$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft File: KknhDg5wlLReuhwW-WN-HOxnvcY.mft (raw, json) Hash identifier: dHBs3DJNx35BUMkqxmQOkMz/GlKC6zJRvnKKaq8vIKY= Subject key identifier: 55:26:05:56:DE:E3:00:E4:79:56:1C:36:0C:B1:04:8E:DB:55:C8:1F Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Certificate serial: 01A03E5F68E70122E72BCB42E925CE1D73F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft Manifest number: 0258 Signing time: Wed 26 Aug 2026 14:00:34 +0000 Manifest this update: Wed 26 Aug 2026 14:00:34 +0000 Manifest next update: Thu 27 Aug 2026 14:00:34 +0000 Files and hashes: 1: CQnRFbws69KUV1eDOh7tfsMPWcY.roa (hash: XQrjplYUGhogLSVTsLi+InaBCSnPLhVF2WDLQrbLme4=) 2: KknhDg5wlLReuhwW-WN-HOxnvcY.crl (hash: aciCwmBTtcESDfecAP0b/UbB4/zaTbd3z0vqOksrMKU=) 3: LsTr7Vivk39ZgCbG387swerRK6c.roa (hash: qnydcWksp1kG77yb//mZBlPJ1UQa9L4iT4xclFDE6nk=) 4: Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa (hash: G0/QzlmRMEQtlNEZ8lhOPdNMyp6Hv4D1m4DiR2+PyZA=) 5: XZZS0J9cNFB34TPouF3k8-ZfCvw.roa (hash: /aqeE5gEnv2LBAY7p2JR8leoHcxdA9dbAKTDFlT19hs=) 6: Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa (hash: x6gttKcvk6cgj+0qilLdOAO3qlZUqMHAp+PtTLr5hkc=) 7: _JIme0QPIMt9vEAapbO3X4DxZ6o.roa (hash: 2TlFaoRWvQThXcHP6fVI19fGDUkBsF3BMCmvRQGDI4o=) 8: bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa (hash: ddJ0XAD6t5QQElM8h1FtjnOAe1zaPavt5df6dzC3Pqs=) 9: m8zy49mlilgd1SPfU7e74Pq-L9w.roa (hash: 3ByWSNaUHf3Y97SFh9Lm+qACChqfIOs4+xqkpYGrpug=) 10: v22kTg0bTYFeeEWrApNqBfg_jxY.roa (hash: x8keV3yS66xLjOAZX4BOX56TvQOMZSSX31M99Vku2wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3e:5f:68:e7:01:22:e7:2b:cb:42:e9:25:ce:1d:73:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Validity Not Before: Aug 26 14:00:34 2026 GMT Not After : Aug 27 14:00:34 2026 GMT Subject: CN=55260556dee300e479561c360cb1048edb55c81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:7c:41:53:d9:e9:bb:31:7e:e1:cb:39:42: 52:eb:c6:b6:ee:a6:a3:cb:75:5d:06:26:79:f1:33: 15:df:ae:9f:ef:7a:75:e9:5a:90:99:a0:ba:52:6b: 37:36:ce:6f:51:6a:70:ea:3b:b5:10:b2:fd:48:81: a1:04:02:d9:f2:ff:cb:a7:33:82:26:af:05:9d:7f: 63:1d:46:e8:71:27:23:9c:bb:3c:70:59:4f:df:13: cf:20:60:d5:9d:57:f2:71:71:74:62:e8:27:56:bb: 64:40:2d:0a:9e:9f:0e:9d:dd:ed:f2:c4:06:46:80: 06:9e:e7:17:b7:19:65:b2:04:dc:b0:70:3f:9b:ec: 92:75:57:62:97:51:f6:ec:db:6c:67:d9:74:39:c2: 8e:58:e2:9f:e6:b1:0c:a9:01:29:6c:8e:a5:7c:59: a9:35:4d:81:c5:10:9f:41:19:1b:09:90:c4:61:16: 5f:39:65:df:04:c7:d0:d1:bb:a2:12:76:1f:29:af: 7f:fb:5c:cc:17:86:53:8c:8c:7c:e8:25:48:1e:21: