$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft File: KknhDg5wlLReuhwW-WN-HOxnvcY.mft (raw, json) Hash identifier: 72sXtpFzyULDaVI8Gu0CFmH6kQe63RTTtAnum77ZLEs= Subject key identifier: EC:1D:E0:0B:C7:84:19:CB:69:BE:AA:21:7B:D2:66:DD:D4:B2:39:98 Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Certificate serial: 01A0E85307A02669569E250DEC91986E0B8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft Manifest number: 02B0 Signing time: Mon 28 Sep 2026 14:02:30 +0000 Manifest this update: Mon 28 Sep 2026 14:02:30 +0000 Manifest next update: Tue 29 Sep 2026 14:02:30 +0000 Files and hashes: 1: CQnRFbws69KUV1eDOh7tfsMPWcY.roa (hash: XQrjplYUGhogLSVTsLi+InaBCSnPLhVF2WDLQrbLme4=) 2: KknhDg5wlLReuhwW-WN-HOxnvcY.crl (hash: 3GbyHYQk9H/nS9j92aYpw+m+OjhN2LwjV6DhVUlE+u4=) 3: LsTr7Vivk39ZgCbG387swerRK6c.roa (hash: qnydcWksp1kG77yb//mZBlPJ1UQa9L4iT4xclFDE6nk=) 4: Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa (hash: G0/QzlmRMEQtlNEZ8lhOPdNMyp6Hv4D1m4DiR2+PyZA=) 5: XZZS0J9cNFB34TPouF3k8-ZfCvw.roa (hash: /aqeE5gEnv2LBAY7p2JR8leoHcxdA9dbAKTDFlT19hs=) 6: Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa (hash: x6gttKcvk6cgj+0qilLdOAO3qlZUqMHAp+PtTLr5hkc=) 7: _JIme0QPIMt9vEAapbO3X4DxZ6o.roa (hash: 2TlFaoRWvQThXcHP6fVI19fGDUkBsF3BMCmvRQGDI4o=) 8: bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa (hash: ddJ0XAD6t5QQElM8h1FtjnOAe1zaPavt5df6dzC3Pqs=) 9: m8zy49mlilgd1SPfU7e74Pq-L9w.roa (hash: 3ByWSNaUHf3Y97SFh9Lm+qACChqfIOs4+xqkpYGrpug=) 10: v22kTg0bTYFeeEWrApNqBfg_jxY.roa (hash: x8keV3yS66xLjOAZX4BOX56TvQOMZSSX31M99Vku2wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:53:07:a0:26:69:56:9e:25:0d:ec:91:98:6e:0b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Validity Not Before: Sep 28 14:02:30 2026 GMT Not After : Sep 29 14:02:30 2026 GMT Subject: CN=ec1de00bc78419cb69beaa217bd266ddd4b23998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:55:7f:b9:67:47:89:ca:d7:11:f0:4d:8f:ac: 5f:02:c2:28:4b:e2:5c:61:9a:97:e2:af:bf:b3:01: 7e:69:17:8e:60:07:1e:c4:f3:b6:26:c4:59:43:5b: 02:e1:1a:cb:c9:27:38:c2:bc:27:aa:99:a7:db:df: 89:64:1e:85:13:39:fe:0c:2a:ea:a6:d0:04:dd:cb: 6a:b1:9d:f2:b0:f0:b1:cb:19:de:93:f6:5d:b6:df: 6d:8e:4f:d0:63:3a:15:f5:51:37:b5:24:99:a3:b5: 2a:02:3f:37:d4:a3:99:a4:83:02:f7:79:c1:d5:fc: 61:3a:34:af:7e:df:14:bb:86:cc:78:3c:92:39:2b: e9:e1:c4:5b:e8:82:5a:6d:37:0b:4d:34:be:4e:4a: 49:87:e4:c2:4d:3d:51:cb:e1:40:32:ec:6a:cd:48: e0:3a:8e:0d:f4:25:a3:31:4a:d8:60:82:eb:bf:07: 7e:b5:07:fe:a2:f6:8d:0b:d2:e4:c6:34:ae:50:f0: ac:f6:99:85:9e:4c:0b:48:0b:70:55:0d:19:fa:92: