$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: CCpGGu1uezPWmspFRP+vVh4qqHFL5qCSwB4TN6dH+9M= Subject key identifier: 40:D2:15:7A:BA:29:A9:F2:71:83:F9:B8:05:B0:B1:F8:39:26:27:B4 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019D3C0B34E091DA99A03AE8EA585E616642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 18AD Signing time: Mon 30 Mar 2026 00:01:00 +0000 Manifest this update: Mon 30 Mar 2026 00:01:00 +0000 Manifest next update: Tue 31 Mar 2026 00:01:00 +0000 Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=) 2: 4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (hash: B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=) 3: 9GnsNiEe10PMXMuYnOwoBHJXNp8.roa (hash: qjlonO3LiHiL0H3ICrIa63wPE2s5AD0+eRAxpHLDmgU=) 4: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=) 5: R2FNO1Ygep-crgCBZOCm6rPiC1g.asa (hash: ApEGVteE4lW6zOIWL6jC0gxWXUXXinVHVBq0ULy5NCg=) 6: XLClONptBOnoyds7ZRrXVeMA5OI.roa (hash: s9P5DAsWhxNq3izEap6h+SBQrZwu2+rZZv5QCDGjopU=) 7: Xij9xh5DddLLuqwtCNwg7qmWYfY.asa (hash: 3EqZun6qc3DEqBJqVt9g499WWwGeNostKOQ4l981464=) 8: bt7v5S1iGVK94mqOZQHRX86O4nE.asa (hash: swB8MgNoQmF6xNb6V+G76LxIip8Z23hDxriDFCYhY6o=) 9: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: tEAK3UipMSJvitXx0RkgMMqUQstiBe7GEDcKDkjjHlk=) 10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=) 11: psPWwnT647exV4ggiJz8vloBaHU.roa (hash: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 16:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3c:0b:34:e0:91:da:99:a0:3a:e8:ea:58:5e:61:66:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Mar 30 00:01:00 2026 GMT Not After : Mar 31 00:01:00 2026 GMT Subject: CN=40d2157aba29a9f27183f9b805b0b1f8392627b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:d8:1e:23:75:6a:2e:7c:44:80:1e:74:14: 7f:d7:c1:68:e3:9c:96:b9:a9:59:cd:33:22:5a:0c: 42:fe:67:4f:35:1b:52:67:07:49:33:3d:48:e3:88: b3:bd:fa:77:79:ea:79:a9:9c:c5:1c:f3:c4:b8:ac: 23:30:f2:0a:05:9c:c6:91:2c:c4:1a:fe:cb:88:0b: 60:59:aa:fc:1a:d7:a4:6d:08:02:8c:8e:23:0e:75: 52:bd:ac:d1:87:56:bf:37:e5:f2:b1:30:43:27:4b: 53:b0:f1:8a:3a:79:c3:99:1c:38:cf:b2:4f:c1:f7: c8:f4:55:48:3a:90:a3:f1:9f:37:fa:fd:2a:3d:5f: 1c:ab:d6:d0:24:81:31:81:cc:04:45:98:90:7f:42: c6:f7:f2:f2:29:97:24:0a:8a:ef:cc:ba:36:fb:b1: d3:f0:9f:99:6f:5b:21:75:b8:45:02:ce:8a:16:7b: 44:10:1f:31:29:2b:16:7d:84:8c:72:ae:5f:ca:1f: f9:eb:d9:33:e3:30:8c:e9:f0:9b:8f:b3:88:67:3d: 21:0b:c0:07:f6:9b:eb:e6:4b:93:52:28:1e:04:f0: 79:b7:ea:ac:1d:d9:a0:ba:e1:5b:de:ac:9a:24:04: 2f:c3:0f:a5:03:30:65:2d:f8:9e:60:b7:2c:52:de: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D2:15:7A:BA:29:A9:F2:71:83:F9:B8:05:B0:B1:F8:39:26:27:B4 X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ed:08:ea:a3:8f:94:1e:d4:cc:63:37:f8:8a:f9:a0:c4:24: f4:6b:fd:d0:a5:7e:09:71:d2:93:a0:dc:63:17:14:94:ce:72: d8:0d:70:a5:e9:98:b6:1f:e0:a0:16:4a:fb:2f:95:dd:d1:72: fb:ea:80:3b:83:a3:b9:83:5b:72:c8:60:31:53:f4:5a:b2:48: 92:4e:c1:5c:f5:9f:99:53:88:58:e2:21:1a:d3:fe:ff:4b:ed: 9e:2f:57:3c:5a:c3:8b:ac:8c:dd:97:ca:7a:aa:b8:b5:3a:ca: 69:71:85:e2:04:bc:35:27:ef:00:9d:87:dd:28:3d:80:97:69: e0:97:4e:77:7e:ba:2f:37:a2:26:f7:b2:c1:65:9e:94:2d:8b: ed:af:97:49:a5:88:45:12:23:f3:37:c7:14:8e:5a:30:14:76: 7d:04:d1:dd:b1:39:36:19:6d:97:0e:20:53:c7:40:38:5c:85: 23:59:26:24:00:84:30:6d:30:66:3d:c4:ed:02:c2:8d:9d:c3: 7e:fb:bd:5d:fe:f4:5f:e5:08:b1:be:35:01:ba:07:e0:6b:eb: ec:cc:ac:52:58:f0:d7:45:58:0c:13:6c:93:11:8c:5b:14:7a: 52:72:18:c9:80:08:38:62:fe:84:28:5c:22:48:f5:a5:e3:99: 98:1b:2e:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ08CzTgkdqZoDro6lheYWZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYwMzMwMDAwMTAwWhcNMjYwMzMxMDAwMTAwWjAzMTEwLwYDVQQD Eyg0MGQyMTU3YWJhMjlhOWYyNzE4M2Y5YjgwNWIwYjFmODM5MjYyN2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7fYHiN1ai58RIAedBR/18Fo45yW ualZzTMiWgxC/mdPNRtSZwdJMz1I44izvfp3eep5qZzFHPPEuKwjMPIKBZzGkSzE Gv7LiAtgWar8GtekbQgCjI4jDnVSvazRh1a/N+XysTBDJ0tTsPGKOnnDmRw4z7JP wffI9FVIOpCj8Z83+v0qPV8cq9bQJIExgcwERZiQf0LG9/LyKZckCorvzLo2+7HT 8J+Zb1shdbhFAs6KFntEEB8xKSsWfYSMcq5fyh/569kz4zCM6fCbj7OIZz0hC8AH 9pvr5kuTUigeBPB5t+qsHdmguuFb3qyaJAQvww+lAzBlLfieYLcsUt5HnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDSFXq6KanycYP5uAWwsfg5Jie0MB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcu0I6qOP lB7UzGM3+Ir5oMQk9Gv90KV+CXHSk6DcYxcUlM5y2A1wpemYth/goBZK+y+V3dFy ++qAO4OjuYNbcshgMVP0WrJIkk7BXPWfmVOIWOIhGtP+/0vtni9XPFrDi6yM3ZfK eqq4tTrKaXGF4gS8NSfvAJ2H3Sg9gJdp4JdOd366LzeiJveywWWelC2L7a+XSaWI RRIj8zfHFI5aMBR2fQTR3bE5Nhltlw4gU8dAOFyFI1kmJACEMG0wZj3E7QLCjZ3D fvu9Xf70X+UIsb41AboH4Gvr7MysUljw10VYDBNskxGMWxR6UnIYyYAIOGL+hChc Ikj1peOZmBsuSQ== -----END CERTIFICATE-----Generated at Mon Mar 30 02:14:01 2026 by rpki-client