$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft File: 1KdSLSfmKuI6RgFD66ZzO3myRHc.mft (raw, json) Hash identifier: nx3o3Vt+hjnnZujjb4dOaAHYch9nbYll+eEu3MYBuUA= Subject key identifier: E0:66:7A:7A:A2:4E:4C:83:0A:70:67:17:91:74:37:97:D8:F4:09:98 Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477 Certificate serial: 01A029582885E0062EC2427463B8FCAD69F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft Manifest number: 91 Signing time: Sat 22 Aug 2026 12:00:38 +0000 Manifest this update: Sat 22 Aug 2026 12:00:38 +0000 Manifest next update: Sun 23 Aug 2026 12:00:38 +0000 Files and hashes: 1: 1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa (hash: RE3o5Zu1XdF9S+04ylutP3QqzKtcsQWMmIT7k6SNN/Y=) 2: 1KdSLSfmKuI6RgFD66ZzO3myRHc.crl (hash: cEmFKpgrjN7cjko4Oc1vXaEzzMmS0EWi9Ra0HCnfY+M=) 3: 6kERmgZGL5UqVKqbENAa-FNSgHc.roa (hash: AClJH/YtHZ63QiXgfCJgcjixUw8nfxsUu8O75U0YUJI=) 4: AhMkHazE-91WYq1pzL4rD-YgpOY.roa (hash: N7RR15LWLaA1GWhDaUwnFbFOrZQPw3IJjIesRqmsD5I=) 5: CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa (hash: cEqju8RXsbFDyu/dW9+z6y7ODNyFcVjrj9eawVPTsVE=) 6: FkByO5VyomUSANjFcmnEdvz3Cko.roa (hash: z10lQ6g3SDPSArAHievRO6Z2mqsSExBrr1d205CDUP4=) 7: IJAySIrj88My47LJGVkAc9rZDtY.roa (hash: an1H6uRWsmTvyleV0pswewslnipkuBrqpFXZ8x8RXI4=) 8: K7O0xdV18ha5dPNdq-y0BPQgffc.roa (hash: GEqEkzuoCanIwB018rtlec4WErFm2E3DumXI3txV98E=) 9: SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa (hash: FFebWzZWCHdxw5ZCEnSdY08q5KwfVzoC6UmmM8w/pz4=) 10: TqDntdHJZddaYt_ZyotBF9-hm14.roa (hash: VjSEFTxxCdGkCwFWGpwHDnoo4e0X5kbRBsmPmmTPxWI=) 11: WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa (hash: i6VXTVtK2u+Sa4dxw7J/aRal1n9vO5pWlCr6D3BmpWo=) 12: XhZYqo-93sizkFwJq1Oc8KABtwQ.roa (hash: FFax2+o10DIFWYK/5aiR6THgjmcFiIwVqFNYjJSFM+w=) 13: bPSazfrJEoM_auhnCGJjDI29Zwk.roa (hash: pMTZbr0m442O8974ozmFdKCgEYF3GhKq7mIvRyWA1Yc=) 14: jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa (hash: 7kRo5njKROlYBvZ0FU20K/hBTNAanIB/DZh3W6WgLMY=) 15: q-BhPuQnM-Q-h6hN62IefM9bmG4.roa (hash: OIcCu5qI8ffXeo2TrrcMk7ECFhZnyqwj4znnE1b0z/Y=) 16: wZMooB7OVcFLzuI4NUrersbqikQ.roa (hash: pEN10g0qlhvjBHq9CVkl9+QR6Ky5ASwHfrEgR03oriI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Aug 2026 10:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:29:58:28:85:e0:06:2e:c2:42:74:63:b8:fc:ad:69:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477 Validity Not Before: Aug 22 12:00:38 2026 GMT Not After : Aug 23 12:00:38 2026 GMT Subject: CN=e0667a7aa24e4c830a70671791743797d8f40998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:de:4d:a7:3e:25:f0:9b:2f:3b:4d:05:68: d5:1e:be:fd:3a:51:2d:90:02:62:6a:b7:ad:ed:d2: 98:23:ae:3c:de:74:4d:29:58:3f:8a:c4:cb:36:ef: 01:bd:cb:14:98:a1:d7:ab:60:28:14:88:25:d8:cc: 84:1f:26:d8:b2:50:77:d2:f0:fc:b6:17:27:38:f3: