$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: WrCSBtvMv0tV8E2KqTbIazSz62GJ6FD4ciE1IMF3miA= Subject key identifier: 50:9A:6A:8E:2C:2E:88:50:F0:7C:82:76:1B:36:75:E1:A7:66:9A:C0 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 01A123C1FB6D509E96E07FB7AEE27829A639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 1979 Signing time: Sat 10 Oct 2026 03:01:17 +0000 Manifest this update: Sat 10 Oct 2026 03:01:17 +0000 Manifest next update: Sun 11 Oct 2026 03:01:17 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: i+aXX7MfTv3re7P4CAWc2WnUTAktvk/KZuIdRUBZyyI=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 00:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:23:c1:fb:6d:50:9e:96:e0:7f:b7:ae:e2:78:29:a6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Oct 10 03:01:17 2026 GMT Not After : Oct 11 03:01:17 2026 GMT Subject: CN=509a6a8e2c2e8850f07c82761b3675e1a7669ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:24:ff:cc:d5:75:12:c0:2c:f4:53:4c:58: 2a:32:e8:d4:5e:28:f6:c6:b4:46:56:9b:4b:8d:0c: b4:17:6e:dc:35:7d:6e:3d:df:53:1a:32:72:f3:20: 6c:8f:65:36:47:9b:35:80:97:9f:94:58:81:16:73: 8f:66:65:9f:e0:f6:83:9f:47:b2:e9:2c:ad:cb:e1: 5b:44:85:97:43:a7:d6:24:6b:e3:6e:e5:2a:55:11: 4b:d1:d0:c4:47:c2:53:95:89:92:ba:79:ff:27:aa: 7d:f0:10:c7:36:ac:d9:bd:d3:ab:4d:a8:b3:f3:df: f0:43:8d:2c:de:95:7b:82:dd:f9:69:47:ed:04:a3: 0a:27:76:1e:f9:4f:04:c0:38:eb:c8:b9:74:b5:52: cb:ad:d3:bc:49:43:8c:61:34:2b:01:cb:8e:9d:2f: 0d:14:79:29:55:ba:86:0a:7f:a2:da:48:6a:fd:40: 78:08:ee:d1:33:b1:68:cb:a7:01:55:a5:e8:f1:d0: 9c:9c:5a:29:3e:a2:c2:5c:6e:d0:a1:36:bc:6e:0e: 9c:3d:51:a8:f2:d2:26:9e:b0:a5:30:99:f9:67:c7: 31:3b:f3:53:b1:12:c7:2f:fc:76:7f:69:3a:50:cd: b4:8d:33:a0:ea:03:89:5a:42:89:07:36:fe:f4:42: 6d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9A:6A:8E:2C:2E:88:50:F0:7C:82:76:1B:36:75:E1:A7:66:9A:C0 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4f:68:3d:df:04:b7:63:a4:af:39:b7:9b:91:19:a7:8e:78: 42:ec:fd:da:c3:46:b8:c4:26:79:a6:6e:46:db:cb:3b:b1:ea: fc:9d:f5:7d:9b:c8:78:47:32:06:10:ac:8e:b5:7f:75:59:78: bf:e7:ef:a2:aa:f2:1b:8c:6d:75:f1:63:d1:9a:33:b9:3b:72: 90:45:67:ef:08:40:4e:d4:2f:03:21:28:45:12:a5:24:80:17: 78:d7:e7:36:09:36:c6:df:26:67:5f:6c:90:bf:48:6d:33:b5: 3b:02:be:ca:9c:c9:35:fd:b2:3f:59:a8:85:48:6c:13:01:ff: 4e:f1:64:d4:e5:25:55:74:e4:3b:cf:ea:02:01:1f:75:1b:fd: 34:b7:7a:52:2e:a0:cf:37:1b:f3:2f:e0:4e:ca:32:d8:a0:22: 4f:19:01:2c:2e:6b:a1:56:a7:92:47:ab:2e:bf:fa:d5:fa:68: 93:2c:c0:09:41:47:cf:59:a0:86:48:5c:01:ec:c3:23:ee:74: 80:85:32:61:b4:4b:03:b3:8a:33:e5:67:cb:08:4f:f4:28:26: 1b:88:49:e5:79:91:88:09:39:19:96:8d:e2:97:9e:40:ad:fd: 03:d2:9a:ea:b2:63:99:51:51:90:d6:0f:3b:c0:38:98:95:99: 3e:fd:fc:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEjwfttUJ6W4H+3ruJ4KaY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYxMDEwMDMwMTE3WhcNMjYxMDExMDMwMTE3WjAzMTEwLwYDVQQD Eyg1MDlhNmE4ZTJjMmU4ODUwZjA3YzgyNzYxYjM2NzVlMWE3NjY5YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKQk/8zVdRLALPRTTFgqMujUXij2 xrRGVptLjQy0F27cNX1uPd9TGjJy8yBsj2U2R5s1gJeflFiBFnOPZmWf4PaDn0ey 6Syty+FbRIWXQ6fWJGvjbuUqVRFL0dDER8JTlYmSunn/J6p98BDHNqzZvdOrTaiz 89/wQ40s3pV7gt35aUftBKMKJ3Ye+U8EwDjryLl0tVLLrdO8SUOMYTQrAcuOnS8N FHkpVbqGCn+i2khq/UB4CO7RM7Foy6cBVaXo8dCcnFopPqLCXG7QoTa8bg6cPVGo 8tImnrClMJn5Z8cxO/NTsRLHL/x2f2k6UM20jTOg6gOJWkKJBzb+9EJtJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCaao4sLohQ8HyCdhs2deGnZprAMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATk9oPd8E t2Okrzm3m5EZp454Quz92sNGuMQmeaZuRtvLO7Hq/J31fZvIeEcyBhCsjrV/dVl4 v+fvoqryG4xtdfFj0ZozuTtykEVn7whATtQvAyEoRRKlJIAXeNfnNgk2xt8mZ19s kL9IbTO1OwK+ypzJNf2yP1mohUhsEwH/TvFk1OUlVXTkO8/qAgEfdRv9NLd6Ui6g zzcb8y/gTsoy2KAiTxkBLC5roVankkerLr/61fpokyzACUFHz1mghkhcAezDI+50 gIUyYbRLA7OKM+VnywhP9CgmG4hJ5XmRiAk5GZaN4peeQK39A9Ka6rJjmVFRkNYP O8A4mJWZPv38Jg== -----END CERTIFICATE-----Generated at Sat Oct 10 08:24:37 2026 by rpki-client