$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft File: kdDHjDCaPpncmrdPLNwEhIWedTA.mft (raw, json) Hash identifier: rZyJFqsv8UxYRgVCwSICAvCjrgt9VNVCOe+LTWYpc5o= Subject key identifier: 5F:80:AD:EF:5D:CE:77:C6:0D:4C:89:44:18:F9:1B:53:93:1D:45:E6 Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 01A0BEE73BE7D0E36678F64AF279A520CB4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft Manifest number: 1580 Signing time: Sun 20 Sep 2026 13:00:20 +0000 Manifest this update: Sun 20 Sep 2026 13:00:20 +0000 Manifest next update: Mon 21 Sep 2026 13:00:20 +0000 Files and hashes: 1: 4VmR_FihzyMKRVwNqS1q32ma_4w.roa (hash: 8llGmDSPV1S8WvDmecxyGu8AsVkz9E7OwToEbm9Afi8=) 2: 5Vmgwb9F8vQSn62TUA3DtbFUacY.roa (hash: 4EZeJdyzRgVjWWf5FyUvU3cY8Jjs1Q2gQ6LYk3w4pZ0=) 3: 9ThI9Z7soYxz8aK7SxBvxoPEOX4.roa (hash: 2FCnysFwLOl4zVeb97SHJ1QvBKVL+gw4QmS3UAORjFk=) 4: BsMfnzrxddpnmFQ8FtiqLN4hIRw.roa (hash: GbFN7H89aII0f8FiIff5RGaJGPYoV9OOEoYuPkHE93c=) 5: C67-QabxkPaVhoCKelfc7gJ1hK8.roa (hash: 0WW6NyrxV5VH4o1lj6kLTZOdEKPeDBs7ouwPQd+hBHw=) 6: GXCfAVmuuL63Oe4dOVqYkc3Wuzg.roa (hash: L3MDEpVumA01FdWvikqD5sE8kkEXPwKtDKdz6KqfMnQ=) 7: RY0bArq-jZLzZUGQCt7VtVQ1eP8.roa (hash: nOIDnyfWMWKkEgKPjDc9li7leEEkKMO7ZYw+RINdMRI=) 8: WNwct_JeSUw9EGnGt5EMmHO1qnA.roa (hash: 8JESbBJVZwKNLtuuBYLAyN1yjWX+0RJfMcx4iiDnUQ0=) 9: br-MdcUGAgIJZ2jokAIrGgvBgVg.roa (hash: nAJrJwXFm0eNNJbUiUMkYMOpV3Mo7gqR8CqVePMN9SA=) 10: kdDHjDCaPpncmrdPLNwEhIWedTA.crl (hash: Mn9Hm2uwW8xEdnedBHqsuK236w3lesFu50iY5Tb7Bsg=) 11: p3gPfuFdg2rqrSBfl0UDEUdNbjM.roa (hash: bWC6ioqLuy3JQURX6TTBBncQtFn3EtAYrnrtm+JIq5g=) 12: qoJxh9RoMci9r1884qksasXONeQ.roa (hash: b1P5hF2MWBN0Il3GucTyqyanvw/mWve+jbkBZTYW4xQ=) 13: rUMTx45HXhT_MTA8guO-8T9IUPs.roa (hash: yK8AP3UaROn7J6m+AMP74llGEVQg0fy8g5ZS+T2U/tk=) 14: zByDWqzQes6Qf_5yruyAW6l4NA8.roa (hash: 4mGvD80bIUslVCK/Nf88S+YHOSjLonqjJpu89t+7Om0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 13:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:e7:3b:e7:d0:e3:66:78:f6:4a:f2:79:a5:20:cb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Sep 20 13:00:20 2026 GMT Not After : Sep 21 13:00:20 2026 GMT Subject: CN=5f80adef5dce77c60d4c894418f91b53931d45e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:21:4a:67:c3:7e:42:32:a7:2c:37:2f:09: 12:9e:df:07:ea:87:05:5d:7b:b5:ae:56:19:a0:67: 83:ab:13:cc:28:35:05:ed:5d:46:4e:5c:0f:95:65: 17:4a:fe:88:3f:79:0e:2b:81:fa:7a:2c:9d:12:fb: b2:5e:7c:4e:e9:82:97:51:df:03:07:3b:66:5b:91: 01:b6:32:19:1c:8e:37:c4:c2:f3:e5:bf:23:e0:f6: c3:a3:40:df:b1:f0:f2:75:81:11:39:73:e4:11:d0: a2:ce:72:40:b5:5c:5b:d6:df:17:80:ed:70:19:35: