$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: zRwXgSYdaun/7JvMxh39P3kbFlIGRo7QkCNoaLWXklo= Subject key identifier: 3C:8A:E1:A4:83:6C:4C:7B:DA:82:F0:A6:46:73:2C:98:3A:5C:C7:F6 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 01A0B7D2973771EC890ABFEE299A2BD403A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 12C5 Signing time: Sat 19 Sep 2026 04:00:26 +0000 Manifest this update: Sat 19 Sep 2026 04:00:26 +0000 Manifest next update: Sun 20 Sep 2026 04:00:26 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: ZEHBzU3bQI5xTTjTxM8xiGBbqc8U41zOrNmoHM2pdFE=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: lFVnv43JGFMjXUtMDg1t8_wpiXE.roa (hash: YLYniFH+If3bpoeshgJ5j5KDhpm+zPn+w+d9vNOzd7M=) 14: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 15: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=) 16: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 17: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 18: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 19: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 20: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 21: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 04:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b7:d2:97:37:71:ec:89:0a:bf:ee:29:9a:2b:d4:03:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Sep 19 04:00:26 2026 GMT Not After : Sep 20 04:00:26 2026 GMT Subject: CN=3c8ae1a4836c4c7bda82f0a646732c983a5cc7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:2d:ed:40:a6:2a:6d:d0:fd:3f:d3:5a:8a: 5c:41:7e:2b:6c:a2:a3:57:e2:3b:a9:1c:5f:25:4d: 91:db:30:25:69:b3:35:41:a7:67:24:ff:3e:b5:8f: 15:5e:2b:06:9e:51:26:b7:67:47:97:b9:66:2d:27: e0:2b:f5:03:bd:ab:a4:ca:d7:c8:43:f1:50:44:77: 87:0e:51:80:43:b5:74:ba:c6:2e:1d:26:85:6a:9b: e0:2d:8a:90:b6:4e:05:3c:71:ae:47:f6:2d:bc:24: 4d:49:c0:2c:8c:3f:a2:ef:37:39:2b:fb:b3:d7:21: 65:94:e5:eb:0e:06:17:01:7c:ff:8b:7b:5a:4e:03: df:4f:84:a7:b4:92:d3:4c:46:30:f6:a7:ca:d5:82: 2f:ea:46:9e:97:c4:3f:f8:18:e5:82:f9:33:9b:01: 9d:ee:d5:60:ea:f4:71:d5:ab:0f:fa:81:ac:c2:61: d3:c4:38:38:ec:4f:6a:e3:20:cb:f3:17:0a:0b:e3: 6e:3b:5f:fc:ef:26:ec:a1:5f:98:44:31:97:9b:f5: 15:13:8b:85:87:f5:9e:d4:cd:2e:c9:08:16:ad:b7: cc:90:3f:c7:17:b0:7d:8a:1c:c5:66:5f:83:67:1d: f5:43:8b:a3:f7:84:16:34:91:28:9d:ec:1d:59:cc: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8A:E1:A4:83:6C:4C:7B:DA:82:F0:A6:46:73:2C:98:3A:5C:C7:F6 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0c:4e:ac:9f:aa:43:a9:bd:5f:11:e4:fd:00:b8:65:c8:85: a2:a3:25:c1:a1:00:91:39:44:60:44:ed:e2:2e:df:0a:e4:9a: d6:fe:98:18:e9:45:0b:c7:af:22:7a:83:53:6d:ee:0b:85:75: 52:15:f3:f4:d1:06:1e:bb:5c:e9:f5:54:22:45:8c:eb:f1:88: e1:df:2b:43:78:95:38:44:d3:2d:bd:d5:0b:cf:1b:cf:75:af: 06:f4:2a:51:8a:bd:79:46:9e:6e:71:cd:98:07:c5:f9:68:d5: dc:a9:58:8d:aa:3f:f7:79:57:68:45:8e:63:b7:7f:25:14:96: 70:ab:58:7b:36:2d:ad:f3:05:d2:b7:6b:6c:58:eb:4f:41:96: 9e:b0:40:d3:a6:6c:b2:d6:df:7b:93:36:12:8e:e4:6d:11:0f: 94:70:63:fd:93:f3:fa:2e:d6:e2:e3:12:00:5e:8f:6c:dc:d0: 7c:23:ce:38:4b:c8:82:c4:b7:d4:ca:1c:59:23:98:f2:5e:6e: 6e:b7:d5:a9:30:ee:15:af:3d:31:27:64:35:cf:27:70:b2:ca: 45:75:2f:4f:3f:79:35:8e:27:84:95:19:e7:c6:0f:87:64:34: 1e:ee:82:83:aa:6b:7b:e3:22:a7:0d:6f:2c:49:69:93:2a:16: f9:1e:07:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC30pc3ceyJCr/uKZor1AOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwOTE5MDQwMDI2WhcNMjYwOTIwMDQwMDI2WjAzMTEwLwYDVQQD EygzYzhhZTFhNDgzNmM0YzdiZGE4MmYwYTY0NjczMmM5ODNhNWNjN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplUt7UCmKm3Q/T/TWopcQX4rbKKj V+I7qRxfJU2R2zAlabM1QadnJP8+tY8VXisGnlEmt2dHl7lmLSfgK/UDvaukytfI Q/FQRHeHDlGAQ7V0usYuHSaFapvgLYqQtk4FPHGuR/YtvCRNScAsjD+i7zc5K/uz 1yFllOXrDgYXAXz/i3taTgPfT4SntJLTTEYw9qfK1YIv6kael8Q/+BjlgvkzmwGd 7tVg6vRx1asP+oGswmHTxDg47E9q4yDL8xcKC+NuO1/87ybsoV+YRDGXm/UVE4uF h/We1M0uyQgWrbfMkD/HF7B9ihzFZl+DZx31Q4uj94QWNJEonewdWcw8sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyK4aSDbEx72oLwpkZzLJg6XMf2MB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQxOrJ+q Q6m9XxHk/QC4ZciFoqMlwaEAkTlEYETt4i7fCuSa1v6YGOlFC8evInqDU23uC4V1 UhXz9NEGHrtc6fVUIkWM6/GI4d8rQ3iVOETTLb3VC88bz3WvBvQqUYq9eUaebnHN mAfF+WjV3KlYjao/93lXaEWOY7d/JRSWcKtYezYtrfMF0rdrbFjrT0GWnrBA06Zs stbfe5M2Eo7kbREPlHBj/ZPz+i7W4uMSAF6PbNzQfCPOOEvIgsS31MocWSOY8l5u brfVqTDuFa89MSdkNc8ncLLKRXUvTz95NY4nhJUZ58YPh2Q0Hu6Cg6pre+Mipw1v LElpkyoW+R4HQQ== -----END CERTIFICATE-----Generated at Sat Sep 19 15:01:11 2026 by rpki-client