$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: vydZpp5FcjVDRHFtN4fok0rNhJfzVr23nZNohvnm62w= Subject key identifier: 4B:82:C6:9C:62:84:C2:E5:A9:9C:1F:CC:D8:43:9A:0F:9E:B9:F5:D7 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 01A11A19AAE5BEC270F45A8C3FF01AC9B90A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 1974 Signing time: Thu 08 Oct 2026 06:00:52 +0000 Manifest this update: Thu 08 Oct 2026 06:00:52 +0000 Manifest next update: Fri 09 Oct 2026 06:00:52 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: y7yNb5Au7JibGbrhVAI80bGF53AYsM2NecNyxMTGnDU=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:1a:19:aa:e5:be:c2:70:f4:5a:8c:3f:f0:1a:c9:b9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Oct 8 06:00:52 2026 GMT Not After : Oct 9 06:00:52 2026 GMT Subject: CN=4b82c69c6284c2e5a99c1fccd8439a0f9eb9f5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:8e:c4:5b:72:e8:6e:37:81:dd:71:0a:44: c4:48:eb:55:4d:94:0c:d5:05:3c:cd:50:03:f2:91: de:a8:b5:cf:82:f7:72:f1:52:d3:1c:d9:5a:5c:2a: b0:ae:92:85:70:cd:4e:88:ff:87:78:a9:af:49:7a: 87:58:52:3c:1e:f9:70:80:db:76:ba:ce:e2:85:47: 38:18:b0:12:e3:2c:b9:34:e6:0f:0f:16:c8:21:69: 3e:ad:65:ad:60:fc:bd:39:fa:66:0c:22:a5:7b:9c: 75:00:99:10:d0:60:27:0c:d4:59:97:4c:2c:84:6e: f9:ed:6e:c1:c3:2a:c2:a5:51:8b:55:ea:98:c8:ad: d4:df:9a:bf:a7:60:aa:64:88:d4:4e:02:e4:d3:ea: fa:ea:7f:6c:77:c1:73:51:80:31:e2:9b:e3:01:34: 79:ca:8d:98:d3:ac:ef:db:5b:fb:5c:b0:d8:2b:01: f0:51:3c:62:c4:c9:5f:a3:85:b5:d0:9a:a6:5b:9d: 7e:62:51:4f:38:4f:c7:15:88:d8:3f:65:ef:bd:8a: be:c4:b4:fb:0e:99:2b:56:e0:33:4a:e4:b0:3a:65: e0:75:62:d6:3d:25:8a:6e:cb:73:19:b0:7a:f3:77: 21:c3:24:a0:f3:a9:e7:b9:8f:31:6e:95:a3:ba:5d: 30:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:82:C6:9C:62:84:C2:E5:A9:9C:1F:CC:D8:43:9A:0F:9E:B9:F5:D7 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1d:78:64:8d:1c:3d:94:af:52:94:ed:74:e3:12:b6:d5:ea: 33:53:b9:9a:b4:40:87:7d:b0:de:91:71:4a:fe:30:8e:11:b2: 58:ed:74:d1:c3:ad:05:f4:9c:73:0a:27:18:82:43:b6:cd:c7: 1f:e2:8a:0d:00:7d:81:e6:86:6a:ff:fd:33:94:96:75:eb:58: c6:8d:65:62:57:dc:48:19:1e:0c:79:22:45:a4:97:41:3d:41: 36:71:c0:81:41:f3:ed:48:4c:b6:12:ae:35:60:6c:57:4b:43: 42:c4:e4:31:9f:35:fc:3f:cd:0f:8e:b0:78:2c:c0:58:a0:0f: a4:29:b3:64:e3:d0:9c:4c:ac:8f:89:34:5d:7e:22:ab:6a:23: 52:f4:bb:c1:14:e6:13:41:70:e8:ab:5c:65:17:1c:9b:21:4c: b0:ba:ad:75:52:6d:e0:93:ab:08:52:59:70:9f:2a:5f:13:5a: 9c:b1:78:44:1c:06:12:cb:f7:e0:fa:c8:eb:e4:8d:06:73:2f: f1:73:1c:50:01:4f:eb:6d:70:db:ec:75:bc:fe:05:16:32:a0: 81:d9:68:72:1b:90:fb:c9:97:32:17:db:71:34:d6:0a:ff:6f: 99:4b:dd:25:ea:28:31:0f:11:ec:cd:1d:57:f7:02:d6:5b:ad: 62:56:b7:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEaGarlvsJw9FqMP/AaybkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYxMDA4MDYwMDUyWhcNMjYxMDA5MDYwMDUyWjAzMTEwLwYDVQQD Eyg0YjgyYzY5YzYyODRjMmU1YTk5YzFmY2NkODQzOWEwZjllYjlmNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2miOxFty6G43gd1xCkTESOtVTZQM 1QU8zVAD8pHeqLXPgvdy8VLTHNlaXCqwrpKFcM1OiP+HeKmvSXqHWFI8HvlwgNt2 us7ihUc4GLAS4yy5NOYPDxbIIWk+rWWtYPy9OfpmDCKle5x1AJkQ0GAnDNRZl0ws hG757W7BwyrCpVGLVeqYyK3U35q/p2CqZIjUTgLk0+r66n9sd8FzUYAx4pvjATR5 yo2Y06zv21v7XLDYKwHwUTxixMlfo4W10JqmW51+YlFPOE/HFYjYP2XvvYq+xLT7 DpkrVuAzSuSwOmXgdWLWPSWKbstzGbB683chwySg86nnuY8xbpWjul0wnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuCxpxihMLlqZwfzNhDmg+eufXXMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPR14ZI0c PZSvUpTtdOMSttXqM1O5mrRAh32w3pFxSv4wjhGyWO100cOtBfSccwonGIJDts3H H+KKDQB9geaGav/9M5SWdetYxo1lYlfcSBkeDHkiRaSXQT1BNnHAgUHz7UhMthKu NWBsV0tDQsTkMZ81/D/ND46weCzAWKAPpCmzZOPQnEysj4k0XX4iq2ojUvS7wRTm E0Fw6KtcZRccmyFMsLqtdVJt4JOrCFJZcJ8qXxNanLF4RBwGEsv34PrI6+SNBnMv 8XMcUAFP621w2+x1vP4FFjKggdlochuQ+8mXMhfbcTTWCv9vmUvdJeooMQ8R7M0d V/cC1lutYla3xw== -----END CERTIFICATE-----Generated at Thu Oct 8 15:17:48 2026 by rpki-client