$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: XVoDulZ0Oo7MSV1MTosySrzUAkx0O9FDA47pXBU4/cc= Subject key identifier: 42:AC:E2:0C:41:CC:31:63:2F:60:B0:71:F2:76:E8:74:EE:14:16:EC Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 01A001DD5ECAC2F25F38364DA76C00EB4FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1A75 Signing time: Fri 14 Aug 2026 20:01:19 +0000 Manifest this update: Fri 14 Aug 2026 20:01:19 +0000 Manifest next update: Sat 15 Aug 2026 20:01:19 +0000 Files and hashes: 1: 3_yk5eFrwBov3U-c2HIugxbMWSI.roa (hash: kKYQPtwtsyFnBnK/TTMNwaIGIt9OfuH8gl7hmRir+s0=) 2: 5aufIPquq3w8czdEJb_x03ID0ok.roa (hash: SXHv0uNnbQMrAAz38TkQXV7mhkcxZQRjdTnk2ZFMJ+Q=) 3: C5KHI6RHNe-c2_yE7mE0xFRL3gk.roa (hash: +jtxc9DRUocKwAVf35hRGVq2koZLjGVbE1XT/GiZZ2w=) 4: FOMPy_BK9Fi89Du1DiZYEnZuYqY.roa (hash: cvZrm+ar43YelQ09ZwBvqrLgjuizfADCJwzl9al2n74=) 5: KePo7Nw7FD5Mxn7olHoTuZmCdm8.roa (hash: DbkIiVGqdDfug970pR74esedhPIntvPxxOlSvJeDA4s=) 6: OT8ciThviWG76oS0x4VT1DU7_CM.roa (hash: z/3tt6KD2m+nhRRFPABZHX2/tqaQ7t/vcbTbJ5OkeGs=) 7: Y7bbNd_D_GJxw7w73h3QtuIaUD0.roa (hash: 6H7OQcEN2pqdM3pakr5EUmL8sOX3gH9g5VYKISR0rPs=) 8: _JStqxohmn4P46Jzv1xfqnIG_sQ.roa (hash: yg2AC+9uSmhpqVYsI3pa8EbjhOZNSYHEU2+Rij7qWjo=) 9: _kSC6SxEhsOLshYqTVwsSFaNbLI.roa (hash: KB6xLUsnETAFSWCWhqb4kG0B7HnLwgn6REmfOJuSowg=) 10: bIbo_daevEia3FzSMEis2R2yTQE.roa (hash: 2f8dvTsv4PE91HZTf97I67YVmPlzEU+5RlZeN9O2YSM=) 11: dWDpJgjgHWUUxlAFcGw9oho9DCA.roa (hash: EeKrlvmSYyhLjmugOgYr/BAu9l1QdnUK48FOOPpwoHE=) 12: ixD-Arj77LHgfX3zc7lJeNIlCF0.roa (hash: IZQY7H0KoOl6mudSH5mbC7Fo+cS244qdxxA31tTlbtI=) 13: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: VmF2hy17eAby4HpvSgrJTq/vp3i+bOB+rxt2zbYxFHM=) 14: oGUXrmAThPl2HTLUSfGjsKuzjgc.roa (hash: KlFM7h3lanV33N6xyaAPWBSyT8szyeOdsDntq5dgdHo=) 15: qutDbHBwHvwdi5EGALlPGyrMVYQ.roa (hash: cMdSXzsofITh70yCwGq+Cbopm8wIcWBaikFgYr1Fwsg=) 16: viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa (hash: wxGAEO+n9Vh6k1iK9Pba4O/c6CbkZthcZ5GK3ng4+Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 18:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:01:dd:5e:ca:c2:f2:5f:38:36:4d:a7:6c:00:eb:4f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Aug 14 20:01:19 2026 GMT Not After : Aug 15 20:01:19 2026 GMT Subject: CN=42ace20c41cc31632f60b071f276e874ee1416ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:70:c2:ad:dc:07:0b:3e:1f:ad:a5:da:df: 2a:c8:78:05:b9:0d:79:1b:3a:f5:90:2e:ce:15:de: c5:b1:04:86:d6:99:91:96:6a:8c:8d:81:ea:d4:0b: ac:33:f2:3f:fe:0d:21:34:44:da:e5:ac:dc:35:9a: 91:37:61:5b:29:e7:a2:d2:82:21:e8:dc:68:71:94: df:75:f9:ff:fb:a4:c8:fb:32:1c:c7:09:ad:09:5d: 12:a2:30:50:12:2d:3c:05:0d:c0:d4:cd:34:31:4e: