$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: dKDdHjH0RL5rsPgyIl4IrlnYas23ZKDhNKRXeXMV/MU= Subject key identifier: 35:89:07:27:89:0A:9B:B1:9F:D8:80:E2:33:D7:28:35:B7:CA:3A:41 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019CE1B45A078C79130890BDF107BB138801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1874 Signing time: Thu 12 Mar 2026 11:00:18 +0000 Manifest this update: Thu 12 Mar 2026 11:00:18 +0000 Manifest next update: Fri 13 Mar 2026 11:00:18 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 3: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 4: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: Bk403g8pry05VrRylVbbdQhcfHwBZxbSfSZn8/khbgk=) 5: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 6: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 7: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 8: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) 9: tVeuYd91sHEJZuUDNMrqrKk6uME.roa (hash: hSzJOItctPBI6y6Se6D0Urxemw96jOFCv4Hf70uq1Qk=) 10: zSUHQIil1pv6NSEqyiy6QZUHKgI.roa (hash: sCV+NE2NUCcb5ZuDP7u98vtXx/1nUNBXjVpaW7PtLOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 11:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e1:b4:5a:07:8c:79:13:08:90:bd:f1:07:bb:13:88:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Mar 12 11:00:18 2026 GMT Not After : Mar 13 11:00:18 2026 GMT Subject: CN=35890727890a9bb19fd880e233d72835b7ca3a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:bf:ab:27:a3:20:5b:e5:5d:3b:23:44:f0: 5d:81:bc:50:cd:d0:b5:28:5d:b9:7d:e1:6d:ea:da: 68:5c:28:c1:9b:c0:42:26:59:e7:b1:49:be:94:50: 0d:16:30:51:31:68:99:d9:a1:57:8f:b7:f9:30:b0: 53:64:56:6e:73:fd:84:a7:25:8f:eb:58:1b:bd:ac: ef:92:a6:c6:70:c3:03:0a:7a:6e:6a:a1:1f:1e:ef: 61:33:da:41:4b:3d:3d:87:ba:64:26:8b:1b:1a:bf: 34:5a:b3:e8:cc:37:81:f7:15:da:55:c6:d6:bd:90: 0c:38:b9:9f:47:38:d2:19:c4:52:f8:99:10:58:59: 97:b4:72:05:1e:c1:8f:b7:cb:ef:2b:e0:7a:df:38: 0c:29:b6:20:33:84:64:eb:c9:49:d6:3a:6e:1b:ef: 04:b5:c4:9b:b2:1f:b8:df:ac:9d:58:36:bd:b6:8d: c8:9c:ae:22:7d:ea:f5:fd:1b:fb:76:01:0c:20:91: 75:8a:e2:27:d7:2a:82:56:c5:a2:30:e2:ce:fb:a5: 93:75:f8:88:f2:46:91:49:00:16:8d:7c:79:84:17: fe:71:1d:91:52:87:75:ff:e5:19:e0:b6:7c:ee:c7: 28:9f:ba:21:4e:cc:bd:2e:7c:18:46:b4:e4:f5:cc: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:89:07:27:89:0A:9B:B1:9F:D8:80:E2:33:D7:28:35:B7:CA:3A:41 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:33:60:f0:29:57:c4:33:17:f9:43:6b:a9:81:aa:d9:de:79: 7a:7b:aa:37:5e:4f:7a:49:b2:cd:63:32:da:f8:88:26:1c:39: d0:16:e8:af:bf:1f:c7:83:85:f8:8d:01:e4:14:1b:22:12:22: 34:ba:fb:a2:00:f2:95:2e:7f:51:4a:24:81:bf:69:b4:46:94: 68:8f:87:48:c3:17:63:ca:84:e5:24:bc:7a:19:a7:80:0d:3e: f1:df:d8:c2:09:cb:b2:0a:a0:da:87:b5:c4:e7:c6:f3:82:7f: cd:28:08:dc:04:95:67:61:06:93:dd:c6:5d:2a:fd:2f:d4:ca: 33:2e:7d:3b:6c:c2:b6:4b:a3:3d:0d:4a:2d:9f:4d:34:c6:81: ab:b4:c6:ab:41:f3:d0:e0:46:b2:fb:21:80:ee:61:8b:63:e7: e2:60:60:cd:23:8f:c1:e7:48:f4:78:c8:da:18:f8:20:d2:8c: df:bc:67:a8:c0:ed:b7:d1:61:fa:f6:35:b3:33:6f:ca:4e:49: 9a:f2:44:08:5c:51:d2:7f:a0:37:8d:62:dd:6a:6f:d4:48:25: ad:ad:04:65:b4:70:94:f5:10:cc:96:01:3c:ee:e8:4e:60:7c: 16:fc:55:28:cd:46:c9:b3:c9:4e:fa:44:b5:22:f6:d1:9f:0e: 9a:2f:ca:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzhtFoHjHkTCJC98Qe7E4gBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwMzEyMTEwMDE4WhcNMjYwMzEzMTEwMDE4WjAzMTEwLwYDVQQD EygzNTg5MDcyNzg5MGE5YmIxOWZkODgwZTIzM2Q3MjgzNWI3Y2EzYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFa/qyejIFvlXTsjRPBdgbxQzdC1 KF25feFt6tpoXCjBm8BCJlnnsUm+lFANFjBRMWiZ2aFXj7f5MLBTZFZuc/2EpyWP 61gbvazvkqbGcMMDCnpuaqEfHu9hM9pBSz09h7pkJosbGr80WrPozDeB9xXaVcbW vZAMOLmfRzjSGcRS+JkQWFmXtHIFHsGPt8vvK+B63zgMKbYgM4Rk68lJ1jpuG+8E tcSbsh+436ydWDa9to3InK4ifer1/Rv7dgEMIJF1iuIn1yqCVsWiMOLO+6WTdfiI 8kaRSQAWjXx5hBf+cR2RUod1/+UZ4LZ87scon7ohTsy9LnwYRrTk9cx18wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWJByeJCpuxn9iA4jPXKDW3yjpBMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDNg8ClX xDMX+UNrqYGq2d55enuqN15PekmyzWMy2viIJhw50Bbor78fx4OF+I0B5BQbIhIi NLr7ogDylS5/UUokgb9ptEaUaI+HSMMXY8qE5SS8ehmngA0+8d/YwgnLsgqg2oe1 xOfG84J/zSgI3ASVZ2EGk93GXSr9L9TKMy59O2zCtkujPQ1KLZ9NNMaBq7TGq0Hz 0OBGsvshgO5hi2Pn4mBgzSOPwedI9HjI2hj4INKM37xnqMDtt9Fh+vY1szNvyk5J mvJECFxR0n+gN41i3Wpv1Eglra0EZbRwlPUQzJYBPO7oTmB8FvxVKM1GybPJTvpE tSL20Z8Omi/K7g== -----END CERTIFICATE-----Generated at Thu Mar 12 20:55:56 2026 by rpki-client