$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: 0r0B+v6KGMi0cESffkxdmaNWjDBOkdflPvyfaTlpS8g= Subject key identifier: 42:09:FC:08:33:A5:7A:61:6F:C1:8E:93:E3:82:2C:6D:72:E7:FA:19 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 01A0E0984BB19BB26987F9841B9C967C670E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 1A7B Signing time: Sun 27 Sep 2026 02:01:12 +0000 Manifest this update: Sun 27 Sep 2026 02:01:12 +0000 Manifest next update: Mon 28 Sep 2026 02:01:12 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: Dw40BRHqKJuAV8Kwr8gB87CsUnLa38q3yBGYqFVMOCg=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e0:98:4b:b1:9b:b2:69:87:f9:84:1b:9c:96:7c:67:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Sep 27 02:01:12 2026 GMT Not After : Sep 28 02:01:12 2026 GMT Subject: CN=4209fc0833a57a616fc18e93e3822c6d72e7fa19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:70:9c:62:59:b5:4f:f8:0b:dc:17:c5:0c: 56:aa:53:4b:18:3b:93:3a:a2:e5:59:32:67:87:ae: 30:07:bc:3e:df:49:2c:b4:3a:78:bb:ed:61:ec:69: 47:88:e2:28:9c:7d:66:d4:db:86:17:8d:ec:9a:49: ec:77:a9:87:0c:6c:5d:83:b3:c3:4e:36:93:02:2d: 65:8d:90:d6:6b:64:12:cb:54:f0:ec:84:d2:2d:06: e1:9e:8e:f9:01:60:b3:e7:96:b3:58:4d:7f:c2:ea: 93:71:60:da:70:49:0e:54:27:45:8e:ae:2c:ad:62: 83:08:d6:ca:15:26:cb:ad:22:f8:c4:cf:d4:6e:89: a8:2e:6a:99:f9:af:02:4c:79:fe:8a:ca:6b:d4:3e: bb:bc:9c:24:c8:83:4d:3a:c9:e6:39:fc:3b:53:b6: e1:b3:97:28:0b:af:a9:a7:48:92:ae:a4:1c:6a:0f: c6:47:41:a3:06:d4:5c:11:c2:f6:ea:83:29:ca:0d: 75:9e:fe:65:e9:5d:f7:7c:9a:5e:42:ea:cd:36:5b: 71:5d:87:2b:ff:a0:6c:15:71:93:9e:fa:e2:ad:97: 67:e6:0d:a2:3c:81:47:96:8a:ae:fd:f4:97:0e:0b: 9f:1c:4f:1a:b6:30:25:59:1b:6e:6f:aa:82:97:92: de:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:09:FC:08:33:A5:7A:61:6F:C1:8E:93:E3:82:2C:6D:72:E7:FA:19 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e4:2c:36:41:de:ab:1d:20:aa:1a:89:6d:c9:d4:b6:de:57: 5f:46:7d:c7:34:a7:dd:1f:6d:6c:76:70:1e:96:0d:0c:9a:85: 50:56:0a:38:7a:66:4f:af:06:b1:9c:b4:df:76:ac:88:82:1c: 5b:d6:a3:57:e5:93:50:b3:54:35:81:a9:4b:2c:0a:3f:b6:ef: 6c:a3:8e:1e:0d:10:79:d2:00:d4:ea:34:62:da:ac:6d:9d:c1: 48:7b:56:e6:e2:aa:ff:67:f1:cc:40:51:d8:de:38:80:47:e7: ee:9b:c9:05:42:98:22:cd:12:f3:38:fe:91:6c:72:40:41:fc: ea:44:a7:4c:d7:64:39:81:af:48:ca:b3:71:94:56:10:0a:87: 18:b8:4e:58:fc:76:96:e5:ba:2f:14:99:af:ad:af:14:b2:cf: 9c:c9:63:4f:17:8e:99:0b:84:7d:ca:93:c5:a8:0a:3c:f4:a1: 6f:7e:dd:e7:ca:2f:c5:35:76:01:41:92:b8:2a:b3:88:2c:81: ca:8d:23:e5:fa:36:e1:6f:63:de:23:19:68:ed:b5:7e:06:48: 99:7a:bc:ef:21:bd:f1:5c:4d:ea:ba:7e:ea:e3:12:cc:9c:75: e5:d1:d0:c4:3c:b5:14:16:56:4d:9b:9a:70:20:e8:5d:96:a6: 47:18:a7:c5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaDgmEuxm7Jph/mEG5yWfGcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwOTI3MDIwMTEyWhcNMjYwOTI4MDIwMTEyWjAzMTEwLwYDVQQD Eyg0MjA5ZmMwODMzYTU3YTYxNmZjMThlOTNlMzgyMmM2ZDcyZTdmYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDdwnGJZtU/4C9wXxQxWqlNLGDuT OqLlWTJnh64wB7w+30kstDp4u+1h7GlHiOIonH1m1NuGF43smknsd6mHDGxdg7PD TjaTAi1ljZDWa2QSy1Tw7ITSLQbhno75AWCz55azWE1/wuqTcWDacEkOVCdFjq4s rWKDCNbKFSbLrSL4xM/UbomoLmqZ+a8CTHn+ispr1D67vJwkyINNOsnmOfw7U7bh s5coC6+pp0iSrqQcag/GR0GjBtRcEcL26oMpyg11nv5l6V33fJpeQurNNltxXYcr /6BsFXGTnvrirZdn5g2iPIFHloqu/fSXDgufHE8atjAlWRtub6qCl5LeOwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEIJ/AgzpXphb8GOk+OCLG1y5/oZMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquQs NkHeqx0gqhqJbcnUtt5XX0Z9xzSn3R9tbHZwHpYNDJqFUFYKOHpmT68GsZy033as iIIcW9ajV+WTULNUNYGpSywKP7bvbKOOHg0QedIA1Oo0YtqsbZ3BSHtW5uKq/2fx zEBR2N44gEfn7pvJBUKYIs0S8zj+kWxyQEH86kSnTNdkOYGvSMqzcZRWEAqHGLhO WPx2luW6LxSZr62vFLLPnMljTxeOmQuEfcqTxagKPPShb37d58ovxTV2AUGSuCqz iCyByo0j5fo24W9j3iMZaO21fgZImXq87yG98VxN6rp+6uMSzJx15dHQxDy1FBZW TZuacCDoXZamRxinxQ== -----END CERTIFICATE-----Generated at Sun Sep 27 08:46:50 2026 by rpki-client