$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: xX6ubPa+Uqw9mU14sIhKZe5AhMhIg8xHULZn4URAdZo= Subject key identifier: 8E:1D:FA:92:B3:F3:1D:4F:FF:37:CF:BC:39:4A:14:C0:76:0D:DA:7A Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019F9F95ED4A643669C84A24FB33356B0875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 087F Signing time: Sun 26 Jul 2026 18:00:30 +0000 Manifest this update: Sun 26 Jul 2026 18:00:30 +0000 Manifest next update: Mon 27 Jul 2026 18:00:30 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: B6I4JDRvIeQ8Wd1WeNReZsI5qpKPEa6NyAoYG5E/wY0=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:95:ed:4a:64:36:69:c8:4a:24:fb:33:35:6b:08:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jul 26 18:00:30 2026 GMT Not After : Jul 27 18:00:30 2026 GMT Subject: CN=8e1dfa92b3f31d4fff37cfbc394a14c0760dda7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:17:6f:50:30:75:98:4b:51:71:16:8f:90: 48:b6:04:52:12:6b:25:e1:34:0e:36:ea:30:f2:3e: bc:6e:81:f9:9b:7b:2b:bb:8d:2d:6e:b1:cb:72:17: aa:70:94:53:c6:06:0c:bf:7e:5c:b4:f7:51:95:db: f6:92:30:4f:61:ac:ac:ff:fa:9a:f0:c8:1d:b1:67: b9:6f:29:cf:49:b5:8d:5f:46:8c:20:db:8f:98:7d: 0b:f3:e3:c1:0c:24:08:eb:b5:0c:f0:b7:ce:f9:77: 35:56:d8:64:02:9e:e1:a9:32:3f:85:87:39:39:1e: 5b:56:cd:64:5b:88:ac:d2:ab:7a:ef:42:20:70:01: 16:e9:50:f8:fe:d2:37:a7:18:19:cb:f0:fb:40:db: a8:9e:4c:b2:e3:30:28:5c:db:13:4f:25:04:3d:79: 5d:e3:4d:f3:4b:ea:e2:29:9b:9b:55:54:82:4a:82: 0c:27:14:85:41:24:88:40:da:b9:f7:c2:c2:c1:e8: 39:fc:ad:9b:7f:d0:72:b3:bb:ea:a2:a9:22:e2:10: 50:b2:48:66:b3:0e:08:da:12:c4:92:c1:b9:78:18: 87:cf:6a:58:2b:c2:3e:7b:7b:4a:0b:3f:bd:28:07: a0:7b:8b:c1:ae:2f:f8:cd:35:2f:f0:35:50:f3:68: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1D:FA:92:B3:F3:1D:4F:FF:37:CF:BC:39:4A:14:C0:76:0D:DA:7A X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d9:66:15:a1:c4:7c:03:5a:17:dc:0e:ea:c8:79:a1:13:47: 16:74:8b:92:53:a6:c2:6c:90:61:23:7e:75:0e:78:4a:9f:17: e0:b0:63:41:55:53:f9:f7:8e:ab:4f:99:78:27:da:7e:67:61: 50:1d:10:2c:21:5e:d1:a9:3a:76:db:0e:c9:22:eb:5d:8f:c9: d1:4b:56:28:6f:67:59:64:6e:4b:bb:eb:b1:7d:fe:f3:48:2f: 0d:68:11:30:8a:80:19:de:f0:bd:07:95:20:fc:7a:4a:85:69: 6a:ad:f7:29:a3:51:a6:2d:51:50:24:f6:99:19:75:9b:81:7a: 76:c4:a6:c2:b0:cd:8b:d5:87:67:82:db:02:59:a6:f3:05:78: 55:4d:4b:d7:a0:a4:e8:13:23:4b:c5:d7:ea:7a:ca:54:7a:85: c4:61:d1:f0:91:c9:45:4b:f9:90:b4:f9:e6:99:e0:df:d4:e1: a3:2f:d6:05:fb:68:aa:3d:55:42:42:d9:92:58:a1:68:30:28: b0:21:d7:ba:9b:f2:ea:6f:f1:9c:f1:b1:b0:5b:cc:80:7b:47: 9d:1d:ed:1b:a3:f9:45:b8:ca:28:a3:d0:13:0d:86:b9:58:89: 33:c6:8c:fb:3f:5a:83:8c:e9:00:10:ff:4d:36:d4:6c:84:b9: 2f:f4:ab:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fle1KZDZpyEok+zM1awh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwNzI2MTgwMDMwWhcNMjYwNzI3MTgwMDMwWjAzMTEwLwYDVQQD Eyg4ZTFkZmE5MmIzZjMxZDRmZmYzN2NmYmMzOTRhMTRjMDc2MGRkYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvygXb1AwdZhLUXEWj5BItgRSEmsl 4TQONuow8j68boH5m3sru40tbrHLcheqcJRTxgYMv35ctPdRldv2kjBPYays//qa 8MgdsWe5bynPSbWNX0aMINuPmH0L8+PBDCQI67UM8LfO+Xc1VthkAp7hqTI/hYc5 OR5bVs1kW4is0qt670IgcAEW6VD4/tI3pxgZy/D7QNuonkyy4zAoXNsTTyUEPXld 403zS+riKZubVVSCSoIMJxSFQSSIQNq598LCweg5/K2bf9Bys7vqoqki4hBQskhm sw4I2hLEksG5eBiHz2pYK8I+e3tKCz+9KAege4vBri/4zTUv8DVQ82gmJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4d+pKz8x1P/zfPvDlKFMB2Ddp6MB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9lmFaHE fANaF9wO6sh5oRNHFnSLklOmwmyQYSN+dQ54Sp8X4LBjQVVT+feOq0+ZeCfafmdh UB0QLCFe0ak6dtsOySLrXY/J0UtWKG9nWWRuS7vrsX3+80gvDWgRMIqAGd7wvQeV IPx6SoVpaq33KaNRpi1RUCT2mRl1m4F6dsSmwrDNi9WHZ4LbAlmm8wV4VU1L16Ck 6BMjS8XX6nrKVHqFxGHR8JHJRUv5kLT55png39Thoy/WBftoqj1VQkLZklihaDAo sCHXupvy6m/xnPGxsFvMgHtHnR3tG6P5RbjKKKPQEw2GuViJM8aM+z9ag4zpABD/ TTbUbIS5L/SrDg== -----END CERTIFICATE-----Generated at Sun Jul 26 21:24:22 2026 by rpki-client