$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: 3na6qpYD1mDUYIVqMf3iDZxV66uHtzLcwSJzVR0Qtlg= Subject key identifier: 19:45:C1:BD:E3:26:E1:39:27:A3:78:5C:67:60:AF:C0:6C:C4:8A:E1 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019FA93E0C9CC5D6285E2C9AA16FE16AAE0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 0884 Signing time: Tue 28 Jul 2026 15:00:43 +0000 Manifest this update: Tue 28 Jul 2026 15:00:43 +0000 Manifest next update: Wed 29 Jul 2026 15:00:43 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: JCTFuGEpBWKmj3r+Q2ySOOOArMbcF0sU6mUNZzxynvc=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:0c:9c:c5:d6:28:5e:2c:9a:a1:6f:e1:6a:ae:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jul 28 15:00:43 2026 GMT Not After : Jul 29 15:00:43 2026 GMT Subject: CN=1945c1bde326e13927a3785c6760afc06cc48ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:40:1e:5d:7f:5f:33:86:71:1c:83:b5:28:86: 43:60:81:ed:e7:1a:31:68:f4:a6:ae:d4:34:fe:da: 6f:84:f4:67:f1:d6:95:9b:75:de:60:8d:30:aa:53: 4d:34:1e:b2:e8:e7:75:32:cc:18:ff:89:85:45:85: d3:ba:23:77:04:65:8e:3b:21:a2:1d:99:c7:ea:56: 90:3a:d3:d4:b8:12:f1:63:0e:d2:12:81:5e:6c:b7: a4:2d:d2:90:6c:96:48:b9:89:8a:cb:b8:54:c4:dc: 3c:eb:39:61:e5:96:36:dd:7b:6b:a1:5d:63:2f:c4: 3e:56:51:d5:a3:21:53:a1:a4:91:a3:6c:e6:28:f0: b2:77:84:bf:e9:cf:30:82:ad:7f:b7:9c:ae:ca:b3: d2:05:7b:3d:bb:a3:ce:4b:cb:89:e6:13:f0:00:f6: 52:b5:aa:53:a2:78:ea:00:47:ed:09:d4:70:97:e6: 05:45:3a:20:f9:7d:6d:ef:7d:58:d9:89:8d:93:43: 60:89:5a:e7:56:e3:93:cf:d9:cd:b5:47:37:e2:48: 1f:8e:7d:fd:b0:1a:f4:90:ba:0f:83:e2:e4:16:02: be:7d:08:03:61:35:90:da:92:a4:2e:ec:d1:8d:17: d6:07:8e:92:bb:b9:68:e6:ab:95:f4:f0:f9:09:cc: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:45:C1:BD:E3:26:E1:39:27:A3:78:5C:67:60:AF:C0:6C:C4:8A:E1 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e4:24:44:78:b1:19:41:7a:85:0b:57:05:44:15:b3:3a:e7: ac:2b:d9:45:00:e1:12:f2:9f:2c:af:56:b1:3d:57:9d:bf:0b: d5:97:79:1f:4b:7c:d2:ad:73:f8:da:4e:62:f3:99:6a:72:1b: f3:59:28:ba:6c:d6:df:71:0d:68:70:da:db:15:50:1e:ae:a7: 41:a1:92:db:f1:85:19:f6:48:b3:74:50:fa:b9:0d:0a:f4:0a: fd:40:00:a4:09:47:e9:4f:65:38:70:e0:c3:ca:73:c0:06:d5: f8:6e:1f:a3:6d:e0:4e:e3:11:ed:d7:01:5d:e2:0f:16:9e:d2: 88:a6:87:89:99:a5:d7:8e:82:22:2b:cd:1b:ba:d0:e3:b6:95: 82:8c:9e:03:40:58:f3:9a:24:c7:8f:2b:4f:d0:97:48:72:f5: 75:0b:8a:e1:45:69:4e:d7:7a:e3:48:25:53:64:70:1c:74:e1: 3a:17:b8:1b:c1:22:af:c1:ac:6a:72:94:d7:32:22:03:42:32: 9b:39:c9:a5:17:b4:aa:11:d1:ea:74:71:b7:6c:4f:a0:64:de: 5f:fd:93:a9:bc:60:5c:40:b0:cc:ef:c4:87:9d:0e:ba:37:2d: 50:ca:3d:fc:26:92:7c:e3:8f:dc:32:32:5b:4a:a7:dc:1d:86: ba:ea:99:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPgycxdYoXiyaoW/haq4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwNzI4MTUwMDQzWhcNMjYwNzI5MTUwMDQzWjAzMTEwLwYDVQQD EygxOTQ1YzFiZGUzMjZlMTM5MjdhMzc4NWM2NzYwYWZjMDZjYzQ4YWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUAeXX9fM4ZxHIO1KIZDYIHt5xox aPSmrtQ0/tpvhPRn8daVm3XeYI0wqlNNNB6y6Od1MswY/4mFRYXTuiN3BGWOOyGi HZnH6laQOtPUuBLxYw7SEoFebLekLdKQbJZIuYmKy7hUxNw86zlh5ZY23XtroV1j L8Q+VlHVoyFToaSRo2zmKPCyd4S/6c8wgq1/t5yuyrPSBXs9u6POS8uJ5hPwAPZS tapTonjqAEftCdRwl+YFRTog+X1t731Y2YmNk0NgiVrnVuOTz9nNtUc34kgfjn39 sBr0kLoPg+LkFgK+fQgDYTWQ2pKkLuzRjRfWB46Su7lo5quV9PD5Cczl5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlFwb3jJuE5J6N4XGdgr8BsxIrhMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuQkRHix GUF6hQtXBUQVszrnrCvZRQDhEvKfLK9WsT1Xnb8L1Zd5H0t80q1z+NpOYvOZanIb 81koumzW33ENaHDa2xVQHq6nQaGS2/GFGfZIs3RQ+rkNCvQK/UAApAlH6U9lOHDg w8pzwAbV+G4fo23gTuMR7dcBXeIPFp7SiKaHiZml146CIivNG7rQ47aVgoyeA0BY 85okx48rT9CXSHL1dQuK4UVpTtd640glU2RwHHThOhe4G8Eir8GsanKU1zIiA0Iy mznJpRe0qhHR6nRxt2xPoGTeX/2TqbxgXECwzO/Eh50OujctUMo9/CaSfOOP3DIy W0qn3B2GuuqZLg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:23:43 2026 by rpki-client