$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: dzMlKmg7Nwl7xkWG7NrysbGEFx1eXozHCORNLwqeFA0= Subject key identifier: 56:BB:12:FD:91:1A:D6:2D:4F:88:1D:84:43:BF:FE:6E:48:35:A2:C2 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019CABA1B75A7DFC698148BE09FC32E3A96E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1858 Signing time: Sun 01 Mar 2026 23:00:27 +0000 Manifest this update: Sun 01 Mar 2026 23:00:27 +0000 Manifest next update: Mon 02 Mar 2026 23:00:27 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 3: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 4: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: 8LstwYaWJtPJhxJ02xlJmGkcFcyVxSXWgjufgR79aho=) 5: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 6: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 7: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 8: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) 9: tVeuYd91sHEJZuUDNMrqrKk6uME.roa (hash: hSzJOItctPBI6y6Se6D0Urxemw96jOFCv4Hf70uq1Qk=) 10: zSUHQIil1pv6NSEqyiy6QZUHKgI.roa (hash: sCV+NE2NUCcb5ZuDP7u98vtXx/1nUNBXjVpaW7PtLOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a1:b7:5a:7d:fc:69:81:48:be:09:fc:32:e3:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Mar 1 23:00:27 2026 GMT Not After : Mar 2 23:00:27 2026 GMT Subject: CN=56bb12fd911ad62d4f881d8443bffe6e4835a2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:cd:dd:30:af:68:56:cd:66:d1:c2:ec:40: 81:49:c8:f3:6c:00:0d:97:10:6c:5a:07:ee:76:4a: 97:29:93:c3:b1:40:96:88:e1:34:73:1a:71:d7:87: 52:74:d7:b1:66:5e:62:4f:ea:74:c9:db:ca:18:3e: e3:83:52:e4:28:39:c5:b2:7c:16:c1:ab:51:20:72: ff:e6:17:15:32:2a:d4:2e:e3:2b:38:f5:2b:4c:c4: 7f:77:97:fe:3f:85:13:56:ff:40:c0:ce:35:03:dd: dc:ab:2f:ac:c9:d0:83:cc:2e:4b:f6:3f:54:78:bb: f9:36:44:5d:6e:e7:4d:44:13:75:b6:24:fb:84:71: 6d:41:66:03:f7:cc:aa:0b:df:a1:d0:6b:20:b4:06: ce:ab:a4:30:c9:f4:4f:d3:c3:a3:eb:9f:40:1d:1b: 3a:52:aa:9c:78:e2:cd:02:cb:1b:c9:46:1c:83:bc: 8a:21:96:51:d7:07:90:3c:2e:5f:e0:12:83:e1:7b: 0c:ea:c4:f8:4d:fc:0c:28:5e:be:62:3b:c4:39:6d: 77:d8:65:65:71:ca:3d:45:c9:28:be:54:b3:78:d9: f1:b2:74:b9:76:03:ef:a7:76:02:b3:33:04:03:2e: f0:ae:f7:57:4c:e1:13:82:e2:11:27:11:8a:14:2c: 57:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BB:12:FD:91:1A:D6:2D:4F:88:1D:84:43:BF:FE:6E:48:35:A2:C2 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:59:60:1d:9f:e5:ad:46:6e:27:17:54:f7:98:e3:26:3a:21: 22:d2:21:2c:db:6e:b8:37:29:d7:39:a9:28:9d:58:e8:86:06: 5a:32:3f:47:f3:c9:7b:d7:24:07:3b:37:43:50:2f:27:e4:ab: 9a:07:bd:72:87:d5:71:39:8f:bd:d4:7a:20:a6:b4:75:c8:5a: 8f:b9:f6:51:85:f3:f9:94:b8:d4:9c:fc:b0:98:a4:60:88:cf: 3d:2a:16:dc:b7:fd:b8:5b:1d:ec:2c:e6:dc:9c:1c:6b:a2:c3: e5:d2:20:88:36:e1:bf:32:b5:f6:f0:b9:9a:d9:75:d5:2e:f6: c7:17:a7:fa:ad:6c:e7:bb:c4:76:de:26:87:c8:ab:8e:88:15: fc:08:e5:11:7d:e2:72:d1:49:ff:86:2c:e1:ea:b4:06:48:9c: b7:99:28:c9:f7:3d:0e:4b:b4:28:f1:d3:4c:1e:ff:bc:d9:73: 8b:e4:0c:39:57:a4:dd:b6:38:d5:77:20:59:42:3b:1e:f7:7b: f1:7e:41:91:b6:2c:16:19:ca:fa:73:93:e0:e6:e1:85:fc:72: 76:cd:6b:c6:27:4f:1b:19:24:0c:f2:1f:8d:7b:9a:7b:cb:0b: dc:7e:db:53:b9:59:64:9f:92:49:03:61:8b:50:16:fe:5d:ed: ce:a2:f1:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrobdaffxpgUi+Cfwy46luMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwMzAxMjMwMDI3WhcNMjYwMzAyMjMwMDI3WjAzMTEwLwYDVQQD Eyg1NmJiMTJmZDkxMWFkNjJkNGY4ODFkODQ0M2JmZmU2ZTQ4MzVhMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bHN3TCvaFbNZtHC7ECBScjzbAAN lxBsWgfudkqXKZPDsUCWiOE0cxpx14dSdNexZl5iT+p0ydvKGD7jg1LkKDnFsnwW watRIHL/5hcVMirULuMrOPUrTMR/d5f+P4UTVv9AwM41A93cqy+sydCDzC5L9j9U eLv5NkRdbudNRBN1tiT7hHFtQWYD98yqC9+h0GsgtAbOq6QwyfRP08Oj659AHRs6 UqqceOLNAssbyUYcg7yKIZZR1weQPC5f4BKD4XsM6sT4TfwMKF6+YjvEOW132GVl cco9RckovlSzeNnxsnS5dgPvp3YCszMEAy7wrvdXTOETguIRJxGKFCxXEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFa7Ev2RGtYtT4gdhEO//m5INaLCMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVlgHZ/l rUZuJxdU95jjJjohItIhLNtuuDcp1zmpKJ1Y6IYGWjI/R/PJe9ckBzs3Q1AvJ+Sr mge9cofVcTmPvdR6IKa0dchaj7n2UYXz+ZS41Jz8sJikYIjPPSoW3Lf9uFsd7Czm 3Jwca6LD5dIgiDbhvzK19vC5mtl11S72xxen+q1s57vEdt4mh8irjogV/AjlEX3i ctFJ/4Ys4eq0Bkict5koyfc9Dku0KPHTTB7/vNlzi+QMOVek3bY41XcgWUI7Hvd7 8X5BkbYsFhnK+nOT4Obhhfxyds1rxidPGxkkDPIfjXuae8sL3H7bU7lZZJ+SSQNh i1AW/l3tzqLxZg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:06 2026 by rpki-client