$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: S6X2XpsclsrPBRik0cNqqXBLZASAZEOoDMAOQ7g2xzM= Subject key identifier: E6:3B:00:E1:B9:C8:3E:82:FA:93:EB:5B:40:E0:A3:50:DC:EB:6B:0D Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 01A14C4F8E33FD00D3F1D4EF32259333158C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 1AC8 Signing time: Sun 18 Oct 2026 00:00:44 +0000 Manifest this update: Sun 18 Oct 2026 00:00:44 +0000 Manifest next update: Mon 19 Oct 2026 00:00:44 +0000 Files and hashes: 1: 1-l4RaLfBJyd2MPQTNrHgHOb738I.asa (hash: 7p+VWBjLWtE4REi9BbdzkPj1Ve0U1PFZBt+RJ3xIr6c=) 2: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 3: 5MrbF5bNGEPF9upXfBtS4A4wDl4.roa (hash: cuTzNTZt0vxLLk58kaLIpL4TUhhDviNmQSTtCDK4SsY=) 4: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 5: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 6: KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa (hash: FunXZj+wtacs6pD/kFNFcLd6gqmej6YgcTSrFfpXd0I=) 7: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: YyQWMnGmHHOlHQu/T4jwj7oIL0KWfcfIXi3tZcrDvPk=) 8: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 9: Yeq657xhQdSGU8ozMoBAHWz1c7o.roa (hash: R/IQB+JYvEApcpK9ekXgPiUzLmKHajFNMuKejVzFsKs=) 10: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 11: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 12: pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa (hash: g4uEePdexAW53FzeUPyjdIrDSmjkq/x7/+0BrdOJwdU=) 13: ubBrtzGmGbSO-WUwJl4ceatGG7s.roa (hash: HzJ4FfYId8f62Ds2rGoMX1JffixOL9SOPWiVHisDEAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:4c:4f:8e:33:fd:00:d3:f1:d4:ef:32:25:93:33:15:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Oct 18 00:00:44 2026 GMT Not After : Oct 19 00:00:44 2026 GMT Subject: CN=e63b00e1b9c83e82fa93eb5b40e0a350dceb6b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1c:cd:18:f4:a7:49:30:d7:97:58:95:1a:71: b2:fe:a0:77:d5:82:19:c3:e0:e1:75:d2:59:3a:77: ba:00:52:bd:d4:2c:36:3d:ad:14:f7:2a:d5:dc:72: ac:f0:95:b7:46:07:8d:4a:43:d4:a3:35:94:a7:84: 9c:4a:39:94:55:34:ba:2e:53:4f:49:3f:38:12:1c: b2:cb:8a:58:c6:60:37:71:cb:86:d2:b2:00:0b:da: 6a:ce:a6:63:28:63:6b:c5:86:f4:95:cb:cc:06:61: 2f:27:f7:3c:d7:9d:f5:e2:2c:6f:a6:c0:3e:b1:62: db:b2:aa:6b:e2:a9:bd:d1:b6:04:85:b1:7c:e9:c7: 7f:de:dc:ae:6f:76:db:61:e9:b9:37:47:51:a5:51: 9b:bd:f7:43:02:9d:6c:3b:37:53:4b:75:fa:b3:c7: 86:ff:61:18:d1:a8:d4:c4:32:67:8a:01:5e:4e:6b: 