$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: Sg+CiJ/F6WYeiVQlbczv+o/pO9aztXN+NBaWiYdQZ98= Subject key identifier: BD:DA:63:7F:6D:30:2D:2E:3D:26:4C:BF:52:2B:03:CE:68:A7:DD:B4 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 01A0D0B6C56BFB230F04E7AAD75E7FD66456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 091D Signing time: Thu 24 Sep 2026 00:00:34 +0000 Manifest this update: Thu 24 Sep 2026 00:00:34 +0000 Manifest next update: Fri 25 Sep 2026 00:00:34 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: UdJi83t4uPC5eO2A2bbz7KWo58m0HZjeO3Yib0I/+l0=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:b6:c5:6b:fb:23:0f:04:e7:aa:d7:5e:7f:d6:64:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Sep 24 00:00:34 2026 GMT Not After : Sep 25 00:00:34 2026 GMT Subject: CN=bdda637f6d302d2e3d264cbf522b03ce68a7ddb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:16:de:4b:f2:74:73:c4:35:29:ef:0b:a9: 9d:de:04:8c:8d:cb:88:dd:cf:ae:b1:78:6e:a0:3c: 97:70:19:50:b4:ff:84:7b:18:55:d9:65:29:41:d0: 6e:00:00:ad:7a:c3:91:86:43:06:ec:cd:bd:e8:94: 37:06:dc:69:78:f9:25:8d:50:68:85:57:4d:15:d6: f2:ce:2a:e7:09:76:6f:3a:d0:40:7d:1a:59:a4:b3: 57:3b:26:22:0b:c5:af:ba:c5:22:d1:d3:61:a0:51: 9e:61:4a:06:04:0a:fe:e6:d6:37:97:d2:dc:12:49: 8f:b2:25:3c:39:56:c9:bd:85:4f:bb:1e:e4:e3:8a: 69:7d:23:7c:11:23:d7:36:f3:9b:18:1d:3f:c8:da: 89:8e:e0:76:01:26:18:ba:e2:df:5d:6e:ab:b0:95: 52:40:e8:a8:94:f7:46:af:97:4d:2e:5f:aa:9e:d6: 4f:48:ef:be:25:14:ef:c8:8c:e3:4d:2b:78:45:7c: 81:3a:75:7f:44:0a:54:25:ce:b7:71:9d:c3:88:ba: b9:83:8b:d1:76:ae:ba:9a:7f:6d:b3:6b:21:55:f3: 2a:c7:05:02:21:a4:5c:f9:7f:ef:6e:16:a2:9b:d0: d8:80:b9:c8:3d:5c:82:a8:c4:4f:da:ba:0d:50:de: e4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DA:63:7F:6D:30:2D:2E:3D:26:4C:BF:52:2B:03:CE:68:A7:DD:B4 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:72:26:c4:36:23:79:7b:d3:8e:0e:f2:3a:17:14:a4:6f:fb: a0:4b:88:72:5a:97:fb:25:93:4f:f6:c7:94:a3:d8:c1:ac:41: c8:22:5b:02:01:3f:bd:99:b1:bd:da:a9:a0:22:f2:a7:89:48: 8a:7f:ba:aa:c5:4e:62:aa:83:9a:67:f0:eb:ad:86:36:14:35: 12:12:65:39:29:d9:d9:9c:ab:93:df:3b:9b:2a:0c:10:e2:4b: 61:9f:e1:8c:30:14:df:33:c6:ff:ca:9b:a4:b7:f3:09:10:6a: 65:4d:d6:12:16:3c:5c:f2:3e:57:8f:28:44:55:83:49:a0:60: fe:a5:ee:4f:b7:af:d1:ea:a2:4a:75:8f:ac:99:7b:27:d4:54: 6a:cd:01:15:c8:a1:c4:bd:90:76:93:42:e0:b9:70:20:81:38: b9:bb:90:fd:9d:0e:39:c0:32:fb:78:f3:a8:35:21:e9:0a:9a: 5b:eb:3c:ad:94:0d:81:63:26:b5:e3:74:14:3c:29:91:20:91: ca:e7:ee:68:1c:c2:8e:02:0f:8b:b9:44:dc:0b:b8:6b:9c:b5: c0:41:43:06:28:52:fd:72:79:66:ae:ce:e9:1a:4b:33:f0:2b: f8:b3:9a:b0:5b:a3:b3:69:61:14:b7:88:5f:7d:ab:96:07:a7: f3:f7:e6:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQtsVr+yMPBOeq115/1mRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwOTI0MDAwMDM0WhcNMjYwOTI1MDAwMDM0WjAzMTEwLwYDVQQD EyhiZGRhNjM3ZjZkMzAyZDJlM2QyNjRjYmY1MjJiMDNjZTY4YTdkZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDAW3kvydHPENSnvC6md3gSMjcuI 3c+usXhuoDyXcBlQtP+EexhV2WUpQdBuAACtesORhkMG7M296JQ3BtxpePkljVBo hVdNFdbyzirnCXZvOtBAfRpZpLNXOyYiC8WvusUi0dNhoFGeYUoGBAr+5tY3l9Lc EkmPsiU8OVbJvYVPux7k44ppfSN8ESPXNvObGB0/yNqJjuB2ASYYuuLfXW6rsJVS QOiolPdGr5dNLl+qntZPSO++JRTvyIzjTSt4RXyBOnV/RApUJc63cZ3DiLq5g4vR dq66mn9ts2shVfMqxwUCIaRc+X/vbhaim9DYgLnIPVyCqMRP2roNUN7kZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3aY39tMC0uPSZMv1IrA85op920MB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3ImxDYj eXvTjg7yOhcUpG/7oEuIclqX+yWTT/bHlKPYwaxByCJbAgE/vZmxvdqpoCLyp4lI in+6qsVOYqqDmmfw662GNhQ1EhJlOSnZ2Zyrk987myoMEOJLYZ/hjDAU3zPG/8qb pLfzCRBqZU3WEhY8XPI+V48oRFWDSaBg/qXuT7ev0eqiSnWPrJl7J9RUas0BFcih xL2QdpNC4LlwIIE4ubuQ/Z0OOcAy+3jzqDUh6QqaW+s8rZQNgWMmteN0FDwpkSCR yufuaBzCjgIPi7lE3Au4a5y1wEFDBihS/XJ5Zq7O6RpLM/Ar+LOasFujs2lhFLeI X32rlgen8/fmHA== -----END CERTIFICATE-----Generated at Thu Sep 24 06:04:20 2026 by rpki-client