$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft File: kdDHjDCaPpncmrdPLNwEhIWedTA.mft (raw, json) Hash identifier: FbBATIKUfoSmc1tu3QiGkV2wTIMx2JRdam7kSxuO/AM= Subject key identifier: 7E:FB:05:4B:18:04:19:EE:87:FC:FF:AD:B7:05:C6:18:1E:7B:6E:F2 Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 019FF86C452C59618493EAC56B51B584550F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft Manifest number: 1519 Signing time: Thu 13 Aug 2026 00:01:12 +0000 Manifest this update: Thu 13 Aug 2026 00:01:12 +0000 Manifest next update: Fri 14 Aug 2026 00:01:12 +0000 Files and hashes: 1: 4VmR_FihzyMKRVwNqS1q32ma_4w.roa (hash: 8llGmDSPV1S8WvDmecxyGu8AsVkz9E7OwToEbm9Afi8=) 2: 9ThI9Z7soYxz8aK7SxBvxoPEOX4.roa (hash: 2FCnysFwLOl4zVeb97SHJ1QvBKVL+gw4QmS3UAORjFk=) 3: BsMfnzrxddpnmFQ8FtiqLN4hIRw.roa (hash: GbFN7H89aII0f8FiIff5RGaJGPYoV9OOEoYuPkHE93c=) 4: C67-QabxkPaVhoCKelfc7gJ1hK8.roa (hash: 0WW6NyrxV5VH4o1lj6kLTZOdEKPeDBs7ouwPQd+hBHw=) 5: GXCfAVmuuL63Oe4dOVqYkc3Wuzg.roa (hash: L3MDEpVumA01FdWvikqD5sE8kkEXPwKtDKdz6KqfMnQ=) 6: RY0bArq-jZLzZUGQCt7VtVQ1eP8.roa (hash: nOIDnyfWMWKkEgKPjDc9li7leEEkKMO7ZYw+RINdMRI=) 7: WNwct_JeSUw9EGnGt5EMmHO1qnA.roa (hash: 8JESbBJVZwKNLtuuBYLAyN1yjWX+0RJfMcx4iiDnUQ0=) 8: br-MdcUGAgIJZ2jokAIrGgvBgVg.roa (hash: nAJrJwXFm0eNNJbUiUMkYMOpV3Mo7gqR8CqVePMN9SA=) 9: kdDHjDCaPpncmrdPLNwEhIWedTA.crl (hash: RGXNhQ4AvhLVi4+OXDAqxGPkePfmNSM3q6oJiQNPZCE=) 10: p3gPfuFdg2rqrSBfl0UDEUdNbjM.roa (hash: bWC6ioqLuy3JQURX6TTBBncQtFn3EtAYrnrtm+JIq5g=) 11: qoJxh9RoMci9r1884qksasXONeQ.roa (hash: b1P5hF2MWBN0Il3GucTyqyanvw/mWve+jbkBZTYW4xQ=) 12: rUMTx45HXhT_MTA8guO-8T9IUPs.roa (hash: yK8AP3UaROn7J6m+AMP74llGEVQg0fy8g5ZS+T2U/tk=) 13: zByDWqzQes6Qf_5yruyAW6l4NA8.roa (hash: 4mGvD80bIUslVCK/Nf88S+YHOSjLonqjJpu89t+7Om0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 00:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f8:6c:45:2c:59:61:84:93:ea:c5:6b:51:b5:84:55:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Aug 13 00:01:12 2026 GMT Not After : Aug 14 00:01:12 2026 GMT Subject: CN=7efb054b180419ee87fcffadb705c6181e7b6ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a9:19:5a:56:86:ba:59:36:33:34:c8:e0:c5: ec:f1:0e:ce:6f:25:9a:fc:a8:50:89:d5:29:2a:80: 00:7a:5e:d1:bc:04:f3:23:21:9a:4c:9e:73:e0:9d: d6:33:2b:59:f9:e4:45:30:43:59:b3:79:fa:10:35: f5:4d:f7:5b:2d:9a:99:d5:58:8e:24:fe:14:7f:a5: f7:40:f0:de:17:1e:cd:4e:b6:86:81:bd:5c:f6:99: ce:c2:72:d4:a8:a7:2b:9a:2f:70:77:46:0b:9f:c6: a4:24:87:5d:aa:ac:48:89:c3:11:33:0d:6a:e2:71: 60:6b:0b:8e:01:cc:4f:ce:bc:08:c4:40:0a:97:65: 