$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: 4DjS0RaAJRW9NaX7L6DSTuhoQlpfMqhMVzvDFNtithQ= Subject key identifier: E7:29:2C:26:D4:69:D2:3E:03:F6:31:A6:0B:54:54:46:63:CA:DC:77 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 01A0C39FD18074CAD226F89FEFB9B72BF448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 1A6C Signing time: Mon 21 Sep 2026 11:00:26 +0000 Manifest this update: Mon 21 Sep 2026 11:00:26 +0000 Manifest next update: Tue 22 Sep 2026 11:00:26 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: KWU10siWEFvuMwVc+9/VHbpGpUVGRTcDqVpmvzAoHow=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:9f:d1:80:74:ca:d2:26:f8:9f:ef:b9:b7:2b:f4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Sep 21 11:00:26 2026 GMT Not After : Sep 22 11:00:26 2026 GMT Subject: CN=e7292c26d469d23e03f631a60b54544663cadc77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:4c:8b:07:56:dc:d8:a8:be:f9:25:81:e5: 98:e7:78:80:28:ab:14:0a:b0:1d:96:59:e7:3f:93: d4:89:2b:3a:53:c3:16:32:e1:80:50:9b:5d:01:4e: 46:e0:93:52:a3:41:9c:b3:58:81:50:21:a0:f0:8d: c5:ff:3a:51:b3:4c:77:c5:5f:d6:2e:b0:8c:a2:21: db:57:ff:db:d8:44:fb:e4:d5:0f:1c:56:c8:bb:e5: 89:c0:2a:a6:8e:aa:7b:10:6e:d7:c0:f2:f6:9e:e4: 89:b5:7e:d1:b5:a1:90:43:db:35:ea:54:df:1a:5f: 50:1c:5d:9c:b4:b5:65:ba:cb:05:0f:93:8f:15:d1: 03:36:0b:8d:82:e9:9f:0a:5e:cf:b6:b9:3b:9d:92: 76:96:06:f6:fc:73:f7:a7:0a:13:d9:f7:b6:07:1f: c4:28:d9:f4:ce:82:81:92:11:b9:bf:0c:a1:84:a5: 81:a3:ac:86:93:c4:47:7f:b3:a3:0e:eb:a5:c0:a6: 30:ca:64:6a:71:21:1e:c9:f5:f2:97:40:63:3d:d0: bd:f1:4d:8c:74:39:ae:52:1d:1c:11:09:7e:c2:7e: fb:f9:7a:c2:54:31:54:e7:f5:74:27:b5:16:34:2a: 80:0a:a0:b9:6b:78:f3:20:f5:77:b0:38:70:e9:ca: 5b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:29:2C:26:D4:69:D2:3E:03:F6:31:A6:0B:54:54:46:63:CA:DC:77 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b0:50:bf:6c:a3:04:80:5f:95:18:43:ce:3c:91:db:09:89: 1d:ab:f6:68:ad:a8:69:a9:6e:99:b3:38:21:1c:f5:16:1e:96: a8:f2:e3:f2:84:2c:65:f3:90:ce:7c:11:54:3e:0c:07:d0:cf: ae:f2:73:f8:d2:2e:49:bf:f4:05:e1:be:22:02:47:0d:94:f3: 0a:f1:73:cb:15:da:3f:f0:04:01:a3:47:e2:99:7e:f2:33:94: f6:e2:0f:8a:6e:8c:bf:80:b4:9f:2e:27:00:ec:e7:43:65:a9: 94:a8:70:d3:95:a5:8f:55:81:e1:fd:ca:ca:a7:c0:55:33:03: 7f:7d:9b:15:31:24:22:6f:13:15:63:0c:dc:38:b0:08:5f:e5: b0:1b:5a:64:d1:e8:3a:e7:d9:92:e6:7b:35:0f:8a:50:dd:53: af:4d:ff:d2:ea:0a:38:9a:69:36:a3:b3:cf:47:9a:b4:7d:10: 89:ac:92:85:6f:45:90:90:97:ec:1d:9c:1c:9d:2b:9a:03:56: 50:6b:8f:6f:78:22:62:45:11:56:a5:78:de:62:cc:58:7a:2e: 74:4c:4b:35:0d:f5:4c:b6:81:15:84:1c:1c:98:77:03:60:7e: 72:c2:39:57:99:b0:3c:ac:42:d4:13:a1:14:0f:00:28:33:2a: cb:83:71:6b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaDDn9GAdMrSJvif77m3K/RIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwOTIxMTEwMDI2WhcNMjYwOTIyMTEwMDI2WjAzMTEwLwYDVQQD EyhlNzI5MmMyNmQ0NjlkMjNlMDNmNjMxYTYwYjU0NTQ0NjYzY2FkYzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhBMiwdW3NiovvklgeWY53iAKKsU CrAdllnnP5PUiSs6U8MWMuGAUJtdAU5G4JNSo0Gcs1iBUCGg8I3F/zpRs0x3xV/W LrCMoiHbV//b2ET75NUPHFbIu+WJwCqmjqp7EG7XwPL2nuSJtX7RtaGQQ9s16lTf Gl9QHF2ctLVlussFD5OPFdEDNguNgumfCl7Ptrk7nZJ2lgb2/HP3pwoT2fe2Bx/E KNn0zoKBkhG5vwyhhKWBo6yGk8RHf7OjDuulwKYwymRqcSEeyfXyl0BjPdC98U2M dDmuUh0cEQl+wn77+XrCVDFU5/V0J7UWNCqACqC5a3jzIPV3sDhw6cpb0QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOcpLCbUadI+A/YxpgtUVEZjytx3MB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7BQ v2yjBIBflRhDzjyR2wmJHav2aK2oaalumbM4IRz1Fh6WqPLj8oQsZfOQznwRVD4M B9DPrvJz+NIuSb/0BeG+IgJHDZTzCvFzyxXaP/AEAaNH4pl+8jOU9uIPim6Mv4C0 ny4nAOznQ2WplKhw05Wlj1WB4f3KyqfAVTMDf32bFTEkIm8TFWMM3DiwCF/lsBta ZNHoOufZkuZ7NQ+KUN1Tr03/0uoKOJppNqOzz0eatH0QiayShW9FkJCX7B2cHJ0r mgNWUGuPb3giYkURVqV43mLMWHoudExLNQ31TLaBFYQcHJh3A2B+csI5V5mwPKxC 1BOhFA8AKDMqy4Nxaw== -----END CERTIFICATE-----Generated at Mon Sep 21 23:00:53 2026 by rpki-client