$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft File: xCzMCbGKriXcamxXk_m5IMj2oZA.mft (raw, json) Hash identifier: Nwzrgyt/Fxm/uMXl2gNS1+6jiv4Ja3RMYAV/QhM/rrY= Subject key identifier: 51:F4:12:8F:B2:42:6E:11:2C:E8:60:3B:4E:76:A7:13:77:25:1C:55 Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Certificate serial: 019F85D72180430BD534B32B6B69C6031DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft Manifest number: 3A Signing time: Tue 21 Jul 2026 18:01:36 +0000 Manifest this update: Tue 21 Jul 2026 18:01:36 +0000 Manifest next update: Wed 22 Jul 2026 18:01:36 +0000 Files and hashes: 1: 0EqH53VKbjCBwptRrMrgE491HhQ.roa (hash: hlOlUUZZiEuddmv9KYC5nE6Vh5F6OtggwbOcesZb7ew=) 2: 5o0i3iMYhKiDSsjJw2IO_CJCyRI.roa (hash: cLWDRlb5at0aBAH980evnabI9atanrKNEOAJh0qjBjM=) 3: 9_lEI-YO-xsNbdJzpz_Zj20rYco.roa (hash: oMnrwxFfNZp1LGwhuhUfXcc2UVGqfAbo9ZJKmysRQV0=) 4: E8IDfbPJ-ASUqOO7Y_PebCnfcG8.roa (hash: Y97cV5mLD6OdoMRNkkIiqZ3KZIjQpuOlelMU9OFPxmA=) 5: H9L6_6x2hId55TmALa95rri1bEE.roa (hash: 9r2y4hipyP45iIbJJm1kWRG0SgwtjIdEoYjDvubCc0w=) 6: YpPmYf6zgICwfjz8NuAopnzNieM.roa (hash: Wfroa7HPPkCm63Ywbw+5nQxutBW2wjmxATyJS+4COgo=) 7: Z5KCSZVXGCrp9dNdx67dsrIqMQs.roa (hash: OByLdhjOZ0YIarl8arWqnOnJBvbgrJT1GS2f+GSHfp4=) 8: c4_Bhf2_gp-Hy5KN9JDfGFYxZ78.roa (hash: 1JGwg63mXrikqzD+c6YLgxnjzd6dRLDZcHOVSYL/I9U=) 9: f2uUPGNXC_pxdPQmPP-DpsHFtOQ.roa (hash: mFFk7nFev+G1oGZg2IbBid7J61ARFJ8OWPLRJsrECIA=) 10: w9Z_kQBpH-mdA7iwzKTWMENR2To.roa (hash: rlA3z5HMnFFWQ/5n7/7EQ6au3c+5eK2aDkiGB8PIifk=) 11: xCzMCbGKriXcamxXk_m5IMj2oZA.crl (hash: 70jluKyObyMXR3n1z9Wc1lMS0jx+3d8p4L/APRXR4Vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:85:d7:21:80:43:0b:d5:34:b3:2b:6b:69:c6:03:1d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Validity Not Before: Jul 21 18:01:36 2026 GMT Not After : Jul 22 18:01:36 2026 GMT Subject: CN=51f4128fb2426e112ce8603b4e76a71377251c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:eb:0b:a0:e1:09:36:c5:d6:6f:6d:ed:c2: 7c:83:9f:93:5a:fd:8a:c0:cf:c0:d8:37:c8:29:6c: dc:17:66:b4:2e:70:76:99:b1:5a:40:1f:3d:33:60: e2:e7:77:20:87:cb:e5:5b:be:fa:1a:3b:7b:3d:1a: ca:ab:f0:a7:65:f4:ad:d1:3e:eb:a8:f8:89:44:8c: 81:42:9b:78:e7:46:92:0e:d1:e1:6a:e1:03:8b:49: a3:82:e7:5a:92:bb:a8:2d:6e:e9:1d:6f:60:da:99: 02:f3:8b:82:aa:71:81:5a:95:32:60:e9:d6:3a:98: 94:f4:99:88:47:ae:81:3d:36:cc:e2:64:34:0b:bb: 56:dc:84:fc:d5:83:48:a1:ce:65:51:54:4e:3b:0f: ec:50:91:37:ef:70:92:fe:56:11:5d:5a:8d:60:3a: d7:74:d4:f3:e0:94:bc:39:de:94:48:3b:64:3b:16: 26:dc:68:b4:af:28:8f:f0:23:f7:b9:a4:e6:3d:24: 