$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: 2/u6BrBjwJDJU0X6bpr+Xq1n7Ivf3qHNATuGSsSObws= Subject key identifier: 2B:B0:DC:65:A6:57:88:3A:11:0F:3E:03:B7:CA:FA:49:78:B1:E4:0E Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019CA9B3B4B8B36F78EE905365120A21881F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1857 Signing time: Sun 01 Mar 2026 14:00:52 +0000 Manifest this update: Sun 01 Mar 2026 14:00:52 +0000 Manifest next update: Mon 02 Mar 2026 14:00:52 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 3: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 4: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: UehdpUm8hQ1/g6Xp44Ixx9t6OJist02i6Jn8F6734HY=) 5: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 6: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 7: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 8: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) 9: tVeuYd91sHEJZuUDNMrqrKk6uME.roa (hash: hSzJOItctPBI6y6Se6D0Urxemw96jOFCv4Hf70uq1Qk=) 10: zSUHQIil1pv6NSEqyiy6QZUHKgI.roa (hash: sCV+NE2NUCcb5ZuDP7u98vtXx/1nUNBXjVpaW7PtLOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:b4:b8:b3:6f:78:ee:90:53:65:12:0a:21:88:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Mar 1 14:00:52 2026 GMT Not After : Mar 2 14:00:52 2026 GMT Subject: CN=2bb0dc65a657883a110f3e03b7cafa4978b1e40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:2e:ce:dc:55:c7:05:de:1c:01:98:9d:44: 5b:eb:dc:b3:08:85:4b:6a:1f:5f:64:ff:aa:b3:b1: 01:b1:64:7f:a5:93:34:6f:fe:6a:3b:f4:b6:de:25: 44:58:5f:76:92:ee:d2:de:de:40:b0:e7:95:3e:71: 0d:34:e9:f9:61:9e:b1:ee:6f:fb:df:9a:38:99:67: 9c:1f:4b:5c:4f:05:14:68:61:ef:fa:ef:13:58:cc: bd:8c:76:1e:dd:ad:91:c2:d9:4c:3a:22:3c:1b:7d: c3:31:e6:79:f6:8e:7d:b7:92:7f:29:e0:d8:06:51: 82:0d:7d:f4:02:18:5c:25:67:94:ff:6e:45:06:0c: 4e:9a:3d:b9:0d:c1:ab:16:a3:df:37:d8:75:63:2f: 7c:b1:e8:59:ff:9b:51:4a:b8:b1:c9:18:6a:b1:2f: 95:2b:17:ab:b8:f3:83:83:6d:92:cb:4e:93:23:f2: 7e:e1:03:c9:f9:2f:24:92:f3:35:51:f8:e1:e1:7e: 9e:3e:ab:2a:83:16:5d:b0:a3:63:ee:f0:10:29:61: dc:56:16:2f:97:9f:95:6e:3e:c0:8c:ff:e0:aa:c7: 52:cf:96:69:1e:9c:cb:0c:3c:7e:4d:f7:da:76:d7: 9e:0c:f6:02:ea:db:48:64:09:f9:d0:ad:8b:1b:f5: 6d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B0:DC:65:A6:57:88:3A:11:0F:3E:03:B7:CA:FA:49:78:B1:E4:0E X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:14:5e:0a:73:40:c7:8f:1c:13:08:86:2f:4b:13:24:a3:3e: 7f:43:94:22:c7:70:a6:da:12:f5:97:ff:e9:e9:3e:81:b9:e4: d5:9c:b4:13:74:df:f1:95:49:56:93:19:bf:cd:93:24:3c:84: fd:18:ef:fd:65:f2:7d:9a:9e:bd:b9:db:be:d7:f5:53:78:60: f0:40:ef:ce:be:a7:63:7e:71:58:99:2b:96:62:bd:8b:33:36: 15:3a:c3:32:47:35:0f:dc:40:b1:bc:b8:09:07:15:ff:0d:c0: 89:8b:bf:41:27:1e:a5:d8:98:f4:18:0b:3f:ca:b0:5f:de:40: 17:c8:8d:0c:ac:02:ce:a8:76:fe:1a:01:21:61:ff:5a:86:66: a7:8c:d4:e7:95:a8:e0:ec:d3:08:86:12:3e:18:cf:f0:f6:25: 9f:32:e7:51:c0:93:72:13:54:5c:dc:73:13:d7:d1:ae:d3:e9: 18:7a:92:c7:ed:55:40:90:be:8e:05:8c:94:60:a9:ac:f2:c7: 08:8d:45:a5:b8:37:85:ae:d8:8e:7c:58:d1:15:5f:42:dd:db: c3:86:45:9a:e4:18:8c:f6:6f:8f:d4:db:09:1c:e2:0e:a2:a0: 2c:4b:63:da:6d:c9:f4:9e:1f:31:6f:0c:b9:22:72:d3:3d:a5: 8f:ce:84:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps7S4s2947pBTZRIKIYgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwMzAxMTQwMDUyWhcNMjYwMzAyMTQwMDUyWjAzMTEwLwYDVQQD EygyYmIwZGM2NWE2NTc4ODNhMTEwZjNlMDNiN2NhZmE0OTc4YjFlNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMouztxVxwXeHAGYnURb69yzCIVL ah9fZP+qs7EBsWR/pZM0b/5qO/S23iVEWF92ku7S3t5AsOeVPnENNOn5YZ6x7m/7 35o4mWecH0tcTwUUaGHv+u8TWMy9jHYe3a2RwtlMOiI8G33DMeZ59o59t5J/KeDY BlGCDX30AhhcJWeU/25FBgxOmj25DcGrFqPfN9h1Yy98sehZ/5tRSrixyRhqsS+V KxeruPODg22Sy06TI/J+4QPJ+S8kkvM1Ufjh4X6ePqsqgxZdsKNj7vAQKWHcVhYv l5+Vbj7AjP/gqsdSz5ZpHpzLDDx+TffadteeDPYC6ttIZAn50K2LG/VtwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuw3GWmV4g6EQ8+A7fK+kl4seQOMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRReCnNA x48cEwiGL0sTJKM+f0OUIsdwptoS9Zf/6ek+gbnk1Zy0E3Tf8ZVJVpMZv82TJDyE /Rjv/WXyfZqevbnbvtf1U3hg8EDvzr6nY35xWJkrlmK9izM2FTrDMkc1D9xAsby4 CQcV/w3AiYu/QScepdiY9BgLP8qwX95AF8iNDKwCzqh2/hoBIWH/WoZmp4zU55Wo 4OzTCIYSPhjP8PYlnzLnUcCTchNUXNxzE9fRrtPpGHqSx+1VQJC+jgWMlGCprPLH CI1Fpbg3ha7YjnxY0RVfQt3bw4ZFmuQYjPZvj9TbCRziDqKgLEtj2m3J9J4fMW8M uSJy0z2lj86EmQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:59:30 2026 by rpki-client