c8:23:12:e3:3b:23:88:98:98:90:4f:c5:c7:ec:e7: 20:b4:10:47:7d:9e:40:66:60:42:eb:96:ab:a2:b8: 7a:e3:09:2a:5f:73:ac:ab:9e:07:19:71:3f:31:ac: de:92:33:3b:d9:a7:73:db:6e:85:80:a3:06:6e:07: 54:41:03:12:6b:e1:a7:f3:1f:ef:40:12:33:b7:c5: f5:35:5c:6d:48:58:ac:ff:fd:c5:0b:f4:68:43:50: 77:96:85:07:9d:fb:12:cc:99:41:82:8e:a4:79:62: 6d:39:04:a1:c6:67:fa:aa:4b:c2:0b:08:21:5f:a1: 1b:f6:4d:d8:9b:4f:1b:a4:68:bf:75:0d:5d:36:b1: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:80:AD:EF:5D:CE:77:C6:0D:4C:89:44:18:F9:1B:53:93:1D:45:E6 X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:91:54:c6:8e:85:05:da:19:33:8b:e0:87:2a:47:69:d7:9b: 47:f0:03:7f:05:1f:4a:9d:e9:92:14:23:87:52:93:ce:7f:ac: fd:6a:5c:22:66:e3:f2:55:c7:16:a5:2e:6f:da:00:a1:5e:b2: 34:5f:b6:b1:32:1e:5b:2c:d5:1a:b6:20:70:cd:11:d4:a8:f6: db:a5:f9:cf:73:e5:f6:69:01:6c:f0:0b:bf:57:62:0e:c7:38: 1e:55:eb:26:9a:3d:c8:20:a5:04:76:cd:d7:c4:f7:52:38:c8: f4:e2:f0:b3:82:34:54:6b:4d:45:b3:69:05:cf:c8:d7:38:af: 7b:13:67:a9:c3:b6:72:5f:67:62:30:dc:e1:0f:4c:83:b7:98: 81:17:6b:e1:87:40:39:a0:b7:aa:dd:22:9e:14:30:9e:8c:8c: b2:86:c8:c5:89:90:ae:b7:51:24:6b:93:7a:a6:bd:41:1e:77: ac:64:d4:46:ae:00:77:34:b0:7b:d8:2e:db:ec:37:dc:96:df: 45:77:d3:84:0e:48:44:f5:f5:14:81:b3:3e:7c:a1:0e:68:25: d4:bc:b5:f5:28:17:89:a5:fc:ef:1e:37:53:11:4f:3f:1c:dd: ee:67:82:22:b3:cf:1d:30:bf:ad:f0:b5:9e:1a:63:59:73:3c: 5e:ef:67:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+5zvn0ONmePZK8nmlIMtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYwOTIwMTMwMDIwWhcNMjYwOTIxMTMwMDIwWjAzMTEwLwYDVQQD Eyg1ZjgwYWRlZjVkY2U3N2M2MGQ0Yzg5NDQxOGY5MWI1MzkzMWQ0NWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWMhSmfDfkIypyw3LwkSnt8H6ocF XXu1rlYZoGeDqxPMKDUF7V1GTlwPlWUXSv6IP3kOK4H6eiydEvuyXnxO6YKXUd8D BztmW5EBtjIZHI43xMLz5b8j4PbDo0DfsfDydYEROXPkEdCiznJAtVxb1t8XgO1w GTXIIxLjOyOImJiQT8XH7OcgtBBHfZ5AZmBC65arorh64wkqX3Osq54HGXE/Maze kjM72adz226FgKMGbgdUQQMSa+Gn8x/vQBIzt8X1NVxtSFis//3FC/RoQ1B3loUH nfsSzJlBgo6keWJtOQShxmf6qkvCCwghX6Eb9k3Ym08bpGi/dQ1dNrEbnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+Are9dznfGDUyJRBj5G1OTHUXmMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5FUxo6F BdoZM4vghypHadebR/ADfwUfSp3pkhQjh1KTzn+s/WpcImbj8lXHFqUub9oAoV6y NF+2sTIeWyzVGrYgcM0R1Kj226X5z3Pl9mkBbPALv1diDsc4HlXrJpo9yCClBHbN 18T3UjjI9OLws4I0VGtNRbNpBc/I1zivexNnqcO2cl9nYjDc4Q9Mg7eYgRdr4YdA OaC3qt0inhQwnoyMsobIxYmQrrdRJGuTeqa9QR53rGTURq4AdzSwe9gu2+w33Jbf RXfThA5IRPX1FIGzPnyhDmgl1Ly19SgXiaX87x43UxFPPxzd7meCIrPPHTC/rfC1 nhpjWXM8Xu9n0Q== -----END CERTIFICATE-----Generated at Sun Sep 20 22:33:31 2026 by rpki-client