$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: N8JMBlkt/tnK9ktQoBLA71cGoutWoPgTKU0eHbDAgJM= Subject key identifier: 44:ED:B9:43:A8:41:1D:AE:4A:26:8B:BC:1A:D0:B8:FA:3B:F2:95:8A Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019D2A72945B78DFD3009121474422923978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 18A6 Signing time: Thu 26 Mar 2026 14:00:45 +0000 Manifest this update: Thu 26 Mar 2026 14:00:45 +0000 Manifest next update: Fri 27 Mar 2026 14:00:45 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9DusrtcNuEKlX3-m9foPJH2szlI.roa (hash: b8raHEJQGNgJfwuoWcURy2P5Ad5oX4Bo6uvIPpzRudA=) 3: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 4: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 5: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: zVAR1Bh95SJ7QWdCpbJUGZTmQ4ntxwJDcWPbSTsSGg4=) 6: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 7: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) 10: mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa (hash: 64Bq4BjaquUNa/q+gUB1JEszW2wTR9StXwwTroa+sNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:72:94:5b:78:df:d3:00:91:21:47:44:22:92:39:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Mar 26 14:00:45 2026 GMT Not After : Mar 27 14:00:45 2026 GMT Subject: CN=44edb943a8411dae4a268bbc1ad0b8fa3bf2958a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:c7:b7:c1:25:97:fc:2e:a7:73:2e:58:62: db:17:7b:ac:50:81:f7:e1:9c:2d:f3:50:23:6d:33: c4:7a:66:74:c1:84:5d:a4:40:88:fa:17:35:06:1e: 59:8e:2c:01:d5:79:88:f2:14:fc:cf:02:92:ce:92: b1:b4:4f:76:d8:4d:55:df:fb:63:e1:49:fb:86:85: 1d:7d:03:8c:3e:a2:f6:ac:c6:5b:3e:78:b6:7b:8d: af:19:f1:d5:f1:c4:13:ff:7c:f2:9b:57:84:0b:b7: aa:bd:68:08:ec:ca:e6:fb:0c:14:01:35:92:5d:5d: 41:f2:0e:44:cb:29:5b:54:5f:4e:33:67:e4:77:87: d5:c5:a6:7d:26:1e:d8:37:8d:81:a4:bb:24:c2:bd: dd:e6:32:dc:46:6e:68:ec:9d:a1:41:65:44:a1:8d: 04:d5:73:dc:f6:d5:43:c9:27:5f:26:79:0b:e4:ef: 1b:d3:7b:60:2f:94:ec:3a:f8:89:b3:58:07:3f:8b: cc:73:df:d5:cc:f8:ad:c6:b2:6a:62:44:03:88:04: de:d4:19:12:85:dd:06:56:70:ce:86:46:d5:85:25: 43:07:c9:ab:e4:6b:a3:65:7e:13:ea:72:2d:63:9d: 82:df:76:d8:27:64:92:1e:0f:a2:07:f3:c4:bb:58: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:ED:B9:43:A8:41:1D:AE:4A:26:8B:BC:1A:D0:B8:FA:3B:F2:95:8A X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:98:00:c9:9d:5c:50:f6:f0:a0:1b:34:bd:57:c2:53:8b:7d: c8:f3:08:4f:2d:76:77:40:28:a1:da:99:9e:28:2b:36:78:5f: ad:0e:2b:8a:77:c6:1d:32:47:81:fc:57:60:7b:e7:51:4e:64: 5c:9a:92:66:3a:1d:2b:86:46:fa:66:b6:77:0d:53:9a:4f:7f: fa:35:a6:4d:3a:9a:2a:6c:a6:e6:ec:6f:8b:79:06:80:f7:1c: 76:87:7d:d0:09:0d:1c:81:ce:60:89:8d:1a:96:92:f5:26:fa: 1e:1c:b8:97:d6:85:9e:92:cc:ed:ba:1d:79:f1:9d:24:a7:2e: 25:ea:18:4d:89:bd:56:b1:7a:30:6a:8a:ed:68:64:63:8c:d4: 2a:95:82:86:da:a4:dc:ff:6b:25:f8:34:e5:7f:4f:79:f3:d2: d9:0c:d3:34:c5:cd:f9:55:8f:11:d1:72:8d:04:1a:e2:d9:af: 02:8c:31:b9:29:74:4e:f0:e1:a1:23:7a:f8:6c:4f:f8:36:f7: bf:52:df:91:b9:1c:5d:e8:aa:86:95:3f:2f:a0:81:ea:fe:3b: 39:50:a4:ec:f5:22:6a:00:d5:8b:b5:d9:80:31:b2:1c:4a:df: 5b:a1:49:48:8c:14:11:7b:b0:c9:01:01:aa:3f:a4:b5:da:3d: b0:18:fb:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qcpRbeN/TAJEhR0Qikjl4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwMzI2MTQwMDQ1WhcNMjYwMzI3MTQwMDQ1WjAzMTEwLwYDVQQD Eyg0NGVkYjk0M2E4NDExZGFlNGEyNjhiYmMxYWQwYjhmYTNiZjI5NThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB/Ht8Ell/wup3MuWGLbF3usUIH3 4Zwt81AjbTPEemZ0wYRdpECI+hc1Bh5ZjiwB1XmI8hT8zwKSzpKxtE922E1V3/tj 4Un7hoUdfQOMPqL2rMZbPni2e42vGfHV8cQT/3zym1eEC7eqvWgI7Mrm+wwUATWS XV1B8g5EyylbVF9OM2fkd4fVxaZ9Jh7YN42BpLskwr3d5jLcRm5o7J2hQWVEoY0E 1XPc9tVDySdfJnkL5O8b03tgL5TsOviJs1gHP4vMc9/VzPitxrJqYkQDiATe1BkS hd0GVnDOhkbVhSVDB8mr5GujZX4T6nItY52C33bYJ2SSHg+iB/PEu1iBhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETtuUOoQR2uSiaLvBrQuPo78pWKMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZgAyZ1c UPbwoBs0vVfCU4t9yPMITy12d0AoodqZnigrNnhfrQ4rinfGHTJHgfxXYHvnUU5k XJqSZjodK4ZG+ma2dw1Tmk9/+jWmTTqaKmym5uxvi3kGgPccdod90AkNHIHOYImN GpaS9Sb6Hhy4l9aFnpLM7bodefGdJKcuJeoYTYm9VrF6MGqK7WhkY4zUKpWChtqk 3P9rJfg05X9PefPS2QzTNMXN+VWPEdFyjQQa4tmvAowxuSl0TvDhoSN6+GxP+Db3 v1LfkbkcXeiqhpU/L6CB6v47OVCk7PUiagDVi7XZgDGyHErfW6FJSIwUEXuwyQEB qj+ktdo9sBj7yg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:31:06 2026 by rpki-client