$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: d+tFvBd337PFXuJLbVtnU6SnkrDl3vMmhy3YOof06c4= Subject key identifier: 7E:72:75:42:52:A9:44:84:E5:AD:16:4B:4C:B4:E7:81:31:AF:84:27 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019D273AAFA94714980FE9884AC5BDC05BF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1898 Signing time: Wed 25 Mar 2026 23:00:50 +0000 Manifest this update: Wed 25 Mar 2026 23:00:50 +0000 Manifest next update: Thu 26 Mar 2026 23:00:50 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 3: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 4: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: zYOqLqQFcc15GgBimEc5VL8HWxgyDKAF3AeliMqa59s=) 5: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 6: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 7: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 8: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) 9: tVeuYd91sHEJZuUDNMrqrKk6uME.roa (hash: hSzJOItctPBI6y6Se6D0Urxemw96jOFCv4Hf70uq1Qk=) 10: zSUHQIil1pv6NSEqyiy6QZUHKgI.roa (hash: sCV+NE2NUCcb5ZuDP7u98vtXx/1nUNBXjVpaW7PtLOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3a:af:a9:47:14:98:0f:e9:88:4a:c5:bd:c0:5b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Mar 25 23:00:50 2026 GMT Not After : Mar 26 23:00:50 2026 GMT Subject: CN=7e72754252a94484e5ad164b4cb4e78131af8427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:84:97:07:e1:5b:83:03:89:63:83:0f:bd:a5: b1:ee:ed:65:65:7c:29:7d:a8:78:d5:a8:b8:4b:96: 31:b1:36:e0:8c:6b:fc:a6:56:39:1d:3c:98:3a:1f: 81:ec:b1:25:d3:c7:29:a0:7c:33:ad:ef:1a:44:43: 9e:93:f7:ac:31:45:95:0c:4e:a2:3d:f6:da:36:c8: 5f:7e:5a:3e:7a:41:7b:b8:bd:38:70:de:23:e4:3d: ba:15:34:ea:32:5f:0b:c4:a6:dd:2e:47:93:ca:a1: 0f:2f:eb:f3:9e:44:5f:0d:7b:6f:66:2f:23:ed:1c: 36:64:df:09:4e:8d:d3:26:cc:40:85:db:33:56:80: c8:6a:bc:db:91:06:53:f5:b6:f4:74:a5:89:27:86: 9b:c3:99:5b:1f:0c:04:db:8a:9e:fd:35:eb:79:37: 76:4d:ce:68:8c:c6:16:c6:76:43:bf:b3:5b:63:2e: 9a:34:92:e0:98:15:45:67:81:3b:c1:52:a5:20:26: 63:2d:05:77:87:67:c7:ba:d5:48:7b:f4:a8:74:76: 85:91:31:59:a8:f4:4e:f3:40:13:0e:8b:f4:3e:e4: d4:dc:46:ee:c1:68:88:20:6e:f0:a0:5f:ee:7d:0a: 02:ba:b3:7a:56:69:43:05:7c:82:c4:65:a2:57:29: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:72:75:42:52:A9:44:84:E5:AD:16:4B:4C:B4:E7:81:31:AF:84:27 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ca:bf:d6:96:66:d6:90:1c:55:62:8d:dd:fa:cc:9d:eb:d2: b7:a2:27:53:a0:af:96:ed:db:30:47:d3:c2:73:72:97:4b:b8: 38:4b:5b:36:27:d2:03:46:81:ac:4e:f3:33:21:ac:08:d8:33: 41:cd:e2:42:ff:88:24:14:54:32:9b:4a:61:f1:dc:2b:64:0f: 2a:fd:13:ed:55:10:76:f2:b5:b7:bd:d8:19:c3:1d:e8:8e:17: 31:53:38:b6:36:d1:10:08:63:3a:20:89:52:a2:2f:68:5b:3a: b4:18:3b:37:66:28:07:d6:e2:4d:0a:66:48:f2:f6:e3:eb:32: 4d:f1:ef:78:dd:c2:58:87:63:9c:46:ac:b0:3f:88:75:91:52: 79:f7:aa:1f:61:ce:9f:08:9b:7d:b3:0a:26:49:73:96:84:f7: cd:b3:43:e8:c5:5f:ff:c3:27:fc:d1:a5:be:d9:8d:5a:34:ba: 36:b7:d9:60:78:bb:61:84:ff:1b:de:3f:19:0e:f3:b2:28:36: 97:f6:a4:ef:44:35:a8:ce:cd:93:4e:2c:04:9f:be:16:4a:21: b9:70:c3:a7:4b:f4:dc:0e:a1:cb:62:5d:42:47:97:3b:d3:a9: 94:04:14:51:62:17:2d:40:31:c6:05:ee:47:de:2f:27:5a:81: 4d:37:7d:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOq+pRxSYD+mISsW9wFvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwMzI1MjMwMDUwWhcNMjYwMzI2MjMwMDUwWjAzMTEwLwYDVQQD Eyg3ZTcyNzU0MjUyYTk0NDg0ZTVhZDE2NGI0Y2I0ZTc4MTMxYWY4NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4SXB+FbgwOJY4MPvaWx7u1lZXwp fah41ai4S5YxsTbgjGv8plY5HTyYOh+B7LEl08cpoHwzre8aREOek/esMUWVDE6i PfbaNshfflo+ekF7uL04cN4j5D26FTTqMl8LxKbdLkeTyqEPL+vznkRfDXtvZi8j 7Rw2ZN8JTo3TJsxAhdszVoDIarzbkQZT9bb0dKWJJ4abw5lbHwwE24qe/TXreTd2 Tc5ojMYWxnZDv7NbYy6aNJLgmBVFZ4E7wVKlICZjLQV3h2fHutVIe/SodHaFkTFZ qPRO80ATDov0PuTU3EbuwWiIIG7woF/ufQoCurN6VmlDBXyCxGWiVymWDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5ydUJSqUSE5a0WS0y054Exr4QnMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsq/1pZm 1pAcVWKN3frMnevSt6InU6Cvlu3bMEfTwnNyl0u4OEtbNifSA0aBrE7zMyGsCNgz Qc3iQv+IJBRUMptKYfHcK2QPKv0T7VUQdvK1t73YGcMd6I4XMVM4tjbREAhjOiCJ UqIvaFs6tBg7N2YoB9biTQpmSPL24+syTfHveN3CWIdjnEassD+IdZFSefeqH2HO nwibfbMKJklzloT3zbND6MVf/8Mn/NGlvtmNWjS6NrfZYHi7YYT/G94/GQ7zsig2 l/ak70Q1qM7Nk04sBJ++FkohuXDDp0v03A6hy2JdQkeXO9OplAQUUWIXLUAxxgXu R94vJ1qBTTd99w== -----END CERTIFICATE-----Generated at Thu Mar 26 08:43:13 2026 by rpki-client