$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: n6xyV0Q+rmIj8RbQVIXCUeJqCxAT9zHwjDQirLpqyHo= Subject key identifier: B9:0B:DE:11:CA:CE:75:0A:74:BA:CF:51:83:2B:BF:09:7D:3D:AF:26 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019DE7B50EAFA4F25BC2A4073F9884A63C6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1908 Signing time: Sat 02 May 2026 08:01:35 +0000 Manifest this update: Sat 02 May 2026 08:01:35 +0000 Manifest next update: Sun 03 May 2026 08:01:35 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9DusrtcNuEKlX3-m9foPJH2szlI.roa (hash: b8raHEJQGNgJfwuoWcURy2P5Ad5oX4Bo6uvIPpzRudA=) 3: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 4: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 5: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: udmIplBmpnk9jsRQOvvJEjjbeKewYX7ZJEf25KhoAVQ=) 6: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 7: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) 10: mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa (hash: 64Bq4BjaquUNa/q+gUB1JEszW2wTR9StXwwTroa+sNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 03 May 2026 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:e7:b5:0e:af:a4:f2:5b:c2:a4:07:3f:98:84:a6:3c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: May 2 08:01:35 2026 GMT Not After : May 3 08:01:35 2026 GMT Subject: CN=b90bde11cace750a74bacf51832bbf097d3daf26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:61:a5:08:f0:82:e9:de:fc:de:47:fd:4e: 10:a8:1d:b2:a5:65:6a:d3:e5:09:bb:c4:a5:b6:58: 2e:63:73:d3:ec:23:86:72:86:29:66:ee:30:4d:d0: 3d:8f:a5:a1:d0:9b:fe:f4:1b:d7:c8:88:65:27:17: 64:64:94:e0:a2:e9:73:3d:0a:f1:69:dd:1b:cf:6c: 2e:73:da:40:03:a6:ca:68:7a:0f:fb:4a:54:be:a6: 3d:a7:79:c7:b3:ac:90:0e:72:88:9f:55:67:1b:d4: 53:77:58:80:d0:e2:fe:cd:dd:83:bb:b6:62:33:38: 92:44:13:20:fa:71:34:03:69:ec:97:75:ac:35:6a: a5:db:40:9d:a2:da:ac:c3:59:04:75:4e:20:4f:06: f3:88:e9:e1:fe:7a:64:1c:cd:78:bc:bb:2b:a7:11: 40:a4:70:b7:20:b8:11:9a:22:f3:46:93:82:44:ed: df:38:7c:4c:76:95:7c:59:b1:50:00:0e:3a:41:e0: f1:a6:e2:2a:9e:cf:e9:0c:64:e5:aa:86:85:1d:c3: 0a:d7:93:4a:d2:6b:07:3f:7f:7c:23:03:d0:0b:c6: f7:dd:de:f8:d6:bc:a8:36:a8:7d:b1:20:95:e3:87: 81:a9:a1:82:c9:15:69:1c:b9:ff:f5:69:16:78:07: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0B:DE:11:CA:CE:75:0A:74:BA:CF:51:83:2B:BF:09:7D:3D:AF:26 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:ed:a6:9d:8f:7e:4e:a4:ac:7b:bf:79:61:99:6e:21:9d:99: e0:5c:e2:c9:b7:ea:bc:e3:e0:97:22:ba:b0:4c:c9:b7:1e:b0: 10:7c:34:20:4a:c2:eb:35:66:45:27:a2:91:5b:ce:6a:c5:7f: 97:18:e4:3d:8d:79:c4:01:61:0a:ba:07:db:9b:55:32:de:7c: 0c:04:1d:d2:29:99:0f:af:06:6d:ef:be:66:a6:f1:68:b5:5f: 74:16:b6:b9:c2:89:92:b6:d7:a9:40:35:65:a0:5b:b9:e7:bf: 15:1f:f8:0f:5d:cb:75:66:7e:f1:f7:ca:2e:1b:ff:14:84:fc: d5:ad:63:a5:b2:f2:1e:af:11:b2:51:5d:ff:f5:c2:ed:05:f8: 61:39:e5:20:ba:5a:a6:e9:42:03:8f:f1:c7:02:e0:6e:46:d4: da:c5:a2:bf:78:4e:bc:e0:e6:ab:51:08:7a:3d:b4:58:06:bd: 64:a2:9a:a6:31:63:41:2f:c1:73:ce:46:de:5d:75:bd:66:7e: 72:23:a0:18:d2:d8:6e:6f:58:3e:11:d0:7c:bf:0b:18:9f:16: 9b:02:19:de:28:f3:ae:01:67:e2:db:40:c0:4f:f0:94:62:ba: d2:1d:26:55:e2:c4:e1:26:a9:c4:7c:e4:4f:8e:01:7c:32:87: 63:d5:81:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3ntQ6vpPJbwqQHP5iEpjxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwNTAyMDgwMTM1WhcNMjYwNTAzMDgwMTM1WjAzMTEwLwYDVQQD EyhiOTBiZGUxMWNhY2U3NTBhNzRiYWNmNTE4MzJiYmYwOTdkM2RhZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj5hpQjwgune/N5H/U4QqB2ypWVq 0+UJu8SltlguY3PT7COGcoYpZu4wTdA9j6Wh0Jv+9BvXyIhlJxdkZJTgoulzPQrx ad0bz2wuc9pAA6bKaHoP+0pUvqY9p3nHs6yQDnKIn1VnG9RTd1iA0OL+zd2Du7Zi MziSRBMg+nE0A2nsl3WsNWql20Cdotqsw1kEdU4gTwbziOnh/npkHM14vLsrpxFA pHC3ILgRmiLzRpOCRO3fOHxMdpV8WbFQAA46QeDxpuIqns/pDGTlqoaFHcMK15NK 0msHP398IwPQC8b33d741ryoNqh9sSCV44eBqaGCyRVpHLn/9WkWeAd0zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkL3hHKznUKdLrPUYMrvwl9Pa8mMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAye2mnY9+ TqSse795YZluIZ2Z4FziybfqvOPglyK6sEzJtx6wEHw0IErC6zVmRSeikVvOasV/ lxjkPY15xAFhCroH25tVMt58DAQd0imZD68Gbe++ZqbxaLVfdBa2ucKJkrbXqUA1 ZaBbuee/FR/4D13LdWZ+8ffKLhv/FIT81a1jpbLyHq8RslFd//XC7QX4YTnlILpa pulCA4/xxwLgbkbU2sWiv3hOvODmq1EIej20WAa9ZKKapjFjQS/Bc85G3l11vWZ+ ciOgGNLYbm9YPhHQfL8LGJ8WmwIZ3ijzrgFn4ttAwE/wlGK60h0mVeLE4SapxHzk T44BfDKHY9WBhg== -----END CERTIFICATE-----Generated at Sat May 2 13:47:28 2026 by rpki-client