$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: aFj8Sl7tLjN1pbWTurrJevf3SM6OuO1meQOQI/ha2P0= Subject key identifier: A0:04:3A:79:0B:02:82:40:13:86:6A:52:DF:F1:5B:74:54:EA:58:D9 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019D9962626AECD69D4AC160A38999D35DC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 18D4 Signing time: Fri 17 Apr 2026 03:00:54 +0000 Manifest this update: Fri 17 Apr 2026 03:00:54 +0000 Manifest next update: Sat 18 Apr 2026 03:00:54 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa (hash: kEZA3HWXo+axDXRIJx2Qo5x0RmJdyCm6aj/hJrouWz4=) 3: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 4: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: Obt8Vhw5vAHEPJ9rgxwk8luQvXiGsN/FPOLlTNGyl94=) 6: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 7: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 8: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 9: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 10: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:62:6a:ec:d6:9d:4a:c1:60:a3:89:99:d3:5d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Apr 17 03:00:54 2026 GMT Not After : Apr 18 03:00:54 2026 GMT Subject: CN=a0043a790b02824013866a52dff15b7454ea58d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:16:27:f8:08:fb:aa:cf:30:b9:79:b3:8c: c0:0b:e6:b2:14:40:03:d8:de:89:b0:7e:6c:0f:e2: b4:bf:51:57:8c:3c:06:85:dc:73:10:40:ea:85:69: 71:f0:8f:cd:56:76:bb:83:e4:02:88:4c:76:43:a5: 6a:c0:8a:7b:99:0c:11:c1:6b:ef:0b:3a:b0:97:fa: 03:97:42:f0:2b:fa:d4:5e:76:ac:d2:76:76:e9:83: 23:eb:35:94:1b:38:47:4d:0b:f6:31:44:f5:aa:80: 0f:66:37:f0:f9:7b:90:cd:70:d0:81:04:67:72:89: 9c:73:4c:67:41:d5:e1:a5:be:21:34:73:22:ce:4d: 36:0b:78:df:20:e1:1b:cd:35:54:52:a3:9b:8b:fc: c3:18:b7:3d:fd:bb:22:0a:be:b5:ec:f9:41:db:03: 2d:f3:d0:a9:2f:a1:37:fd:1d:d0:2a:bb:07:6d:90: b7:fa:8a:35:52:4c:54:4c:2f:1d:93:d8:96:fa:7e: 39:a4:5b:20:40:04:71:a5:3a:86:0c:e2:8c:27:95: 7f:53:fa:b7:b2:8b:8e:12:21:b8:b2:24:b7:0d:27: 3f:89:39:ef:5a:5d:60:a2:36:e9:c2:8b:cc:20:42: 5d:12:2b:06:10:ec:68:2b:5e:1e:e4:65:95:aa:61: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:04:3A:79:0B:02:82:40:13:86:6A:52:DF:F1:5B:74:54:EA:58:D9 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:00:71:e5:fe:ae:02:11:e7:07:22:3d:56:d8:10:61:f2:4a: 35:01:e2:19:d3:0a:90:cd:87:5b:04:87:07:bc:b4:47:21:e2: 69:8a:ac:90:02:56:a0:2f:4f:96:59:3c:fc:64:4e:1a:6a:87: 34:15:bb:7f:a4:4f:54:a2:2d:45:a6:cb:6f:1b:a0:db:75:3a: a0:67:11:f7:63:d7:1b:91:09:ff:83:d1:a4:52:fe:09:29:16: 73:a9:e0:55:9a:2b:0f:c7:32:5e:b5:51:01:aa:9e:b3:c4:87: d9:f3:05:f6:ff:e2:5a:2d:33:1f:4f:e3:9f:d8:06:80:96:20: 2c:2a:8b:1b:6d:3d:9f:63:bd:3a:ac:b4:6a:44:10:f1:e0:98: 2d:48:2a:f0:92:06:cc:f9:97:f2:b8:27:90:d0:5e:db:34:20: 72:41:0b:c6:35:c3:c5:cd:00:8a:44:ad:2d:d6:28:90:c6:1c: b3:55:ad:6b:58:67:01:31:ef:77:2f:c2:1b:4f:54:fd:48:c2: 78:e7:c5:8f:33:40:fe:bf:96:32:c7:c5:93:6f:fd:5d:d1:25: b1:79:c8:fa:65:23:06:a7:66:28:b1:de:36:a4:f4:54:05:d6: 6b:a9:66:ff:d3:79:99:a1:31:69:56:4d:b7:c6:bb:98:a0:35: a0:ba:22:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYmJq7NadSsFgo4mZ013FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwNDE3MDMwMDU0WhcNMjYwNDE4MDMwMDU0WjAzMTEwLwYDVQQD EyhhMDA0M2E3OTBiMDI4MjQwMTM4NjZhNTJkZmYxNWI3NDU0ZWE1OGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszMWJ/gI+6rPMLl5s4zAC+ayFEAD 2N6JsH5sD+K0v1FXjDwGhdxzEEDqhWlx8I/NVna7g+QCiEx2Q6VqwIp7mQwRwWvv Czqwl/oDl0LwK/rUXnas0nZ26YMj6zWUGzhHTQv2MUT1qoAPZjfw+XuQzXDQgQRn comcc0xnQdXhpb4hNHMizk02C3jfIOEbzTVUUqObi/zDGLc9/bsiCr617PlB2wMt 89CpL6E3/R3QKrsHbZC3+oo1UkxUTC8dk9iW+n45pFsgQARxpTqGDOKMJ5V/U/q3 souOEiG4siS3DSc/iTnvWl1gojbpwovMIEJdEisGEOxoK14e5GWVqmGu3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAEOnkLAoJAE4ZqUt/xW3RU6ljZMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiABx5f6u AhHnByI9VtgQYfJKNQHiGdMKkM2HWwSHB7y0RyHiaYqskAJWoC9Pllk8/GROGmqH NBW7f6RPVKItRabLbxug23U6oGcR92PXG5EJ/4PRpFL+CSkWc6ngVZorD8cyXrVR Aaqes8SH2fMF9v/iWi0zH0/jn9gGgJYgLCqLG209n2O9Oqy0akQQ8eCYLUgq8JIG zPmX8rgnkNBe2zQgckELxjXDxc0AikStLdYokMYcs1Wta1hnATHvdy/CG09U/UjC eOfFjzNA/r+WMsfFk2/9XdElsXnI+mUjBqdmKLHeNqT0VAXWa6lm/9N5maExaVZN t8a7mKA1oLoi3Q== -----END CERTIFICATE-----Generated at Fri Apr 17 05:07:02 2026 by rpki-client