$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: eZGygQ1WNwmemqOSKxPqvG18LGBvdS3MDGT7fXl4wqk= Subject key identifier: 83:39:52:C1:A3:54:C3:5D:EC:CF:E1:20:99:B2:F9:6E:02:39:9E:74 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 01A1DE39B666BB109991732BCA5EA8F2FF87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1B17 Signing time: Sun 15 Nov 2026 08:01:26 +0000 Manifest this update: Sun 15 Nov 2026 08:01:26 +0000 Manifest next update: Mon 16 Nov 2026 08:01:26 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 3: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 4: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: knQEol1gnisUec4K341kO15aypq7ms3yK3OYQLXt7VE=) 5: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 6: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 7: OkDA-sLt6JCHJowKNNbNuk9CEaY.roa (hash: csJFyVuIzmk2gkco0qEU1yoNo7oW/435ugb+eBY0bLw=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) 10: hHiC8niJu6cqLcMz7iIInswxPT0.roa (hash: xRVPF5UptaPr3lHc04ith/Ws7m1yzXSs9UdAXwWPeS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 08:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:39:b6:66:bb:10:99:91:73:2b:ca:5e:a8:f2:ff:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Nov 15 08:01:26 2026 GMT Not After : Nov 16 08:01:26 2026 GMT Subject: CN=833952c1a354c35deccfe12099b2f96e02399e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b1:80:18:7d:81:10:4a:f0:4e:b0:3c:98:9d: 84:7a:26:a1:00:a8:e1:b6:fa:95:eb:94:4c:52:f6: b1:c0:d5:75:01:da:54:2b:49:35:fe:a2:fc:32:b3: 6d:98:14:6d:2e:5a:f4:8d:6a:b7:f3:5c:9f:e8:13: 0b:11:c4:0f:7b:8d:78:22:4e:6a:c3:f4:2a:55:94: 2c:e9:97:42:fc:38:77:41:94:80:4d:7a:9e:98:51: 49:e4:b8:69:72:bd:9c:8b:ae:81:30:e2:4f:1e:b4: 5e:cc:8a:c7:e2:dd:54:8d:e1:fa:31:10:35:c6:4e: fc:6a:ed:19:f6:16:0a:44:94:82:59:e7:92:68:ff: e7:ef:0d:fc:05:70:a8:82:52:7e:91:a0:4f:c0:28: d2:2a:fb:bc:b3:b5:20:f7:c7:1b:1c:8b:70:00:c4: 1f:8c:68:46:1e:41:cb:60:01:cf:b4:ac:e2:d5:cc: e8:de:61:82:19:8e:fa:09:47:47:a5:fa:0d:36:6e: 33:c3:d0:74:b7:0c:20:eb:55:fc:36:9f:16:3a:99: 31:4d:c5:5e:78:c0:1b:fa:d7:fb:f4:96:c8:85:dd: d8:9a:d7:8a:cf:32:bd:13:8a:95:79:7b:2d:90:fd: d4:e6:23:a8:19:ab:76:98:8b:4a:57:0c:ab:b0:39: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:39:52:C1:A3:54:C3:5D:EC:CF:E1:20:99:B2:F9:6E:02:39:9E:74 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:43:05:9c:9b:b4:ca:0f:38:35:da:0d:0c:39:e9:5a:e6:9d: b2:23:33:64:55:ce:02:43:07:bd:1f:74:ac:f3:a5:c1:56:a6: 13:f2:47:18:9d:55:7c:e1:59:44:4a:11:3c:78:7f:90:de:80: 0d:88:a6:09:35:aa:9d:f8:5b:5a:7b:00:f7:28:1d:c7:54:ae: c6:5b:ff:06:61:92:a2:70:a0:99:b1:f9:ae:e9:0f:98:ce:76: 1e:58:7f:43:84:e5:07:e9:de:fc:03:a6:56:bf:ff:c5:7d:45: 6c:d3:5f:3e:59:44:75:78:d0:22:7b:a8:85:5a:d9:9d:16:7d: 17:69:17:4a:a3:3c:7f:3e:19:04:c6:b3:11:44:70:62:76:23: 2c:3f:ee:d2:a3:d0:d8:77:c0:4d:d5:41:52:cb:c2:0f:df:b8: 6a:c1:4b:2f:25:0d:a4:98:9a:eb:72:82:29:bf:96:e1:42:8f: 85:4e:07:b4:c2:1f:3d:f6:2d:ba:ba:68:f4:24:be:8f:ca:2c: f8:b2:a8:64:fe:04:25:8b:af:53:34:52:dd:96:0c:40:e8:48: fb:bb:21:62:74:8e:01:9d:a9:ee:cc:09:a9:e5:2d:03:f5:81: 54:60:09:12:3b:dd:9f:d1:90:32:31:4b:07:00:7f:50:c8:b7: 99:49:d9:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeObZmuxCZkXMryl6o8v+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYxMTE1MDgwMTI2WhcNMjYxMTE2MDgwMTI2WjAzMTEwLwYDVQQD Eyg4MzM5NTJjMWEzNTRjMzVkZWNjZmUxMjA5OWIyZjk2ZTAyMzk5ZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7GAGH2BEErwTrA8mJ2EeiahAKjh tvqV65RMUvaxwNV1AdpUK0k1/qL8MrNtmBRtLlr0jWq381yf6BMLEcQPe414Ik5q w/QqVZQs6ZdC/Dh3QZSATXqemFFJ5Lhpcr2ci66BMOJPHrRezIrH4t1UjeH6MRA1 xk78au0Z9hYKRJSCWeeSaP/n7w38BXCoglJ+kaBPwCjSKvu8s7Ug98cbHItwAMQf jGhGHkHLYAHPtKzi1czo3mGCGY76CUdHpfoNNm4zw9B0twwg61X8Np8WOpkxTcVe eMAb+tf79JbIhd3YmteKzzK9E4qVeXstkP3U5iOoGat2mItKVwyrsDnxsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIM5UsGjVMNd7M/hIJmy+W4COZ50MB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEMFnJu0 yg84NdoNDDnpWuadsiMzZFXOAkMHvR90rPOlwVamE/JHGJ1VfOFZREoRPHh/kN6A DYimCTWqnfhbWnsA9ygdx1Suxlv/BmGSonCgmbH5rukPmM52Hlh/Q4TlB+ne/AOm Vr//xX1FbNNfPllEdXjQInuohVrZnRZ9F2kXSqM8fz4ZBMazEURwYnYjLD/u0qPQ 2HfATdVBUsvCD9+4asFLLyUNpJia63KCKb+W4UKPhU4HtMIfPfYturpo9CS+j8os +LKoZP4EJYuvUzRS3ZYMQOhI+7shYnSOAZ2p7swJqeUtA/WBVGAJEjvdn9GQMjFL BwB/UMi3mUnZiA== -----END CERTIFICATE-----Generated at Sun Nov 15 17:27:57 2026 by rpki-client