$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: xxkNsVFk6stacP6fJAEowvkromoO79fyQW6kiSvqzvY= Subject key identifier: 5E:28:22:3B:5F:CD:7E:8A:27:0D:25:13:0F:FC:51:D7:7C:38:57:3E Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 01A0CD10FE1DB8EE3CFF22659D03FEC30C0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 0A2A Signing time: Wed 23 Sep 2026 07:00:37 +0000 Manifest this update: Wed 23 Sep 2026 07:00:37 +0000 Manifest next update: Thu 24 Sep 2026 07:00:37 +0000 Files and hashes: 1: 07sEtYgDD4P8DDdRCKN5iG4AMmY.roa (hash: 1D7e4u6dPSbKGI3tO20WfhKAQ8qfjqNxZrP0FvNTv4I=) 2: 14kLYnj4aVpiPiDnem1AuCPaMts.roa (hash: A5QynsOqd1sKefSS3NYn4v9gNeLs73Df7noVWjRyTzo=) 3: 1qXgqeRwym7VByCjt4dnmoVzCYA.roa (hash: 2+inDA791AGBpU1a4CaMfg8jPit5Dw+MtJ4r3DaAdkE=) 4: 34HMPXP3gEFiutCTD0yGcBkIiXc.roa (hash: bxhgk0bC5DY2ITvwM+gQQ6zIFbXvjkWnDfe1DuZaAkQ=) 5: BkKBEoBuPl12ptQekVldu_PtnTA.roa (hash: DoBPvLm1XOv7qBE48sBP+sgHTxMy7m9SUCSPAi7sn8c=) 6: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: dsNyaCUrUKz5kLIeMu8k9ZXPGNiQGGmTz2EIajXaqQg=) 7: LprOMsFHxLJAX14qr6rzPd2S3hE.roa (hash: GSVG8AjnGSJXwoz4NSFSCXryTjDxqTpMmM1vFNTvuyI=) 8: S1iRGBPkiYZCIAGWMCC64pE7FgA.roa (hash: dA6xUCDIzGteQYAPQ7wtWp2IPpfZldR/9rLVg9c0QzI=) 9: _bFFpYb8xNQtTH_3yPe_MDsPOZk.roa (hash: kDuaFVmunVmsMM4Jp1RzmY+vtuYMYvEW+p089DaIgrM=) 10: bzSWstjFIYA6blRoFbFSF1OGU6I.roa (hash: 7+JXpzWh9jeKZFp1Mfmg0BBiAYIO4Ce8OyrMvTMG8jY=) 11: e5H8rjjlVKlxfiAJ6IlS4G9OI08.roa (hash: NsnVR6BfsnGaMNfRKxx2wayfw4t4s2vRuzJq672PfAo=) 12: io5yyLDlHPGCEzGEMhnAmmdPx5s.roa (hash: jf2AJXsyEXE21uFIryQ83Vk8vd7pT2QW+lohF7eLHiQ=) 13: pBdOHT5tecjZpCjNpcydOSIR1PM.roa (hash: FLs6R8klsIETpJmcq3AWUpjGlsfTVyV7nd1ia0rcgok=) 14: sipyhYZTDUoVqJQxzsKOL-8LAkw.roa (hash: VV0MN0WQekFnJFeON5niYNrkxCw6xaFz74ZyByZEACQ=) 15: t1miWIZwqhFnHm1V8OaiWDQkZvQ.roa (hash: 6fT15sb19FmXqLe9+b0pS8/2omYg2Drcv+bmA7jcy/I=) 16: uEWwBuW9u4pZ2LI5guO_7bWBD88.roa (hash: wpxWCV/FC/jksdFOugHKtsE0yfmtAepcNeFuewpbO6Y=) 17: v8Orkvbv0JeoOiND2V_GH3Jy9mg.roa (hash: eBRYkTlO3gdEznV/SrZQR5/+A0lI/Ere/wes/GmjejI=) 18: vTkuXP1Lj0hgsJ2kb0Mr4vhSHB4.roa (hash: 936PpJYOLKkKzEDTt3gNFk26BfcHqznMHt6CO1ILfRY=) 19: xwaJ0j0PDYZzctmdgSjPPLZf004.roa (hash: wfHg7ouP4BOK33dNMmLPp9b7vL2GlP6yDgg+LDAcYSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:10:fe:1d:b8:ee:3c:ff:22:65:9d:03:fe:c3:0c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Sep 23 07:00:37 2026 GMT Not After : Sep 24 07:00:37 2026 GMT Subject: CN=5e28223b5fcd7e8a270d25130ffc51d77c38573e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:98:f2:8c:4a:d4:33:f8:3c:ee:db:4c:0e: 33:fe:e7:e6:0e:60:18:2e:ba:15:fb:d4:68:28:cc: c2:00:d5:01:35:d1:ee:d7:e6:d1:59:81:73:1e:0e: 18:e9:ae:90:ef:53:70:ae:50:57:94:ba:61:4d:64: 