$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: Wbb0VIHMd8lB3Kwynp6HMK+aI1dCjOEi2OE6+Cgm7Ao= Subject key identifier: 2D:77:A3:91:C5:CB:22:02:49:BB:A7:A3:76:17:80:A5:E5:A8:8F:16 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019DCD86F38AE49DBFA3D3F4D3ABD770F0DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 18EF Signing time: Mon 27 Apr 2026 06:01:06 +0000 Manifest this update: Mon 27 Apr 2026 06:01:06 +0000 Manifest next update: Tue 28 Apr 2026 06:01:06 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa (hash: kEZA3HWXo+axDXRIJx2Qo5x0RmJdyCm6aj/hJrouWz4=) 3: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 4: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: guaA+wov69weDmtykcwX+AtBEAVG4MOesjCJWHVXWqk=) 6: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 7: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 8: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 9: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 10: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 06:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:86:f3:8a:e4:9d:bf:a3:d3:f4:d3:ab:d7:70:f0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Apr 27 06:01:06 2026 GMT Not After : Apr 28 06:01:06 2026 GMT Subject: CN=2d77a391c5cb220249bba7a3761780a5e5a88f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:7b:9a:f7:16:bd:c1:4e:73:5e:92:89:1c: 5f:a1:50:5e:1c:a0:e1:77:af:68:59:7a:90:3d:0a: df:2a:43:24:b9:f2:36:eb:7f:3c:1f:11:e1:8f:2b: 95:b1:7a:06:f8:6a:30:19:88:be:6b:5a:6e:17:8a: ab:01:5c:22:53:a7:a8:e5:2a:7a:5a:9a:69:2c:8a: c0:56:45:e6:3f:19:b7:a3:43:d2:0b:5f:48:08:77: 54:6c:b6:b1:0b:bb:b4:5e:bf:a2:c2:dd:d5:8d:4f: 5b:a6:88:2e:8c:b7:54:a2:b2:5f:8f:59:bb:e0:9d: 6b:55:2d:56:00:78:04:f0:bd:38:c2:a6:df:bc:bc: 5c:79:db:30:91:e5:1c:ab:67:2f:8a:eb:e6:c1:27: f7:00:bd:dc:2b:ad:32:b8:f8:35:b2:22:83:52:64: 81:4d:3c:a0:93:7a:cf:eb:4c:57:64:63:84:5b:f3: af:2d:a3:0c:f0:3d:3f:5c:a9:d7:a2:94:68:dd:40: d8:8d:0c:39:64:1e:14:8d:dc:24:9a:8f:04:5d:0e: 93:48:9a:cc:61:03:84:4c:a9:d0:d1:d2:54:70:97: 0a:b3:df:d2:03:b7:65:db:97:db:51:85:94:db:b1: 6a:eb:dc:3b:9e:6b:aa:43:c3:ae:9d:09:54:19:c3: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:77:A3:91:C5:CB:22:02:49:BB:A7:A3:76:17:80:A5:E5:A8:8F:16 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:dc:f2:4f:38:df:ac:bd:16:39:82:51:40:6a:a9:fd:45:21: 1a:c2:78:6c:93:fa:ea:cf:73:04:77:e4:59:0c:c2:82:72:51: 3b:ae:91:3a:56:8a:aa:39:d8:da:7e:53:ed:2f:9d:4d:53:09: b4:5f:1e:96:06:6c:a3:12:86:fb:fd:4d:b7:ba:ec:ae:26:85: f6:67:33:58:95:31:4c:8b:74:5f:04:06:70:36:bf:6a:6f:7c: fd:70:c2:b2:e9:c5:02:b2:5f:c8:01:38:db:d3:e6:02:ca:1e: 1a:d2:10:71:3e:71:c9:72:92:26:42:f6:73:84:05:af:14:ca: 1e:c3:f3:75:12:46:f7:a3:43:bb:63:57:30:5b:ef:14:34:b2: 6d:a3:2b:46:14:4a:3b:75:d5:de:2c:b1:f2:3d:ed:12:28:a8: ef:aa:41:c3:9d:82:cc:f4:eb:24:65:70:57:eb:9b:2b:da:29: 66:92:1d:79:a2:03:78:03:1b:09:86:55:b0:22:bc:dd:03:b8: f6:ed:cd:b3:d0:8d:9c:77:8b:c8:c5:94:3b:62:f8:a0:ac:5a: 0d:db:38:b6:ce:3b:89:eb:3a:31:88:bb:ea:ac:84:a3:6c:24: d7:a4:fb:3e:5b:59:3c:c2:c0:c8:be:9d:2c:bc:f3:f7:27:fb: bf:06:3d:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NhvOK5J2/o9P006vXcPDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwNDI3MDYwMTA2WhcNMjYwNDI4MDYwMTA2WjAzMTEwLwYDVQQD EygyZDc3YTM5MWM1Y2IyMjAyNDliYmE3YTM3NjE3ODBhNWU1YTg4ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJp7mvcWvcFOc16SiRxfoVBeHKDh d69oWXqQPQrfKkMkufI26388HxHhjyuVsXoG+GowGYi+a1puF4qrAVwiU6eo5Sp6 WpppLIrAVkXmPxm3o0PSC19ICHdUbLaxC7u0Xr+iwt3VjU9bpogujLdUorJfj1m7 4J1rVS1WAHgE8L04wqbfvLxcedswkeUcq2cviuvmwSf3AL3cK60yuPg1siKDUmSB TTygk3rP60xXZGOEW/OvLaMM8D0/XKnXopRo3UDYjQw5ZB4Ujdwkmo8EXQ6TSJrM YQOETKnQ0dJUcJcKs9/SA7dl25fbUYWU27Fq69w7nmuqQ8OunQlUGcPiPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC13o5HFyyICSbuno3YXgKXlqI8WMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNzyTzjf rL0WOYJRQGqp/UUhGsJ4bJP66s9zBHfkWQzCgnJRO66ROlaKqjnY2n5T7S+dTVMJ tF8elgZsoxKG+/1Nt7rsriaF9mczWJUxTIt0XwQGcDa/am98/XDCsunFArJfyAE4 29PmAsoeGtIQcT5xyXKSJkL2c4QFrxTKHsPzdRJG96NDu2NXMFvvFDSybaMrRhRK O3XV3iyx8j3tEiio76pBw52CzPTrJGVwV+ubK9opZpIdeaIDeAMbCYZVsCK83QO4 9u3Ns9CNnHeLyMWUO2L4oKxaDds4ts47ies6MYi76qyEo2wk16T7PltZPMLAyL6d LLzz9yf7vwY9Ow== -----END CERTIFICATE-----Generated at Mon Apr 27 13:57:08 2026 by rpki-client