$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: zuRCWoiY9YKy7Jdjk1HVTuWYlfGUdDTv0J0GHMbVEGI= Subject key identifier: 10:7E:05:12:06:9B:CA:70:F5:7C:54:7E:10:A3:EA:D2:FB:4D:C1:A3 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 01A0D26B3420098030600FA2C7D2C4A025AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 0A2E Signing time: Thu 24 Sep 2026 07:57:16 +0000 Manifest this update: Thu 24 Sep 2026 07:57:16 +0000 Manifest next update: Fri 25 Sep 2026 07:57:16 +0000 Files and hashes: 1: 07sEtYgDD4P8DDdRCKN5iG4AMmY.roa (hash: 1D7e4u6dPSbKGI3tO20WfhKAQ8qfjqNxZrP0FvNTv4I=) 2: 14kLYnj4aVpiPiDnem1AuCPaMts.roa (hash: A5QynsOqd1sKefSS3NYn4v9gNeLs73Df7noVWjRyTzo=) 3: 1qXgqeRwym7VByCjt4dnmoVzCYA.roa (hash: 2+inDA791AGBpU1a4CaMfg8jPit5Dw+MtJ4r3DaAdkE=) 4: 34HMPXP3gEFiutCTD0yGcBkIiXc.roa (hash: bxhgk0bC5DY2ITvwM+gQQ6zIFbXvjkWnDfe1DuZaAkQ=) 5: BkKBEoBuPl12ptQekVldu_PtnTA.roa (hash: DoBPvLm1XOv7qBE48sBP+sgHTxMy7m9SUCSPAi7sn8c=) 6: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: uHFXGEQQ7JhCnhAz7NTAuniWF5EUCIVwcEfrtHQZZ70=) 7: LprOMsFHxLJAX14qr6rzPd2S3hE.roa (hash: GSVG8AjnGSJXwoz4NSFSCXryTjDxqTpMmM1vFNTvuyI=) 8: Qe5st-1p8kqRdn0Mnq1__rG_o0c.roa (hash: 0rQGsK/TWa4v7c8AFmb/TgbhnPFN7Iu5NlgiUJpK8UM=) 9: S1iRGBPkiYZCIAGWMCC64pE7FgA.roa (hash: dA6xUCDIzGteQYAPQ7wtWp2IPpfZldR/9rLVg9c0QzI=) 10: _-OcrgtqtJtonkhDtHKlMGXRclM.roa (hash: 63HqijJLyY7RyAWHw4zDInqjhKSY4slzUR8FECafgpI=) 11: _bFFpYb8xNQtTH_3yPe_MDsPOZk.roa (hash: kDuaFVmunVmsMM4Jp1RzmY+vtuYMYvEW+p089DaIgrM=) 12: bzSWstjFIYA6blRoFbFSF1OGU6I.roa (hash: 7+JXpzWh9jeKZFp1Mfmg0BBiAYIO4Ce8OyrMvTMG8jY=) 13: e5H8rjjlVKlxfiAJ6IlS4G9OI08.roa (hash: NsnVR6BfsnGaMNfRKxx2wayfw4t4s2vRuzJq672PfAo=) 14: io5yyLDlHPGCEzGEMhnAmmdPx5s.roa (hash: jf2AJXsyEXE21uFIryQ83Vk8vd7pT2QW+lohF7eLHiQ=) 15: pBdOHT5tecjZpCjNpcydOSIR1PM.roa (hash: FLs6R8klsIETpJmcq3AWUpjGlsfTVyV7nd1ia0rcgok=) 16: sipyhYZTDUoVqJQxzsKOL-8LAkw.roa (hash: VV0MN0WQekFnJFeON5niYNrkxCw6xaFz74ZyByZEACQ=) 17: t1miWIZwqhFnHm1V8OaiWDQkZvQ.roa (hash: 6fT15sb19FmXqLe9+b0pS8/2omYg2Drcv+bmA7jcy/I=) 18: uEWwBuW9u4pZ2LI5guO_7bWBD88.roa (hash: wpxWCV/FC/jksdFOugHKtsE0yfmtAepcNeFuewpbO6Y=) 19: v8Orkvbv0JeoOiND2V_GH3Jy9mg.roa (hash: eBRYkTlO3gdEznV/SrZQR5/+A0lI/Ere/wes/GmjejI=) 20: vTkuXP1Lj0hgsJ2kb0Mr4vhSHB4.roa (hash: 936PpJYOLKkKzEDTt3gNFk26BfcHqznMHt6CO1ILfRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 07:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:6b:34:20:09:80:30:60:0f:a2:c7:d2:c4:a0:25:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Sep 24 07:57:16 2026 GMT Not After : Sep 25 07:57:16 2026 GMT Subject: CN=107e0512069bca70f57c547e10a3ead2fb4dc1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:5b:93:5e:0e:7a:ff:ec:a4:6e:4a:0c:5e: cb:c1:f2:a3:8c:85:85:5b:18:1d:cc:6a:c0:e1:b1: 15:bd:1e:2b:10:ae:86:9e:70:df:f2:7a:3c:7c:f5: 