$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: vyJJLliX8QnlmxHR5riXAiyHoCsMg+frMw+3yZqu0rU= Subject key identifier: 7F:B9:84:C1:44:50:21:49:E5:79:2C:A9:B3:9D:24:A8:E2:D5:27:A8 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 01A0E852FF25B44C0405DFCA514B2A80F10C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 1A96 Signing time: Mon 28 Sep 2026 14:02:28 +0000 Manifest this update: Mon 28 Sep 2026 14:02:28 +0000 Manifest next update: Tue 29 Sep 2026 14:02:28 +0000 Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=) 2: 4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (hash: B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=) 3: GmKW5_EHkoH0GvuRNXDDZJBTr9w.asa (hash: WTnAG5IBd9zYOkgfV7EwghTiMnsdkoRczSviULKHvJk=) 4: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=) 5: PY4zk8ZdTV8J6IiAD0rRER8XcM4.asa (hash: ds1r0Q17VFau1bpjzlPurN1iqObqDOJcn+qwvKgVZdM=) 6: Y19P_g-vBYYPjku8AAu-CeAzWW0.roa (hash: 0p9ZYZuTWuetqmVFdCZJU25sYbQjPpo04+Hro2GGGZA=) 7: fL71-L22cKxM7CZQLZouesgJu3U.roa (hash: sUDVv41sxROa/YEaIzj5YrqXpRn04S1uEQsUbtMaqsM=) 8: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: T2/5s0DEFvFn9nxrtHlvTSKSzv/1A+KIllnHr0XWHDw=) 9: kWoDnbDfKRrdPEqboPrzUYeYutU.asa (hash: KIa+NGQ3X/m6SyP7wk2j8x0CtEKUsyJ76G3KolFP4Sw=) 10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=) 11: psPWwnT647exV4ggiJz8vloBaHU.roa (hash: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:52:ff:25:b4:4c:04:05:df:ca:51:4b:2a:80:f1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Sep 28 14:02:28 2026 GMT Not After : Sep 29 14:02:28 2026 GMT Subject: CN=7fb984c144502149e5792ca9b39d24a8e2d527a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:1e:37:40:e9:f8:e5:a9:c5:1a:20:25:37: b3:83:99:55:c1:0d:fb:0a:26:14:d9:b2:18:27:93: a6:98:ff:85:39:78:ac:92:62:52:46:e1:a7:f2:e8: ad:e6:cf:b9:38:18:be:93:62:d6:29:b7:fd:f3:38: 27:eb:96:17:88:f8:a1:c8:69:23:17:0b:a2:f5:76: a6:c3:43:ba:49:ad:0a:56:47:a7:3e:18:da:b8:77: b4:f6:22:d7:52:04:e8:5b:99:45:a1:fb:1a:59:d3: 97:49:ad:ce:69:39:e7:db:1a:0a:a5:ac:0e:56:62: 9b:72:82:94:72:aa:91:4c:ae:3c:05:e9:84:15:46: 6a:6a:d7:d5:e4:5a:04:07:ef:e1:bb:71:43:ef:d7: 35:09:aa:e6:3d:eb:d5:0d:36:fb:7c:9d:80:0d:72: 77:60:8c:a8:d5:4e:cf:de:d4:3a:62:fb:03:d0:02: d6:77:ee:cf:12:89:5b:1e:84:75:dc:d5:fc:63:ce: 46:d3:56:d4:0b:58:ad:02:47:d8:1c:f7:32:c5:ba: 