$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: 904KYhLdBjPp3W5OgcDppvX1QmG2j1xSjp//afzWYHM= Subject key identifier: 20:D5:02:35:AD:D5:C7:A0:25:1C:03:43:F9:68:CC:73:E7:A4:C2:BD Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019E1EA3E9D65BC27F4144F765D2A003A799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 1919 Signing time: Wed 13 May 2026 00:01:59 +0000 Manifest this update: Wed 13 May 2026 00:01:59 +0000 Manifest next update: Thu 14 May 2026 00:01:59 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa (hash: kEZA3HWXo+axDXRIJx2Qo5x0RmJdyCm6aj/hJrouWz4=) 3: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 4: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: G3ZQa7ginhW2Zbg2RFLBVhO1VBK86pCmDxz6CEMr0D0=) 6: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 7: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 8: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 9: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 10: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:e9:d6:5b:c2:7f:41:44:f7:65:d2:a0:03:a7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: May 13 00:01:59 2026 GMT Not After : May 14 00:01:59 2026 GMT Subject: CN=20d50235add5c7a0251c0343f968cc73e7a4c2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:61:35:8c:ad:11:06:bf:d9:c0:ee:e9:8b:64: 94:4a:30:df:06:16:a3:15:0d:f1:fc:76:81:e1:b7: 73:44:ed:65:98:e5:c5:46:a4:e7:c5:78:4b:d7:1e: 13:1a:5a:07:e3:13:1f:80:7f:ad:f6:58:58:4c:18: 6c:44:54:1a:bb:55:90:18:1f:2c:69:05:2b:e4:f2: 19:62:c0:44:61:7f:77:bc:af:80:2b:b4:fa:3b:d8: d7:2d:90:04:6f:cc:ba:bb:e5:46:b5:13:5c:cf:a4: 13:35:fa:42:85:5a:46:d2:84:c5:47:2c:83:cf:f6: fc:a1:a8:a0:fb:37:4c:39:b7:3e:e8:e7:b3:42:1d: 15:8e:a1:ce:f9:b5:c6:2d:db:4c:d0:de:de:a8:30: 8f:b1:e4:27:3d:c9:1e:b1:9e:63:b5:5b:a0:b5:75: 16:98:48:6c:b5:c6:b7:34:85:0e:9d:cc:8f:65:3f: 0c:15:67:3d:eb:f3:75:60:84:09:c5:57:07:5d:c5: 60:cf:f9:c0:f3:b5:dd:1f:73:53:8f:06:20:15:97: 64:a6:56:7b:15:4c:e7:86:62:7a:41:87:4a:b3:c7: 4b:bb:c7:47:b6:a2:3c:0e:66:f4:42:2f:ef:16:c2: 50:0e:ac:15:62:f4:3c:ab:bf:b3:96:2e:f0:93:1b: 03:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:02:35:AD:D5:C7:A0:25:1C:03:43:F9:68:CC:73:E7:A4:C2:BD X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7f:4c:31:8a:09:98:a2:d9:36:90:db:42:96:73:50:cb:5d: 55:85:f4:af:03:8d:d6:82:9c:1c:30:4a:e0:2e:11:f6:87:3f: d8:f8:9b:7d:68:72:87:c4:69:27:70:fa:35:98:4e:88:e7:c0: 5b:f6:8b:2b:dd:80:45:90:2e:bd:f9:cc:a3:f8:ec:76:99:4a: 49:3c:28:9b:1c:05:9f:d6:ed:1f:94:03:78:20:cb:1d:42:65: 10:4b:34:dd:53:1c:0a:72:1f:10:fb:ff:34:64:72:aa:22:be: f5:77:3a:cf:db:a8:e4:42:44:78:40:36:fa:aa:77:bd:c5:14: 82:62:ca:44:47:7c:e0:ab:22:d6:6e:c5:d0:6d:a4:c4:b7:b4: f5:dd:35:f0:a2:f7:07:cc:5f:52:ef:15:5e:84:46:a1:c9:c1: 10:b5:e4:b9:3c:59:2c:c9:a7:ba:f7:82:3c:9e:6e:21:0e:a6: 0b:8b:34:95:de:8f:48:d0:9d:26:65:2f:6e:9b:68:76:d9:51: 71:0a:35:01:4b:b8:de:9b:c3:a5:65:8f:c9:da:6c:b9:a7:c3: 2a:07:a3:dc:87:ad:88:38:12:75:d0:4e:2b:d3:f5:6c:9d:e7: 68:6f:ab:81:93:87:a6:20:9f:67:d6:b1:a8:69:20:e1:88:dd: 41:4c:35:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eo+nWW8J/QUT3ZdKgA6eZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwNTEzMDAwMTU5WhcNMjYwNTE0MDAwMTU5WjAzMTEwLwYDVQQD EygyMGQ1MDIzNWFkZDVjN2EwMjUxYzAzNDNmOTY4Y2M3M2U3YTRjMmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2E1jK0RBr/ZwO7pi2SUSjDfBhaj FQ3x/HaB4bdzRO1lmOXFRqTnxXhL1x4TGloH4xMfgH+t9lhYTBhsRFQau1WQGB8s aQUr5PIZYsBEYX93vK+AK7T6O9jXLZAEb8y6u+VGtRNcz6QTNfpChVpG0oTFRyyD z/b8oaig+zdMObc+6OezQh0VjqHO+bXGLdtM0N7eqDCPseQnPckesZ5jtVugtXUW mEhstca3NIUOncyPZT8MFWc96/N1YIQJxVcHXcVgz/nA87XdH3NTjwYgFZdkplZ7 FUznhmJ6QYdKs8dLu8dHtqI8Dmb0Qi/vFsJQDqwVYvQ8q7+zli7wkxsDxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDVAjWt1cegJRwDQ/lozHPnpMK9MB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAH9MMYoJ mKLZNpDbQpZzUMtdVYX0rwON1oKcHDBK4C4R9oc/2PibfWhyh8RpJ3D6NZhOiOfA W/aLK92ARZAuvfnMo/jsdplKSTwomxwFn9btH5QDeCDLHUJlEEs03VMcCnIfEPv/ NGRyqiK+9Xc6z9uo5EJEeEA2+qp3vcUUgmLKREd84Ksi1m7F0G2kxLe09d018KL3 B8xfUu8VXoRGocnBELXkuTxZLMmnuveCPJ5uIQ6mC4s0ld6PSNCdJmUvbptodtlR cQo1AUu43pvDpWWPydpsuafDKgej3IetiDgSddBOK9P1bJ3naG+rgZOHpiCfZ9ax qGkg4YjdQUw1FQ== -----END CERTIFICATE-----Generated at Wed May 13 04:34:36 2026 by rpki-client