$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft File: kdDHjDCaPpncmrdPLNwEhIWedTA.mft (raw, json) Hash identifier: 71hd0hoz8wIxU810E9FZG2yVXlvxr9bXx6KE2FUmZ/E= Subject key identifier: 7E:27:2C:C3:39:CC:F1:07:52:04:B9:26:9E:89:4F:82:B9:C7:76:07 Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 01A0CE5A7A483654BA9935934E39A224D327 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft Manifest number: 1588 Signing time: Wed 23 Sep 2026 13:00:31 +0000 Manifest this update: Wed 23 Sep 2026 13:00:31 +0000 Manifest next update: Thu 24 Sep 2026 13:00:31 +0000 Files and hashes: 1: 4VmR_FihzyMKRVwNqS1q32ma_4w.roa (hash: 8llGmDSPV1S8WvDmecxyGu8AsVkz9E7OwToEbm9Afi8=) 2: 5Vmgwb9F8vQSn62TUA3DtbFUacY.roa (hash: 4EZeJdyzRgVjWWf5FyUvU3cY8Jjs1Q2gQ6LYk3w4pZ0=) 3: 9ThI9Z7soYxz8aK7SxBvxoPEOX4.roa (hash: 2FCnysFwLOl4zVeb97SHJ1QvBKVL+gw4QmS3UAORjFk=) 4: BsMfnzrxddpnmFQ8FtiqLN4hIRw.roa (hash: GbFN7H89aII0f8FiIff5RGaJGPYoV9OOEoYuPkHE93c=) 5: C67-QabxkPaVhoCKelfc7gJ1hK8.roa (hash: 0WW6NyrxV5VH4o1lj6kLTZOdEKPeDBs7ouwPQd+hBHw=) 6: GXCfAVmuuL63Oe4dOVqYkc3Wuzg.roa (hash: L3MDEpVumA01FdWvikqD5sE8kkEXPwKtDKdz6KqfMnQ=) 7: RY0bArq-jZLzZUGQCt7VtVQ1eP8.roa (hash: nOIDnyfWMWKkEgKPjDc9li7leEEkKMO7ZYw+RINdMRI=) 8: WNwct_JeSUw9EGnGt5EMmHO1qnA.roa (hash: 8JESbBJVZwKNLtuuBYLAyN1yjWX+0RJfMcx4iiDnUQ0=) 9: br-MdcUGAgIJZ2jokAIrGgvBgVg.roa (hash: nAJrJwXFm0eNNJbUiUMkYMOpV3Mo7gqR8CqVePMN9SA=) 10: kdDHjDCaPpncmrdPLNwEhIWedTA.crl (hash: sXC7l+iKNqDtnRKRyI9MJ/eqCMv8gtBbCtaJzUx4cKw=) 11: p3gPfuFdg2rqrSBfl0UDEUdNbjM.roa (hash: bWC6ioqLuy3JQURX6TTBBncQtFn3EtAYrnrtm+JIq5g=) 12: qoJxh9RoMci9r1884qksasXONeQ.roa (hash: b1P5hF2MWBN0Il3GucTyqyanvw/mWve+jbkBZTYW4xQ=) 13: rUMTx45HXhT_MTA8guO-8T9IUPs.roa (hash: yK8AP3UaROn7J6m+AMP74llGEVQg0fy8g5ZS+T2U/tk=) 14: zByDWqzQes6Qf_5yruyAW6l4NA8.roa (hash: 4mGvD80bIUslVCK/Nf88S+YHOSjLonqjJpu89t+7Om0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:5a:7a:48:36:54:ba:99:35:93:4e:39:a2:24:d3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Sep 23 13:00:31 2026 GMT Not After : Sep 24 13:00:31 2026 GMT Subject: CN=7e272cc339ccf1075204b9269e894f82b9c77607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:3e:a2:55:d5:6e:6c:01:cb:bc:27:53:5c: 74:18:b8:d5:03:6c:dd:7b:92:95:55:dc:80:14:b9: 00:11:6d:d8:92:c5:8d:9b:b2:0b:52:10:a0:06:fa: 4a:68:40:35:73:cc:c0:9c:4c:ba:91:63:77:4b:84: f1:f5:80:a0:4f:fa:d7:e6:e4:81:a1:0a:23:50:6b: e4:ea:ad:ce:57:1d:f5:9e:0f:3f:7e:0c:de:f2:3d: f5:e0:90:62:61:e1:7e:3a:ce:6d:d1:87:c3:c8:a5: 3b:1a:1e:20:97:06:7b:af:f2:94:7f:5e:69:2b:9c: bd:b2:3f:ad:9e:ae:39:af:3f:14:23:7b:a7:df:9e: 77:89:84:9a:db:dd:b8:83:15:b4:4b:b3:45:a0:c0: 0a:2d:63:dd:7e:5b:c1:b9:51:3f:c2:df:00:a1:e8: e7:b3:cb:ac:f2:31:79:bd:26:ee:ac:6e:6f:7b:b0: 2c:1a:a2:82:51:0d:20:97:be:42:51:a0:b5:cb:f2: 0c:d7:ae:f2:85:8f:1a:26:d3:4a:36:8b:f5:2f:f2: 1a:19:a4:4b:27:cd:c4:19:65:5f:af:83:39:4d:96: 24:b9:fe:52:2c:a1:4e:2d:56:b3:2c:f1:76:59:f5: 32:84:e5:21:95:d4:6e:0e:c0:0a:03:ba:11:c1:67: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:27:2C:C3:39:CC:F1:07:52:04:B9:26:9E:89:4F:82:B9:C7:76:07 X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:5a:15:71:f3:94:35:e9:4d:e4:77:14:bd:80:91:ba:26:5e: e0:04:7b:09:04:42:07:a8:d9:03:9e:7e:9a:a2:1f:dc:ca:98: 51:02:32:ba:cb:eb:b2:de:1d:1b:1a:e3:2b:ed:2a:8b:bc:44: 3f:cb:d3:a8:0c:71:cd:04:63:60:ff:cd:a2:dc:0c:e3:83:42: 55:1d:68:b6:d9:27:30:dc:1a:92:09:19:ff:18:52:c1:c8:64: 41:e5:e3:40:2a:5b:d4:ec:ff:56:bd:53:88:7d:f3:2b:cd:91: 48:1b:74:f9:47:c2:ba:cb:b1:10:5d:ac:8e:ae:73:0d:52:4d: 9f:41:01:4b:30:e9:7f:67:cd:dd:e6:65:d4:22:da:67:89:4f: 48:0b:81:ba:70:d1:51:1c:eb:6b:72:fd:27:80:d9:1f:d6:0a: a7:fc:99:46:b9:a7:8f:98:fe:7c:9e:35:d9:d2:a7:7c:84:a8: 58:47:1c:60:d4:74:ce:91:fe:8e:e5:eb:5e:e5:51:58:28:9f: 6d:8e:d3:16:17:28:b1:22:e8:b8:54:8a:b4:da:bd:7c:f8:36: 1d:1c:ca:98:20:01:60:82:b8:00:02:9e:09:b1:19:bd:7b:4f: 9d:a5:3f:ef:43:7c:24:c9:35:fe:a0:2e:58:ed:38:e2:24:2e: 04:21:c2:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOWnpINlS6mTWTTjmiJNMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYwOTIzMTMwMDMxWhcNMjYwOTI0MTMwMDMxWjAzMTEwLwYDVQQD Eyg3ZTI3MmNjMzM5Y2NmMTA3NTIwNGI5MjY5ZTg5NGY4MmI5Yzc3NjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBM+olXVbmwBy7wnU1x0GLjVA2zd e5KVVdyAFLkAEW3YksWNm7ILUhCgBvpKaEA1c8zAnEy6kWN3S4Tx9YCgT/rX5uSB oQojUGvk6q3OVx31ng8/fgze8j314JBiYeF+Os5t0YfDyKU7Gh4glwZ7r/KUf15p K5y9sj+tnq45rz8UI3un3553iYSa2924gxW0S7NFoMAKLWPdflvBuVE/wt8Aoejn s8us8jF5vSburG5ve7AsGqKCUQ0gl75CUaC1y/IM167yhY8aJtNKNov1L/IaGaRL J83EGWVfr4M5TZYkuf5SLKFOLVazLPF2WfUyhOUhldRuDsAKA7oRwWeF+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4nLMM5zPEHUgS5Jp6JT4K5x3YHMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1oVcfOU NelN5HcUvYCRuiZe4AR7CQRCB6jZA55+mqIf3MqYUQIyusvrst4dGxrjK+0qi7xE P8vTqAxxzQRjYP/NotwM44NCVR1ottknMNwakgkZ/xhSwchkQeXjQCpb1Oz/Vr1T iH3zK82RSBt0+UfCusuxEF2sjq5zDVJNn0EBSzDpf2fN3eZl1CLaZ4lPSAuBunDR URzra3L9J4DZH9YKp/yZRrmnj5j+fJ412dKnfISoWEccYNR0zpH+juXrXuVRWCif bY7TFhcosSLouFSKtNq9fPg2HRzKmCABYIK4AAKeCbEZvXtPnaU/70N8JMk1/qAu WO044iQuBCHC/g== -----END CERTIFICATE-----Generated at Wed Sep 23 18:08:17 2026 by rpki-client