$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: Ca9n0YNFp49WcEzRYJEDWXvAYJBe81CmthgJ+d1ojQc= Subject key identifier: AD:AA:60:F9:7A:AA:C3:C0:2E:41:29:C9:83:C9:15:29:41:51:AC:A9 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 01A17D052E62F2598DBCF0112AF866FA5AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1AD8 Signing time: Tue 27 Oct 2026 11:00:53 +0000 Manifest this update: Tue 27 Oct 2026 11:00:53 +0000 Manifest next update: Wed 28 Oct 2026 11:00:53 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 3: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 4: H3C3dpxmxoEPm4q-lsESUA7g50I.roa (hash: cMPN8JUjdDQs2joCm/GoDwJnVoSQGKblU1iqndJOxps=) 5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: aAHCP6jhgyGFlqv+O2KK91LJAGiWQ/DyuwVFAXkuBiM=) 6: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 7: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 8: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 9: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 10: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) 11: jQqjqLwCIiP-UmycKlMjQDwW93o.roa (hash: gWG3bMZ8YKFN55wAMNLYWj4K1vXJyhwVCCdzs0fCImU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:05:2e:62:f2:59:8d:bc:f0:11:2a:f8:66:fa:5a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Oct 27 11:00:53 2026 GMT Not After : Oct 28 11:00:53 2026 GMT Subject: CN=adaa60f97aaac3c02e4129c983c915294151aca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:a9:5d:20:6d:c3:9a:ba:74:6f:ee:cb:5d: 2c:80:ee:c2:f5:52:ef:e1:b6:ac:ed:04:b6:74:ac: 89:0d:64:5a:b2:b8:f7:e3:94:0c:0d:cf:04:36:2a: f4:c2:97:10:6a:84:cb:bb:de:84:58:f3:fd:07:0a: a7:85:c0:52:6f:c3:a6:78:54:38:f2:9d:64:5c:f9: 18:c4:4a:19:ce:5d:fc:6e:26:56:06:c1:e8:80:6a: 1d:42:20:b6:a2:fd:e1:e9:15:ec:d2:24:c4:ce:46: 71:2e:46:4e:0f:07:40:7f:5e:1f:35:5f:ba:6a:f3: 5f:64:80:3d:59:3e:6a:6c:d9:1b:13:7e:41:c2:77: 1c:ca:5e:88:85:b9:76:1a:0d:cd:45:39:e3:e9:76: 02:5d:1f:e0:2b:59:fa:7d:b9:f1:5f:ba:fb:a4:2b: 7b:e3:91:de:2a:b8:4e:85:fe:80:83:b0:ca:fb:59: d8:4f:f0:a2:be:d8:48:d5:7c:11:16:ff:37:5f:8e: 63:c3:5f:96:a7:2a:8b:59:4f:18:3b:53:5b:e7:27: 55:03:c6:90:b7:cf:4f:8f:6a:d6:59:37:21:55:3a: 25:17:21:80:f9:df:76:57:b3:5c:df:38:f8:60:09: 70:e2:61:cf:04:7a:f7:b7:8c:b3:48:77:23:bb:9d: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AA:60:F9:7A:AA:C3:C0:2E:41:29:C9:83:C9:15:29:41:51:AC:A9 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9f:26:ed:1c:eb:58:0a:a9:d9:74:d5:bf:b8:98:37:1c:a0: d3:13:6c:30:5c:0c:02:83:d6:ff:08:5c:86:43:34:42:8e:3e: 5b:36:2e:26:4c:09:4c:0d:07:01:17:99:4d:07:62:70:dc:31: dc:d5:66:f4:03:01:f1:22:47:ad:dc:9e:c5:53:de:5d:dc:91: ff:af:ed:b5:47:34:09:68:37:aa:b5:b3:cf:c2:26:34:a8:7e: 65:28:78:6e:f6:11:7b:52:1a:36:af:e9:39:d2:4a:12:bb:bb: 47:9a:a9:07:a6:d3:2b:f4:36:bb:ee:cc:de:5b:ab:0f:e4:04: 24:45:16:84:df:bc:60:60:5c:3b:ce:ba:15:8c:fb:af:8c:cc: a5:27:be:fe:cc:94:fe:a4:7f:1d:b9:c3:a8:de:8c:5c:54:9f: 67:58:3c:2d:7a:55:47:fa:22:51:65:9b:f6:cb:8a:d5:d5:dd: 3b:4c:5e:3b:4c:fb:97:82:b7:ef:e7:9a:fa:79:c3:67:6f:db: 19:8b:aa:9e:b1:f2:ee:6d:20:cc:78:39:d1:f2:3e:b4:32:01: d6:e5:b7:a6:8a:ed:73:70:98:32:58:09:a4:2b:8c:b2:14:29: 1f:05:03:55:85:21:53:4a:26:1d:71:2c:f0:63:d7:84:bc:19: 36:30:25:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9BS5i8lmNvPARKvhm+lrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYxMDI3MTEwMDUzWhcNMjYxMDI4MTEwMDUzWjAzMTEwLwYDVQQD EyhhZGFhNjBmOTdhYWFjM2MwMmU0MTI5Yzk4M2M5MTUyOTQxNTFhY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuKpXSBtw5q6dG/uy10sgO7C9VLv 4bas7QS2dKyJDWRasrj345QMDc8ENir0wpcQaoTLu96EWPP9BwqnhcBSb8OmeFQ4 8p1kXPkYxEoZzl38biZWBsHogGodQiC2ov3h6RXs0iTEzkZxLkZODwdAf14fNV+6 avNfZIA9WT5qbNkbE35Bwnccyl6Ihbl2Gg3NRTnj6XYCXR/gK1n6fbnxX7r7pCt7 45HeKrhOhf6Ag7DK+1nYT/CivthI1XwRFv83X45jw1+WpyqLWU8YO1Nb5ydVA8aQ t89Pj2rWWTchVTolFyGA+d92V7Nc3zj4YAlw4mHPBHr3t4yzSHcju52IuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2qYPl6qsPALkEpyYPJFSlBUaypMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZ8m7Rzr WAqp2XTVv7iYNxyg0xNsMFwMAoPW/whchkM0Qo4+WzYuJkwJTA0HAReZTQdicNwx 3NVm9AMB8SJHrdyexVPeXdyR/6/ttUc0CWg3qrWzz8ImNKh+ZSh4bvYRe1IaNq/p OdJKEru7R5qpB6bTK/Q2u+7M3lurD+QEJEUWhN+8YGBcO866FYz7r4zMpSe+/syU /qR/HbnDqN6MXFSfZ1g8LXpVR/oiUWWb9suK1dXdO0xeO0z7l4K37+ea+nnDZ2/b GYuqnrHy7m0gzHg50fI+tDIB1uW3portc3CYMlgJpCuMshQpHwUDVYUhU0omHXEs 8GPXhLwZNjAlwg== -----END CERTIFICATE-----Generated at Tue Oct 27 13:21:17 2026 by rpki-client