$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: PbBSszi1IJkeKZWV6WAK9QmD8ldUx1GIpJjoNJVUNdE= Subject key identifier: DF:86:CC:A5:B0:CF:2B:1B:34:4F:9C:E6:B2:64:E1:15:7B:0C:FB:00 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 01A0D8DEBBB1C551B97F24199462835795F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1A8F Signing time: Fri 25 Sep 2026 14:01:10 +0000 Manifest this update: Fri 25 Sep 2026 14:01:10 +0000 Manifest next update: Sat 26 Sep 2026 14:01:10 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 3: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 4: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: r40mCLfA8ZSYbp6Ge+Fvl8NLqb1IWwECNNgGPKdq2mA=) 5: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 6: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 7: OVwsXYypxA7SEcE0oqAv66KV2iw.roa (hash: p2ldypSF2XQKcxweJh6LjsaWiKlRwLKkcdSWL7M3990=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: eOc9_tm0mnn9lxJ6VJeyLZbqsUE.roa (hash: tKohV45mbquQ6A1OYA4BBMCrfZiBK3eEB8vOzL2T2gM=) 10: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:de:bb:b1:c5:51:b9:7f:24:19:94:62:83:57:95:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Sep 25 14:01:10 2026 GMT Not After : Sep 26 14:01:10 2026 GMT Subject: CN=df86cca5b0cf2b1b344f9ce6b264e1157b0cfb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:5c:2d:cb:bb:68:02:f4:66:ba:81:fd:5a: 84:15:89:c7:1f:fc:6f:35:63:27:c3:ec:9b:6a:90: 38:27:4c:22:2e:27:0d:2a:16:e0:df:1d:29:0c:fd: 29:ed:b2:68:32:3c:88:9c:02:ce:cb:28:7a:18:5d: 66:72:6a:0b:c1:80:09:52:cd:d5:5f:e0:25:8f:e3: 67:73:1b:be:89:02:ec:d1:a2:39:24:e4:d5:2a:86: 26:90:98:78:c1:f0:86:dd:45:6a:79:0d:68:05:28: e0:7a:03:2d:81:5a:bc:20:71:5b:f4:e9:30:83:b7: c9:00:d4:4b:aa:eb:db:71:01:bc:4f:c2:39:eb:75: 69:17:4b:24:01:7d:7c:18:8b:f2:ee:39:aa:d3:ac: c8:fe:e4:26:a4:6c:bd:04:f0:4c:77:6f:56:9e:1e: ab:1a:72:1e:88:11:91:be:91:ca:f0:df:b3:fa:7d: 46:c2:e5:19:c7:3e:5c:69:a1:c5:2d:c8:c5:21:34: 12:52:72:7d:f3:a3:ea:b9:c6:62:3d:88:74:5e:00: 9c:55:87:0c:46:57:c4:d9:23:f6:e7:5f:6c:17:cf: af:b5:2d:2a:43:21:5c:af:71:74:c0:47:cc:5d:f7: 92:c4:e0:e3:f8:72:f5:a0:7b:30:c9:e6:1b:0f:c1: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:86:CC:A5:B0:CF:2B:1B:34:4F:9C:E6:B2:64:E1:15:7B:0C:FB:00 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:58:36:f8:b3:10:13:f9:11:8d:af:5e:bd:f0:ca:83:99:6e: 7c:5d:67:8a:5d:cb:50:af:66:e1:5b:ef:2d:c2:5d:ce:d9:2b: 4d:f3:4f:dc:a9:c1:87:a6:a8:dc:12:b8:92:0c:16:5f:f3:9e: 99:7a:ad:53:3f:21:5d:a3:4b:56:e1:e2:ec:85:4f:54:50:55: 5e:44:86:5a:2a:da:1d:aa:c6:c5:26:3f:20:a1:84:a8:e0:80: f7:60:53:64:74:2e:ae:e8:07:53:d1:d2:60:eb:db:66:e3:b8: c7:4c:af:ad:55:2d:a2:db:10:41:a2:55:44:bd:41:69:65:ac: 0f:47:74:f6:3e:97:a4:c5:03:45:35:30:2b:d6:5a:c7:f5:c5: 5b:0e:50:32:35:4a:cd:d4:a7:e0:c9:67:63:bf:26:59:ba:8b: be:6d:fa:a9:61:7c:81:e5:f7:eb:b5:32:aa:78:a0:20:f8:99: 57:a1:4e:54:d2:9f:f6:b2:52:8b:7c:ff:0f:cd:15:cf:42:b8: 24:18:a2:4f:99:68:5b:a3:45:86:a0:b2:ac:05:50:43:d1:f0: 0b:14:0a:f5:bf:a2:69:e8:9f:a3:e7:4d:77:bf:a4:db:23:4e: 8c:bc:63:f2:c2:8f:5a:fa:58:3c:e1:46:12:c0:17:19:3d:82: 23:eb:85:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDY3ruxxVG5fyQZlGKDV5X2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwOTI1MTQwMTEwWhcNMjYwOTI2MTQwMTEwWjAzMTEwLwYDVQQD EyhkZjg2Y2NhNWIwY2YyYjFiMzQ0ZjljZTZiMjY0ZTExNTdiMGNmYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvRcLcu7aAL0ZrqB/VqEFYnHH/xv NWMnw+ybapA4J0wiLicNKhbg3x0pDP0p7bJoMjyInALOyyh6GF1mcmoLwYAJUs3V X+Alj+Nncxu+iQLs0aI5JOTVKoYmkJh4wfCG3UVqeQ1oBSjgegMtgVq8IHFb9Okw g7fJANRLquvbcQG8T8I563VpF0skAX18GIvy7jmq06zI/uQmpGy9BPBMd29Wnh6r GnIeiBGRvpHK8N+z+n1GwuUZxz5caaHFLcjFITQSUnJ986PqucZiPYh0XgCcVYcM RlfE2SP2519sF8+vtS0qQyFcr3F0wEfMXfeSxODj+HL1oHswyeYbD8FMowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+GzKWwzysbNE+c5rJk4RV7DPsAMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlg2+LMQ E/kRja9evfDKg5lufF1nil3LUK9m4VvvLcJdztkrTfNP3KnBh6ao3BK4kgwWX/Oe mXqtUz8hXaNLVuHi7IVPVFBVXkSGWiraHarGxSY/IKGEqOCA92BTZHQurugHU9HS YOvbZuO4x0yvrVUtotsQQaJVRL1BaWWsD0d09j6XpMUDRTUwK9Zax/XFWw5QMjVK zdSn4MlnY78mWbqLvm36qWF8geX367UyqnigIPiZV6FOVNKf9rJSi3z/D80Vz0K4 JBiiT5loW6NFhqCyrAVQQ9HwCxQK9b+iaeifo+dNd7+k2yNOjLxj8sKPWvpYPOFG EsAXGT2CI+uFxQ== -----END CERTIFICATE-----Generated at Fri Sep 25 17:41:22 2026 by rpki-client