$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft File: kdDHjDCaPpncmrdPLNwEhIWedTA.mft (raw, json) Hash identifier: ucYxNTJaJGcdPPwJe1Wq+2DzfxDmBYTnyHmDR8/rxG4= Subject key identifier: 05:29:D7:D7:07:9E:F3:5A:DC:52:BD:A7:B7:B4:CC:51:CC:3F:58:8D Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 01A1DCB94BA377967A68FECA3ED25F29AFEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft Manifest number: 1614 Signing time: Sun 15 Nov 2026 01:01:33 +0000 Manifest this update: Sun 15 Nov 2026 01:01:33 +0000 Manifest next update: Mon 16 Nov 2026 01:01:33 +0000 Files and hashes: 1: 4VmR_FihzyMKRVwNqS1q32ma_4w.roa (hash: 8llGmDSPV1S8WvDmecxyGu8AsVkz9E7OwToEbm9Afi8=) 2: 5Vmgwb9F8vQSn62TUA3DtbFUacY.roa (hash: 4EZeJdyzRgVjWWf5FyUvU3cY8Jjs1Q2gQ6LYk3w4pZ0=) 3: 9ThI9Z7soYxz8aK7SxBvxoPEOX4.roa (hash: 2FCnysFwLOl4zVeb97SHJ1QvBKVL+gw4QmS3UAORjFk=) 4: BsMfnzrxddpnmFQ8FtiqLN4hIRw.roa (hash: GbFN7H89aII0f8FiIff5RGaJGPYoV9OOEoYuPkHE93c=) 5: C67-QabxkPaVhoCKelfc7gJ1hK8.roa (hash: 0WW6NyrxV5VH4o1lj6kLTZOdEKPeDBs7ouwPQd+hBHw=) 6: GXCfAVmuuL63Oe4dOVqYkc3Wuzg.roa (hash: L3MDEpVumA01FdWvikqD5sE8kkEXPwKtDKdz6KqfMnQ=) 7: RY0bArq-jZLzZUGQCt7VtVQ1eP8.roa (hash: nOIDnyfWMWKkEgKPjDc9li7leEEkKMO7ZYw+RINdMRI=) 8: WNwct_JeSUw9EGnGt5EMmHO1qnA.roa (hash: 8JESbBJVZwKNLtuuBYLAyN1yjWX+0RJfMcx4iiDnUQ0=) 9: br-MdcUGAgIJZ2jokAIrGgvBgVg.roa (hash: nAJrJwXFm0eNNJbUiUMkYMOpV3Mo7gqR8CqVePMN9SA=) 10: kdDHjDCaPpncmrdPLNwEhIWedTA.crl (hash: zzL0Mi91OPgtLA9dgB2t7Q5hee1rvSqCrwlQd7P2wKc=) 11: p3gPfuFdg2rqrSBfl0UDEUdNbjM.roa (hash: bWC6ioqLuy3JQURX6TTBBncQtFn3EtAYrnrtm+JIq5g=) 12: qoJxh9RoMci9r1884qksasXONeQ.roa (hash: b1P5hF2MWBN0Il3GucTyqyanvw/mWve+jbkBZTYW4xQ=) 13: rUMTx45HXhT_MTA8guO-8T9IUPs.roa (hash: yK8AP3UaROn7J6m+AMP74llGEVQg0fy8g5ZS+T2U/tk=) 14: zByDWqzQes6Qf_5yruyAW6l4NA8.roa (hash: 4mGvD80bIUslVCK/Nf88S+YHOSjLonqjJpu89t+7Om0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 01:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:b9:4b:a3:77:96:7a:68:fe:ca:3e:d2:5f:29:af:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Nov 15 01:01:33 2026 GMT Not After : Nov 16 01:01:33 2026 GMT Subject: CN=0529d7d7079ef35adc52bda7b7b4cc51cc3f588d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:8f:d0:93:01:c3:d5:16:b3:8d:df:0f:90: 2a:14:a2:cf:d5:e8:52:1b:e9:67:a2:f2:69:83:ca: a3:5b:05:04:2b:12:b8:d9:c5:95:c5:8a:6b:ed:1a: 99:e7:c1:c7:a4:8a:73:5e:e4:8a:50:26:07:e9:3c: 2c:1e:be:96:63:25:ae:67:17:3d:55:b2:f5:89:94: 5a:c6:ed:d6:83:8d:32:ba:b9:17:2e:93:33:a6:dd: a7:7c:a7:f7:05:07:3c:61:70:bb:e8:12:7a:fe:89: b3:5e:a6:7b:c1:fc:d7:e0:bd:61:a4:d3:88:41:dc: 