$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: gzFYvsbnnAUkwMc/Xij1XQmptsDMSFwFEtqcvr5MO/0= Subject key identifier: 06:3B:30:53:27:8D:70:47:DF:62:F3:2B:63:9F:E4:AB:2A:8D:03:14 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 01A174DDD6A6300AE099B7F18F56278FAAA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 0972 Signing time: Sun 25 Oct 2026 21:00:57 +0000 Manifest this update: Sun 25 Oct 2026 21:00:57 +0000 Manifest next update: Mon 26 Oct 2026 21:00:57 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: jMZUgr2WzCiosQJ1XlLE/G1sSufEW1HL2ETcrT7lTpE=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:74:dd:d6:a6:30:0a:e0:99:b7:f1:8f:56:27:8f:aa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Oct 25 21:00:57 2026 GMT Not After : Oct 26 21:00:57 2026 GMT Subject: CN=063b3053278d7047df62f32b639fe4ab2a8d0314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:08:d9:6c:1c:fb:16:7c:e9:d6:7c:a3:92:2c: 36:24:d1:76:86:d7:36:d0:2c:dd:e6:06:69:f0:94: 34:64:f6:d3:b1:4a:70:be:7e:3e:a2:20:7b:98:01: e5:b1:6d:ed:bd:30:70:57:97:4e:bf:47:88:14:8d: 08:da:05:7b:8b:10:87:a4:f5:d3:28:56:a1:fa:73: 94:4b:63:a3:15:96:c2:c0:35:3e:9f:ca:5f:92:2c: f8:1d:71:1e:d0:a4:2d:f2:51:2f:a7:d8:9e:63:91: 72:03:35:55:52:88:b2:2c:49:ae:66:51:ac:8a:23: f9:e2:03:c5:f8:ac:64:bb:66:19:be:84:f8:cd:23: a4:7b:9a:58:67:22:b8:9a:3a:10:69:c7:26:61:53: b4:18:a1:d3:25:6b:ba:9c:5c:a2:1f:a6:f2:63:ec: d3:b1:4f:3c:d8:6f:6f:86:17:a5:62:5f:a0:98:6c: cb:c9:91:8c:8e:5c:e2:f8:7d:e1:9d:0d:d6:6c:2f: 65:9a:ab:90:b7:c0:46:c4:c6:b0:7e:cf:7c:df:b1: cd:c6:76:b8:1e:b1:eb:39:3d:b7:32:3c:15:a7:20: 94:ed:1f:3f:3d:9c:37:e0:ea:f0:b7:18:e1:72:55: e6:26:3a:26:76:5b:8e:a0:98:fe:c8:77:76:57:6c: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3B:30:53:27:8D:70:47:DF:62:F3:2B:63:9F:E4:AB:2A:8D:03:14 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:23:21:4f:4b:77:44:0a:dd:04:4b:82:47:11:7e:db:f5:82: c8:76:e7:11:d4:fa:1c:47:f7:b4:0c:62:68:d8:36:c9:c8:1c: ea:83:fb:88:99:a6:12:fe:4f:4b:27:01:71:b0:7d:56:67:53: 8a:8b:99:c5:b2:e3:0c:63:23:1b:0d:08:c9:45:ca:7f:64:e8: 19:f9:5e:ee:2c:2c:e1:70:7d:71:0e:6c:b5:a3:3b:ac:d4:25: 1a:84:cd:0b:1e:1d:3e:bd:f4:7c:ca:6d:81:ba:f7:b0:a9:fc: ea:cb:aa:88:a4:91:40:89:94:cf:80:34:66:f1:76:f1:f9:31: 83:e3:b9:da:8d:22:b7:d8:0c:e8:4c:7f:e4:61:06:82:52:d8: bd:b3:0e:48:10:3a:e2:45:73:1f:80:1f:94:33:55:35:7e:71: b1:ff:25:12:1a:42:e0:92:8f:f5:b8:9c:00:a8:14:1d:76:8b: ed:fc:f0:3b:e8:e6:94:13:5b:ac:5e:6e:05:de:73:a5:5f:c5: 93:88:be:dd:2a:61:c7:8e:ab:f6:5a:f9:89:22:8f:da:d8:7f: 2e:03:ce:d6:d7:03:6c:13:d7:ce:33:eb:50:9b:9d:03:c6:ff: 31:93:45:de:92:b2:e6:93:a0:ac:8f:73:54:44:c4:0f:54:2d: 1b:02:7e:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF03damMArgmbfxj1Ynj6qgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYxMDI1MjEwMDU3WhcNMjYxMDI2MjEwMDU3WjAzMTEwLwYDVQQD EygwNjNiMzA1MzI3OGQ3MDQ3ZGY2MmYzMmI2MzlmZTRhYjJhOGQwMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gjZbBz7Fnzp1nyjkiw2JNF2htc2 0Czd5gZp8JQ0ZPbTsUpwvn4+oiB7mAHlsW3tvTBwV5dOv0eIFI0I2gV7ixCHpPXT KFah+nOUS2OjFZbCwDU+n8pfkiz4HXEe0KQt8lEvp9ieY5FyAzVVUoiyLEmuZlGs iiP54gPF+Kxku2YZvoT4zSOke5pYZyK4mjoQaccmYVO0GKHTJWu6nFyiH6byY+zT sU882G9vhhelYl+gmGzLyZGMjlzi+H3hnQ3WbC9lmquQt8BGxMawfs9837HNxna4 HrHrOT23MjwVpyCU7R8/PZw34OrwtxjhclXmJjomdluOoJj+yHd2V2x9UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAY7MFMnjXBH32LzK2Of5KsqjQMUMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayMhT0t3 RArdBEuCRxF+2/WCyHbnEdT6HEf3tAxiaNg2ycgc6oP7iJmmEv5PSycBcbB9VmdT iouZxbLjDGMjGw0IyUXKf2ToGfle7iws4XB9cQ5staM7rNQlGoTNCx4dPr30fMpt gbr3sKn86suqiKSRQImUz4A0ZvF28fkxg+O52o0it9gM6Ex/5GEGglLYvbMOSBA6 4kVzH4AflDNVNX5xsf8lEhpC4JKP9bicAKgUHXaL7fzwO+jmlBNbrF5uBd5zpV/F k4i+3Sphx46r9lr5iSKP2th/LgPO1tcDbBPXzjPrUJudA8b/MZNF3pKy5pOgrI9z VETED1QtGwJ+cA== -----END CERTIFICATE-----Generated at Mon Oct 26 06:21:19 2026 by rpki-client