$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft File: kdDHjDCaPpncmrdPLNwEhIWedTA.mft (raw, json) Hash identifier: Nc7vhH34A+SVjztrv52OSaS8Pg9EHa57kkVfDeohTIU= Subject key identifier: C3:AE:2A:22:EE:E8:1A:5F:84:B8:E1:C9:1E:95:1D:B4:03:BC:06:53 Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 01A1065C236858A44175AB4963D340C5967F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft Manifest number: 15A5 Signing time: Sun 04 Oct 2026 10:01:03 +0000 Manifest this update: Sun 04 Oct 2026 10:01:03 +0000 Manifest next update: Mon 05 Oct 2026 10:01:03 +0000 Files and hashes: 1: 4VmR_FihzyMKRVwNqS1q32ma_4w.roa (hash: 8llGmDSPV1S8WvDmecxyGu8AsVkz9E7OwToEbm9Afi8=) 2: 5Vmgwb9F8vQSn62TUA3DtbFUacY.roa (hash: 4EZeJdyzRgVjWWf5FyUvU3cY8Jjs1Q2gQ6LYk3w4pZ0=) 3: 9ThI9Z7soYxz8aK7SxBvxoPEOX4.roa (hash: 2FCnysFwLOl4zVeb97SHJ1QvBKVL+gw4QmS3UAORjFk=) 4: BsMfnzrxddpnmFQ8FtiqLN4hIRw.roa (hash: GbFN7H89aII0f8FiIff5RGaJGPYoV9OOEoYuPkHE93c=) 5: C67-QabxkPaVhoCKelfc7gJ1hK8.roa (hash: 0WW6NyrxV5VH4o1lj6kLTZOdEKPeDBs7ouwPQd+hBHw=) 6: GXCfAVmuuL63Oe4dOVqYkc3Wuzg.roa (hash: L3MDEpVumA01FdWvikqD5sE8kkEXPwKtDKdz6KqfMnQ=) 7: RY0bArq-jZLzZUGQCt7VtVQ1eP8.roa (hash: nOIDnyfWMWKkEgKPjDc9li7leEEkKMO7ZYw+RINdMRI=) 8: WNwct_JeSUw9EGnGt5EMmHO1qnA.roa (hash: 8JESbBJVZwKNLtuuBYLAyN1yjWX+0RJfMcx4iiDnUQ0=) 9: br-MdcUGAgIJZ2jokAIrGgvBgVg.roa (hash: nAJrJwXFm0eNNJbUiUMkYMOpV3Mo7gqR8CqVePMN9SA=) 10: kdDHjDCaPpncmrdPLNwEhIWedTA.crl (hash: +WBu+cGe9vVDl68GTJB8vMjTk8H8Ui9N4AUTeJ3JaAQ=) 11: p3gPfuFdg2rqrSBfl0UDEUdNbjM.roa (hash: bWC6ioqLuy3JQURX6TTBBncQtFn3EtAYrnrtm+JIq5g=) 12: qoJxh9RoMci9r1884qksasXONeQ.roa (hash: b1P5hF2MWBN0Il3GucTyqyanvw/mWve+jbkBZTYW4xQ=) 13: rUMTx45HXhT_MTA8guO-8T9IUPs.roa (hash: yK8AP3UaROn7J6m+AMP74llGEVQg0fy8g5ZS+T2U/tk=) 14: zByDWqzQes6Qf_5yruyAW6l4NA8.roa (hash: 4mGvD80bIUslVCK/Nf88S+YHOSjLonqjJpu89t+7Om0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:06:5c:23:68:58:a4:41:75:ab:49:63:d3:40:c5:96:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Oct 4 10:01:03 2026 GMT Not After : Oct 5 10:01:03 2026 GMT Subject: CN=c3ae2a22eee81a5f84b8e1c91e951db403bc0653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:50:fb:49:0f:31:15:c7:eb:0c:86:93:0f: 36:c7:be:84:cf:74:58:63:88:f6:36:fb:e3:79:53: 16:98:bc:91:77:3a:8a:d2:ce:a7:a9:d3:88:56:33: 6a:94:df:18:58:bc:0d:ba:6c:fb:8d:e7:1b:3c:3a: 57:a7:7e:d9:14:e5:a0:a2:a7:be:0a:2e:b3:55:5a: 38:22:e6:38:56:69:1a:0a:fa:2d:75:d3:c7:61:82: bc:86:ea:a2:38:f4:5f:03:30:5d:33:a3:6c:d3:0b: d1:68:8f:56:2f:65:e6:34:dc:15:41:04:6f:e0:f1: 