03:49:AD:F4:F2:3D:61:5D:77:3C:78:81 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:28:27:af:14:a6:48:bd:24:b9:5b:8f:60:cb:71:b3:a1:fd: 9f:24:e7:83:82:27:12:26:93:80:36:40:d6:99:02:09:2e:dc: 22:f5:33:a1:46:f2:46:b5:b7:7f:01:d2:bd:5f:96:17:ac:50: 56:9b:8c:32:1e:94:5d:83:4d:13:7f:13:45:a5:9e:8c:b0:c2: 29:67:89:93:0c:d3:fd:e4:a2:b6:6c:6f:dd:3f:be:aa:cb:81: 63:3f:85:ee:ac:40:da:15:c6:a4:86:90:ae:99:1e:b2:4f:c2: a5:fb:2c:0e:30:b0:f2:bd:72:7d:6d:41:c4:9f:ae:33:1c:4a: 83:48:10:db:58:2e:cb:31:7f:fb:11:f6:15:22:f4:a6:36:7f: 6d:b9:82:02:e3:d3:e7:08:80:49:fe:80:76:34:bb:45:e4:ee: d4:a3:a3:fc:87:02:a5:c1:aa:ce:ee:24:18:1c:0c:51:85:fa: 93:4f:38:c4:95:ba:59:5f:aa:04:fa:f3:9d:44:44:b1:d7:99: 6f:65:7e:15:7d:da:f3:11:7e:7b:86:ab:38:57:a2:60:d8:50: 08:09:7c:74:db:0e:f4:38:78:87:71:29:b5:f2:df:50:db:2d: 59:ae:d3:5e:8c:3b:6e:bf:aa:80:48:9d:4c:2e:f1:8c:25:cb: 68:e7:d8:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adTUJLzZqPo7khMDuE6TIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwNDE3MDgwMTA1WhcNMjYwNDE4MDgwMTA1WjAzMTEwLwYDVQQD Eyg0NTM0NTIwYWQwMjcyOTQzMDM0OWFkZjRmMjNkNjE1ZDc3M2M3ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniK9SaJw4BfwdTO9oQJEtkw/2i7t zaRyDBBNU7BWHQfWOPWMeXigruzHRPCSapi/YYQcZxqnMk3Ptndd4Y2M89Bb4n0x EFopTeFK4PWFCWycrdEmFMnGExyOwa61wmoqk2jW4yWZYL0t1phNgyqL7LkIMPv6 7cPyPjiQQh7yXlQh2mMHbvBIVOzLSq4L24KVC6Q2uoMZsYVqn3DVWxio9R90ow5u pbBEPDbZDojBP6xUDwND+nDXyDJ+DUn4xQyXCMqjWywY8wO/AmBvJOfqeFsgmjDj NDV2Wlfu+r682CFe+FPu6AnE7L8NaHCNATIZessBajKLlvvYTi5gZNLP5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU0UgrQJylDA0mt9PI9YV13PHiBMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFignrxSm SL0kuVuPYMtxs6H9nyTng4InEiaTgDZA1pkCCS7cIvUzoUbyRrW3fwHSvV+WF6xQ VpuMMh6UXYNNE38TRaWejLDCKWeJkwzT/eSitmxv3T++qsuBYz+F7qxA2hXGpIaQ rpkesk/CpfssDjCw8r1yfW1BxJ+uMxxKg0gQ21guyzF/+xH2FSL0pjZ/bbmCAuPT 5wiASf6AdjS7ReTu1KOj/IcCpcGqzu4kGBwMUYX6k084xJW6WV+qBPrznUREsdeZ b2V+FX3a8xF+e4arOFeiYNhQCAl8dNsO9Dh4h3EptfLfUNstWa7TXow7br+qgEid TC7xjCXLaOfYmw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:52:23 2026 by rpki-client