$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: BKgF62WEGQ0enKQt57iDvAaCbDXZVEUCoMKjdpCO0DI= Subject key identifier: 60:9C:11:0D:ED:51:B4:87:A0:F8:42:E9:AA:AE:36:41:B7:9A:32:65 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019F129C5E7D9D93B4E447AFB0105968C78A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 1867 Signing time: Mon 29 Jun 2026 09:01:05 +0000 Manifest this update: Mon 29 Jun 2026 09:01:05 +0000 Manifest next update: Tue 30 Jun 2026 09:01:05 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: Rwvfe533Aj3v39w8MYPFzG9R/FtW2j9ucUj+aTnyJu4=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:12:9c:5e:7d:9d:93:b4:e4:47:af:b0:10:59:68:c7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jun 29 09:01:05 2026 GMT Not After : Jun 30 09:01:05 2026 GMT Subject: CN=609c110ded51b487a0f842e9aaae3641b79a3265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:95:c7:5a:63:83:6b:c8:f9:49:d8:9c:f0: b4:53:e5:4f:4f:97:af:11:60:0a:29:99:77:b9:89: 51:98:55:2e:e3:b8:d0:c7:f1:be:93:11:96:d2:4c: e2:58:23:23:a9:91:e5:38:fb:9e:a4:e6:63:8b:ff: 78:e5:7d:de:20:2d:7b:c7:d9:71:fd:08:70:23:0d: 2d:4a:3d:10:40:9c:5e:01:9b:0d:e6:ef:01:bf:2b: 81:e1:b5:f1:74:47:0a:f9:07:30:19:ed:24:69:fe: 8e:3e:ce:67:b3:5f:01:db:eb:96:f4:d6:7d:42:ea: d0:fb:4f:ea:f5:e4:7f:ab:d4:da:95:d8:da:2e:dc: 62:c8:99:2d:9c:53:77:a8:a1:68:6f:87:fa:38:55: b5:5e:c5:06:6c:0d:bd:43:1d:3d:ac:88:22:ad:da: 3a:8f:db:65:59:db:18:f8:ff:e5:02:c5:b7:a9:c6: 98:ef:ac:c5:82:da:1d:e7:5b:f2:2f:04:9a:41:d6: 8a:d2:39:e7:99:69:05:05:4e:05:d0:ff:62:18:b6: 21:8c:2f:03:62:0a:b2:cf:e4:ea:74:46:68:78:3b: 5d:b9:74:6d:ce:44:57:bd:26:58:1d:d1:7c:1d:07: 9a:71:5c:21:f0:be:0d:db:d0:24:bc:80:86:be:ff: 9b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9C:11:0D:ED:51:B4:87:A0:F8:42:E9:AA:AE:36:41:B7:9A:32:65 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:11:34:0c:99:58:d7:cb:14:08:79:29:2a:78:d9:12:07:0a: 45:e9:c8:cb:32:81:b9:35:4d:a2:f2:b9:74:58:37:6a:14:23: 58:7f:d3:4c:4e:f7:be:9c:a9:fe:d0:a9:be:b6:22:94:1b:5a: bb:93:82:d2:a8:56:8f:72:b4:50:ba:e7:ff:84:50:06:65:34: 60:ab:91:6a:51:2e:7e:ef:ca:a9:8c:a6:2d:57:e4:8f:4e:c4: 49:b2:a1:52:bc:1b:02:a2:2e:3c:5d:79:bc:3b:9c:20:68:8d: e4:1d:2e:14:af:2f:e1:bd:c2:1a:4a:7d:94:e5:23:19:bd:17: 57:c7:1e:fd:83:13:e7:0c:13:f6:b4:01:67:37:6d:9b:b2:b7: ac:ac:ab:5a:27:da:e0:a0:08:11:b8:77:12:cb:e2:7d:54:c8: c0:be:af:5c:79:f9:17:a9:8a:c9:50:74:87:fd:71:ce:56:87: d2:c8:64:78:f3:96:b3:9a:c0:16:12:e8:5f:e7:c5:06:9f:7b: a0:c2:de:3e:35:f4:6b:e8:52:13:01:42:7c:b7:63:e3:18:8d: 2b:9f:c5:aa:4c:39:fe:4f:68:1b:73:7b:ed:aa:fc:58:22:a1: da:d8:d2:ce:c8:f4:23:1d:16:cf:92:b1:22:58:b9:b7:b3:d0: 7b:d8:4b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8SnF59nZO05EevsBBZaMeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwNjI5MDkwMTA1WhcNMjYwNjMwMDkwMTA1WjAzMTEwLwYDVQQD Eyg2MDljMTEwZGVkNTFiNDg3YTBmODQyZTlhYWFlMzY0MWI3OWEzMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG2Vx1pjg2vI+UnYnPC0U+VPT5ev EWAKKZl3uYlRmFUu47jQx/G+kxGW0kziWCMjqZHlOPuepOZji/945X3eIC17x9lx /QhwIw0tSj0QQJxeAZsN5u8BvyuB4bXxdEcK+QcwGe0kaf6OPs5ns18B2+uW9NZ9 QurQ+0/q9eR/q9TaldjaLtxiyJktnFN3qKFob4f6OFW1XsUGbA29Qx09rIgirdo6 j9tlWdsY+P/lAsW3qcaY76zFgtod51vyLwSaQdaK0jnnmWkFBU4F0P9iGLYhjC8D Ygqyz+TqdEZoeDtduXRtzkRXvSZYHdF8HQeacVwh8L4N29AkvICGvv+bewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCcEQ3tUbSHoPhC6aquNkG3mjJlMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBE0DJlY 18sUCHkpKnjZEgcKRenIyzKBuTVNovK5dFg3ahQjWH/TTE73vpyp/tCpvrYilBta u5OC0qhWj3K0ULrn/4RQBmU0YKuRalEufu/KqYymLVfkj07ESbKhUrwbAqIuPF15 vDucIGiN5B0uFK8v4b3CGkp9lOUjGb0XV8ce/YMT5wwT9rQBZzdtm7K3rKyrWifa 4KAIEbh3EsvifVTIwL6vXHn5F6mKyVB0h/1xzlaH0shkePOWs5rAFhLoX+fFBp97 oMLePjX0a+hSEwFCfLdj4xiNK5/Fqkw5/k9oG3N77ar8WCKh2tjSzsj0Ix0Wz5Kx Ili5t7PQe9hL0g== -----END CERTIFICATE-----Generated at Mon Jun 29 11:39:58 2026 by rpki-client