$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: Dz9byt8j1w9h2D0/iSuXNWvUBMQ3Et4l018l/GqKRIc= Subject key identifier: D1:4A:C7:4D:21:F4:16:33:47:C2:2D:61:C7:FE:7B:B0:56:81:6C:E1 Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 01A002821B35A67AE5AF324E52E142498F4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 1210 Signing time: Fri 14 Aug 2026 23:01:16 +0000 Manifest this update: Fri 14 Aug 2026 23:01:16 +0000 Manifest next update: Sat 15 Aug 2026 23:01:16 +0000 Files and hashes: 1: 0VXk7KxyGNBKoMzTYJumg3MOTyI.roa (hash: OtU0hvX0Vami3LTspcOPpks558imPCiHhI08tCDppGE=) 2: 8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa (hash: bbt0XT/b4GdymMLqxvA9TWB6kuEszEh++apw2K2jMJo=) 3: 8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa (hash: dmXJGV07k4HSNMpFyTWiKNXuMOxONHC1FWpZG/gmuUw=) 4: G4h8rFJLVLZr97fu8lrVsL3JcmU.asa (hash: BltfdMylTTyk8Lzr4zzCWmyb/LgExmTrLFGKeG9MrTA=) 5: IhYNTZJgx4so4FpKD-81FjTRwo4.asa (hash: vZua4msDl0h1MxiF8H+5zAJBnwaqTE2G0oh9vNDYJ9w=) 6: K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa (hash: S3HIvCfdHY15prwrA39u7TMubC1wO10vPZ16cT0joHY=) 7: f3O6sqLkjbn5wGkjt-zZ9pH5ulA.asa (hash: ZE0HojT1vgLYkczZHItGqZlhhnH3kwJ0jcJgds7PX48=) 8: oY3gdIV4n1fET7NwlgUgM7E2A58.roa (hash: 2nAz8MBR7//dDF2SyuP46QueU8MfTaGR1aKMQkQHzBo=) 9: plt_9sG7wtfK-X5IzTU2wQwMo9k.roa (hash: jDkUUlBe6ISyETczyYHxkJjtY7ZB3oieA1Lcm/dcjlE=) 10: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: 03K9+Gj+iC57yM+h9+89ctXjlZdicOohNNkXJNUfCKE=) 11: yjSw7EGM3wf6F5BYX5IX39SdB9g.roa (hash: W5I+pZbCjC+Wm9EnLWz0YxI4s3U4AfirO0LVljkjaHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 18:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:02:82:1b:35:a6:7a:e5:af:32:4e:52:e1:42:49:8f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Aug 14 23:01:16 2026 GMT Not After : Aug 15 23:01:16 2026 GMT Subject: CN=d14ac74d21f4163347c22d61c7fe7bb056816ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:db:b6:ab:c1:43:ae:81:78:6b:b2:6d:9f: 62:44:9f:58:43:b7:59:3f:aa:41:b2:ac:e1:74:14: c1:17:66:12:40:e8:41:01:ff:0a:bb:f9:8a:6f:27: e3:73:9b:db:d6:ff:73:88:a1:7d:5b:eb:64:c4:04: ea:60:19:6f:61:f0:c4:0d:43:3d:fb:36:29:a1:f3: 21:29:6c:7f:e8:0e:0f:3e:6a:ff:44:46:ed:35:66: f9:db:dc:79:06:cd:a5:06:cc:8e:df:ca:4b:23:29: 26:47:6e:a0:44:61:2f:39:9f:7e:5c:a0:90:6e:09: 3a:da:16:af:9d:05:cc:8f:03:0d:54:4f:98:ff:8b: af:fb:08:48:66:3b:e6:ba:93:2d:d6:92:d7:25:c4: 40:f3:97:be:ba:fb:ac:65:49:5c:bc:6a:9c:24:4f: 