$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: RJGKsWNoRgsziYiyBjpffsEhUlDxqbOVftDUavE0q1Q= Subject key identifier: D7:0B:F0:B9:5B:90:F2:01:E1:B5:CC:13:87:40:18:65:8E:EF:49:6E Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 01A0CF361091A5FC391093A82EC1A1A1262C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 1A72 Signing time: Wed 23 Sep 2026 17:00:21 +0000 Manifest this update: Wed 23 Sep 2026 17:00:21 +0000 Manifest next update: Thu 24 Sep 2026 17:00:21 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: c8jn0ej7efuykKqGCdULjK07h9xRX7MC5A1h9UG1rXY=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:36:10:91:a5:fc:39:10:93:a8:2e:c1:a1:a1:26:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Sep 23 17:00:21 2026 GMT Not After : Sep 24 17:00:21 2026 GMT Subject: CN=d70bf0b95b90f201e1b5cc13874018658eef496e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:d7:0b:7c:1c:9c:ae:28:8d:0d:77:57:18: dd:22:af:92:8d:49:43:2d:dd:19:fa:d0:89:58:e0: 26:87:fe:f1:cd:48:e0:bb:36:5b:b9:d0:c7:bc:45: fd:59:fa:12:cc:78:c8:2c:96:12:e4:70:30:27:17: 7c:4b:08:57:b6:51:51:6f:a8:29:17:71:85:b0:ef: 85:38:52:93:a8:ef:c8:cf:b0:65:7d:e8:34:09:c2: 2d:e9:a7:ea:95:88:4a:74:ae:e2:57:a3:e1:ff:b6: c7:f3:94:51:18:6e:3c:d9:4e:ad:ff:77:44:a8:ea: c8:d5:b5:d2:05:a0:9f:1e:3b:ef:2e:49:ee:87:84: d1:d5:8c:7d:77:e1:32:c8:4b:77:92:29:c6:c9:39: 20:fd:28:a4:79:69:0c:9e:cb:a8:f5:99:ec:4a:01: 53:b7:55:91:33:c3:fb:16:63:00:42:26:0d:e3:dc: 61:50:d6:bb:3f:33:e5:f9:40:58:a9:61:15:fb:56: 26:b0:d7:a0:75:a2:86:3e:58:a3:24:66:dc:36:63: 05:be:5f:d6:73:49:07:6c:75:52:f5:39:6a:54:c4: 1f:44:fd:ad:fb:de:4d:a8:9d:d5:8c:f5:52:73:05: 3a:12:67:0e:6c:59:59:25:5a:ed:cd:21:8e:21:e3: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0B:F0:B9:5B:90:F2:01:E1:B5:CC:13:87:40:18:65:8E:EF:49:6E X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f9:d4:a0:e0:0e:8d:54:41:d0:99:48:f5:97:63:73:f3:b4: e4:66:ef:19:86:21:ed:89:35:c0:62:1a:71:20:a4:65:23:9c: cf:ab:51:42:6b:25:3f:7c:84:d7:95:76:91:98:0d:90:77:47: 34:21:e3:6b:70:e5:42:79:d5:bd:d8:e7:d1:26:c3:fb:92:97: 8a:69:77:61:51:49:dd:8b:37:42:e1:c1:23:88:32:5d:5b:03: 79:9f:2f:e7:20:2f:89:ac:39:b5:e2:e1:fb:51:87:da:77:ad: 10:d0:78:e5:b6:4f:aa:07:c8:d5:19:5c:45:18:49:aa:a2:22: 35:49:53:ef:13:19:15:a3:c4:69:da:34:fb:e7:16:f5:1c:8e: ef:37:0a:b7:61:67:6e:f0:85:f1:e0:89:a1:3d:e0:31:1f:b8: 4e:b2:19:2e:67:46:46:e6:40:42:70:cb:81:f8:e6:62:a7:1f: 6c:6a:79:2b:99:8c:ad:85:9a:52:27:37:29:9b:2a:9c:98:1b: 86:91:dc:08:5a:f5:06:63:52:cf:99:69:fe:20:b4:e4:62:1d: a3:13:0e:7c:72:e9:de:fb:20:8b:87:c2:10:fe:c3:3f:fc:e5: 20:9a:0f:69:4c:f4:76:86:7c:4a:97:87:9d:ce:9f:2c:e1:97: 1b:f3:45:93 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaDPNhCRpfw5EJOoLsGhoSYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwOTIzMTcwMDIxWhcNMjYwOTI0MTcwMDIxWjAzMTEwLwYDVQQD EyhkNzBiZjBiOTViOTBmMjAxZTFiNWNjMTM4NzQwMTg2NThlZWY0OTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXDXC3wcnK4ojQ13VxjdIq+SjUlD Ld0Z+tCJWOAmh/7xzUjguzZbudDHvEX9WfoSzHjILJYS5HAwJxd8SwhXtlFRb6gp F3GFsO+FOFKTqO/Iz7Blfeg0CcIt6afqlYhKdK7iV6Ph/7bH85RRGG482U6t/3dE qOrI1bXSBaCfHjvvLknuh4TR1Yx9d+EyyEt3kinGyTkg/SikeWkMnsuo9ZnsSgFT t1WRM8P7FmMAQiYN49xhUNa7PzPl+UBYqWEV+1YmsNegdaKGPlijJGbcNmMFvl/W c0kHbHVS9TlqVMQfRP2t+95NqJ3VjPVScwU6EmcObFlZJVrtzSGOIeOw1wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNcL8LlbkPIB4bXME4dAGGWO70luMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfnU oOAOjVRB0JlI9Zdjc/O05GbvGYYh7Yk1wGIacSCkZSOcz6tRQmslP3yE15V2kZgN kHdHNCHja3DlQnnVvdjn0SbD+5KXiml3YVFJ3Ys3QuHBI4gyXVsDeZ8v5yAviaw5 teLh+1GH2netENB45bZPqgfI1RlcRRhJqqIiNUlT7xMZFaPEado0++cW9RyO7zcK t2FnbvCF8eCJoT3gMR+4TrIZLmdGRuZAQnDLgfjmYqcfbGp5K5mMrYWaUic3KZsq nJgbhpHcCFr1BmNSz5lp/iC05GIdoxMOfHLp3vsgi4fCEP7DP/zlIJoPaUz0doZ8 SpeHnc6fLOGXG/NFkw== -----END CERTIFICATE-----Generated at Thu Sep 24 00:44:11 2026 by rpki-client