57:c1:24:34:43:d8:23:06:95:aa:19:98:71:00:2c: c9:75:43:8c:7a:aa:00:49:15:e6:ad:53:56:ac:a2: ae:2a:93:ed:5a:ff:54:f4:01:ed:5a:c6:78:b2:16: 48:df:b6:7f:a1:e0:2d:8d:81:18:0e:19:07:53:3a: f6:11:31:0d:84:2a:84:4f:e7:af:78:5d:5a:c3:a4: c0:ca:c6:3a:32:84:83:db:31:ef:e5:d1:4b:ad:c0: fd:c0:85:a1:d0:36:70:4f:c6:43:b9:35:6e:8c:13: fe:ed:36:a9:8a:f3:cc:fc:6f:75:61:dd:5c:5d:65: 05:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FB:05:4B:18:04:19:EE:87:FC:FF:AD:B7:05:C6:18:1E:7B:6E:F2 X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f8:1b:3f:c8:14:a4:57:48:29:ee:cd:27:6c:3f:75:68:f5: 73:d3:9d:74:32:13:f4:1a:96:48:4a:37:bc:85:2b:5a:c6:4c: 55:56:e5:5c:8a:59:8a:29:a2:b5:ea:58:ea:9d:82:8c:eb:1d: 1c:42:6b:e9:a7:08:80:7c:63:2f:34:0d:6a:ab:63:c7:5a:a2: 01:c6:af:e9:1b:ed:ec:7e:f2:03:d3:2b:c8:11:2c:36:c6:2e: 93:e8:9b:f1:e8:2c:cf:49:da:ee:1b:98:aa:e6:f9:72:37:36: 7c:94:28:88:9b:0f:08:ce:04:54:17:9d:6d:9b:e3:3d:1a:bb: f5:44:fc:09:a5:b4:58:e1:36:69:f5:b7:1c:94:d8:b4:9f:cb: e5:28:34:23:0d:28:1c:29:47:c8:16:21:83:b1:62:20:a3:1f: 09:11:90:58:bc:b7:c4:1e:c2:c7:e4:de:ef:8b:af:59:28:08: cf:5d:9c:18:37:1d:ab:18:63:8a:24:35:a8:35:5c:21:f2:67: 61:c4:54:90:06:f5:17:20:f4:f1:31:13:38:a5:12:d0:ae:8f: 36:77:02:df:c9:94:d4:2e:31:c8:d4:33:de:7b:cf:83:3b:f6: af:63:aa:a3:87:d7:45:90:8e:c5:d5:b5:6b:3f:a6:35:86:35: 83:5e:75:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/4bEUsWWGEk+rFa1G1hFUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYwODEzMDAwMTEyWhcNMjYwODE0MDAwMTEyWjAzMTEwLwYDVQQD Eyg3ZWZiMDU0YjE4MDQxOWVlODdmY2ZmYWRiNzA1YzYxODFlN2I2ZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2akZWlaGulk2MzTI4MXs8Q7ObyWa /KhQidUpKoAAel7RvATzIyGaTJ5z4J3WMytZ+eRFMENZs3n6EDX1TfdbLZqZ1ViO JP4Uf6X3QPDeFx7NTraGgb1c9pnOwnLUqKcrmi9wd0YLn8akJIddqqxIicMRMw1q 4nFgawuOAcxPzrwIxEAKl2VXwSQ0Q9gjBpWqGZhxACzJdUOMeqoASRXmrVNWrKKu KpPtWv9U9AHtWsZ4shZI37Z/oeAtjYEYDhkHUzr2ETENhCqET+eveF1aw6TAysY6 MoSD2zHv5dFLrcD9wIWh0DZwT8ZDuTVujBP+7TapivPM/G91Yd1cXWUFtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH77BUsYBBnuh/z/rbcFxhgee27yMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvgbP8gU pFdIKe7NJ2w/dWj1c9OddDIT9BqWSEo3vIUrWsZMVVblXIpZiimitepY6p2CjOsd HEJr6acIgHxjLzQNaqtjx1qiAcav6Rvt7H7yA9MryBEsNsYuk+ib8egsz0na7huY qub5cjc2fJQoiJsPCM4EVBedbZvjPRq79UT8CaW0WOE2afW3HJTYtJ/L5Sg0Iw0o HClHyBYhg7FiIKMfCRGQWLy3xB7Cx+Te74uvWSgIz12cGDcdqxhjiiQ1qDVcIfJn YcRUkAb1FyD08TETOKUS0K6PNncC38mU1C4xyNQz3nvPgzv2r2Oqo4fXRZCOxdW1 az+mNYY1g151JA== -----END CERTIFICATE-----Generated at Thu Aug 13 09:19:39 2026 by rpki-client