$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: kKbq4jV9Piz4tKL/9SI6tNmCx5YZnc5twHDUyfia40w= Subject key identifier: E4:BE:3C:27:8D:C3:DE:FB:9A:E6:FB:36:56:D9:2B:B9:E9:4E:D0:4E Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019EBF9189CB011579ABC23AACFA4C113E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 080B Signing time: Sat 13 Jun 2026 06:00:46 +0000 Manifest this update: Sat 13 Jun 2026 06:00:46 +0000 Manifest next update: Sun 14 Jun 2026 06:00:46 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: pF3RzNYjyPSyODYc+90d1rf0EXON2KjvX2L+GGlDlgk=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:91:89:cb:01:15:79:ab:c2:3a:ac:fa:4c:11:3e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jun 13 06:00:46 2026 GMT Not After : Jun 14 06:00:46 2026 GMT Subject: CN=e4be3c278dc3defb9ae6fb3656d92bb9e94ed04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:c9:ff:1a:c8:8b:80:18:e9:02:95:cb:e6: c6:70:c6:5c:0b:ce:db:45:97:b1:ea:d1:41:3d:ff: 8c:a7:75:ff:8d:00:ec:9d:2c:fd:81:c5:40:35:44: 74:53:f6:88:30:b9:a8:ff:ad:92:4c:bd:61:c3:3a: 01:e5:c3:54:17:55:00:76:4a:d0:aa:55:e7:86:cb: 16:8e:23:ba:db:27:cc:52:36:8c:79:41:c2:b2:08: f1:0b:b9:ef:8b:b3:59:91:ea:b9:79:9d:c8:41:23: 5b:48:e1:3c:5c:33:d8:50:70:8e:7d:32:99:bc:86: 92:d7:c5:72:bb:99:a3:b1:59:14:58:fb:35:29:7c: 9c:3f:ef:99:98:c7:dc:5e:4a:9e:73:73:fe:e0:94: d7:b9:31:ff:ee:fa:65:09:e0:9f:3f:88:6f:77:33: 0f:b9:32:76:9d:e6:cc:a7:87:64:16:af:3e:6e:26: 2f:f9:fc:b8:68:83:df:dd:e6:2d:30:34:ad:f1:07: a3:18:10:0b:17:e2:2f:63:74:31:c2:da:8d:b2:47: 52:45:51:b1:74:8e:79:38:6a:83:5b:62:03:0d:85: 03:d4:37:d3:ea:99:68:d6:e7:76:52:e2:cc:f6:67: b4:44:18:03:41:dd:67:7b:a1:04:33:0c:fe:c8:fd: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BE:3C:27:8D:C3:DE:FB:9A:E6:FB:36:56:D9:2B:B9:E9:4E:D0:4E X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b5:fd:70:a5:ef:d3:13:7e:94:1e:37:c2:7a:d0:2f:1e:26: b7:25:a1:bd:36:07:f5:4d:5b:73:db:56:db:89:df:76:42:83: b7:6d:2d:65:4b:64:04:10:de:6d:fd:89:6e:4f:ec:a0:c1:76: dd:79:78:4a:72:0c:bb:1a:f8:e7:a6:77:ca:d2:dc:31:e0:a9: 94:d0:0a:d4:b1:18:e8:90:44:b7:ab:43:fb:b8:37:a4:df:6c: 7f:eb:29:08:27:c4:56:dd:69:44:e9:ae:c3:1a:50:bc:38:05: 67:72:b8:a1:0b:a0:d7:53:a9:e2:81:0e:62:e2:03:34:6a:d2: c1:ea:7c:58:69:f3:9f:89:22:f1:3b:30:72:88:d0:ba:ed:4c: c0:33:6f:6a:6a:40:32:88:73:77:59:c9:64:e2:22:af:f6:0b: f2:36:66:66:79:ff:54:1b:9c:ef:43:1b:78:a3:91:72:67:b4: d7:e9:c6:56:e8:c0:4f:a9:7c:5b:e5:a1:60:f7:be:10:5f:4d: e5:bc:54:43:43:7f:f9:61:a2:bb:0e:4b:57:30:f1:12:55:70: 26:b3:3e:0f:54:ba:d5:6a:2c:44:65:44:5f:36:00:61:82:43: 19:08:86:ce:1a:fa:10:6e:e6:5a:5e:fa:05:1e:c7:31:93:ed: 11:63:83:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/kYnLARV5q8I6rPpMET4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwNjEzMDYwMDQ2WhcNMjYwNjE0MDYwMDQ2WjAzMTEwLwYDVQQD EyhlNGJlM2MyNzhkYzNkZWZiOWFlNmZiMzY1NmQ5MmJiOWU5NGVkMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz/J/xrIi4AY6QKVy+bGcMZcC87b RZex6tFBPf+Mp3X/jQDsnSz9gcVANUR0U/aIMLmo/62STL1hwzoB5cNUF1UAdkrQ qlXnhssWjiO62yfMUjaMeUHCsgjxC7nvi7NZkeq5eZ3IQSNbSOE8XDPYUHCOfTKZ vIaS18Vyu5mjsVkUWPs1KXycP++ZmMfcXkqec3P+4JTXuTH/7vplCeCfP4hvdzMP uTJ2nebMp4dkFq8+biYv+fy4aIPf3eYtMDSt8QejGBALF+IvY3QxwtqNskdSRVGx dI55OGqDW2IDDYUD1DfT6plo1ud2UuLM9me0RBgDQd1ne6EEMwz+yP1R/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOS+PCeNw977mub7NlbZK7npTtBOMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLX9cKXv 0xN+lB43wnrQLx4mtyWhvTYH9U1bc9tW24nfdkKDt20tZUtkBBDebf2Jbk/soMF2 3Xl4SnIMuxr456Z3ytLcMeCplNAK1LEY6JBEt6tD+7g3pN9sf+spCCfEVt1pROmu wxpQvDgFZ3K4oQug11Op4oEOYuIDNGrSwep8WGnzn4ki8TswcojQuu1MwDNvampA Mohzd1nJZOIir/YL8jZmZnn/VBuc70MbeKORcme01+nGVujAT6l8W+WhYPe+EF9N 5bxUQ0N/+WGiuw5LVzDxElVwJrM+D1S61WosRGVEXzYAYYJDGQiGzhr6EG7mWl76 BR7HMZPtEWODow== -----END CERTIFICATE-----Generated at Sat Jun 13 12:56:32 2026 by rpki-client