04:39:5f:3e:d4:04:bb:d4:b4:df:bc:31:90:0b:f9: 99:43:c2:86:68:79:ed:24:97:66:d7:e8:94:54:c6: 07:0d:07:c5:dd:ff:af:0c:4b:7a:0b:10:a6:f4:f0: 30:4b:00:d0:c3:df:f1:e1:dc:fa:41:4c:c6:8f:89: e4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F4:12:8F:B2:42:6E:11:2C:E8:60:3B:4E:76:A7:13:77:25:1C:55 X509v3 Authority Key Identifier: keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e7:7b:60:f1:cf:4b:c6:67:16:51:fd:f2:a5:f4:56:5f:62: d3:1e:2f:39:b3:5f:e6:f9:5a:30:f9:f8:2b:e8:fa:71:92:bb: 1c:d7:f1:56:48:1c:ab:29:95:a0:62:06:a7:9f:a1:02:d2:19: fe:a8:33:64:52:6c:bc:16:12:5c:6f:d5:0b:c7:c0:8c:cb:b2: 6a:00:37:a6:f4:a0:df:47:11:dd:3b:e8:98:66:0c:13:ac:a1: c1:8c:1c:d5:f8:cc:a7:95:aa:38:fb:5b:57:ae:78:a8:79:15: 7d:cd:6d:7a:6b:3d:77:f9:ac:86:8b:26:b0:9d:e7:46:56:d7: a6:97:3a:68:f0:f5:07:12:f8:da:9b:7a:f7:da:69:b1:77:7f: 2e:44:e6:8b:81:8d:fa:b7:f8:13:5d:8a:95:8d:2d:21:02:49: ab:0f:89:99:21:8b:9b:b1:17:cf:ea:46:ad:70:9e:08:66:cf: 7d:e1:fe:18:15:46:9e:a3:1f:b1:e1:5f:7a:e6:ca:a5:60:6c: fc:8c:ed:8a:79:fe:53:e0:00:29:50:bc:b8:50:4d:11:dd:df: 8d:67:5d:5b:2e:39:c0:8b:43:ea:95:87:bf:32:9b:72:12:93: c4:a7:0c:50:f5:59:72:c2:ac:ab:4d:75:53:dd:76:e5:e0:26: 56:5e:44:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+F1yGAQwvVNLMra2nGAx3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MmNjYzA5YjE4YWFlMjVkYzZhNmM1NzkzZjliOTIwYzhm NmExOTAwHhcNMjYwNzIxMTgwMTM2WhcNMjYwNzIyMTgwMTM2WjAzMTEwLwYDVQQD Eyg1MWY0MTI4ZmIyNDI2ZTExMmNlODYwM2I0ZTc2YTcxMzc3MjUxYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw07rC6DhCTbF1m9t7cJ8g5+TWv2K wM/A2DfIKWzcF2a0LnB2mbFaQB89M2Di53cgh8vlW776Gjt7PRrKq/CnZfSt0T7r qPiJRIyBQpt450aSDtHhauEDi0mjgudakruoLW7pHW9g2pkC84uCqnGBWpUyYOnW OpiU9JmIR66BPTbM4mQ0C7tW3IT81YNIoc5lUVROOw/sUJE373CS/lYRXVqNYDrX dNTz4JS8Od6USDtkOxYm3Gi0ryiP8CP3uaTmPSQEOV8+1AS71LTfvDGQC/mZQ8KG aHntJJdm1+iUVMYHDQfF3f+vDEt6CxCm9PAwSwDQw9/x4dz6QUzGj4nkSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFH0Eo+yQm4RLOhgO052pxN3JRxVMB8GA1UdIwQY MBaAFMQszAmxiq4l3GpsV5P5uSDI9qGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnud7YPHP S8ZnFlH98qX0Vl9i0x4vObNf5vlaMPn4K+j6cZK7HNfxVkgcqymVoGIGp5+hAtIZ /qgzZFJsvBYSXG/VC8fAjMuyagA3pvSg30cR3TvomGYME6yhwYwc1fjMp5WqOPtb V654qHkVfc1tems9d/mshosmsJ3nRlbXppc6aPD1BxL42pt699ppsXd/LkTmi4GN +rf4E12KlY0tIQJJqw+JmSGLm7EXz+pGrXCeCGbPfeH+GBVGnqMfseFfeubKpWBs /Iztinn+U+AAKVC8uFBNEd3fjWddWy45wItD6pWHvzKbchKTxKcMUPVZcsKsq011 U9125eAmVl5Esw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:09:24 2026 by rpki-client