$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: A7NHgctkGgJ1ewic92DMF2TBNd4JzOqJ/l7025X96qQ= Subject key identifier: 22:0D:71:84:B1:E2:87:7F:B0:ED:04:35:21:63:00:0B:5F:60:AB:AC Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 01A0C7B3650A37676B07C39F40A46F35843E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 185A Signing time: Tue 22 Sep 2026 06:00:17 +0000 Manifest this update: Tue 22 Sep 2026 06:00:17 +0000 Manifest next update: Wed 23 Sep 2026 06:00:17 +0000 Files and hashes: 1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=) 2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: 5bfPAefm5y2JpzmKairSbGTEINTK5eOo60EoEwcCaIM=) 4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=) 5: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=) 6: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=) 7: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=) 8: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=) 9: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (hash: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk=) 10: wlkqPCWXMJsz1R99hgzE3_VYv5c.roa (hash: KrKqWLoyfi0cuRqfEdDLZj1DmY6m+y1d1kGaimNA4oE=) 11: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:b3:65:0a:37:67:6b:07:c3:9f:40:a4:6f:35:84:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Sep 22 06:00:17 2026 GMT Not After : Sep 23 06:00:17 2026 GMT Subject: CN=220d7184b1e2877fb0ed04352163000b5f60abac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:47:78:d8:ee:a7:ba:1a:02:c8:e8:dd:1f:92: 01:6b:9b:ee:48:8a:62:6f:32:36:41:d2:a3:46:fe: 97:d4:1f:00:46:b1:b3:49:67:06:4a:0a:dc:5f:eb: b8:85:87:5d:85:5d:d4:2e:d6:1c:0c:73:2e:b7:f2: 11:fd:12:e5:ee:33:21:1f:12:76:ca:8f:de:02:f0: cb:07:71:b8:74:50:1e:17:c6:8a:87:ce:8c:6b:04: 99:cd:ae:fe:b2:99:9c:1c:6f:89:d0:95:72:54:dd: 8a:0d:3f:54:a0:b4:58:26:6c:b5:be:df:55:a1:d0: af:d4:83:18:86:ed:6e:cb:7b:f7:1d:b6:48:40:bd: af:f2:44:e5:82:d8:f8:b3:80:17:2b:c8:f8:78:b5: eb:31:65:91:30:77:70:7c:71:01:be:66:75:a3:71: 4d:9d:2d:0a:60:19:9b:fe:f6:f2:97:fc:97:99:43: b9:38:c4:e2:21:4b:13:97:4f:d8:ac:e2:a0:7b:70: 46:8c:90:d8:e6:5e:23:7e:bd:d3:84:d9:0c:b0:a8: c2:a0:25:22:06:ed:da:35:2a:d6:d0:da:af:4a:80: e8:f3:a4:ab:0c:1a:40:0f:73:e6:66:d2:86:5d:7a: 38:0b:35:cf:7d:8d:f3:d6:15:24:9c:7c:46:e4:9c: 6c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0D:71:84:B1:E2:87:7F:B0:ED:04:35:21:63:00:0B:5F:60:AB:AC X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9b:1d:af:d2:c6:2d:cf:fb:40:cf:53:ec:c4:b4:0e:ab:92: 23:ab:a0:86:82:03:03:a5:b7:0b:e3:a0:20:ad:02:e2:e0:a2: de:f2:74:1f:c8:a7:36:d3:d7:81:d6:9f:ee:5f:1d:84:ea:1b: 3b:5c:b8:90:84:14:0c:dd:da:c1:b3:b1:1d:e2:2c:a1:78:8f: cb:6f:71:43:b6:83:fd:ce:eb:93:53:30:e6:54:51:45:0b:fe: 33:1c:14:32:22:8e:63:a3:cc:8e:35:57:0a:01:c1:d0:48:4f: 85:e3:ca:87:4a:9e:7f:a0:16:0d:11:7e:26:ee:be:9d:a0:0d: 9b:23:3d:c7:8a:ed:b5:96:cf:1d:54:b6:5f:b3:81:f4:f3:0f: 7e:3e:3e:59:45:67:5a:5e:b2:1f:e8:c8:79:31:a3:93:a9:44: 1a:e3:1d:e9:4f:ca:2f:1c:d4:0e:8d:7b:a2:4b:4a:b1:6e:28: c8:87:19:71:cc:cb:64:64:cf:fb:fc:da:94:10:fd:52:a3:93: b5:08:3c:71:e3:c5:6f:24:56:10:85:26:6d:ab:6f:b9:c4:80: 4f:07:64:da:8e:40:a0:16:42:97:cf:41:fb:7d:ca:ea:eb:7f: ba:f7:04:d1:e4:3f:13:bb:5c:b9:34:96:80:39:94:61:04:be: 0f:18:1e:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDHs2UKN2drB8OfQKRvNYQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwOTIyMDYwMDE3WhcNMjYwOTIzMDYwMDE3WjAzMTEwLwYDVQQD EygyMjBkNzE4NGIxZTI4NzdmYjBlZDA0MzUyMTYzMDAwYjVmNjBhYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40d42O6nuhoCyOjdH5IBa5vuSIpi bzI2QdKjRv6X1B8ARrGzSWcGSgrcX+u4hYddhV3ULtYcDHMut/IR/RLl7jMhHxJ2 yo/eAvDLB3G4dFAeF8aKh86MawSZza7+spmcHG+J0JVyVN2KDT9UoLRYJmy1vt9V odCv1IMYhu1uy3v3HbZIQL2v8kTlgtj4s4AXK8j4eLXrMWWRMHdwfHEBvmZ1o3FN nS0KYBmb/vbyl/yXmUO5OMTiIUsTl0/YrOKge3BGjJDY5l4jfr3ThNkMsKjCoCUi Bu3aNSrW0NqvSoDo86SrDBpAD3PmZtKGXXo4CzXPfY3z1hUknHxG5JxshwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCINcYSx4od/sO0ENSFjAAtfYKusMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5sdr9LG Lc/7QM9T7MS0DquSI6ughoIDA6W3C+OgIK0C4uCi3vJ0H8inNtPXgdaf7l8dhOob O1y4kIQUDN3awbOxHeIsoXiPy29xQ7aD/c7rk1Mw5lRRRQv+MxwUMiKOY6PMjjVX CgHB0EhPhePKh0qef6AWDRF+Ju6+naANmyM9x4rttZbPHVS2X7OB9PMPfj4+WUVn Wl6yH+jIeTGjk6lEGuMd6U/KLxzUDo17oktKsW4oyIcZcczLZGTP+/zalBD9UqOT tQg8cePFbyRWEIUmbatvucSATwdk2o5AoBZCl89B+33K6ut/uvcE0eQ/E7tcuTSW gDmUYQS+DxgepA== -----END CERTIFICATE-----Generated at Tue Sep 22 15:58:56 2026 by rpki-client