$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft File: KknhDg5wlLReuhwW-WN-HOxnvcY.mft (raw, json) Hash identifier: rFj7f9snyB9qwPU2t4qbR0xb5G+osCowf8HclgDPbTM= Subject key identifier: B2:EE:66:AE:4A:BB:5E:87:9F:BA:D1:04:87:3D:7E:76:CD:32:6E:E4 Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Certificate serial: 019FA9AC41BE9DC12DD1604D97734131CB2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft Manifest number: 020B Signing time: Tue 28 Jul 2026 17:01:06 +0000 Manifest this update: Tue 28 Jul 2026 17:01:06 +0000 Manifest next update: Wed 29 Jul 2026 17:01:06 +0000 Files and hashes: 1: CQnRFbws69KUV1eDOh7tfsMPWcY.roa (hash: XQrjplYUGhogLSVTsLi+InaBCSnPLhVF2WDLQrbLme4=) 2: KknhDg5wlLReuhwW-WN-HOxnvcY.crl (hash: kB/LBA+A5SEuUruCXOOy9GpeyDJlfw16geegl2oqsRU=) 3: LsTr7Vivk39ZgCbG387swerRK6c.roa (hash: qnydcWksp1kG77yb//mZBlPJ1UQa9L4iT4xclFDE6nk=) 4: Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa (hash: G0/QzlmRMEQtlNEZ8lhOPdNMyp6Hv4D1m4DiR2+PyZA=) 5: XZZS0J9cNFB34TPouF3k8-ZfCvw.roa (hash: /aqeE5gEnv2LBAY7p2JR8leoHcxdA9dbAKTDFlT19hs=) 6: Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa (hash: x6gttKcvk6cgj+0qilLdOAO3qlZUqMHAp+PtTLr5hkc=) 7: _JIme0QPIMt9vEAapbO3X4DxZ6o.roa (hash: 2TlFaoRWvQThXcHP6fVI19fGDUkBsF3BMCmvRQGDI4o=) 8: bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa (hash: ddJ0XAD6t5QQElM8h1FtjnOAe1zaPavt5df6dzC3Pqs=) 9: m8zy49mlilgd1SPfU7e74Pq-L9w.roa (hash: 3ByWSNaUHf3Y97SFh9Lm+qACChqfIOs4+xqkpYGrpug=) 10: v22kTg0bTYFeeEWrApNqBfg_jxY.roa (hash: x8keV3yS66xLjOAZX4BOX56TvQOMZSSX31M99Vku2wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:41:be:9d:c1:2d:d1:60:4d:97:73:41:31:cb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Validity Not Before: Jul 28 17:01:06 2026 GMT Not After : Jul 29 17:01:06 2026 GMT Subject: CN=b2ee66ae4abb5e879fbad104873d7e76cd326ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:16:25:bb:92:8c:e2:9c:53:06:44:e8:f7: c3:2f:4f:62:56:2e:49:ac:65:08:56:ea:29:5c:34: 8c:23:db:e4:92:62:06:1e:75:b1:ea:8e:37:aa:7b: 3b:d8:b9:4c:d4:ef:d6:b4:17:66:9a:6d:97:b3:24: 11:c8:72:f1:be:81:cf:90:b8:04:82:ef:bc:90:59: f4:6a:27:3f:1f:55:a4:03:ae:cb:f9:8b:33:bb:fc: fa:f7:74:05:9a:79:ba:91:4b:b9:50:86:8d:7c:0f: 3b:0b:b9:e2:f2:eb:76:43:2e:cf:c0:30:4b:c9:ca: 9b:f8:cd:01:f7:a7:f9:f8:87:b2:52:c5:70:eb:20: 6c:28:4a:96:f0:a4:89:73:d9:f9:8f:c7:e6:c4:41: d2:2c:b3:70:d2:d2:9c:51:c6:9a:58:77:4a:ec:f4: fe:2f:76:1a:f8:b2:00:d6:41:33:fe:6a:c8:e4:6d: e5:06:bc:cf:37:5c:e6:f5:ab:0d:ed:af:3d:09:21: c5:0f:4c:81:f7:1b:c6:1d:c6:5e:88:5f:c9:3a:e0: 