$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: cb6r2gRzZhazJgJGlkCNXjPBxScca5onoFFOn/Zjup4= Subject key identifier: 6C:7B:9F:28:FD:C5:7C:89:3A:E0:AC:4F:0A:A2:72:15:E6:F4:C0:48 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 01A08B9EFD81A469923A92725468121DCC80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 1A4F Signing time: Thu 10 Sep 2026 14:00:47 +0000 Manifest this update: Thu 10 Sep 2026 14:00:47 +0000 Manifest next update: Fri 11 Sep 2026 14:00:47 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: lV8kc4tBmWZbSy0avT2ifWyIK4PxDcXOqDWcN7/GXPg=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:9e:fd:81:a4:69:92:3a:92:72:54:68:12:1d:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Sep 10 14:00:47 2026 GMT Not After : Sep 11 14:00:47 2026 GMT Subject: CN=6c7b9f28fdc57c893ae0ac4f0aa27215e6f4c048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e6:a4:18:2a:fd:76:af:1b:14:2e:38:fa:44: 9d:99:12:86:55:c3:f8:d7:86:ca:83:35:f6:e4:d2: 93:6e:73:d1:2a:98:bf:f8:69:cc:6e:b3:bc:86:42: a7:de:35:2d:ef:74:fe:72:a4:29:dd:4e:a0:f0:25: a8:eb:0d:18:14:ab:a7:a9:a0:d8:29:2a:9e:21:53: da:f4:89:b2:b1:90:6e:54:df:c6:52:2f:2b:7d:34: 86:58:bc:c2:bd:08:83:98:9e:6b:e5:b9:3f:2d:75: b7:92:f8:79:25:4e:54:d9:3a:c2:ca:b6:0c:83:3b: 8d:fc:cc:da:47:48:96:5d:db:f8:92:53:41:ac:a9: a6:7f:b9:fb:02:80:97:12:b2:79:f5:fb:d0:8e:44: 11:1a:9b:23:ea:0e:a2:d6:07:75:1f:59:35:28:3e: 9c:89:78:2e:30:37:2f:37:d3:d4:3b:6b:b3:53:d0: 34:dd:e1:82:93:42:a0:81:34:b8:4c:50:3a:a9:b7: d3:68:39:d3:37:5b:e9:4d:22:a3:fa:b6:4f:e4:5b: ec:10:86:ef:05:5f:1c:ad:2a:62:51:3b:00:fa:12: 1f:f5:5c:f5:e7:0b:e2:3d:51:b0:58:64:8f:86:7a: 3c:92:2a:a5:d9:de:c9:24:9f:df:f9:ad:3a:7e:ce: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:9F:28:FD:C5:7C:89:3A:E0:AC:4F:0A:A2:72:15:E6:F4:C0:48 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4b:1d:e5:11:81:1c:b0:ef:2e:98:85:d6:99:a1:8a:cc:8e: 11:79:0c:85:c5:8f:4d:37:95:2e:11:a8:b0:7f:e1:39:be:01: 0b:2f:91:c5:c5:83:70:2b:6a:5f:aa:69:70:4f:f6:9b:a4:35: 97:14:8e:8a:a8:db:25:92:3b:92:05:d8:f7:25:f2:95:b5:93: 81:a5:2f:81:c8:47:df:91:1c:01:2b:1a:ce:c8:9e:ba:e8:77: fb:ba:aa:a7:14:76:08:17:8e:75:f7:6a:bc:34:08:98:4e:2d: 9a:50:fe:66:1e:32:45:36:0a:4e:5f:d6:18:b7:c9:98:ec:5d: 57:c0:80:1a:6b:79:37:bb:f3:02:dd:59:50:72:c1:66:af:bb: 4f:e1:31:f7:70:5b:00:cf:20:51:95:45:fc:dc:8c:de:eb:36: 82:5b:3d:cf:44:de:d3:f1:44:50:5b:90:34:c1:4c:6d:e2:ff: 61:96:21:0b:65:a3:52:85:76:39:fe:df:10:96:3b:67:67:52: 6b:0b:63:03:72:b2:3b:29:2e:6d:30:97:e9:0d:10:3b:1b:27: 79:5e:96:21:10:e6:58:02:84:80:c8:f0:28:f4:76:6a:ac:10: 49:85:eb:52:6c:a6:1a:ee:f6:4b:65:87:2d:7a:04:03:86:83: 99:07:e5:c8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaCLnv2BpGmSOpJyVGgSHcyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwOTEwMTQwMDQ3WhcNMjYwOTExMTQwMDQ3WjAzMTEwLwYDVQQD Eyg2YzdiOWYyOGZkYzU3Yzg5M2FlMGFjNGYwYWEyNzIxNWU2ZjRjMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+akGCr9dq8bFC44+kSdmRKGVcP4 14bKgzX25NKTbnPRKpi/+GnMbrO8hkKn3jUt73T+cqQp3U6g8CWo6w0YFKunqaDY KSqeIVPa9ImysZBuVN/GUi8rfTSGWLzCvQiDmJ5r5bk/LXW3kvh5JU5U2TrCyrYM gzuN/MzaR0iWXdv4klNBrKmmf7n7AoCXErJ59fvQjkQRGpsj6g6i1gd1H1k1KD6c iXguMDcvN9PUO2uzU9A03eGCk0KggTS4TFA6qbfTaDnTN1vpTSKj+rZP5FvsEIbv BV8crSpiUTsA+hIf9Vz15wviPVGwWGSPhno8kiql2d7JJJ/f+a06fs7K6wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGx7nyj9xXyJOuCsTwqichXm9MBIMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMksd 5RGBHLDvLpiF1pmhisyOEXkMhcWPTTeVLhGosH/hOb4BCy+RxcWDcCtqX6ppcE/2 m6Q1lxSOiqjbJZI7kgXY9yXylbWTgaUvgchH35EcASsazsieuuh3+7qqpxR2CBeO dfdqvDQImE4tmlD+Zh4yRTYKTl/WGLfJmOxdV8CAGmt5N7vzAt1ZUHLBZq+7T+Ex 93BbAM8gUZVF/NyM3us2gls9z0Te0/FEUFuQNMFMbeL/YZYhC2WjUoV2Of7fEJY7 Z2dSawtjA3KyOykubTCX6Q0QOxsneV6WIRDmWAKEgMjwKPR2aqwQSYXrUmymGu72 S2WHLXoEA4aDmQflyA== -----END CERTIFICATE-----Generated at Thu Sep 10 19:55:48 2026 by rpki-client