ce:5d:5a:75:06:2a:65:0e:55:a8:aa:e5:39:40:c4: ed:0c:65:91:86:ec:8b:44:cf:1f:89:fe:3c:5e:7b: 75:9d:14:1b:1e:7e:0a:fd:58:32:28:e0:89:71:92: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:26:05:56:DE:E3:00:E4:79:56:1C:36:0C:B1:04:8E:DB:55:C8:1F X509v3 Authority Key Identifier: keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c7:f5:30:7e:f4:1c:c1:53:02:61:f2:db:ed:8a:56:03:6c: 87:b2:48:54:df:d4:89:79:e0:a9:3c:f9:db:19:1d:1e:89:f5: 99:ca:43:b4:99:0b:4a:b2:06:f6:73:5f:74:af:51:e3:e3:7e: d6:b3:99:09:97:ed:4e:11:8b:5b:3f:03:c0:ec:69:f2:ff:01: 13:91:fe:f8:e9:9a:dd:16:a7:15:ef:cb:f2:15:9d:56:57:d3: 3d:2a:38:ac:c8:59:b9:d1:80:37:69:6e:0e:95:89:ad:46:7e: d6:93:6a:f2:71:ef:19:8e:5a:5f:04:a1:ad:8a:3d:80:1c:0d: b7:d1:69:32:fa:b6:75:cc:47:8e:3a:b9:a6:a5:fa:a1:ef:72: f0:3b:f4:2a:7e:9f:47:59:08:c0:9d:77:ac:a9:3c:83:e5:83: fa:2b:98:35:27:bd:47:de:1a:81:16:40:f0:38:ec:c1:f6:1c: 18:ce:ba:d1:fa:54:f4:17:55:50:c2:16:e7:66:83:30:37:9d: 1b:d6:99:cd:e7:b1:55:74:2a:45:81:0f:2d:e5:f2:2c:9b:c2: 1b:a5:f0:f2:2c:4d:04:88:92:28:c7:b5:af:a0:ce:6b:38:c4: 31:88:10:61:5d:d5:b0:90:f0:7b:ce:3a:50:38:99:76:65:e5: 1c:37:b4:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA+X2jnASLnK8tC6SXOHXPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDllMTBlMGU3MDk0YjQ1ZWJhMWMxNmY5NjM3ZTFjZWM2 N2JkYzYwHhcNMjYwODI2MTQwMDM0WhcNMjYwODI3MTQwMDM0WjAzMTEwLwYDVQQD Eyg1NTI2MDU1NmRlZTMwMGU0Nzk1NjFjMzYwY2IxMDQ4ZWRiNTVjODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyh8QVPZ6bsxfuHLOUJS68a27qaj y3VdBiZ58TMV366f73p16VqQmaC6Ums3Ns5vUWpw6ju1ELL9SIGhBALZ8v/LpzOC Jq8FnX9jHUbocScjnLs8cFlP3xPPIGDVnVfycXF0YugnVrtkQC0Knp8Ond3t8sQG RoAGnucXtxllsgTcsHA/m+ySdVdil1H27NtsZ9l0OcKOWOKf5rEMqQEpbI6lfFmp NU2BxRCfQRkbCZDEYRZfOWXfBMfQ0buiEnYfKa9/+1zMF4ZTjIx86CVIHiHOXVp1 BiplDlWoquU5QMTtDGWRhuyLRM8fif48Xnt1nRQbHn4K/VgyKOCJcZKugQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUmBVbe4wDkeVYcNgyxBI7bVcgfMB8GA1UdIwQY MBaAFCpJ4Q4OcJS0XrocFvljfhzsZ73GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQt MmQzOGIzOTNiMTIzLzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQtMmQzOGIzOTNiMTIz LzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsf1MH70 HMFTAmHy2+2KVgNsh7JIVN/UiXngqTz52xkdHon1mcpDtJkLSrIG9nNfdK9R4+N+ 1rOZCZftThGLWz8DwOxp8v8BE5H++Oma3RanFe/L8hWdVlfTPSo4rMhZudGAN2lu DpWJrUZ+1pNq8nHvGY5aXwShrYo9gBwNt9FpMvq2dcxHjjq5pqX6oe9y8Dv0Kn6f R1kIwJ13rKk8g+WD+iuYNSe9R94agRZA8DjswfYcGM660fpU9BdVUMIW52aDMDed G9aZzeexVXQqRYEPLeXyLJvCG6Xw8ixNBIiSKMe1r6DOazjEMYgQYV3VsJDwe846 UDiZdmXlHDe0pQ== -----END CERTIFICATE-----Generated at Wed Aug 26 23:02:17 2026 by rpki-client