3f:1c:b3:3b:24:12:91:16:de:b8:cd:c4:58:03:f1: 31:1f:e0:52:80:48:ae:37:b7:fc:fd:e6:5a:b2:e8: 2e:bf:07:ed:eb:27:13:c0:a6:87:03:6b:d3:77:ce: 84:cb:d8:63:0d:dc:c9:aa:87:d7:c2:b9:3b:e8:f1: 41:99:a0:28:32:06:6d:fa:54:c7:ef:b9:12:ee:4d: d8:82:67:d1:b9:7d:1b:16:71:1e:a1:38:e0:86:3c: 9c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4A:C7:4D:21:F4:16:33:47:C2:2D:61:C7:FE:7B:B0:56:81:6C:E1 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9b:ae:3f:31:a7:bc:43:c4:14:59:ac:18:3d:da:77:7c:c1: 8a:20:cd:32:41:ec:64:d1:3c:00:d1:7f:e3:39:14:3a:76:8c: 58:e0:ee:6b:ac:fc:12:c9:4f:7f:5a:6d:1f:12:90:63:4d:1d: 37:8e:20:aa:88:e1:71:82:45:c2:c3:9b:07:95:21:d8:9e:05: c4:e7:c6:97:a3:f9:09:48:27:3e:aa:68:f7:05:10:8d:00:a6: b4:fb:13:31:fb:7c:81:a7:1f:72:9c:46:fd:b3:b5:af:fc:60: bb:58:b5:0a:36:6a:4c:ae:52:5c:5e:8f:a3:7e:ba:d5:8b:67: 2a:ba:90:f4:c5:4d:46:eb:90:b9:99:10:ba:62:ae:e8:19:07: 8d:24:01:58:ec:eb:d3:f0:e9:15:b9:19:fc:d6:4a:62:3a:cd: 83:70:c7:be:ef:a9:70:57:4f:05:69:68:0d:84:5d:9d:a1:a7: ee:90:09:55:82:20:bb:bd:b8:27:9e:ab:55:33:c1:8a:8d:29: 86:bd:cf:9e:a7:91:d7:b6:56:83:65:5f:80:4c:03:4a:c3:77: af:75:6b:69:35:93:f4:f4:55:3f:d0:66:b5:1b:63:83:41:39: 23:b3:c3:c0:2b:ad:b3:82:6c:05:67:47:da:e5:10:3b:37:07: 0c:17:49:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaACghs1pnrlrzJOUuFCSY9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwODE0MjMwMTE2WhcNMjYwODE1MjMwMTE2WjAzMTEwLwYDVQQD EyhkMTRhYzc0ZDIxZjQxNjMzNDdjMjJkNjFjN2ZlN2JiMDU2ODE2Y2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IfbtqvBQ66BeGuybZ9iRJ9YQ7dZ P6pBsqzhdBTBF2YSQOhBAf8Ku/mKbyfjc5vb1v9ziKF9W+tkxATqYBlvYfDEDUM9 +zYpofMhKWx/6A4PPmr/REbtNWb529x5Bs2lBsyO38pLIykmR26gRGEvOZ9+XKCQ bgk62havnQXMjwMNVE+Y/4uv+whIZjvmupMt1pLXJcRA85e+uvusZUlcvGqcJE8/ HLM7JBKRFt64zcRYA/ExH+BSgEiuN7f8/eZasuguvwft6ycTwKaHA2vTd86Ey9hj DdzJqofXwrk76PFBmaAoMgZt+lTH77kS7k3YgmfRuX0bFnEeoTjghjycnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFKx00h9BYzR8ItYcf+e7BWgWzhMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZuuPzGn vEPEFFmsGD3ad3zBiiDNMkHsZNE8ANF/4zkUOnaMWODua6z8EslPf1ptHxKQY00d N44gqojhcYJFwsObB5Uh2J4FxOfGl6P5CUgnPqpo9wUQjQCmtPsTMft8gacfcpxG /bO1r/xgu1i1CjZqTK5SXF6Po3661YtnKrqQ9MVNRuuQuZkQumKu6BkHjSQBWOzr 0/DpFbkZ/NZKYjrNg3DHvu+pcFdPBWloDYRdnaGn7pAJVYIgu724J56rVTPBio0p hr3PnqeR17ZWg2VfgEwDSsN3r3VraTWT9PRVP9BmtRtjg0E5I7PDwCuts4JsBWdH 2uUQOzcHDBdJIQ== -----END CERTIFICATE-----Generated at Sat Aug 15 03:17:16 2026 by rpki-client