$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft File: KknhDg5wlLReuhwW-WN-HOxnvcY.mft (raw, json) Hash identifier: /OjvfKVJtFr53gzs+6OmH56/piVlKyD8Vbw50Q+iNBE= Subject key identifier: FF:92:61:7A:62:67:91:0E:90:19:8E:41:A5:31:89:8A:91:29:30:17 Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Certificate serial: 01A1396D40305B1A02AF1673D89B8C9D22F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft Manifest number: 02DA Signing time: Wed 14 Oct 2026 08:00:23 +0000 Manifest this update: Wed 14 Oct 2026 08:00:23 +0000 Manifest next update: Thu 15 Oct 2026 08:00:23 +0000 Files and hashes: 1: CQnRFbws69KUV1eDOh7tfsMPWcY.roa (hash: XQrjplYUGhogLSVTsLi+InaBCSnPLhVF2WDLQrbLme4=) 2: KknhDg5wlLReuhwW-WN-HOxnvcY.crl (hash: VEwAJaZ7N+Z6JUYt8HcYwdwKY2zVJbpPUbE+iC8O67M=) 3: LsTr7Vivk39ZgCbG387swerRK6c.roa (hash: qnydcWksp1kG77yb//mZBlPJ1UQa9L4iT4xclFDE6nk=) 4: Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa (hash: G0/QzlmRMEQtlNEZ8lhOPdNMyp6Hv4D1m4DiR2+PyZA=) 5: XZZS0J9cNFB34TPouF3k8-ZfCvw.roa (hash: /aqeE5gEnv2LBAY7p2JR8leoHcxdA9dbAKTDFlT19hs=) 6: Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa (hash: x6gttKcvk6cgj+0qilLdOAO3qlZUqMHAp+PtTLr5hkc=) 7: _JIme0QPIMt9vEAapbO3X4DxZ6o.roa (hash: 2TlFaoRWvQThXcHP6fVI19fGDUkBsF3BMCmvRQGDI4o=) 8: bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa (hash: ddJ0XAD6t5QQElM8h1FtjnOAe1zaPavt5df6dzC3Pqs=) 9: m8zy49mlilgd1SPfU7e74Pq-L9w.roa (hash: 3ByWSNaUHf3Y97SFh9Lm+qACChqfIOs4+xqkpYGrpug=) 10: v22kTg0bTYFeeEWrApNqBfg_jxY.roa (hash: x8keV3yS66xLjOAZX4BOX56TvQOMZSSX31M99Vku2wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Oct 2026 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:39:6d:40:30:5b:1a:02:af:16:73:d8:9b:8c:9d:22:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Validity Not Before: Oct 14 08:00:23 2026 GMT Not After : Oct 15 08:00:23 2026 GMT Subject: CN=ff92617a6267910e90198e41a531898a91293017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:ca:48:7a:41:e9:92:5f:f4:e5:d6:df:43: b4:4e:60:34:23:c8:3e:fe:b8:de:bd:69:ff:63:45: 00:86:e8:f0:b9:ee:f2:2f:f0:7c:f6:38:a4:b4:88: ca:2f:ca:8e:6c:a0:92:71:20:b7:08:ab:df:57:0d: ee:c4:44:e2:6e:01:fc:96:f4:35:77:e6:82:c3:95: ea:83:b3:6b:30:33:0f:70:f6:bc:1f:4a:fd:17:9e: 57:b3:42:92:86:9b:51:b5:9b:68:a9:a8:b0:e6:78: 17:cf:4c:a7:f9:8b:29:b1:86:cf:de:34:4c:9d:3c: f9:43:65:c7:80:c1:75:c8:92:ec:78:f0:91:83:97: d8:90:b2:95:2c:83:6f:fa:db:89:49:c7:b7:8a:1a: ee:11:81:93:04:59:83:e4:4b:70:45:02:6e:73:e1: 81:15:c5:f4:f2:74:2e:10:1b:23:9e:ab:f0:71:b4: e3:c1:83:4d:8c:21:5c:7a:e1:e0:07:ab:5e:b2:89: 2f:d8:9c:3d:28:86:23:fb:88:e8:02:8c:29:17:61: