$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: b5HL94YmLmRvOiE05WRMpXvI8Op8h0qF1f62ID9Ikg8= Subject key identifier: A8:B4:64:AB:D0:61:24:39:B1:3D:EA:DD:93:07:F0:24:81:8C:56:A5 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019F916CCFEFE19F449DA671DB6BCD2B219E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 19D9 Signing time: Fri 24 Jul 2026 00:00:55 +0000 Manifest this update: Fri 24 Jul 2026 00:00:55 +0000 Manifest next update: Sat 25 Jul 2026 00:00:55 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa (hash: kEZA3HWXo+axDXRIJx2Qo5x0RmJdyCm6aj/hJrouWz4=) 3: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 4: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: ZvtMVxVhKsDWL0DG8vtmH01zBh6dAakkORWT96OCj2I=) 6: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 7: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 8: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 9: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 10: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6c:cf:ef:e1:9f:44:9d:a6:71:db:6b:cd:2b:21:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Jul 24 00:00:55 2026 GMT Not After : Jul 25 00:00:55 2026 GMT Subject: CN=a8b464abd0612439b13deadd9307f024818c56a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8b:8e:b9:13:fa:0b:da:11:45:bd:93:ae:ab: 33:97:e5:e1:41:10:5d:7d:e2:45:b4:4b:a3:33:a1: 99:25:cf:18:7a:21:86:d5:03:1d:e7:a7:d8:b0:9f: 4f:57:26:d8:d6:ba:9b:99:f3:16:ea:e9:03:89:67: e5:b7:f7:d4:10:b8:2c:7c:bc:d7:17:a6:b4:79:d5: f3:2d:bb:a8:c0:3f:d5:55:a1:87:48:a9:90:24:52: ff:f2:7f:bf:21:af:99:43:44:df:d3:96:37:37:16: ee:b4:cc:40:01:02:e1:cf:09:89:45:af:ff:ca:80: bc:44:3f:a2:96:42:64:3d:3e:d4:f9:8f:58:f6:97: 06:90:88:7f:22:c2:03:5f:27:de:cc:84:b7:8b:e1: ba:56:2b:21:f3:5a:67:fa:0a:08:98:56:01:7f:d3: 10:e5:35:51:81:6d:7c:1d:b7:17:58:55:aa:62:d3: ee:45:71:49:26:fb:ef:48:57:b1:a5:57:3a:19:62: 65:40:85:6d:3c:31:65:45:6c:fb:08:af:87:c9:fc: 5e:8e:d1:63:da:e6:8c:01:34:26:6a:48:ed:0a:2b: c4:9e:60:42:ac:a7:61:5c:b3:a9:f5:6a:ef:2b:3a: df:8f:a8:91:2d:49:eb:54:49:86:fe:cc:0b:c4:78: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B4:64:AB:D0:61:24:39:B1:3D:EA:DD:93:07:F0:24:81:8C:56:A5 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:9d:8c:2a:02:fd:82:b2:27:e5:28:e6:89:00:60:bd:dc:db: 40:c6:52:52:3a:33:0c:e3:7d:14:1d:77:b4:eb:cb:eb:7c:7e: c2:19:5b:75:7b:44:cb:c9:6f:ab:9b:c5:be:52:86:60:25:27: 66:dc:14:16:74:53:54:a0:0f:f5:6d:5e:3b:59:2d:ef:77:38: 0a:68:23:48:eb:e9:83:30:bb:f0:e1:75:0f:f0:88:28:ad:c3: e5:92:d5:69:f0:df:43:4a:05:9e:8b:a4:68:0e:29:10:a1:e9: 84:f4:0b:a0:ba:b8:1a:e2:68:fd:9c:37:30:a1:0a:b7:fa:6c: 26:b1:cd:c6:6b:60:49:d8:78:a1:8e:d5:04:c1:76:ee:d5:27: 39:7b:cd:36:1b:2a:17:3d:c7:36:de:9a:36:a9:ee:4f:53:73: 24:fb:76:b0:32:8d:10:8a:26:f5:b3:a1:eb:17:65:9a:f2:b2: 08:0e:a2:75:7c:f9:d4:7d:7e:e0:f2:45:87:88:63:02:aa:33: bf:ae:f2:f2:23:72:aa:56:81:91:c3:84:96:38:ea:3b:5e:f7: 79:ee:3d:a3:d4:86:57:5d:69:e9:84:ea:d9:1c:f5:8b:b9:61: 10:5c:76:39:80:80:13:5d:19:51:11:e6:2c:0c:82:d4:21:19: 32:1b:31:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbM/v4Z9EnaZx22vNKyGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwNzI0MDAwMDU1WhcNMjYwNzI1MDAwMDU1WjAzMTEwLwYDVQQD EyhhOGI0NjRhYmQwNjEyNDM5YjEzZGVhZGQ5MzA3ZjAyNDgxOGM1NmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ouOuRP6C9oRRb2Trqszl+XhQRBd feJFtEujM6GZJc8YeiGG1QMd56fYsJ9PVybY1rqbmfMW6ukDiWflt/fUELgsfLzX F6a0edXzLbuowD/VVaGHSKmQJFL/8n+/Ia+ZQ0Tf05Y3NxbutMxAAQLhzwmJRa// yoC8RD+ilkJkPT7U+Y9Y9pcGkIh/IsIDXyfezIS3i+G6Vish81pn+goImFYBf9MQ 5TVRgW18HbcXWFWqYtPuRXFJJvvvSFexpVc6GWJlQIVtPDFlRWz7CK+HyfxejtFj 2uaMATQmakjtCivEnmBCrKdhXLOp9WrvKzrfj6iRLUnrVEmG/swLxHhSIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKi0ZKvQYSQ5sT3q3ZMH8CSBjFalMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0p2MKgL9 grIn5SjmiQBgvdzbQMZSUjozDON9FB13tOvL63x+whlbdXtEy8lvq5vFvlKGYCUn ZtwUFnRTVKAP9W1eO1kt73c4CmgjSOvpgzC78OF1D/CIKK3D5ZLVafDfQ0oFnouk aA4pEKHphPQLoLq4GuJo/Zw3MKEKt/psJrHNxmtgSdh4oY7VBMF27tUnOXvNNhsq Fz3HNt6aNqnuT1NzJPt2sDKNEIom9bOh6xdlmvKyCA6idXz51H1+4PJFh4hjAqoz v67y8iNyqlaBkcOEljjqO173ee49o9SGV11p6YTq2Rz1i7lhEFx2OYCAE10ZURHm LAyC1CEZMhsx9w== -----END CERTIFICATE-----Generated at Fri Jul 24 07:08:01 2026 by rpki-client