54:e1:46:20:4d:a0:2e:d0:bf:f1:c8:07:f5:d3:25: 33:bd:42:b8:ac:3b:ae:08:36:92:48:0d:ec:5f:10: 0d:9a:35:8d:ec:8b:2d:8a:3b:54:d9:ea:0b:e0:66: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B9:84:C1:44:50:21:49:E5:79:2C:A9:B3:9D:24:A8:E2:D5:27:A8 X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:64:7d:63:f4:e1:ff:4d:4a:a3:20:14:7c:df:dd:57:1b:c3: 56:94:76:ed:df:58:c9:c9:fd:10:0b:d4:40:f3:be:69:bc:94: 1e:5f:0d:34:35:9d:69:e0:e1:fe:e4:eb:10:5d:c8:bc:e9:62: 3e:b7:6c:16:14:c8:d0:68:7a:b3:0f:2d:8e:9b:95:5d:0c:ac: a5:44:8b:2e:19:74:5a:12:9d:99:37:bd:3f:eb:75:ba:e1:1d: 56:4a:22:3b:58:de:b6:37:66:24:19:78:13:cb:26:68:92:e5: a4:d4:aa:08:ea:cf:82:b9:83:5a:de:b5:28:d0:26:59:5b:f8: f4:e6:34:13:33:9b:4d:c6:26:b4:5b:15:8f:c0:d8:3c:3c:65: f8:d9:fc:fa:50:30:44:39:34:d3:61:e9:2b:7c:f8:46:8b:8b: 13:1f:6b:2b:59:e6:f9:9b:b4:c6:80:f6:30:a8:cf:c1:81:d4: cb:bd:87:4f:a1:97:6e:5f:77:eb:f6:78:f2:ee:e8:df:af:68: 8b:fc:d3:4e:d8:96:ce:7b:40:3e:00:88:fb:1f:b1:c4:5b:01: 3b:71:5e:fc:92:0f:28:45:92:6d:d3:f8:89:b1:f1:64:c0:f3: 71:b6:ee:b6:75:71:b2:56:27:a7:2b:a4:3d:b6:49:97:a4:02: f8:5a:a7:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDoUv8ltEwEBd/KUUsqgPEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYwOTI4MTQwMjI4WhcNMjYwOTI5MTQwMjI4WjAzMTEwLwYDVQQD Eyg3ZmI5ODRjMTQ0NTAyMTQ5ZTU3OTJjYTliMzlkMjRhOGUyZDUyN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMAeN0Dp+OWpxRogJTezg5lVwQ37 CiYU2bIYJ5OmmP+FOXiskmJSRuGn8uit5s+5OBi+k2LWKbf98zgn65YXiPihyGkj Fwui9Xamw0O6Sa0KVkenPhjauHe09iLXUgToW5lFofsaWdOXSa3OaTnn2xoKpawO VmKbcoKUcqqRTK48BemEFUZqatfV5FoEB+/hu3FD79c1CarmPevVDTb7fJ2ADXJ3 YIyo1U7P3tQ6YvsD0ALWd+7PEolbHoR13NX8Y85G01bUC1itAkfYHPcyxbpU4UYg TaAu0L/xyAf10yUzvUK4rDuuCDaSSA3sXxANmjWN7IstijtU2eoL4GZICwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+5hMFEUCFJ5XksqbOdJKji1SeoMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmR9Y/Th /01KoyAUfN/dVxvDVpR27d9Yycn9EAvUQPO+abyUHl8NNDWdaeDh/uTrEF3IvOli PrdsFhTI0Gh6sw8tjpuVXQyspUSLLhl0WhKdmTe9P+t1uuEdVkoiO1jetjdmJBl4 E8smaJLlpNSqCOrPgrmDWt61KNAmWVv49OY0EzObTcYmtFsVj8DYPDxl+Nn8+lAw RDk002HpK3z4RouLEx9rK1nm+Zu0xoD2MKjPwYHUy72HT6GXbl936/Z48u7o369o i/zTTtiWzntAPgCI+x+xxFsBO3Fe/JIPKEWSbdP4ibHxZMDzcbbutnVxslYnpyuk PbZJl6QC+FqnGw== -----END CERTIFICATE-----Generated at Mon Sep 28 21:44:28 2026 by rpki-client