61:fb:51:7c:89:16:5e:31:ff:ff:92:a1:63:80:76: 20:d7:51:32:cb:3e:47:fb:6b:19:dc:d5:c0:e7:2c: 22:b0:38:c8:e3:ed:03:a7:1c:3f:4e:b3:dd:4b:58: 18:49:e4:9b:38:69:03:aa:77:7d:85:fe:33:0c:1e: e2:ca:e6:78:17:37:de:31:6f:24:78:e6:a6:87:b3: 26:bf:16:16:18:3f:69:ae:f7:7f:41:8e:3f:fb:be: bf:4b:42:8b:fe:6e:a0:3e:82:75:5d:66:2d:58:4c: 32:d9:98:4d:8d:78:2a:26:f6:b1:4d:44:57:e1:ea: 93:6a:0f:8b:d7:0a:15:7e:22:2f:91:44:27:f6:b6: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:29:D7:D7:07:9E:F3:5A:DC:52:BD:A7:B7:B4:CC:51:CC:3F:58:8D X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c3:a8:aa:97:a7:2a:a1:d2:db:6a:fd:94:70:d3:89:39:4e: cf:02:7b:ff:12:6e:6c:12:46:f9:6f:7a:06:eb:c5:b0:8d:15: c8:45:23:d2:e7:5f:a1:e8:d8:97:fb:38:18:4f:ac:8a:57:cd: be:6e:22:ee:02:cb:e1:89:1d:05:e8:f3:bf:f0:d3:1b:c7:d8: b8:58:c0:95:72:0a:b6:be:f9:67:bd:06:28:88:c8:a8:72:78: 87:61:50:05:76:08:56:7f:d3:6a:be:e3:71:b9:b3:03:ab:47: 31:76:b8:40:fc:04:61:49:81:9b:b5:45:8f:e5:c3:20:17:a9: c6:f1:e4:2d:47:39:2f:29:4d:d2:b1:03:b5:a7:c4:b5:7e:8d: 40:10:73:1a:eb:a7:65:a9:c9:c3:f9:b5:12:84:22:d7:2e:76: b2:f3:d3:28:34:d0:eb:8c:3f:2b:ed:12:33:c8:c4:d0:18:39: ab:cf:7a:b6:87:31:5a:60:b3:6e:c2:63:db:18:cc:fe:fc:b0: a8:32:ff:ae:d8:37:c1:78:70:af:85:d6:37:65:81:22:d4:19: 37:70:54:41:dd:68:a0:70:f9:bf:51:e3:72:f0:28:4a:c0:43: 98:4f:e0:a0:1c:ae:4f:a6:6a:e5:35:8f:86:b2:d9:ab:46:1a: 7c:47:62:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcuUujd5Z6aP7KPtJfKa/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYxMTE1MDEwMTMzWhcNMjYxMTE2MDEwMTMzWjAzMTEwLwYDVQQD EygwNTI5ZDdkNzA3OWVmMzVhZGM1MmJkYTdiN2I0Y2M1MWNjM2Y1ODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxqP0JMBw9UWs43fD5AqFKLP1ehS G+lnovJpg8qjWwUEKxK42cWVxYpr7RqZ58HHpIpzXuSKUCYH6TwsHr6WYyWuZxc9 VbL1iZRaxu3Wg40yurkXLpMzpt2nfKf3BQc8YXC76BJ6/omzXqZ7wfzX4L1hpNOI Qdxh+1F8iRZeMf//kqFjgHYg11Eyyz5H+2sZ3NXA5ywisDjI4+0Dpxw/TrPdS1gY SeSbOGkDqnd9hf4zDB7iyuZ4FzfeMW8keOamh7MmvxYWGD9prvd/QY4/+76/S0KL /m6gPoJ1XWYtWEwy2ZhNjXgqJvaxTURX4eqTag+L1woVfiIvkUQn9rbEhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUp19cHnvNa3FK9p7e0zFHMP1iNMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8Ooqpen KqHS22r9lHDTiTlOzwJ7/xJubBJG+W96BuvFsI0VyEUj0udfoejYl/s4GE+silfN vm4i7gLL4YkdBejzv/DTG8fYuFjAlXIKtr75Z70GKIjIqHJ4h2FQBXYIVn/Tar7j cbmzA6tHMXa4QPwEYUmBm7VFj+XDIBepxvHkLUc5LylN0rEDtafEtX6NQBBzGuun ZanJw/m1EoQi1y52svPTKDTQ64w/K+0SM8jE0Bg5q896tocxWmCzbsJj2xjM/vyw qDL/rtg3wXhwr4XWN2WBItQZN3BUQd1ooHD5v1HjcvAoSsBDmE/goByuT6Zq5TWP hrLZq0YafEdimw== -----END CERTIFICATE-----Generated at Sun Nov 15 11:33:33 2026 by rpki-client