$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: OR3eDbShxiSCpOW/VV9oUgJ3ldlGhYNtDo3KxrbJKFg= Subject key identifier: 34:B6:37:C0:CB:B9:24:FE:06:4D:64:E5:3A:3D:F7:B2:FC:FE:1B:13 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019CAAFD26ED15813EAAE3F7316C7A0558AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1864 Signing time: Sun 01 Mar 2026 20:00:43 +0000 Manifest this update: Sun 01 Mar 2026 20:00:43 +0000 Manifest next update: Mon 02 Mar 2026 20:00:43 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9DusrtcNuEKlX3-m9foPJH2szlI.roa (hash: b8raHEJQGNgJfwuoWcURy2P5Ad5oX4Bo6uvIPpzRudA=) 3: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 4: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 5: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: P7FAE2gMoX7uXp6j7MmNKsoLfBFyl6QJXzfNAQ03U78=) 6: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 7: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) 10: mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa (hash: 64Bq4BjaquUNa/q+gUB1JEszW2wTR9StXwwTroa+sNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:26:ed:15:81:3e:aa:e3:f7:31:6c:7a:05:58:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Mar 1 20:00:43 2026 GMT Not After : Mar 2 20:00:43 2026 GMT Subject: CN=34b637c0cbb924fe064d64e53a3df7b2fcfe1b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:73:91:14:19:89:8a:c6:55:ee:d8:3f:33: 77:24:7c:22:5f:fd:2d:c3:33:1f:96:a8:73:be:53: d7:ab:c2:c8:7d:48:2e:30:6f:f3:09:d5:3d:35:20: 1b:e9:64:6a:82:e3:21:d8:04:36:72:89:d8:e8:50: 3f:ec:52:79:7d:a2:e2:11:46:13:c1:f2:b5:d4:97: f6:b6:bd:5e:c4:c5:e0:2b:7f:2d:ce:87:69:48:a0: 11:b9:fc:eb:eb:d6:c2:1f:bd:b0:11:7b:1b:c5:0a: 29:44:a3:5c:51:77:8c:10:62:b4:be:2b:01:f4:c5: d2:a8:4e:54:f1:e0:5a:cc:99:31:fd:7b:72:68:91: 15:00:d9:32:98:cc:ea:97:c7:69:b1:8b:bc:be:c7: a3:65:2f:46:30:31:53:e2:6c:7f:35:4d:12:3a:a7: f4:83:22:b2:8a:d8:e0:9b:57:c1:b3:12:06:82:09: dd:7a:ae:32:cf:76:8a:e2:7a:6c:84:6a:38:fc:74: 51:cd:c9:72:9c:80:62:58:a0:41:51:ca:26:7b:7a: 03:79:04:e4:91:16:00:e9:f8:8b:3f:f3:e7:88:3b: 52:61:d2:5e:fd:c4:b8:16:28:dd:66:64:42:a5:da: c5:77:b8:fd:00:be:dd:36:1a:34:17:a1:0e:42:79: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B6:37:C0:CB:B9:24:FE:06:4D:64:E5:3A:3D:F7:B2:FC:FE:1B:13 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:07:a2:7f:ce:cc:57:9c:6c:b8:6d:e1:3c:32:0e:58:5f:6c: dc:fd:f0:60:8a:25:e7:c3:59:ba:69:84:c6:6d:e5:28:d6:cc: b5:ec:bd:e4:54:b6:75:cd:40:6a:d7:83:17:f8:45:f4:07:76: e0:38:5d:51:6c:e0:dd:55:1e:ac:cd:a0:bf:e0:56:45:1f:06: 8c:0d:e9:8a:4e:ec:d0:16:99:f5:be:c0:01:1b:7c:9a:f7:cb: 19:80:7b:ef:cd:d0:64:72:b4:37:16:77:d9:32:cd:b9:03:6f: 54:98:64:06:10:ef:cd:b9:f1:ff:a5:9c:12:dd:38:c3:01:ff: b0:64:09:b5:47:d4:4b:00:ad:8a:c4:a4:e4:52:d6:88:17:ec: a9:71:74:74:69:2b:dc:af:6d:f2:8e:a0:f2:9f:a7:1d:25:38: 31:7c:ce:21:ec:24:bd:40:9d:76:73:35:a9:4c:26:42:da:f7: 2b:ac:b6:60:26:83:f1:44:6e:fb:5e:d6:5e:4e:1f:e6:af:70: 51:10:b0:7e:6f:1b:ad:16:e6:c0:e2:50:a2:a5:17:bf:2f:36: c6:78:4d:0c:a8:06:7e:4f:64:3c:2a:ea:dc:ff:24:13:3a:69: 04:b9:78:7e:64:26:b1:b7:59:a4:23:0d:a1:45:b9:ba:eb:ec: 8d:d6:96:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/SbtFYE+quP3MWx6BVisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwMzAxMjAwMDQzWhcNMjYwMzAyMjAwMDQzWjAzMTEwLwYDVQQD EygzNGI2MzdjMGNiYjkyNGZlMDY0ZDY0ZTUzYTNkZjdiMmZjZmUxYjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAFzkRQZiYrGVe7YPzN3JHwiX/0t wzMflqhzvlPXq8LIfUguMG/zCdU9NSAb6WRqguMh2AQ2conY6FA/7FJ5faLiEUYT wfK11Jf2tr1exMXgK38tzodpSKARufzr69bCH72wEXsbxQopRKNcUXeMEGK0visB 9MXSqE5U8eBazJkx/XtyaJEVANkymMzql8dpsYu8vsejZS9GMDFT4mx/NU0SOqf0 gyKyitjgm1fBsxIGggndeq4yz3aK4npshGo4/HRRzclynIBiWKBBUcome3oDeQTk kRYA6fiLP/PniDtSYdJe/cS4FijdZmRCpdrFd7j9AL7dNho0F6EOQnlRgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDS2N8DLuST+Bk1k5To997L8/hsTMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQeif87M V5xsuG3hPDIOWF9s3P3wYIol58NZummExm3lKNbMtey95FS2dc1AateDF/hF9Ad2 4DhdUWzg3VUerM2gv+BWRR8GjA3pik7s0BaZ9b7AARt8mvfLGYB7783QZHK0NxZ3 2TLNuQNvVJhkBhDvzbnx/6WcEt04wwH/sGQJtUfUSwCtisSk5FLWiBfsqXF0dGkr 3K9t8o6g8p+nHSU4MXzOIewkvUCddnM1qUwmQtr3K6y2YCaD8URu+17WXk4f5q9w URCwfm8brRbmwOJQoqUXvy82xnhNDKgGfk9kPCrq3P8kEzppBLl4fmQmsbdZpCMN oUW5uuvsjdaW7w== -----END CERTIFICATE-----Generated at Mon Mar 2 04:02:42 2026 by rpki-client