$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: YWtfs2pN/HjhBkSCtFMN2QHR/U+9YwdJYINa0STNDlw= Subject key identifier: 53:D5:76:09:F2:6C:94:7B:AB:CA:33:C9:F3:BB:BC:EA:1A:61:F7:B5 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 01A089428997B642E2CB2756C4B5C7CDC5B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 08F8 Signing time: Thu 10 Sep 2026 03:00:34 +0000 Manifest this update: Thu 10 Sep 2026 03:00:34 +0000 Manifest next update: Fri 11 Sep 2026 03:00:34 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: U1iwUgENGBF15HDkgzMIHAQRpDIBmdwfep/nB3VolPU=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:42:89:97:b6:42:e2:cb:27:56:c4:b5:c7:cd:c5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Sep 10 03:00:34 2026 GMT Not After : Sep 11 03:00:34 2026 GMT Subject: CN=53d57609f26c947babca33c9f3bbbcea1a61f7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:ca:fc:b2:68:67:b6:75:78:3f:80:bd:7d: 6e:95:68:2b:be:f2:76:4a:e2:b4:01:7b:33:21:b3: 3e:c8:bd:38:01:24:cf:80:13:f7:dc:ad:4f:48:81: 0c:98:19:f5:75:20:27:11:4a:da:57:79:57:d1:55: 67:17:a5:83:f8:c5:c4:1f:f5:a4:3e:ac:48:2b:df: 1b:83:e0:a6:5b:55:d1:1b:88:4f:b1:29:9e:b2:79: a5:bb:3c:71:6a:1f:53:06:6d:da:2e:fd:a4:aa:5d: 17:a0:5a:ef:13:e3:7e:64:5b:e0:e5:3f:99:20:56: 5d:9c:ed:3d:15:4e:f0:7d:81:cb:2b:b6:df:99:21: 66:b0:6a:1e:93:1b:f0:ee:49:1e:11:68:00:e2:1f: 70:25:81:9e:f3:d9:9f:2a:24:74:c0:2f:14:22:b0: 47:b6:0d:52:bf:51:9a:60:89:4c:0d:b3:f5:04:60: b4:45:cd:85:1c:25:49:b0:47:0d:3b:55:2c:2f:ec: cc:d7:01:57:20:2b:09:b7:19:9f:e7:fd:4c:21:42: bd:60:11:63:2b:e5:4b:8e:e7:4d:f6:1f:86:7d:1f: a9:e5:c4:6a:1e:7a:ec:1c:f2:36:3e:47:85:db:88: bd:a8:fe:99:1a:33:0e:76:c7:e1:7e:b9:74:92:c8: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D5:76:09:F2:6C:94:7B:AB:CA:33:C9:F3:BB:BC:EA:1A:61:F7:B5 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2b:5a:a0:fa:86:57:d9:92:a3:9e:26:e7:8e:15:f6:6a:c1: 64:e5:1f:de:4f:ee:de:98:35:8f:4f:1b:2e:0b:e2:0b:06:8d: a5:79:61:59:f1:0c:68:0e:e8:4f:8e:d8:4c:8c:de:c3:93:7f: d1:bf:6e:18:10:23:cf:86:23:a7:5f:99:51:97:b6:da:e1:3e: 85:74:c8:94:a2:7b:88:ca:47:f9:ea:17:85:25:34:88:47:1c: 68:60:81:5c:ab:22:21:d1:9a:4e:65:ec:73:30:02:a4:9e:07: 69:73:99:08:10:fb:f8:86:5f:d3:5a:84:5d:e6:a2:93:fe:68: 0b:82:da:e1:21:13:ea:0c:70:33:f5:b2:81:54:15:20:55:83: 27:51:cf:6e:78:ac:4a:cc:e6:06:c5:81:b7:30:41:22:b9:50: 49:fe:cf:4a:9a:f9:75:a5:6d:dd:50:e9:4c:40:b1:0e:c4:e1: ae:12:5f:ad:89:a3:e6:71:7c:d3:64:f9:1b:3b:39:de:71:7c: a0:e5:6b:da:66:60:52:1d:ff:97:ee:4d:08:48:31:1e:f4:b2: d5:5c:ee:2a:f5:d4:16:30:25:d4:6e:24:c1:75:c4:ac:65:3f: 33:80:6e:8d:46:5e:b3:bf:78:1e:93:7e:cb:b4:34:73:45:00: 39:dc:54:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJQomXtkLiyydWxLXHzcW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwOTEwMDMwMDM0WhcNMjYwOTExMDMwMDM0WjAzMTEwLwYDVQQD Eyg1M2Q1NzYwOWYyNmM5NDdiYWJjYTMzYzlmM2JiYmNlYTFhNjFmN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusHK/LJoZ7Z1eD+AvX1ulWgrvvJ2 SuK0AXszIbM+yL04ASTPgBP33K1PSIEMmBn1dSAnEUraV3lX0VVnF6WD+MXEH/Wk PqxIK98bg+CmW1XRG4hPsSmesnmluzxxah9TBm3aLv2kql0XoFrvE+N+ZFvg5T+Z IFZdnO09FU7wfYHLK7bfmSFmsGoekxvw7kkeEWgA4h9wJYGe89mfKiR0wC8UIrBH tg1Sv1GaYIlMDbP1BGC0Rc2FHCVJsEcNO1UsL+zM1wFXICsJtxmf5/1MIUK9YBFj K+VLjudN9h+GfR+p5cRqHnrsHPI2PkeF24i9qP6ZGjMOdsfhfrl0kshTvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPVdgnybJR7q8ozyfO7vOoaYfe1MB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCtaoPqG V9mSo54m544V9mrBZOUf3k/u3pg1j08bLgviCwaNpXlhWfEMaA7oT47YTIzew5N/ 0b9uGBAjz4Yjp1+ZUZe22uE+hXTIlKJ7iMpH+eoXhSU0iEccaGCBXKsiIdGaTmXs czACpJ4HaXOZCBD7+IZf01qEXeaik/5oC4La4SET6gxwM/WygVQVIFWDJ1HPbnis SszmBsWBtzBBIrlQSf7PSpr5daVt3VDpTECxDsThrhJfrYmj5nF802T5Gzs53nF8 oOVr2mZgUh3/l+5NCEgxHvSy1VzuKvXUFjAl1G4kwXXErGU/M4BujUZes794HpN+ y7Q0c0UAOdxUAg== -----END CERTIFICATE-----Generated at Thu Sep 10 08:12:55 2026 by rpki-client