$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: zYcfBw7pyJJZYn6zfg6Fjwe1tsMs9s49jAKNjm1exYc= Subject key identifier: 9B:02:D3:8C:00:C4:D4:64:D1:B1:4A:D9:45:86:E2:58:5D:49:97:2C Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019EB733786962831D6CECB58EACEE33243C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1968 Signing time: Thu 11 Jun 2026 15:01:04 +0000 Manifest this update: Thu 11 Jun 2026 15:01:04 +0000 Manifest next update: Fri 12 Jun 2026 15:01:04 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa (hash: kEZA3HWXo+axDXRIJx2Qo5x0RmJdyCm6aj/hJrouWz4=) 3: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 4: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: 5XRdJX0C6cKVqh1D2tVdYP0AiDKREzLbdVyrey4Tq8Y=) 6: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 7: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 8: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 9: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 10: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:33:78:69:62:83:1d:6c:ec:b5:8e:ac:ee:33:24:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Jun 11 15:01:04 2026 GMT Not After : Jun 12 15:01:04 2026 GMT Subject: CN=9b02d38c00c4d464d1b14ad94586e2585d49972c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:d6:95:1d:84:9e:e7:2e:72:70:22:59:6c: 14:f3:25:eb:6b:bb:6c:3e:c1:95:2c:d3:48:82:06: e3:af:84:32:3d:07:be:a5:b1:e9:83:21:b7:b2:37: d7:18:71:5c:a8:55:8d:d5:82:8e:01:40:61:4e:9b: ce:99:02:08:46:ab:c8:4e:84:fa:33:db:48:b5:07: ea:79:f7:72:07:3f:b9:3a:0d:f7:3b:84:31:d9:2b: d3:68:6d:fe:14:f8:27:39:a6:41:85:ea:45:a5:ee: 32:55:13:f4:04:b1:e2:7f:38:77:77:31:35:a1:c8: 6d:12:43:d9:3d:93:4a:0a:7d:37:2a:04:4b:20:44: c0:51:8c:69:bc:59:72:26:cb:52:e3:7b:ca:2c:81: 91:13:95:b5:11:70:9f:0b:4c:64:65:0b:5c:ba:90: 00:1a:d5:c3:a2:f2:54:75:06:2e:79:41:da:ae:09: 88:74:2d:00:72:7f:45:9e:a0:58:5d:f7:1d:9b:d2: 6c:5c:11:1c:6e:81:fd:b6:93:1c:ce:6b:69:d9:e0: 31:2e:9b:fc:65:cb:6b:52:91:c1:8c:90:4e:60:fb: 21:af:b8:0c:e9:6a:96:29:ec:4c:16:b9:6f:c5:a2: 82:a7:72:72:ba:8a:8c:ef:ac:10:0c:d4:11:fb:a5: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:02:D3:8C:00:C4:D4:64:D1:B1:4A:D9:45:86:E2:58:5D:49:97:2C X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:96:42:55:95:2a:ec:19:5d:75:0b:38:6a:a8:ae:96:2b:5d: a6:47:30:a5:40:37:a8:c6:90:88:d7:cb:54:33:dd:b7:cf:33: dc:98:cf:d1:cf:c1:a6:47:ca:05:8a:4d:c6:88:cb:2e:e0:4a: 61:8f:79:fc:2c:8d:c9:41:b3:5c:cc:be:da:c8:05:9e:ce:88: 3a:07:4b:ec:f4:99:4c:6e:d1:15:bb:01:70:61:9d:83:1f:8a: ec:a9:64:ef:6d:89:eb:cc:39:f7:ba:c1:ec:42:55:85:87:45: e4:ce:1e:f4:35:a7:75:3f:d6:a7:18:29:42:f5:bd:c2:50:37: a4:69:0d:6b:ce:ad:7a:9f:37:e3:24:3b:82:ab:47:43:40:3c: 3e:77:4a:4f:73:69:b9:bb:55:f3:fc:e4:22:a8:e0:98:d7:33: da:24:95:7d:6a:b9:b4:f4:ce:d3:02:35:85:5a:e7:f3:bf:65: 0e:c7:e6:12:e8:9f:fc:3f:28:d8:6f:da:fb:85:5a:e6:fe:63: 7c:6c:81:91:b2:18:f4:6a:35:99:7a:c0:79:89:84:ef:1f:8b: 56:fe:b0:5b:b9:2c:6f:d3:8e:5f:0a:47:47:79:50:fb:3a:fc: 82:53:01:69:cd:27:bd:0f:35:bf:b9:a7:68:82:3a:9b:b0:55: fd:36:26:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63M3hpYoMdbOy1jqzuMyQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwNjExMTUwMTA0WhcNMjYwNjEyMTUwMTA0WjAzMTEwLwYDVQQD Eyg5YjAyZDM4YzAwYzRkNDY0ZDFiMTRhZDk0NTg2ZTI1ODVkNDk5NzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2vWlR2EnucucnAiWWwU8yXra7ts PsGVLNNIggbjr4QyPQe+pbHpgyG3sjfXGHFcqFWN1YKOAUBhTpvOmQIIRqvIToT6 M9tItQfqefdyBz+5Og33O4Qx2SvTaG3+FPgnOaZBhepFpe4yVRP0BLHifzh3dzE1 ochtEkPZPZNKCn03KgRLIETAUYxpvFlyJstS43vKLIGRE5W1EXCfC0xkZQtcupAA GtXDovJUdQYueUHargmIdC0Acn9FnqBYXfcdm9JsXBEcboH9tpMczmtp2eAxLpv8 ZctrUpHBjJBOYPshr7gM6WqWKexMFrlvxaKCp3JyuoqM76wQDNQR+6VVXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsC04wAxNRk0bFK2UWG4lhdSZcsMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJZCVZUq 7BlddQs4aqiulitdpkcwpUA3qMaQiNfLVDPdt88z3JjP0c/BpkfKBYpNxojLLuBK YY95/CyNyUGzXMy+2sgFns6IOgdL7PSZTG7RFbsBcGGdgx+K7Klk722J68w597rB 7EJVhYdF5M4e9DWndT/WpxgpQvW9wlA3pGkNa86tep834yQ7gqtHQ0A8PndKT3Np ubtV8/zkIqjgmNcz2iSVfWq5tPTO0wI1hVrn879lDsfmEuif/D8o2G/a+4Va5v5j fGyBkbIY9Go1mXrAeYmE7x+LVv6wW7ksb9OOXwpHR3lQ+zr8glMBac0nvQ81v7mn aII6m7BV/TYmLw== -----END CERTIFICATE-----Generated at Thu Jun 11 22:42:12 2026 by rpki-client