$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: Ca5Lj5NvQi7YlDK4iV94PBiqmHcL7B4o+MsvzW7wgX4= Subject key identifier: 7B:33:44:66:7A:04:20:F3:41:5E:1A:94:4C:F2:CF:10:18:E0:14:AE Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019FAC76E85A4C63B79CDC88CAB64AE6FD6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 19E7 Signing time: Wed 29 Jul 2026 06:01:41 +0000 Manifest this update: Wed 29 Jul 2026 06:01:41 +0000 Manifest next update: Thu 30 Jul 2026 06:01:41 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa (hash: kEZA3HWXo+axDXRIJx2Qo5x0RmJdyCm6aj/hJrouWz4=) 3: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 4: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: 6PBmv/GrGN7J7GdndmfixUcQZgCKY/uSRTH6Bgt2PnE=) 6: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 7: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 8: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 9: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 10: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 06:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:76:e8:5a:4c:63:b7:9c:dc:88:ca:b6:4a:e6:fd:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Jul 29 06:01:41 2026 GMT Not After : Jul 30 06:01:41 2026 GMT Subject: CN=7b3344667a0420f3415e1a944cf2cf1018e014ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:77:00:8c:26:bf:c4:24:e0:63:ff:d0:e8: 73:bd:29:4d:1b:d1:73:4d:cd:47:8b:c5:52:2e:ac: 02:88:6e:80:95:ca:9e:41:c5:ab:94:e1:9a:6f:73: bc:fb:72:28:13:2f:21:3c:94:4d:6e:1b:e5:3b:3e: 55:c7:af:2a:b2:41:c1:7d:64:6d:17:bf:b5:a6:97: 8a:e8:d5:65:ff:50:e3:1b:fb:cb:8c:86:3f:fb:3d: a7:56:d4:86:97:09:82:09:37:c4:c6:97:bd:99:6c: 8d:00:02:91:54:4f:0e:4b:18:31:89:83:2c:39:8e: 26:49:4b:ef:1d:80:6b:70:d9:79:84:8c:24:3f:2d: d5:ca:91:00:1e:e6:b0:10:95:b8:3d:36:80:d6:7a: f0:11:eb:bf:0a:dc:6a:e4:c1:74:15:f6:f0:9f:ea: 67:3d:80:eb:1b:a6:c8:bd:4d:74:0a:d3:73:fb:c0: d7:f6:81:da:c8:b0:2e:fd:5d:c1:7a:50:3d:de:20: fc:ce:38:ea:d2:57:75:34:8e:96:64:df:5f:49:b6: a6:1e:00:0a:f1:70:04:dc:55:92:d2:b4:1a:d5:e2: 38:76:34:21:65:5f:ec:93:30:fc:0c:09:bf:2e:11: b0:2a:e6:26:18:d0:3d:4b:a9:b0:16:0c:ca:26:56: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:33:44:66:7A:04:20:F3:41:5E:1A:94:4C:F2:CF:10:18:E0:14:AE X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:7a:57:c6:bb:73:88:24:ee:29:46:8f:35:97:fa:1e:fc:2e: aa:da:93:4d:49:8c:ab:a5:90:43:35:6f:5e:14:6e:60:ec:4f: 7a:ab:4b:df:a7:7f:57:37:d7:f3:65:9b:5d:5b:94:88:8a:5c: 95:a4:0e:95:3a:88:19:3c:9a:bd:21:86:c0:b7:e2:3f:7f:7e: 8c:2c:76:7d:d1:d3:c6:ee:32:83:3f:e5:77:a1:32:74:a8:8e: f5:aa:62:ca:52:d7:b5:44:8e:04:f4:a7:22:ee:6f:7d:ae:8c: 6a:92:3e:4c:1b:8e:18:a7:61:2e:ac:b3:9a:e4:f4:32:e6:5b: 89:f4:6d:0f:49:13:e3:15:f8:1b:0f:13:cf:61:e8:bd:29:f8: 37:8d:3d:e0:05:27:e2:87:f6:0c:16:39:5e:3e:84:66:ff:7e: 7c:17:e2:9d:d3:84:b9:cd:7a:84:15:28:92:03:ae:00:bf:75: 9e:03:1d:e7:94:9a:90:83:c6:06:7d:30:6b:c8:4e:88:e8:85: 7f:a4:98:75:5b:47:54:ba:a5:ba:ed:2c:4e:64:aa:ba:53:59: b7:a9:bb:9f:e3:0f:18:01:95:a6:f1:c6:b5:65:90:18:90:87: c4:85:cf:1e:e9:66:aa:d2:7e:b8:36:27:c3:60:e6:22:7c:60: f3:db:34:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+sduhaTGO3nNyIyrZK5v1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwNzI5MDYwMTQxWhcNMjYwNzMwMDYwMTQxWjAzMTEwLwYDVQQD Eyg3YjMzNDQ2NjdhMDQyMGYzNDE1ZTFhOTQ0Y2YyY2YxMDE4ZTAxNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM93AIwmv8Qk4GP/0OhzvSlNG9Fz Tc1Hi8VSLqwCiG6AlcqeQcWrlOGab3O8+3IoEy8hPJRNbhvlOz5Vx68qskHBfWRt F7+1ppeK6NVl/1DjG/vLjIY/+z2nVtSGlwmCCTfExpe9mWyNAAKRVE8OSxgxiYMs OY4mSUvvHYBrcNl5hIwkPy3VypEAHuawEJW4PTaA1nrwEeu/Ctxq5MF0Ffbwn+pn PYDrG6bIvU10CtNz+8DX9oHayLAu/V3BelA93iD8zjjq0ld1NI6WZN9fSbamHgAK 8XAE3FWS0rQa1eI4djQhZV/skzD8DAm/LhGwKuYmGNA9S6mwFgzKJlYUGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHszRGZ6BCDzQV4alEzyzxAY4BSuMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnpXxrtz iCTuKUaPNZf6HvwuqtqTTUmMq6WQQzVvXhRuYOxPeqtL36d/VzfX82WbXVuUiIpc laQOlTqIGTyavSGGwLfiP39+jCx2fdHTxu4ygz/ld6EydKiO9apiylLXtUSOBPSn Iu5vfa6MapI+TBuOGKdhLqyzmuT0MuZbifRtD0kT4xX4Gw8Tz2HovSn4N4094AUn 4of2DBY5Xj6EZv9+fBfindOEuc16hBUokgOuAL91ngMd55SakIPGBn0wa8hOiOiF f6SYdVtHVLqluu0sTmSqulNZt6m7n+MPGAGVpvHGtWWQGJCHxIXPHulmqtJ+uDYn w2DmInxg89s0Rg== -----END CERTIFICATE-----Generated at Wed Jul 29 13:54:48 2026 by rpki-client