$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: sbn1Algefag6QJ2/w5Qi3SOE6EKfDMeXn61LultiRs4= Subject key identifier: A4:2C:CD:5F:32:0A:B9:51:0B:93:BE:2B:80:72:3C:B3:B9:69:51:60 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019FA0E0439BBE83DDF98FF27AD102E6AE59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 19E1 Signing time: Mon 27 Jul 2026 00:01:19 +0000 Manifest this update: Mon 27 Jul 2026 00:01:19 +0000 Manifest next update: Tue 28 Jul 2026 00:01:19 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa (hash: kEZA3HWXo+axDXRIJx2Qo5x0RmJdyCm6aj/hJrouWz4=) 3: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 4: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: j8J0oWqtCV+2jN6prpxbGSybOXa5lvkbdiLkEVQ7atE=) 6: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 7: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 8: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 9: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 10: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:e0:43:9b:be:83:dd:f9:8f:f2:7a:d1:02:e6:ae:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Jul 27 00:01:19 2026 GMT Not After : Jul 28 00:01:19 2026 GMT Subject: CN=a42ccd5f320ab9510b93be2b80723cb3b9695160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:73:c2:b2:da:a8:1e:15:07:d7:c4:2b:9c: 46:bc:ff:b5:5e:b7:f5:9b:c3:b1:15:b9:8e:35:26: 04:32:d9:ef:c3:4e:99:3b:96:50:df:60:0b:23:68: 1d:24:ea:43:1d:75:d0:9e:d9:4b:3f:a8:94:4b:95: 90:d2:54:12:3b:1d:83:ec:49:55:23:25:eb:a7:ec: 82:88:22:9f:03:0c:01:33:43:d4:d4:10:5b:48:d1: a9:b9:ef:ca:67:15:1c:67:de:53:5e:72:2d:d1:07: 9f:14:dd:2f:d0:70:ec:a6:17:bd:4d:05:97:5d:80: 22:fc:4d:4f:de:a6:f2:0a:27:f4:7e:9a:9d:51:63: fa:00:b3:99:9a:11:25:9b:be:8d:9e:02:5b:fc:ee: 3a:4f:7d:a6:46:9d:28:39:8e:9b:68:97:3e:54:ca: 51:31:e2:f7:80:b1:98:24:7b:8d:c3:70:c3:af:be: a9:a8:24:b4:f2:77:bf:af:cf:c6:4c:52:2d:63:d5: f4:9b:f6:91:ed:83:ef:ea:6f:03:aa:17:85:17:c6: 8a:8f:52:00:45:b3:1f:e4:45:48:1e:7e:e1:98:37: 10:47:bb:ed:eb:93:27:fc:fb:3c:94:57:d3:b6:d4: 6f:c2:c0:f4:fa:6d:31:73:cf:07:51:9e:f6:38:1c: 3c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2C:CD:5F:32:0A:B9:51:0B:93:BE:2B:80:72:3C:B3:B9:69:51:60 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:6d:2e:26:3d:ce:3b:1c:d0:76:50:77:fa:cd:d1:8e:c0:19: f0:38:3f:a1:0a:fd:35:6c:36:96:04:4f:a2:5b:e7:f9:07:d2: 88:a7:99:f7:28:13:f0:07:72:58:00:48:57:ed:ba:36:73:5d: 98:19:b8:08:41:a5:43:a4:e7:df:e7:ac:76:b7:f2:2b:28:83: 60:f2:42:03:de:5a:cf:fa:96:9e:59:93:be:bb:3a:fe:83:63: e8:bf:38:7e:7d:e0:05:c1:45:9f:96:21:39:0c:6e:b5:aa:08: c7:ad:a9:ff:eb:a2:a4:c9:7c:26:43:72:dc:17:71:12:c8:4c: ae:91:9b:f5:37:1e:12:0e:48:33:1a:18:2b:76:84:48:5e:4c: ed:55:57:86:62:c9:27:e3:75:f0:d2:53:31:40:25:5c:be:f8: 43:16:ab:65:1c:43:93:9a:99:9e:bd:b3:fc:72:27:3b:e1:24: f7:54:2e:0c:d5:86:e4:1f:f9:0d:d2:e0:6a:9b:e2:ff:e2:f6: 3b:f2:f4:29:0d:a7:4f:9b:fc:1d:9d:ab:11:70:7d:13:5f:ff: 7e:62:0e:57:85:15:24:17:a4:e0:65:45:5b:f6:49:a1:47:8f: e5:f1:ca:77:f7:16:cc:b2:68:85:eb:1a:e6:81:80:9d:58:46: c1:5f:b8:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+g4EObvoPd+Y/yetEC5q5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwNzI3MDAwMTE5WhcNMjYwNzI4MDAwMTE5WjAzMTEwLwYDVQQD EyhhNDJjY2Q1ZjMyMGFiOTUxMGI5M2JlMmI4MDcyM2NiM2I5Njk1MTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubhzwrLaqB4VB9fEK5xGvP+1Xrf1 m8OxFbmONSYEMtnvw06ZO5ZQ32ALI2gdJOpDHXXQntlLP6iUS5WQ0lQSOx2D7ElV IyXrp+yCiCKfAwwBM0PU1BBbSNGpue/KZxUcZ95TXnIt0QefFN0v0HDsphe9TQWX XYAi/E1P3qbyCif0fpqdUWP6ALOZmhElm76NngJb/O46T32mRp0oOY6baJc+VMpR MeL3gLGYJHuNw3DDr76pqCS08ne/r8/GTFItY9X0m/aR7YPv6m8DqheFF8aKj1IA RbMf5EVIHn7hmDcQR7vt65Mn/Ps8lFfTttRvwsD0+m0xc88HUZ72OBw8nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQszV8yCrlRC5O+K4ByPLO5aVFgMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEW0uJj3O OxzQdlB3+s3RjsAZ8Dg/oQr9NWw2lgRPolvn+QfSiKeZ9ygT8AdyWABIV+26NnNd mBm4CEGlQ6Tn3+esdrfyKyiDYPJCA95az/qWnlmTvrs6/oNj6L84fn3gBcFFn5Yh OQxutaoIx62p/+uipMl8JkNy3BdxEshMrpGb9TceEg5IMxoYK3aESF5M7VVXhmLJ J+N18NJTMUAlXL74QxarZRxDk5qZnr2z/HInO+Ek91QuDNWG5B/5DdLgapvi/+L2 O/L0KQ2nT5v8HZ2rEXB9E1//fmIOV4UVJBek4GVFW/ZJoUeP5fHKd/cWzLJohesa 5oGAnVhGwV+4Lg== -----END CERTIFICATE-----Generated at Mon Jul 27 05:19:23 2026 by rpki-client