a0:8e:72:1e:c5:23:7e:b1:44:35:ac:6e:9c:39:91: 21:8e:ad:a7:e4:a5:ef:6e:1c:3a:49:32:9a:34:f0: bd:00:1d:c9:7f:79:fb:74:49:2d:91:ac:38:21:48: c2:6f:86:4a:5f:67:12:00:97:bf:ce:86:76:bb:57: 78:0d:4d:de:96:6f:50:19:41:1b:92:85:27:5f:85: 61:e2:32:d2:88:a0:a0:8e:00:f0:99:b4:81:26:85: d4:e9:1c:dc:e9:dd:d4:10:e0:3f:9e:c7:d3:f2:a2: c6:30:92:67:95:31:20:7e:72:b6:bb:06:fd:cb:5a: a0:cd:a1:7c:e9:5f:51:46:24:97:8e:d9:3a:dc:2c: 8f:db:95:06:b0:57:ae:84:69:76:71:c2:2c:bb:4e: fd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AC:E2:0C:41:CC:31:63:2F:60:B0:71:F2:76:E8:74:EE:14:16:EC X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:22:57:c0:16:85:ff:6a:5e:94:60:c9:ec:24:3f:83:a9:b6: 68:8f:04:71:3c:a9:31:7f:17:ab:bf:26:d5:35:04:29:6e:94: 82:9c:48:08:d4:93:44:77:49:c7:42:ea:a5:ec:27:e6:12:d1: fb:c7:46:94:45:7d:12:66:77:e3:8b:ba:98:94:90:dd:17:ad: 15:04:4c:28:c8:32:63:25:fa:5d:a6:af:57:a4:43:f8:2c:59: 90:47:aa:5c:d9:96:51:88:2c:a8:80:81:46:68:f6:b7:e0:c4: c9:6a:5c:c7:8b:de:9d:e4:7b:a0:cf:95:3f:b3:3e:ea:c1:96: 73:28:f5:1e:b9:9b:c0:f1:51:18:ca:1d:86:3b:57:cc:42:08: 5d:34:ab:43:3f:fe:ba:ae:d5:78:16:97:33:4b:89:46:1f:be: 6d:b5:77:be:81:d7:36:ac:cc:99:0b:d6:b5:5e:29:a0:79:da: 84:7a:64:83:33:f4:9c:e1:46:57:84:65:6e:de:34:00:ca:b4: c5:fd:a6:76:df:ad:80:f1:fc:4a:60:f0:2c:97:37:c8:94:e1: 19:a7:18:f4:2e:7d:34:c0:8c:fe:d1:c2:e7:df:7e:1b:0b:cd: f1:d2:76:fa:c2:dc:36:b2:8b:05:8d:b3:6a:1c:03:11:7c:48: f3:7d:96:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAB3V7KwvJfODZNp2wA60++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwODE0MjAwMTE5WhcNMjYwODE1MjAwMTE5WjAzMTEwLwYDVQQD Eyg0MmFjZTIwYzQxY2MzMTYzMmY2MGIwNzFmMjc2ZTg3NGVlMTQxNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEZwwq3cBws+H62l2t8qyHgFuQ15 Gzr1kC7OFd7FsQSG1pmRlmqMjYHq1AusM/I//g0hNETa5azcNZqRN2FbKeei0oIh 6NxocZTfdfn/+6TI+zIcxwmtCV0SojBQEi08BQ3A1M00MU6gjnIexSN+sUQ1rG6c OZEhjq2n5KXvbhw6STKaNPC9AB3Jf3n7dEktkaw4IUjCb4ZKX2cSAJe/zoZ2u1d4 DU3elm9QGUEbkoUnX4Vh4jLSiKCgjgDwmbSBJoXU6Rzc6d3UEOA/nsfT8qLGMJJn lTEgfnK2uwb9y1qgzaF86V9RRiSXjtk63CyP25UGsFeuhGl2ccIsu079pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKs4gxBzDFjL2CwcfJ26HTuFBbsMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyJXwBaF /2pelGDJ7CQ/g6m2aI8EcTypMX8Xq78m1TUEKW6UgpxICNSTRHdJx0Lqpewn5hLR +8dGlEV9EmZ344u6mJSQ3RetFQRMKMgyYyX6XaavV6RD+CxZkEeqXNmWUYgsqICB Rmj2t+DEyWpcx4veneR7oM+VP7M+6sGWcyj1HrmbwPFRGModhjtXzEIIXTSrQz/+ uq7VeBaXM0uJRh++bbV3voHXNqzMmQvWtV4poHnahHpkgzP0nOFGV4Rlbt40AMq0 xf2mdt+tgPH8SmDwLJc3yJThGacY9C59NMCM/tHC599+GwvN8dJ2+sLcNrKLBY2z ahwDEXxI832W2A== -----END CERTIFICATE-----Generated at Sat Aug 15 03:16:14 2026 by rpki-client