12:18:71:5c:15:fc:06:0c:59:22:51:79:4d:0d:7d: 00:0a:2b:9b:cf:cc:df:ec:a4:6b:92:62:d2:1b:ad: a3:2b:02:21:8d:8b:4f:a2:c8:15:28:44:5a:a4:88: 49:2f:25:06:d6:87:46:3e:96:30:98:4a:aa:0c:3f: 58:ab:85:4f:7f:ea:72:05:f1:71:8f:9c:bd:6a:59: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3B:00:E1:B9:C8:3E:82:FA:93:EB:5B:40:E0:A3:50:DC:EB:6B:0D X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e7:fb:1d:79:3e:7f:a9:34:8f:9c:86:67:ff:74:93:4a:e2: 96:f0:cd:06:b6:91:b0:69:93:49:48:59:e0:63:13:ca:61:1d: f4:47:2f:08:a5:b3:48:a2:17:db:f8:a7:61:22:16:7e:9d:15: d3:b0:b1:2b:1b:dd:c4:f8:0a:32:1f:42:87:61:11:f4:fb:7a: eb:62:b2:50:64:ff:62:96:1c:f0:c0:30:92:29:42:4a:6d:8d: 08:49:fb:51:9e:6c:42:81:96:06:ea:dd:a0:6a:5b:22:dd:9e: e3:36:30:7f:b6:8c:0f:3c:03:e0:b5:33:5b:be:f8:07:4e:7f: fc:89:e9:38:31:58:d0:31:03:0a:7c:bb:5d:bb:cc:f7:2a:ea: d0:66:5c:9b:94:fc:50:8a:00:b3:50:8c:95:bd:28:6d:81:c4: b2:84:79:95:e6:e4:88:46:36:0c:9a:a7:2e:3c:44:5c:b3:7b: 86:0d:28:59:1c:e1:26:be:d1:89:bb:6c:51:ac:3e:dd:b9:ac: 84:6b:1a:22:9d:cf:e9:7b:49:60:cf:6d:5c:af:ad:94:72:9d: 34:5c:45:ec:78:4c:9b:56:8f:af:1e:2c:47:92:d3:34:d2:85: 17:47:38:f4:e9:4a:bd:35:5e:3e:66:50:d2:e7:70:0f:0b:93: 4d:0b:18:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFMT44z/QDT8dTvMiWTMxWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYxMDE4MDAwMDQ0WhcNMjYxMDE5MDAwMDQ0WjAzMTEwLwYDVQQD EyhlNjNiMDBlMWI5YzgzZTgyZmE5M2ViNWI0MGUwYTM1MGRjZWI2YjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRzNGPSnSTDXl1iVGnGy/qB31YIZ w+DhddJZOne6AFK91Cw2Pa0U9yrV3HKs8JW3RgeNSkPUozWUp4ScSjmUVTS6LlNP ST84Ehyyy4pYxmA3ccuG0rIAC9pqzqZjKGNrxYb0lcvMBmEvJ/c815314ixvpsA+ sWLbsqpr4qm90bYEhbF86cd/3tyub3bbYem5N0dRpVGbvfdDAp1sOzdTS3X6s8eG /2EY0ajUxDJnigFeTmsSGHFcFfwGDFkiUXlNDX0ACiubz8zf7KRrkmLSG62jKwIh jYtPosgVKERapIhJLyUG1odGPpYwmEqqDD9Yq4VPf+pyBfFxj5y9alkowwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY7AOG5yD6C+pPrW0Dgo1Dc62sNMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOf7HXk+ f6k0j5yGZ/90k0rilvDNBraRsGmTSUhZ4GMTymEd9EcvCKWzSKIX2/inYSIWfp0V 07CxKxvdxPgKMh9Ch2ER9Pt662KyUGT/YpYc8MAwkilCSm2NCEn7UZ5sQoGWBurd oGpbIt2e4zYwf7aMDzwD4LUzW774B05//InpODFY0DEDCny7XbvM9yrq0GZcm5T8 UIoAs1CMlb0obYHEsoR5lebkiEY2DJqnLjxEXLN7hg0oWRzhJr7RibtsUaw+3bms hGsaIp3P6XtJYM9tXK+tlHKdNFxF7HhMm1aPrx4sR5LTNNKFF0c49OlKvTVePmZQ 0udwDwuTTQsYLg== -----END CERTIFICATE-----Generated at Sun Oct 18 07:09:10 2026 by rpki-client