01:66:4d:47:64:f6:bb:c3:fa:fb:91:6e:0b:46:24: 27:ec:cf:87:de:fa:c2:45:9c:1c:3b:c5:44:7b:e4: 6d:76:cb:2d:a9:29:df:c4:11:fb:e6:8a:de:21:74: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EE:66:AE:4A:BB:5E:87:9F:BA:D1:04:87:3D:7E:76:CD:32:6E:E4 X509v3 Authority Key Identifier: keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:7d:89:25:5c:a1:64:bf:4d:76:ee:4f:a7:87:d4:5d:1d:6b: 68:c7:e4:c5:62:d7:67:a8:f7:31:25:7a:c1:70:20:ba:2c:b1: 3b:75:3e:26:1f:b8:3e:08:96:2d:21:11:e1:19:b5:25:32:30: 6f:7e:55:5b:48:2f:10:20:e4:8b:ad:e1:f3:5d:ae:71:4f:90: ef:c9:8c:90:d3:f8:00:2a:aa:e8:1b:9d:e1:38:77:d7:49:54: d2:27:71:1b:64:f1:b6:4e:e3:06:ff:d3:53:94:81:c1:b7:a4: 56:fd:ce:b3:98:21:f5:61:17:f8:aa:27:b4:0f:a7:9a:c0:84: ad:1f:fe:17:f2:f8:21:7b:62:c6:9d:d7:9e:07:88:bf:ad:d4: ac:90:14:9f:cb:b7:88:e3:f6:34:da:11:9a:ed:d3:bd:ab:64: e9:4c:e4:ef:11:95:79:20:e1:f9:41:54:71:fa:94:b9:16:7e: 5d:6f:68:ae:c9:52:cc:0f:43:26:fd:45:7e:3d:83:87:19:59: ce:4c:ae:dc:a3:e1:8c:ed:48:d9:c9:58:5d:e8:25:ba:34:6d: 2b:39:35:90:5b:cb:05:b0:59:61:53:78:67:2d:08:44:44:68: d9:57:96:32:06:e7:8a:d5:e1:ac:df:b5:b0:38:78:79:83:3c: 5b:1b:50:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prEG+ncEt0WBNl3NBMcstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDllMTBlMGU3MDk0YjQ1ZWJhMWMxNmY5NjM3ZTFjZWM2 N2JkYzYwHhcNMjYwNzI4MTcwMTA2WhcNMjYwNzI5MTcwMTA2WjAzMTEwLwYDVQQD EyhiMmVlNjZhZTRhYmI1ZTg3OWZiYWQxMDQ4NzNkN2U3NmNkMzI2ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq8WJbuSjOKcUwZE6PfDL09iVi5J rGUIVuopXDSMI9vkkmIGHnWx6o43qns72LlM1O/WtBdmmm2XsyQRyHLxvoHPkLgE gu+8kFn0aic/H1WkA67L+Yszu/z693QFmnm6kUu5UIaNfA87C7ni8ut2Qy7PwDBL ycqb+M0B96f5+IeyUsVw6yBsKEqW8KSJc9n5j8fmxEHSLLNw0tKcUcaaWHdK7PT+ L3Ya+LIA1kEz/mrI5G3lBrzPN1zm9asN7a89CSHFD0yB9xvGHcZeiF/JOuABZk1H ZPa7w/r7kW4LRiQn7M+H3vrCRZwcO8VEe+RtdsstqSnfxBH75oreIXQUswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLuZq5Ku16Hn7rRBIc9fnbNMm7kMB8GA1UdIwQY MBaAFCpJ4Q4OcJS0XrocFvljfhzsZ73GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQt MmQzOGIzOTNiMTIzLzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQtMmQzOGIzOTNiMTIz LzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtH2JJVyh ZL9Ndu5Pp4fUXR1raMfkxWLXZ6j3MSV6wXAguiyxO3U+Jh+4PgiWLSER4Rm1JTIw b35VW0gvECDki63h812ucU+Q78mMkNP4ACqq6Bud4Th310lU0idxG2Txtk7jBv/T U5SBwbekVv3Os5gh9WEX+KontA+nmsCErR/+F/L4IXtixp3XngeIv63UrJAUn8u3 iOP2NNoRmu3Tvatk6Uzk7xGVeSDh+UFUcfqUuRZ+XW9orslSzA9DJv1Ffj2DhxlZ zkyu3KPhjO1I2clYXeglujRtKzk1kFvLBbBZYVN4Zy0IRERo2VeWMgbnitXhrN+1 sDh4eYM8WxtQVQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:37:12 2026 by rpki-client