4d:52:95:1a:73:5c:ba:88:46:86:5e:ac:93:67:fb: 9b:09:ca:37:24:6b:cb:24:69:4e:85:1c:3f:85:1f: ee:1c:00:0b:74:e6:c3:ad:fd:27:3c:df:ce:cd:3d: e9:64:5f:68:0a:d2:94:24:7e:9e:65:e1:38:77:a3: 66:6b:3a:a4:1c:9b:2d:3b:c5:1d:eb:ad:48:7c:77: ea:e4:e4:79:64:15:00:56:67:8c:8c:e3:80:1c:aa: f2:0e:38:b4:88:23:f6:e6:80:52:ad:8d:d3:aa:7a: 5c:94:8e:30:87:9d:ad:ee:c0:ed:ce:66:fa:1d:7c: 17:75:90:ca:20:e5:cd:52:81:ec:a2:bc:1f:c3:c1: 6f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AE:2A:22:EE:E8:1A:5F:84:B8:E1:C9:1E:95:1D:B4:03:BC:06:53 X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8f:73:13:60:dc:b8:e8:52:34:da:74:79:1e:91:15:6a:6f: 44:fd:48:46:23:23:71:df:ae:cc:4e:ab:f9:6f:ae:be:97:a4: 07:7e:4c:bd:37:eb:a5:40:5a:a4:7f:3a:1e:1d:db:cf:04:e8: 03:7e:4a:5a:6a:ab:9f:66:72:4e:de:30:49:8f:88:ec:41:dc: f2:4d:22:b2:e6:e3:7f:b0:29:64:77:70:5a:3b:e9:43:6f:fc: 28:e8:38:04:31:26:c4:18:e1:f9:f7:80:00:6e:ea:02:bf:b9: 7d:d6:95:93:81:d9:1f:14:66:05:59:d9:16:c7:b8:14:2d:4e: 3a:ee:ee:ba:3e:3b:b2:7c:80:0b:cd:bc:5c:13:30:9e:aa:92: ea:77:19:6b:37:14:9e:cc:2a:9c:1e:bc:09:48:1e:08:5d:a1: 82:da:08:e6:14:88:27:25:7d:69:4b:6c:1c:23:80:24:36:06: 86:ca:00:9d:37:16:9a:1e:7a:96:93:f7:72:52:1b:2d:e8:f6: 85:e1:4e:63:38:20:de:f8:e2:51:94:fb:a3:fa:a5:66:19:21: e1:43:4c:b2:f1:a6:cf:67:5a:fc:6d:fc:55:d1:b7:e2:e9:81: 48:25:1a:0e:20:ae:b0:b5:df:1a:43:3c:44:b5:c8:21:c5:45: 6e:6c:d9:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEGXCNoWKRBdatJY9NAxZZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYxMDA0MTAwMTAzWhcNMjYxMDA1MTAwMTAzWjAzMTEwLwYDVQQD EyhjM2FlMmEyMmVlZTgxYTVmODRiOGUxYzkxZTk1MWRiNDAzYmMwNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F1Q+0kPMRXH6wyGkw82x76Ez3RY Y4j2NvvjeVMWmLyRdzqK0s6nqdOIVjNqlN8YWLwNumz7jecbPDpXp37ZFOWgoqe+ Ci6zVVo4IuY4VmkaCvotddPHYYK8huqiOPRfAzBdM6Ns0wvRaI9WL2XmNNwVQQRv 4PFNUpUac1y6iEaGXqyTZ/ubCco3JGvLJGlOhRw/hR/uHAALdObDrf0nPN/OzT3p ZF9oCtKUJH6eZeE4d6NmazqkHJstO8Ud661IfHfq5OR5ZBUAVmeMjOOAHKryDji0 iCP25oBSrY3TqnpclI4wh52t7sDtzmb6HXwXdZDKIOXNUoHsorwfw8FvLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOuKiLu6BpfhLjhyR6VHbQDvAZTMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo9zE2Dc uOhSNNp0eR6RFWpvRP1IRiMjcd+uzE6r+W+uvpekB35MvTfrpUBapH86Hh3bzwTo A35KWmqrn2ZyTt4wSY+I7EHc8k0isubjf7ApZHdwWjvpQ2/8KOg4BDEmxBjh+feA AG7qAr+5fdaVk4HZHxRmBVnZFse4FC1OOu7uuj47snyAC828XBMwnqqS6ncZazcU nswqnB68CUgeCF2hgtoI5hSIJyV9aUtsHCOAJDYGhsoAnTcWmh56lpP3clIbLej2 heFOYzgg3vjiUZT7o/qlZhkh4UNMsvGmz2da/G38VdG34umBSCUaDiCusLXfGkM8 RLXIIcVFbmzZfQ== -----END CERTIFICATE-----Generated at Sun Oct 4 19:48:29 2026 by rpki-client