$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: ojdkuqgtbwUXEqdll2OGytaqp+9NRxxb6Og1UwwcKT8= Subject key identifier: 39:EA:2C:3B:1C:EE:5A:2B:7D:68:E3:C3:41:B1:B2:8B:26:33:9A:18 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 01A0B4D17496970F168F558F25237AE0BFB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1A7B Signing time: Fri 18 Sep 2026 14:00:20 +0000 Manifest this update: Fri 18 Sep 2026 14:00:20 +0000 Manifest next update: Sat 19 Sep 2026 14:00:20 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: Ikkeya1yJgRDS-xhPDlnuPLetJs.roa (hash: glwjFgIZfVLfz8kep2uiVu5O3LaEznaNtCEp/lC03fQ=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sFANASik-wL_AAsMTGDepkCLru8.roa (hash: hsLxQEI+C24jdO2zBJxR+yNy+Qjt/yzfuOvytd9u6lw=) 13: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 14: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: 1MkTvIaj4BKWaCZcY17O8cLRVLAkJxSi7Vihyd1uA84=) 15: y2cm6-exYMkmOGgTU1Cd07TyLP8.roa (hash: VU+nMgrW6E4VxS9BCUWRqC49ToNwPX6PlXdXakhEGJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b4:d1:74:96:97:0f:16:8f:55:8f:25:23:7a:e0:bf:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Sep 18 14:00:20 2026 GMT Not After : Sep 19 14:00:20 2026 GMT Subject: CN=39ea2c3b1cee5a2b7d68e3c341b1b28b26339a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:8d:73:af:cf:5d:35:41:9b:f9:41:21:6e: dd:12:1d:78:ab:c4:f6:78:9b:c3:ce:5b:81:f3:b4: b6:a8:96:69:c7:d0:01:f6:e3:b2:9f:b1:43:86:46: af:43:9a:74:38:42:87:1b:e8:62:0d:da:90:2f:31: a1:ea:10:1b:92:d3:db:3e:e5:d6:bc:ce:6f:6f:c0: 1b:5e:48:47:c7:9f:67:e2:57:85:11:58:04:21:97: 53:47:c6:25:2e:57:c4:4b:c3:04:d0:97:34:12:77: 42:46:da:c1:a6:fc:41:92:89:41:0a:df:73:20:e4: fb:6d:fa:fd:83:d4:96:25:01:3c:0e:fe:2a:be:a7: 08:aa:75:96:a3:3b:a2:10:ce:14:1f:a6:a3:ef:c2: aa:26:90:ed:93:b9:54:33:84:c5:28:ba:d1:db:4b: 07:22:81:f9:e1:99:d4:61:92:ef:ea:fe:7e:ae:a5: 14:d4:f6:eb:91:27:f6:bc:4f:90:35:a7:ba:b1:6e: ef:86:dc:df:c9:9d:6a:2c:59:3d:b9:4c:8b:84:de: 0e:a0:7b:aa:46:d1:cf:17:f1:fa:0c:68:3f:66:e0: 09:c4:fe:ee:27:06:a6:62:69:ad:96:53:82:bc:c1: fa:64:9f:e3:da:43:5d:04:4a:45:49:45:38:88:45: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EA:2C:3B:1C:EE:5A:2B:7D:68:E3:C3:41:B1:B2:8B:26:33:9A:18 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:22:02:c4:69:9b:42:6a:81:99:13:0e:b8:64:02:1f:7d:a1: 91:ca:f3:25:7e:c5:76:87:df:4d:72:25:f1:1a:ac:40:8d:36: 70:19:1b:48:0c:ef:cc:44:58:6e:fe:b3:fa:02:92:a4:c0:bd: d8:ef:8b:10:2f:64:41:08:f4:80:ed:8f:c5:4b:02:33:81:7f: 95:73:21:42:c6:28:91:20:b1:2f:3c:07:81:ba:0b:29:7f:76: 82:ec:ec:35:f4:36:de:42:69:80:42:93:f0:a5:5b:5a:fa:4a: d2:fc:e5:75:93:0c:a4:a9:83:33:d7:3e:78:7c:2d:29:a4:21: c2:89:19:1e:eb:b1:c3:c6:88:5e:29:8f:9a:6d:a0:f7:c4:d2: 2f:7f:b4:6d:cd:fb:13:ac:04:f8:93:29:7f:5c:91:a9:6b:63: 08:24:e8:d5:95:1c:8b:8c:44:81:16:a0:c1:48:66:ae:5c:8f: ef:7a:2b:57:86:6a:b9:f2:4c:d5:5d:f1:ba:06:43:18:fc:f2: 43:37:05:da:e1:a4:ff:ee:26:b5:86:d4:dd:55:76:52:9e:0f: c1:f9:3c:da:17:17:b1:99:64:8a:6b:d9:8b:18:15:9d:49:07: 24:25:a1:f3:78:e4:b1:93:4d:4c:b6:8c:ab:ba:2a:e7:ee:11: 2c:87:7a:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC00XSWlw8Wj1WPJSN64L+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwOTE4MTQwMDIwWhcNMjYwOTE5MTQwMDIwWjAzMTEwLwYDVQQD EygzOWVhMmMzYjFjZWU1YTJiN2Q2OGUzYzM0MWIxYjI4YjI2MzM5YTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUCNc6/PXTVBm/lBIW7dEh14q8T2 eJvDzluB87S2qJZpx9AB9uOyn7FDhkavQ5p0OEKHG+hiDdqQLzGh6hAbktPbPuXW vM5vb8AbXkhHx59n4leFEVgEIZdTR8YlLlfES8ME0Jc0EndCRtrBpvxBkolBCt9z IOT7bfr9g9SWJQE8Dv4qvqcIqnWWozuiEM4UH6aj78KqJpDtk7lUM4TFKLrR20sH IoH54ZnUYZLv6v5+rqUU1PbrkSf2vE+QNae6sW7vhtzfyZ1qLFk9uUyLhN4OoHuq RtHPF/H6DGg/ZuAJxP7uJwamYmmtllOCvMH6ZJ/j2kNdBEpFSUU4iEWUTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnqLDsc7lorfWjjw0GxsosmM5oYMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCICxGmb QmqBmRMOuGQCH32hkcrzJX7FdoffTXIl8RqsQI02cBkbSAzvzERYbv6z+gKSpMC9 2O+LEC9kQQj0gO2PxUsCM4F/lXMhQsYokSCxLzwHgboLKX92guzsNfQ23kJpgEKT 8KVbWvpK0vzldZMMpKmDM9c+eHwtKaQhwokZHuuxw8aIXimPmm2g98TSL3+0bc37 E6wE+JMpf1yRqWtjCCTo1ZUci4xEgRagwUhmrlyP73orV4ZqufJM1V3xugZDGPzy QzcF2uGk/+4mtYbU3VV2Up4Pwfk82hcXsZlkimvZixgVnUkHJCWh83jksZNNTLaM q7oq5+4RLId6DA== -----END CERTIFICATE-----Generated at Fri Sep 18 20:27:30 2026 by rpki-client