$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: Ze/qjMbdKDnRAfO0ZC9+CvGrEE0qHQsA4OGiBgVsMEs= Subject key identifier: E8:AF:0D:A5:18:B3:C4:C6:AE:F4:33:E2:6A:37:8F:8E:2F:2F:22:2A Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 01A0D19277C14A0DE8CBDF9B2924FCC4675A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1A7F Signing time: Thu 24 Sep 2026 04:00:32 +0000 Manifest this update: Thu 24 Sep 2026 04:00:32 +0000 Manifest next update: Fri 25 Sep 2026 04:00:32 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 3: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 4: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: SBANfNdFm9KT5Lv+vEj80dJPTc76v7cHR46zLKDb4DM=) 5: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 6: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 7: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 8: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 9: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) 10: jQqjqLwCIiP-UmycKlMjQDwW93o.roa (hash: gWG3bMZ8YKFN55wAMNLYWj4K1vXJyhwVCCdzs0fCImU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:92:77:c1:4a:0d:e8:cb:df:9b:29:24:fc:c4:67:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Sep 24 04:00:32 2026 GMT Not After : Sep 25 04:00:32 2026 GMT Subject: CN=e8af0da518b3c4c6aef433e26a378f8e2f2f222a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:49:55:5b:e5:17:22:dd:24:e6:93:1a:d7: ac:f1:43:9d:a0:b2:8f:f0:7a:97:ef:ac:c1:d4:7d: b8:f8:97:c6:7d:05:bf:0f:c9:32:9c:f9:9d:76:ab: 3d:ac:8d:d4:9b:f4:5c:f9:ca:5e:0b:56:eb:d1:b5: 8e:ea:9b:d2:2c:6c:64:b9:f2:8c:f4:b0:0d:79:23: d9:47:3a:35:87:4a:49:d8:2e:ac:35:5b:5e:cd:ae: e0:d1:99:46:24:c6:95:a5:ef:fa:8c:bb:28:25:02: 37:2c:d9:e0:01:a0:76:71:17:0a:4c:06:f0:31:24: 8d:5a:1d:7e:92:0c:79:0b:f2:f3:36:a9:6c:3c:7e: c1:d8:00:b5:e6:7c:16:e4:55:fe:33:3e:22:a4:4a: ed:94:57:46:51:63:56:91:6e:87:45:77:ed:e0:c6: 6a:73:4b:68:d7:21:e9:af:39:e0:69:15:05:1a:01: 10:04:55:ca:52:02:09:43:5c:3b:fe:6b:b4:a5:6e: b6:f5:14:a2:b0:06:ce:81:cc:6d:4f:12:c0:6a:18: 9e:26:83:31:5f:34:ea:51:3d:00:bd:e5:d4:1f:ad: 6d:ca:a3:5d:e6:bb:74:26:b7:38:8a:d1:00:bc:d9: b3:92:74:e8:f4:23:1b:1b:30:a0:8d:db:58:a2:fe: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AF:0D:A5:18:B3:C4:C6:AE:F4:33:E2:6A:37:8F:8E:2F:2F:22:2A X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:22:d8:f0:7e:ab:4d:ef:47:a6:87:8b:4a:c6:e2:14:31:ba: 09:83:91:c2:a8:93:27:14:2e:15:6d:32:08:83:b3:aa:44:ee: 6d:56:c7:10:d7:75:32:b6:7b:07:7c:76:c2:2e:9f:73:61:cf: 44:f0:d7:8e:e4:4c:ef:e9:37:bf:8e:f3:27:1e:7e:47:51:b4: e0:67:3a:8a:07:f9:c8:47:5c:ce:83:f6:2c:ee:d3:a4:24:5c: a9:4e:6a:09:81:b7:90:db:49:8b:d5:16:c2:d7:a1:db:69:7a: 29:2b:82:76:1d:e7:9c:3e:cd:43:11:91:20:4e:8f:bc:79:34: a2:32:59:b5:8a:cf:03:17:9b:2d:4c:20:a5:eb:9a:18:42:d3: 9b:df:8d:3e:17:52:ae:9e:d1:bd:9d:22:b9:84:ce:34:f5:23: 79:cf:8f:3c:b9:65:28:9f:b3:0e:8b:f3:c4:74:dd:b0:ea:a1: c9:d9:0c:ec:41:ef:5b:9e:2b:ae:e9:7d:a4:a8:ac:48:d7:7d: 9e:9f:b6:99:0b:2c:66:22:94:48:2f:2d:f9:d7:2b:c7:fa:33: 58:ce:62:0a:50:66:66:ff:5f:5b:21:9d:f0:2d:40:0f:3e:e7: d5:fc:08:b0:46:c6:75:12:6d:94:f4:43:89:18:93:00:dd:34: e8:b9:36:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRknfBSg3oy9+bKST8xGdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwOTI0MDQwMDMyWhcNMjYwOTI1MDQwMDMyWjAzMTEwLwYDVQQD EyhlOGFmMGRhNTE4YjNjNGM2YWVmNDMzZTI2YTM3OGY4ZTJmMmYyMjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNJJVVvlFyLdJOaTGtes8UOdoLKP 8HqX76zB1H24+JfGfQW/D8kynPmddqs9rI3Um/Rc+cpeC1br0bWO6pvSLGxkufKM 9LANeSPZRzo1h0pJ2C6sNVteza7g0ZlGJMaVpe/6jLsoJQI3LNngAaB2cRcKTAbw MSSNWh1+kgx5C/LzNqlsPH7B2AC15nwW5FX+Mz4ipErtlFdGUWNWkW6HRXft4MZq c0to1yHprzngaRUFGgEQBFXKUgIJQ1w7/mu0pW629RSisAbOgcxtTxLAahieJoMx XzTqUT0AveXUH61tyqNd5rt0Jrc4itEAvNmzknTo9CMbGzCgjdtYov4c+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOivDaUYs8TGrvQz4mo3j44vLyIqMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyLY8H6r Te9HpoeLSsbiFDG6CYORwqiTJxQuFW0yCIOzqkTubVbHENd1MrZ7B3x2wi6fc2HP RPDXjuRM7+k3v47zJx5+R1G04Gc6igf5yEdczoP2LO7TpCRcqU5qCYG3kNtJi9UW wteh22l6KSuCdh3nnD7NQxGRIE6PvHk0ojJZtYrPAxebLUwgpeuaGELTm9+NPhdS rp7RvZ0iuYTONPUjec+PPLllKJ+zDovzxHTdsOqhydkM7EHvW54rrul9pKisSNd9 np+2mQssZiKUSC8t+dcrx/ozWM5iClBmZv9fWyGd8C1ADz7n1fwIsEbGdRJtlPRD iRiTAN006Lk2Ig== -----END CERTIFICATE-----Generated at Thu Sep 24 10:18:29 2026 by rpki-client