50:6b:53:d8:0e:71:ec:f8:82:85:10:15:64:30:d0: fb:aa:03:14:ca:da:8c:05:b3:cf:79:97:85:0f:a5: 6c:36:8e:c4:e4:66:59:4c:5d:21:a7:b9:a1:8a:8e: 1d:92:4c:83:33:d2:e0:ac:7b:c4:b8:af:91:b0:c7: af:f0:53:8f:01:b7:c2:11:8c:b0:e1:ba:c9:36:aa: 7c:c8:58:cc:8e:d6:3c:c4:41:36:ee:58:6e:86:3d: bc:55:1d:f0:5c:79:43:52:ba:5c:7c:e8:ae:4b:58: 00:50:07:b4:64:5d:3a:67:dc:96:34:1d:06:45:6a: 32:0c:b1:13:f6:71:8a:0a:ae:6f:4d:f3:55:20:50: f2:68:2f:13:b8:4f:87:2b:db:83:be:c3:3c:db:4b: 61:54:6d:5f:6e:4b:29:c5:86:51:e1:b7:eb:6e:9c: 1a:3e:78:ba:c8:e1:ea:9d:97:8c:b0:bd:3e:e5:1c: 4d:99:96:87:54:23:4f:96:57:85:ba:80:c7:c6:76: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:28:22:3B:5F:CD:7E:8A:27:0D:25:13:0F:FC:51:D7:7C:38:57:3E X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0b:87:18:9e:af:b2:c3:6d:bd:4e:69:ca:60:9a:91:93:db: 7b:3c:3d:0c:d4:aa:9b:20:d3:56:d7:be:03:48:b8:1f:99:b4: 21:82:37:4d:a6:ef:1f:cd:d2:07:a6:b1:ed:46:4e:33:05:4d: d1:d5:10:b6:34:50:a4:bc:96:7e:2e:08:7a:b9:9f:01:06:a2: af:f4:84:0d:7f:dc:90:57:e8:c5:86:56:2f:0f:e8:cf:4c:4f: 61:8e:30:0f:32:25:01:e7:a2:e5:48:6e:de:78:96:c5:26:70: 29:3f:87:ba:04:c7:8a:3b:bf:c2:f3:77:0b:cf:06:a3:40:f3: 43:f1:11:bf:d3:25:a7:09:26:3d:74:71:f2:5f:af:98:c4:62: a0:39:8f:91:55:bb:e6:2b:98:cb:09:5c:56:ad:5f:c9:79:23: b9:f9:7e:e8:b3:01:41:62:29:48:ea:43:f0:52:5a:4a:53:c4: e7:cb:a9:e7:be:c5:cb:0c:22:28:56:7c:d6:59:3d:78:d9:c0: 2e:30:b4:99:20:53:94:98:3a:65:fc:0e:f7:9a:b2:01:b1:7c: 52:00:5c:cc:f2:84:c5:a0:bf:2c:84:56:c6:16:bd:3c:c0:a8: 67:79:8f:d2:fc:ba:a4:ff:00:f8:b0:ce:35:86:66:dd:c7:78: 26:c5:e8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNEP4duO48/yJlnQP+wwwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwOTIzMDcwMDM3WhcNMjYwOTI0MDcwMDM3WjAzMTEwLwYDVQQD Eyg1ZTI4MjIzYjVmY2Q3ZThhMjcwZDI1MTMwZmZjNTFkNzdjMzg1NzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltiY8oxK1DP4PO7bTA4z/ufmDmAY LroV+9RoKMzCANUBNdHu1+bRWYFzHg4Y6a6Q71NwrlBXlLphTWRQa1PYDnHs+IKF EBVkMND7qgMUytqMBbPPeZeFD6VsNo7E5GZZTF0hp7mhio4dkkyDM9LgrHvEuK+R sMev8FOPAbfCEYyw4brJNqp8yFjMjtY8xEE27lhuhj28VR3wXHlDUrpcfOiuS1gA UAe0ZF06Z9yWNB0GRWoyDLET9nGKCq5vTfNVIFDyaC8TuE+HK9uDvsM820thVG1f bkspxYZR4bfrbpwaPni6yOHqnZeMsL0+5RxNmZaHVCNPlleFuoDHxnaE6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4oIjtfzX6KJw0lEw/8Udd8OFc+MB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQuHGJ6v ssNtvU5pymCakZPbezw9DNSqmyDTVte+A0i4H5m0IYI3TabvH83SB6ax7UZOMwVN 0dUQtjRQpLyWfi4IermfAQair/SEDX/ckFfoxYZWLw/oz0xPYY4wDzIlAeei5Uhu 3niWxSZwKT+HugTHiju/wvN3C88Go0DzQ/ERv9MlpwkmPXRx8l+vmMRioDmPkVW7 5iuYywlcVq1fyXkjufl+6LMBQWIpSOpD8FJaSlPE58up577FywwiKFZ81lk9eNnA LjC0mSBTlJg6ZfwO95qyAbF8UgBczPKExaC/LIRWxha9PMCoZ3mP0vy6pP8A+LDO NYZm3cd4JsXomQ== -----END CERTIFICATE-----Generated at Wed Sep 23 11:58:41 2026 by rpki-client