b9:84:87:8d:ed:65:e7:4a:8e:b2:be:0b:a4:36:ed: fb:0e:3f:35:6a:dd:77:16:bb:2c:77:97:1c:1f:06: 36:11:24:08:85:02:36:9b:8d:58:c0:e8:5d:64:61: 6a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:92:61:7A:62:67:91:0E:90:19:8E:41:A5:31:89:8A:91:29:30:17 X509v3 Authority Key Identifier: keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a8:9f:9c:72:20:de:03:8e:64:fd:d6:10:db:0c:c7:2a:11: 8a:df:28:61:3c:72:2a:e4:21:83:a8:be:a6:47:3d:c8:01:31: 8f:21:87:de:1c:28:60:01:e2:dd:6f:ea:cf:d8:db:8d:2b:6e: bc:0a:0b:f4:6f:b4:da:ee:46:6e:1f:58:93:e7:95:d9:61:54: 4f:52:12:68:49:08:0c:d7:a4:7d:8e:9f:27:2f:d3:cb:42:08: 02:e9:e4:ac:63:40:75:c5:8b:27:ed:28:41:fd:0b:95:f6:e7: 09:1b:b9:6f:8e:33:1e:6d:e0:d1:6f:88:9a:86:d4:54:74:1f: 31:38:16:98:d9:4f:93:cf:ab:f4:29:3d:db:e5:69:04:b0:da: 4a:cc:5c:b1:ab:ca:2d:73:47:df:72:7d:b6:d2:32:83:a4:48: 12:d0:7d:2a:13:11:2b:42:be:a1:84:c9:fe:6d:cf:28:e9:af: d7:83:d0:3f:46:4b:02:70:ba:55:57:1b:48:d5:57:10:db:9c: a1:f2:65:93:6b:1b:8b:d7:18:d8:89:c2:84:0d:94:ac:8f:a9: 05:c3:3c:12:82:90:a0:85:77:a1:d5:5f:78:22:9e:75:77:57: 0d:2e:97:b6:1c:ea:8c:df:94:53:70:45:7e:71:63:8c:0b:55: ba:3f:ff:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE5bUAwWxoCrxZz2JuMnSL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDllMTBlMGU3MDk0YjQ1ZWJhMWMxNmY5NjM3ZTFjZWM2 N2JkYzYwHhcNMjYxMDE0MDgwMDIzWhcNMjYxMDE1MDgwMDIzWjAzMTEwLwYDVQQD EyhmZjkyNjE3YTYyNjc5MTBlOTAxOThlNDFhNTMxODk4YTkxMjkzMDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbLKSHpB6ZJf9OXW30O0TmA0I8g+ /rjevWn/Y0UAhujwue7yL/B89jiktIjKL8qObKCScSC3CKvfVw3uxETibgH8lvQ1 d+aCw5Xqg7NrMDMPcPa8H0r9F55Xs0KShptRtZtoqaiw5ngXz0yn+YspsYbP3jRM nTz5Q2XHgMF1yJLsePCRg5fYkLKVLINv+tuJSce3ihruEYGTBFmD5EtwRQJuc+GB FcX08nQuEBsjnqvwcbTjwYNNjCFceuHgB6tesokv2Jw9KIYj+4joAowpF2G5hIeN 7WXnSo6yvgukNu37Dj81at13Frssd5ccHwY2ESQIhQI2m41YwOhdZGFqNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+SYXpiZ5EOkBmOQaUxiYqRKTAXMB8GA1UdIwQY MBaAFCpJ4Q4OcJS0XrocFvljfhzsZ73GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQt MmQzOGIzOTNiMTIzLzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQtMmQzOGIzOTNiMTIz LzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKifnHIg 3gOOZP3WENsMxyoRit8oYTxyKuQhg6i+pkc9yAExjyGH3hwoYAHi3W/qz9jbjStu vAoL9G+02u5Gbh9Yk+eV2WFUT1ISaEkIDNekfY6fJy/Ty0IIAunkrGNAdcWLJ+0o Qf0LlfbnCRu5b44zHm3g0W+ImobUVHQfMTgWmNlPk8+r9Ck92+VpBLDaSsxcsavK LXNH33J9ttIyg6RIEtB9KhMRK0K+oYTJ/m3PKOmv14PQP0ZLAnC6VVcbSNVXENuc ofJlk2sbi9cY2InChA2UrI+pBcM8EoKQoIV3odVfeCKedXdXDS6XthzqjN+UU3BF fnFjjAtVuj//BQ== -----END CERTIFICATE-----Generated at Wed Oct 14 15:11:18 2026 by rpki-client