a6:61:12:cd:38:05:8b:47:38:90:d1:29:8f:fb:b5: d5:36:4d:e9:5b:06:2a:20:59:26:d6:c1:09:1d:d6: 25:ea:43:91:a7:9b:8d:59:27:54:a1:a6:17:bb:c6: 4e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1D:E0:0B:C7:84:19:CB:69:BE:AA:21:7B:D2:66:DD:D4:B2:39:98 X509v3 Authority Key Identifier: keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7d:ef:0d:be:3b:7b:fa:12:2e:c5:a6:d9:85:81:1f:41:09: 86:05:33:66:de:7d:6d:9f:d8:d1:a6:43:75:4d:09:ad:aa:97: 09:05:3b:6b:a2:e7:ad:88:df:47:ea:a0:50:c1:62:5a:43:de: 98:ea:92:c6:11:eb:d1:42:9c:f2:d5:70:b1:3d:45:c9:10:ad: 18:95:26:db:b3:bc:6c:ef:cb:79:19:c7:2a:0f:2b:9e:ff:e9: 90:58:22:bd:3a:ab:ef:30:d2:d2:93:11:bd:78:73:3e:b6:84: 41:56:02:66:7d:43:ca:da:06:09:d7:70:cf:6a:e1:98:fb:51: 9b:77:ac:6a:43:f1:4d:53:6d:d1:8a:5a:3e:b5:f4:b1:13:77: ad:bb:56:a0:20:20:10:d2:6d:82:c4:05:85:e2:14:65:d7:3e: 32:80:57:70:0e:58:7a:d4:c5:52:8b:26:be:2d:5b:96:41:a2: 29:e7:98:28:92:fb:e6:51:88:12:99:7a:a5:3f:a0:0e:f0:30: bc:5a:14:30:85:b5:e3:f0:40:33:58:41:1f:2e:fb:28:7f:49: c1:9b:74:05:62:62:6f:4d:db:b0:85:02:25:4b:63:16:22:01: 97:e5:94:8d:dd:82:8c:93:1d:d8:de:25:25:44:1a:77:0a:f9: e3:b2:23:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDoUwegJmlWniUN7JGYbguKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDllMTBlMGU3MDk0YjQ1ZWJhMWMxNmY5NjM3ZTFjZWM2 N2JkYzYwHhcNMjYwOTI4MTQwMjMwWhcNMjYwOTI5MTQwMjMwWjAzMTEwLwYDVQQD EyhlYzFkZTAwYmM3ODQxOWNiNjliZWFhMjE3YmQyNjZkZGQ0YjIzOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VV/uWdHicrXEfBNj6xfAsIoS+Jc YZqX4q+/swF+aReOYAcexPO2JsRZQ1sC4RrLySc4wrwnqpmn29+JZB6FEzn+DCrq ptAE3ctqsZ3ysPCxyxnek/Zdtt9tjk/QYzoV9VE3tSSZo7UqAj831KOZpIMC93nB 1fxhOjSvft8Uu4bMeDySOSvp4cRb6IJabTcLTTS+TkpJh+TCTT1Ry+FAMuxqzUjg Oo4N9CWjMUrYYILrvwd+tQf+ovaNC9LkxjSuUPCs9pmFnkwLSAtwVQ0Z+pKmYRLN OAWLRziQ0SmP+7XVNk3pWwYqIFkm1sEJHdYl6kORp5uNWSdUoaYXu8ZOUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwd4AvHhBnLab6qIXvSZt3UsjmYMB8GA1UdIwQY MBaAFCpJ4Q4OcJS0XrocFvljfhzsZ73GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQt MmQzOGIzOTNiMTIzLzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQtMmQzOGIzOTNiMTIz LzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYH3vDb47 e/oSLsWm2YWBH0EJhgUzZt59bZ/Y0aZDdU0JraqXCQU7a6LnrYjfR+qgUMFiWkPe mOqSxhHr0UKc8tVwsT1FyRCtGJUm27O8bO/LeRnHKg8rnv/pkFgivTqr7zDS0pMR vXhzPraEQVYCZn1DytoGCddwz2rhmPtRm3esakPxTVNt0YpaPrX0sRN3rbtWoCAg ENJtgsQFheIUZdc+MoBXcA5YetTFUosmvi1blkGiKeeYKJL75lGIEpl6pT+gDvAw vFoUMIW14/BAM1hBHy77KH9JwZt0BWJib03bsIUCJUtjFiIBl+WUjd2CjJMd2N4l JUQadwr547Ijog== -----END CERTIFICATE-----Generated at Mon Sep 28 20:26:52 2026 by rpki-client