2d:86:16:a7:3b:ff:12:8d:b0:3c:f3:72:b7:1f:3a: 86:6a:e6:d1:49:b2:fb:6a:78:ae:65:d0:26:08:7c: b8:12:b8:58:5c:2b:cb:47:83:97:30:3d:27:3a:b4: 10:b7:7f:86:eb:5d:eb:4c:24:64:5d:b4:cd:90:7d: 7e:a8:9f:28:57:66:5c:14:95:10:1c:66:59:01:2e: 93:f5:8f:2b:d7:32:93:72:b0:96:e3:33:e3:9a:ab: a6:a4:12:8b:96:7a:69:0a:27:94:94:7b:20:78:d7: 2a:77:96:02:1b:d3:fe:38:21:7e:e8:ff:e3:f6:da: c9:64:d2:81:96:13:4b:19:04:2f:17:0b:c5:e1:4a: 39:5b:97:80:34:10:11:2d:b6:29:36:d2:6d:6c:60: 58:d2:1f:72:8a:25:1c:c1:bf:e9:83:62:cb:bc:31: 67:36:4f:26:6a:22:80:a6:18:23:4e:83:04:06:4e: 5f:ee:31:01:27:c6:80:48:17:7e:f2:da:0d:e7:3b: 13:cb:e5:cb:b4:97:e4:cf:6f:ad:42:0e:3f:f7:db: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7E:05:12:06:9B:CA:70:F5:7C:54:7E:10:A3:EA:D2:FB:4D:C1:A3 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:cf:78:f5:a2:ae:27:39:d7:c3:08:97:5d:03:66:59:f9:bd: 7c:4b:4d:f3:35:a5:c1:73:cc:e0:ec:cf:90:f7:1d:aa:56:3e: 52:e4:bf:a5:54:0c:b0:49:66:2b:4e:cb:ac:6b:06:5f:76:56: 7c:36:d8:2f:a2:a2:95:70:76:f1:ec:3c:5f:78:68:f9:cc:f7: ff:d7:07:17:97:5f:ca:c2:cb:59:d8:93:4e:6a:0e:bc:d9:39: c5:b5:29:1e:66:24:9d:a9:d2:a3:4a:05:f4:f3:c9:46:0a:84: 57:e7:89:f4:5a:9c:fb:9e:72:52:a1:d3:c3:62:bb:9e:9a:56: 65:f4:c7:f5:28:7e:e7:c3:1e:3b:58:50:b7:b7:c6:27:1c:75: 3d:c7:58:0e:72:40:bc:cd:04:12:5d:7b:bf:41:1a:ea:c1:ff: be:e6:de:e8:27:cf:cc:8e:48:61:d9:c7:59:b0:5f:30:7b:28: 79:b9:97:87:56:95:29:a4:d1:84:cd:4e:b3:a2:ab:33:7f:47: ab:04:7a:5b:9d:89:29:19:7b:5c:37:33:65:9f:c5:c4:17:96: 5a:e4:f3:4c:bf:4c:07:6e:92:ed:29:25:4d:c6:2f:80:55:89: f3:e2:e8:bc:97:95:5e:44:82:37:4d:cb:97:2b:9a:ca:c2:26: 66:0a:98:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSazQgCYAwYA+ix9LEoCWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwOTI0MDc1NzE2WhcNMjYwOTI1MDc1NzE2WjAzMTEwLwYDVQQD EygxMDdlMDUxMjA2OWJjYTcwZjU3YzU0N2UxMGEzZWFkMmZiNGRjMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4dbk14Oev/spG5KDF7LwfKjjIWF WxgdzGrA4bEVvR4rEK6GnnDf8no8fPUthhanO/8SjbA883K3HzqGaubRSbL7aniu ZdAmCHy4ErhYXCvLR4OXMD0nOrQQt3+G613rTCRkXbTNkH1+qJ8oV2ZcFJUQHGZZ AS6T9Y8r1zKTcrCW4zPjmqumpBKLlnppCieUlHsgeNcqd5YCG9P+OCF+6P/j9trJ ZNKBlhNLGQQvFwvF4Uo5W5eANBARLbYpNtJtbGBY0h9yiiUcwb/pg2LLvDFnNk8m aiKAphgjToMEBk5f7jEBJ8aASBd+8toN5zsTy+XLtJfkz2+tQg4/99tHsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBB+BRIGm8pw9XxUfhCj6tL7TcGjMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMc949aKu JznXwwiXXQNmWfm9fEtN8zWlwXPM4OzPkPcdqlY+UuS/pVQMsElmK07LrGsGX3ZW fDbYL6KilXB28ew8X3ho+cz3/9cHF5dfysLLWdiTTmoOvNk5xbUpHmYknanSo0oF 9PPJRgqEV+eJ9Fqc+55yUqHTw2K7nppWZfTH9Sh+58MeO1hQt7fGJxx1PcdYDnJA vM0EEl17v0Ea6sH/vube6CfPzI5IYdnHWbBfMHsoebmXh1aVKaTRhM1Os6KrM39H qwR6W52JKRl7XDczZZ/FxBeWWuTzTL9MB26S7SklTcYvgFWJ8+LovJeVXkSCN03L lyuaysImZgqYTg== -----END CERTIFICATE-----Generated at Thu Sep 24 17:32:12 2026 by rpki-client