$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: rOOgOBFrUFiV5rzoUKfne3zKHJatYQutrPOi1WRPrtU= Subject key identifier: DB:1B:F6:DD:87:3E:72:A0:54:70:76:5D:3C:DF:BA:7B:A3:65:82:0A Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 01A17739E4DC0EB5F196CC47CE7B498F52FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1AD5 Signing time: Mon 26 Oct 2026 08:00:45 +0000 Manifest this update: Mon 26 Oct 2026 08:00:45 +0000 Manifest next update: Tue 27 Oct 2026 08:00:45 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 3: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 4: H3C3dpxmxoEPm4q-lsESUA7g50I.roa (hash: cMPN8JUjdDQs2joCm/GoDwJnVoSQGKblU1iqndJOxps=) 5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: /TOzmXmbdO7VlO6sdhNf13WwKZq8ofqR0yVv6EJWEE0=) 6: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 7: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 8: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 9: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 10: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) 11: jQqjqLwCIiP-UmycKlMjQDwW93o.roa (hash: gWG3bMZ8YKFN55wAMNLYWj4K1vXJyhwVCCdzs0fCImU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:77:39:e4:dc:0e:b5:f1:96:cc:47:ce:7b:49:8f:52:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Oct 26 08:00:45 2026 GMT Not After : Oct 27 08:00:45 2026 GMT Subject: CN=db1bf6dd873e72a05470765d3cdfba7ba365820a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:39:50:3d:a5:9f:74:1b:9a:40:06:b5:f7:db: 67:b3:6d:e6:e3:bb:ac:14:d3:25:84:39:aa:7a:84: e0:2f:1a:0c:fc:4e:5a:80:7f:46:62:eb:1b:57:4f: 8c:e9:54:31:5a:11:38:f0:55:ee:7e:5f:c0:51:c1: 63:b7:5f:cb:f3:1c:67:df:34:90:f8:b0:ce:03:83: 7e:d2:7e:e2:6f:31:d8:ec:97:09:fb:23:9f:75:b7: 24:f8:1f:11:9e:68:45:d2:f4:93:99:de:10:e4:2f: 79:93:1f:85:79:7a:21:39:79:db:a3:be:73:df:d6: d7:d3:39:91:21:6e:87:4d:c2:42:f5:db:cd:75:3a: fb:61:b5:c9:b7:dd:54:fb:27:a4:d7:10:6d:7f:6c: ba:17:29:c1:86:90:8c:51:42:63:d2:de:bb:0b:33: aa:17:e9:1a:b8:34:59:f8:1e:31:e1:5e:30:cf:21: bf:08:28:26:29:50:34:45:56:9b:62:1f:8a:8f:08: 56:d3:88:b2:ec:7c:9a:1e:26:f2:d8:5b:3a:59:30: 5a:c2:01:ea:13:66:3e:4c:e5:ca:f8:ab:d7:92:8a: ba:97:03:d6:05:2b:bf:18:2b:d8:d6:00:dc:99:7f: 0f:5d:b0:fc:88:b8:90:4b:7d:0c:fa:ab:6a:0b:aa: 41:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1B:F6:DD:87:3E:72:A0:54:70:76:5D:3C:DF:BA:7B:A3:65:82:0A X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:8e:eb:d0:1b:4b:4f:c2:b0:a2:ab:9f:8e:87:d6:81:7a:48: a0:b0:8e:a8:30:94:54:bf:24:e9:20:2d:f9:5a:73:18:b5:5b: 0b:3f:57:df:cf:94:0f:fa:b0:3b:86:14:70:c5:90:50:25:f2: 6c:10:91:d1:8a:ce:ca:6d:28:0a:32:d1:cd:b8:dc:cf:cb:67: a5:15:cb:7d:bf:a3:f6:a0:da:cb:59:12:b0:eb:50:e4:f1:c1: 5e:d6:46:3a:c5:30:23:59:e7:9f:99:2b:31:97:e2:0f:e1:5b: 28:5d:6b:72:8e:6c:a1:16:45:43:75:2f:95:4f:e2:b9:f1:7c: bf:f6:a7:7d:0d:12:69:25:76:59:1e:6d:b5:ca:dc:7e:d1:f3: 20:1e:1e:fd:d1:74:a4:92:ac:bb:91:4b:63:61:53:e5:dc:5c: d7:17:fa:3c:51:09:fa:16:3b:52:57:6f:6d:86:1b:4d:8c:e2: f6:6c:c3:9b:e1:ae:d8:4e:ec:43:f2:0c:5c:d4:51:c2:d0:2e: 77:f1:93:48:89:6d:18:68:0a:a8:42:24:a1:bd:9b:6f:c6:de: 9e:f3:6b:7c:09:80:f1:fc:7d:7a:44:07:ea:73:4d:95:1c:9e: 30:6a:d2:0b:6a:cd:cf:5e:dc:01:fb:9e:5d:4a:5e:ed:20:47: df:01:93:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF3OeTcDrXxlsxHzntJj1L9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYxMDI2MDgwMDQ1WhcNMjYxMDI3MDgwMDQ1WjAzMTEwLwYDVQQD EyhkYjFiZjZkZDg3M2U3MmEwNTQ3MDc2NWQzY2RmYmE3YmEzNjU4MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDlQPaWfdBuaQAa199tns23m47us FNMlhDmqeoTgLxoM/E5agH9GYusbV0+M6VQxWhE48FXufl/AUcFjt1/L8xxn3zSQ +LDOA4N+0n7ibzHY7JcJ+yOfdbck+B8RnmhF0vSTmd4Q5C95kx+FeXohOXnbo75z 39bX0zmRIW6HTcJC9dvNdTr7YbXJt91U+yek1xBtf2y6FynBhpCMUUJj0t67CzOq F+kauDRZ+B4x4V4wzyG/CCgmKVA0RVabYh+KjwhW04iy7HyaHiby2Fs6WTBawgHq E2Y+TOXK+KvXkoq6lwPWBSu/GCvY1gDcmX8PXbD8iLiQS30M+qtqC6pBHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsb9t2HPnKgVHB2XTzfunujZYIKMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg47r0BtL T8KwoqufjofWgXpIoLCOqDCUVL8k6SAt+VpzGLVbCz9X38+UD/qwO4YUcMWQUCXy bBCR0YrOym0oCjLRzbjcz8tnpRXLfb+j9qDay1kSsOtQ5PHBXtZGOsUwI1nnn5kr MZfiD+FbKF1rco5soRZFQ3UvlU/iufF8v/anfQ0SaSV2WR5ttcrcftHzIB4e/dF0 pJKsu5FLY2FT5dxc1xf6PFEJ+hY7UldvbYYbTYzi9mzDm+Gu2E7sQ/IMXNRRwtAu d/GTSIltGGgKqEIkob2bb8benvNrfAmA8fx9ekQH6nNNlRyeMGrSC2rNz17cAfue XUpe7SBH3wGTfA== -----END CERTIFICATE-----Generated at Mon Oct 26 14:24:00 2026 by rpki-client