$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: dd52MpMSWxNrJ8EYIUmjskHmeB5WtUslVCfDOKZFqno= Subject key identifier: 39:D7:82:DB:A8:9B:E4:30:44:1F:8F:EB:76:3A:C9:7E:EC:A5:68:FE Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 01A18307B7545CDCB3440E42E844CD86B007 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 1AD0 Signing time: Wed 28 Oct 2026 15:01:23 +0000 Manifest this update: Wed 28 Oct 2026 15:01:23 +0000 Manifest next update: Thu 29 Oct 2026 15:01:23 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: /usxJVp3lfbAm88Q8zIE+SqW5w7o03sxKwGC3oCwth4=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: PHgxrgraUaElkf9xNgKO7Z8MRYY.roa (hash: i6BEpT1L7gHNYnuFTObStxne07o+H91lP5V5SxBVUXQ=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 14:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:83:07:b7:54:5c:dc:b3:44:0e:42:e8:44:cd:86:b0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Oct 28 15:01:23 2026 GMT Not After : Oct 29 15:01:23 2026 GMT Subject: CN=39d782dba89be430441f8feb763ac97eeca568fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a9:b1:0d:09:a5:d7:23:e4:c1:f1:23:31:51: 61:02:1b:18:a6:d6:fb:88:ad:af:35:32:71:5b:52: d0:8b:59:3a:1f:16:b3:dc:09:17:df:4a:78:7a:06: a6:ed:df:e6:b2:85:bc:05:cf:b7:bc:3d:55:df:98: 6c:63:71:69:53:8b:2c:a6:07:ad:34:e6:57:36:47: b4:24:e7:bc:18:2d:d1:34:d6:57:1e:3f:7d:2a:4a: f0:01:1c:53:a7:d9:5c:37:99:4f:73:a6:56:a5:06: 99:88:60:fe:79:47:96:7f:cb:64:22:ec:b8:d6:f4: 6e:45:2b:11:da:63:06:a3:08:79:e3:3a:c0:88:15: d8:90:b6:1f:eb:1a:2f:38:0b:a2:51:2e:31:dd:03: 70:1b:d2:dc:24:8c:74:a2:9c:b4:96:f4:03:fd:41: d1:12:d8:92:25:8e:97:9b:bc:18:32:f6:96:92:8a: c6:0e:5a:0a:ec:46:b5:b7:c0:91:7b:4e:a6:90:8a: 1f:da:73:a7:d7:dd:93:cc:89:43:57:3e:23:62:06: d4:b7:be:9e:7a:7e:97:b1:1b:e9:0b:9a:c4:be:f5: a0:00:7d:b5:e5:72:60:66:8a:44:3a:62:fc:a4:92: 36:99:b7:a7:3c:c9:48:5d:ce:6f:b2:eb:b1:18:ea: 95:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D7:82:DB:A8:9B:E4:30:44:1F:8F:EB:76:3A:C9:7E:EC:A5:68:FE X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:de:5f:1b:f5:85:fe:60:0f:bc:02:0d:c4:b5:7c:9b:4c:6e: fd:53:fb:2d:dd:94:67:f0:e3:5a:9c:f7:3b:3c:5a:aa:12:51: 4f:cd:c3:fa:77:85:95:8c:e9:24:98:5e:72:4d:de:10:48:7b: 7a:b8:d6:84:f7:a0:89:53:05:f3:ae:3f:d4:4c:b5:25:17:38: 46:79:64:b9:26:d4:28:3d:16:06:e7:fe:9f:a5:51:41:12:3f: 55:c1:5c:4e:60:c3:e7:cd:49:c2:f2:32:6c:57:88:8a:27:1e: a0:d9:4e:bb:42:9a:fd:c9:ea:2b:70:c0:7c:66:86:ff:77:93: 27:f1:5d:63:1a:40:13:42:9a:61:fb:39:18:e5:f9:97:6f:90: 8d:ad:65:7a:d3:33:62:7c:93:56:11:34:d3:d9:46:a5:5d:2e: 3a:b4:b2:88:a6:fb:37:ed:53:56:ed:36:bc:5d:60:62:ef:94: 08:bc:5f:4f:7c:9e:36:67:6f:d6:3e:d8:f2:6d:95:48:71:0f: ef:42:03:5d:f6:f4:6f:c8:8a:e0:a7:e9:5b:4b:c9:60:cf:17: f9:5f:e2:16:cb:5f:1b:b8:4b:83:49:6a:38:6d:be:b8:7b:08: e6:a3:a8:6d:72:a8:44:6d:f4:63:94:cf:bc:04:35:39:f5:5f: 3f:a4:7a:b1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaGDB7dUXNyzRA5C6ETNhrAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYxMDI4MTUwMTIzWhcNMjYxMDI5MTUwMTIzWjAzMTEwLwYDVQQD EygzOWQ3ODJkYmE4OWJlNDMwNDQxZjhmZWI3NjNhYzk3ZWVjYTU2OGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqmxDQml1yPkwfEjMVFhAhsYptb7 iK2vNTJxW1LQi1k6Hxaz3AkX30p4egam7d/msoW8Bc+3vD1V35hsY3FpU4sspget NOZXNke0JOe8GC3RNNZXHj99KkrwARxTp9lcN5lPc6ZWpQaZiGD+eUeWf8tkIuy4 1vRuRSsR2mMGowh54zrAiBXYkLYf6xovOAuiUS4x3QNwG9LcJIx0opy0lvQD/UHR EtiSJY6Xm7wYMvaWkorGDloK7Ea1t8CRe06mkIof2nOn192TzIlDVz4jYgbUt76e en6XsRvpC5rEvvWgAH215XJgZopEOmL8pJI2mbenPMlIXc5vsuuxGOqV0QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDnXgtuom+QwRB+P63Y6yX7spWj+MB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI95f G/WF/mAPvAINxLV8m0xu/VP7Ld2UZ/DjWpz3OzxaqhJRT83D+neFlYzpJJheck3e EEh7erjWhPegiVMF864/1Ey1JRc4RnlkuSbUKD0WBuf+n6VRQRI/VcFcTmDD581J wvIybFeIiiceoNlOu0Ka/cnqK3DAfGaG/3eTJ/FdYxpAE0KaYfs5GOX5l2+Qja1l etMzYnyTVhE009lGpV0uOrSyiKb7N+1TVu02vF1gYu+UCLxfT3yeNmdv1j7Y8m2V SHEP70IDXfb0b8iK4KfpW0vJYM8X+V/iFstfG7hLg0lqOG2+uHsI5qOobXKoRG30 Y5TPvAQ1OfVfP6R6sQ== -----END CERTIFICATE-----Generated at Thu Oct 29 00:44:29 2026 by rpki-client