d2:29:0f:38:be:24:ca:a9:5a:23:45:1b:f6:62:4a: 56:6a:2c:0b:f2:18:13:30:08:c1:dc:4b:4f:77:b0: 7f:63:eb:48:a1:d0:46:75:06:82:dc:46:96:3d:83: fe:d1:aa:15:4f:b0:8a:e7:7f:22:2a:e8:76:25:0b: d8:e0:91:c3:ff:4f:8d:d8:66:49:eb:fb:03:48:5d: 24:9d:44:85:a5:6e:6e:19:30:9c:b5:b2:55:ac:a2: a2:f4:5a:59:e4:97:c3:ba:92:ff:d9:83:5c:7c:f0: 71:ba:7c:5e:3d:44:d4:68:a6:d8:79:65:01:41:25: cf:c9:7a:9e:e1:f4:03:09:83:e4:cf:5a:61:c0:a4: f7:ab:14:26:79:c6:f7:17:08:74:49:46:1b:8a:13: 0d:b3:72:9d:b0:bb:e4:73:85:37:cc:f2:00:83:36: 16:84:b1:8e:10:d7:2b:cb:73:e9:d0:6b:6f:1a:e2: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:66:7A:7A:A2:4E:4C:83:0A:70:67:17:91:74:37:97:D8:F4:09:98 X509v3 Authority Key Identifier: keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f4:fe:86:c5:62:db:c0:11:00:9a:83:bd:82:98:57:72:ce: 24:a0:b4:fc:b0:87:28:5e:b3:e3:0c:08:cb:da:5f:3c:d4:fd: a3:9e:04:94:10:37:e2:1a:38:4a:66:5b:c6:35:76:67:ec:0f: 9b:70:48:3e:f5:e6:20:d8:ba:b8:be:e7:89:e2:46:ba:e3:0b: e3:d7:21:d5:d5:5f:11:a9:17:75:95:ec:7c:33:6a:a9:95:e3: 60:6c:05:55:a5:66:b5:75:13:55:1f:b0:8d:04:89:2e:2a:3c: 80:4d:04:0e:47:43:fa:fc:14:02:ce:4c:a7:e8:94:e4:c0:cb: 2a:9c:25:dd:bf:48:da:c8:4e:f2:dc:07:0c:45:82:53:4e:c1: 66:73:27:cb:06:4c:24:99:be:67:2b:db:94:e5:fe:bd:36:5f: 2c:b7:d1:8a:67:aa:67:75:b6:c1:20:59:08:c9:71:9a:b7:68: 75:28:23:17:51:78:b8:67:8f:6d:85:be:c4:82:0f:bb:20:fc: 3a:1d:15:47:1c:43:51:b2:72:47:05:a4:6d:7f:62:33:c7:e8: 72:9b:b7:86:8c:a2:9b:3a:c0:73:56:ef:10:8c:6b:a2:d0:58: d0:31:b1:9f:e5:91:6b:8c:5e:42:26:52:ef:50:7a:9e:fd:5c: f2:60:34:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaApWCiF4AYuwkJ0Y7j8rWnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli MjQ0NzcwHhcNMjYwODIyMTIwMDM4WhcNMjYwODIzMTIwMDM4WjAzMTEwLwYDVQQD EyhlMDY2N2E3YWEyNGU0YzgzMGE3MDY3MTc5MTc0Mzc5N2Q4ZjQwOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgTeTac+JfCbLztNBWjVHr79OlEt kAJiaret7dKYI6483nRNKVg/isTLNu8BvcsUmKHXq2AoFIgl2MyEHybYslB30vD8 thcnOPPSKQ84viTKqVojRRv2YkpWaiwL8hgTMAjB3EtPd7B/Y+tIodBGdQaC3EaW PYP+0aoVT7CK538iKuh2JQvY4JHD/0+N2GZJ6/sDSF0knUSFpW5uGTCctbJVrKKi 9FpZ5JfDupL/2YNcfPBxunxePUTUaKbYeWUBQSXPyXqe4fQDCYPkz1phwKT3qxQm ecb3Fwh0SUYbihMNs3KdsLvkc4U3zPIAgzYWhLGOENcry3Pp0GtvGuJafwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBmenqiTkyDCnBnF5F0N5fY9AmYMB8GA1UdIwQY MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvT+hsVi 28ARAJqDvYKYV3LOJKC0/LCHKF6z4wwIy9pfPNT9o54ElBA34ho4SmZbxjV2Z+wP m3BIPvXmINi6uL7nieJGuuML49ch1dVfEakXdZXsfDNqqZXjYGwFVaVmtXUTVR+w jQSJLio8gE0EDkdD+vwUAs5Mp+iU5MDLKpwl3b9I2shO8twHDEWCU07BZnMnywZM JJm+ZyvblOX+vTZfLLfRimeqZ3W2wSBZCMlxmrdodSgjF1F4uGePbYW+xIIPuyD8 Oh0VRxxDUbJyRwWkbX9iM8focpu3hoyimzrAc1bvEIxrotBY0DGxn+WRa4xeQiZS 71B6nv1c8mA0VQ== -----END CERTIFICATE-----Generated at Sat Aug 22 19:28:46 2026 by rpki-client