$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: h4hFQ3sTexTvtbHxk0vByvQ5HtDDMrwllYpIqiT+DwU= Subject key identifier: E7:86:BD:37:A1:4A:6A:05:9B:3B:3D:31:CA:B5:49:9E:E0:10:2E:E8 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019D3977A23C1C5648F3F299BA733B1BBCB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 1772 Signing time: Sun 29 Mar 2026 12:00:34 +0000 Manifest this update: Sun 29 Mar 2026 12:00:34 +0000 Manifest next update: Mon 30 Mar 2026 12:00:34 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: VHhCMJhlkBkUo2332HTtFiDQoOb7w62j0lje6PVqBSE=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:77:a2:3c:1c:56:48:f3:f2:99:ba:73:3b:1b:bc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Mar 29 12:00:34 2026 GMT Not After : Mar 30 12:00:34 2026 GMT Subject: CN=e786bd37a14a6a059b3b3d31cab5499ee0102ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:36:5a:22:65:98:83:51:75:87:bb:70:91: 71:6a:0e:1e:5b:4c:95:34:5f:6f:bb:62:e6:1d:a5: a1:29:29:28:b1:9b:76:5a:56:0f:8d:2e:9e:4f:e4: 67:64:11:0e:db:23:dd:74:9f:3e:44:d9:f6:48:e5: c0:cd:71:24:7b:a2:a4:e6:f0:c0:63:f0:e7:a0:0b: 2a:cf:1c:0a:43:ad:7a:74:dc:1a:2f:a0:d3:09:08: 69:9b:ac:be:73:3f:ba:c9:62:6d:1f:dc:43:20:22: 81:51:c5:67:a1:5e:83:23:43:76:2b:08:ba:9c:16: 2b:14:d2:8a:7c:95:3d:aa:b4:d9:3f:a1:8e:b7:fa: 13:03:c4:07:3b:13:1f:2f:7e:d8:73:c5:6c:5f:9f: ea:a2:6d:67:d0:68:59:da:3a:0b:1e:65:bd:8d:40: 76:68:f9:1a:c4:7d:06:1b:57:fd:cd:4a:2e:01:79: 3e:c4:55:d0:5a:6e:de:ea:c1:2c:0b:e5:e2:08:f8: 47:5f:ca:45:5d:b2:23:0d:5c:92:50:5e:d1:a8:cc: a0:06:b0:d0:27:fc:8a:6f:0a:8c:93:3c:ad:7c:85: 85:7e:85:5c:1c:da:c8:8a:9a:0c:64:6e:c0:d1:5f: 1a:ae:da:39:b6:57:17:66:ab:de:cd:e7:1e:42:2c: ad:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:86:BD:37:A1:4A:6A:05:9B:3B:3D:31:CA:B5:49:9E:E0:10:2E:E8 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b3:57:c9:af:df:37:65:a8:ff:b0:9e:77:bc:91:fa:3d:f7: 72:3e:90:8a:81:01:06:99:ba:15:0f:0b:1b:ba:18:9f:8a:a2: e4:b0:81:2a:bf:18:82:e4:16:ce:96:b2:d6:54:b5:6c:ca:0e: 38:e6:97:3b:19:72:85:44:0e:17:ff:23:bb:54:bc:95:96:89: b2:78:ad:1c:9d:eb:b1:0b:7b:10:1f:27:6d:dc:cc:ac:0c:14: 2a:44:72:10:d5:5f:4b:67:5e:91:f8:73:5e:36:7f:22:58:b5: 4b:a5:e6:bc:38:8d:c4:41:21:ae:37:63:33:fd:32:5e:a2:5b: 28:54:66:81:5d:a1:70:52:a9:29:2f:71:10:bc:b5:49:1b:d2: 07:33:53:d8:07:34:65:5e:85:47:8d:8f:62:b8:94:07:22:e1: 05:22:87:d4:a4:66:5d:6e:2e:47:02:ff:45:97:f1:1f:fb:0d: c7:c7:2d:93:d0:85:cd:54:8c:71:9d:e4:fc:8b:87:6b:0b:25: c7:bf:7b:d9:75:81:b3:34:3a:6b:ee:a2:a9:c3:b5:08:8a:ad: 8d:f7:9e:36:a3:33:34:bf:d7:9d:1d:5d:f9:84:cd:ab:5d:d4: 1f:c1:c1:1c:22:32:06:db:fc:55:82:10:02:7d:34:d0:08:f0: 3c:9c:49:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05d6I8HFZI8/KZunM7G7y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwMzI5MTIwMDM0WhcNMjYwMzMwMTIwMDM0WjAzMTEwLwYDVQQD EyhlNzg2YmQzN2ExNGE2YTA1OWIzYjNkMzFjYWI1NDk5ZWUwMTAyZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp42WiJlmINRdYe7cJFxag4eW0yV NF9vu2LmHaWhKSkosZt2WlYPjS6eT+RnZBEO2yPddJ8+RNn2SOXAzXEke6Kk5vDA Y/DnoAsqzxwKQ616dNwaL6DTCQhpm6y+cz+6yWJtH9xDICKBUcVnoV6DI0N2Kwi6 nBYrFNKKfJU9qrTZP6GOt/oTA8QHOxMfL37Yc8VsX5/qom1n0GhZ2joLHmW9jUB2 aPkaxH0GG1f9zUouAXk+xFXQWm7e6sEsC+XiCPhHX8pFXbIjDVySUF7RqMygBrDQ J/yKbwqMkzytfIWFfoVcHNrIipoMZG7A0V8arto5tlcXZqvezeceQiytTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeGvTehSmoFmzs9Mcq1SZ7gEC7oMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrNXya/f N2Wo/7Ced7yR+j33cj6QioEBBpm6FQ8LG7oYn4qi5LCBKr8YguQWzpay1lS1bMoO OOaXOxlyhUQOF/8ju1S8lZaJsnitHJ3rsQt7EB8nbdzMrAwUKkRyENVfS2dekfhz XjZ/Ili1S6XmvDiNxEEhrjdjM/0yXqJbKFRmgV2hcFKpKS9xELy1SRvSBzNT2Ac0 ZV6FR42PYriUByLhBSKH1KRmXW4uRwL/RZfxH/sNx8ctk9CFzVSMcZ3k/IuHawsl x7972XWBszQ6a+6iqcO1CIqtjfeeNqMzNL/XnR1d+YTNq13UH8HBHCIyBtv8VYIQ An000AjwPJxJIw== -----END CERTIFICATE-----Generated at Sun Mar 29 20:02:08 2026 by rpki-client