$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: La1oRoPJ20II76AjXxW2FpeYmMzZqCdUWJQ7ogCLofQ= Subject key identifier: 8B:FC:21:D5:B7:F2:47:7F:24:32:03:B1:77:69:80:C1:F5:BE:1C:F7 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019E1DC79169B8651707256A4D9106365F78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 190D Signing time: Tue 12 May 2026 20:01:18 +0000 Manifest this update: Tue 12 May 2026 20:01:18 +0000 Manifest next update: Wed 13 May 2026 20:01:18 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: 2o1hyAOrR6u+iSF/ITFAcTgEiXlV40EhMf7HfBqyc2c=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:91:69:b8:65:17:07:25:6a:4d:91:06:36:5f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: May 12 20:01:18 2026 GMT Not After : May 13 20:01:18 2026 GMT Subject: CN=8bfc21d5b7f2477f243203b1776980c1f5be1cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:fb:13:98:cf:b1:03:0c:be:d5:09:0e:2c: 58:b4:d1:50:16:cf:50:9a:d4:0f:25:80:1e:b4:a9: 32:87:fd:96:5f:6c:16:dc:e4:c4:e2:b2:a8:8d:54: 34:03:e5:bd:35:c4:3f:df:9b:28:06:97:4a:8d:46: 92:b9:20:dd:67:22:f6:12:6c:cb:94:3d:cc:fb:5a: 65:2b:3f:9d:12:51:40:c0:f7:d1:ea:b6:bd:f2:b2: ed:ff:8a:54:d2:70:de:1c:e1:05:69:f1:e1:21:29: 4c:95:c4:49:7c:51:d2:85:b0:22:14:af:d0:9f:ff: d5:10:1a:da:55:27:bd:bd:48:ed:f5:3b:2b:ae:c4: 2f:a1:c1:bf:e2:76:f0:2d:7e:95:0a:b9:22:a0:6a: 30:9f:77:71:0e:32:b9:03:93:ab:16:e8:87:b2:14: a7:aa:17:d4:64:cb:7b:6b:63:d0:a7:9f:19:f2:61: 96:c2:03:8f:ee:ec:0c:aa:0e:2f:81:9e:27:30:94: 0c:1b:49:30:8a:33:6e:1e:96:b2:ca:a3:b7:cc:bc: be:01:a1:a8:af:4b:09:9f:cf:ba:4a:49:ae:54:78: 15:7c:1f:78:c6:78:93:e5:79:ec:8d:3a:61:d6:c9: e1:fe:c6:55:51:8f:50:2f:2c:42:41:f9:d3:1c:5a: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FC:21:D5:B7:F2:47:7F:24:32:03:B1:77:69:80:C1:F5:BE:1C:F7 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:20:aa:e0:32:50:91:8d:01:6b:a2:be:9b:97:54:24:20:20: 98:e4:34:71:4d:a2:81:3c:d7:c1:bc:e4:ea:cb:24:cc:0d:7c: b3:5f:ca:c3:11:6d:77:9b:07:86:5a:44:c3:f8:dd:f9:9c:36: ad:8a:89:84:09:86:fd:5c:df:e9:3c:1f:99:4c:eb:e5:2d:49: ca:5a:f6:32:07:f2:61:94:26:83:dd:d7:23:c0:9b:fb:70:79: f7:e5:c3:5c:9e:fa:2d:00:76:39:4d:f9:ba:2e:ca:b2:27:72: f9:fc:1e:cc:27:59:94:41:15:4f:c1:64:f1:06:c4:90:f8:80: 89:43:c7:9c:44:93:50:a4:f0:c6:dc:16:62:e0:fc:30:b0:e7: 56:00:07:38:99:c0:a8:ea:d8:74:2d:1d:9b:66:29:ad:9b:59: e0:66:11:0a:39:75:c2:f3:1f:09:33:9e:9a:34:12:2d:15:6b: bc:7a:78:d7:48:11:58:06:c1:04:d2:b3:b6:d3:b1:5f:64:93: 88:3b:50:c1:83:69:4a:36:3d:96:f1:65:e7:4f:08:62:f8:b7: b7:72:08:e0:3b:97:73:34:1d:d5:02:0f:96:5d:72:cf:d5:df: ef:53:51:41:87:9e:5e:4c:1b:a0:94:05:54:53:1d:8d:b4:88: 0c:28:15:a0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ4dx5FpuGUXByVqTZEGNl94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwNTEyMjAwMTE4WhcNMjYwNTEzMjAwMTE4WjAzMTEwLwYDVQQD Eyg4YmZjMjFkNWI3ZjI0NzdmMjQzMjAzYjE3NzY5ODBjMWY1YmUxY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWL7E5jPsQMMvtUJDixYtNFQFs9Q mtQPJYAetKkyh/2WX2wW3OTE4rKojVQ0A+W9NcQ/35soBpdKjUaSuSDdZyL2EmzL lD3M+1plKz+dElFAwPfR6ra98rLt/4pU0nDeHOEFafHhISlMlcRJfFHShbAiFK/Q n//VEBraVSe9vUjt9TsrrsQvocG/4nbwLX6VCrkioGown3dxDjK5A5OrFuiHshSn qhfUZMt7a2PQp58Z8mGWwgOP7uwMqg4vgZ4nMJQMG0kwijNuHpayyqO3zLy+AaGo r0sJn8+6SkmuVHgVfB94xniT5XnsjTph1snh/sZVUY9QLyxCQfnTHFqKgwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIv8IdW38kd/JDIDsXdpgMH1vhz3MB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSCq 4DJQkY0Ba6K+m5dUJCAgmOQ0cU2igTzXwbzk6sskzA18s1/KwxFtd5sHhlpEw/jd +Zw2rYqJhAmG/Vzf6TwfmUzr5S1Jylr2MgfyYZQmg93XI8Cb+3B59+XDXJ76LQB2 OU35ui7Ksidy+fwezCdZlEEVT8Fk8QbEkPiAiUPHnESTUKTwxtwWYuD8MLDnVgAH OJnAqOrYdC0dm2YprZtZ4GYRCjl1wvMfCTOemjQSLRVrvHp410gRWAbBBNKzttOx X2STiDtQwYNpSjY9lvFl508IYvi3t3II4DuXczQd1QIPll1yz9Xf71NRQYeeXkwb oJQFVFMdjbSIDCgVoA== -----END CERTIFICATE-----Generated at Wed May 13 06:21:50 2026 by rpki-client