$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: vJjQrdJmbNiV0SwO6gc5r3Xaz5On3o9EXb4/8otCH6U= Subject key identifier: 1F:44:A8:42:D1:9E:25:F2:1B:43:98:55:35:6C:F4:9A:78:30:B9:E5 Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019F11C0AC397F9510FD0029BC1673D96322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 1193 Signing time: Mon 29 Jun 2026 05:01:07 +0000 Manifest this update: Mon 29 Jun 2026 05:01:07 +0000 Manifest next update: Tue 30 Jun 2026 05:01:07 +0000 Files and hashes: 1: 0VXk7KxyGNBKoMzTYJumg3MOTyI.roa (hash: OtU0hvX0Vami3LTspcOPpks558imPCiHhI08tCDppGE=) 2: 8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa (hash: bbt0XT/b4GdymMLqxvA9TWB6kuEszEh++apw2K2jMJo=) 3: 8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa (hash: dmXJGV07k4HSNMpFyTWiKNXuMOxONHC1FWpZG/gmuUw=) 4: JaK5nEHPaQ0eg4QVia6pq3nQtT8.asa (hash: zedp2dasOOuQWUFRKt1kDWC26clgR3XYNTuR7fBJPis=) 5: K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa (hash: S3HIvCfdHY15prwrA39u7TMubC1wO10vPZ16cT0joHY=) 6: V2_sT2jDOr8MNnfYkhj5mMdvMaM.asa (hash: wVzZdXFDBv7mOQErQUozopppuOlT1ZjyUfEdZpNO8vQ=) 7: oY3gdIV4n1fET7NwlgUgM7E2A58.roa (hash: 2nAz8MBR7//dDF2SyuP46QueU8MfTaGR1aKMQkQHzBo=) 8: plt_9sG7wtfK-X5IzTU2wQwMo9k.roa (hash: jDkUUlBe6ISyETczyYHxkJjtY7ZB3oieA1Lcm/dcjlE=) 9: t1mwU24RWx_QtHlt8VAyAaicScc.asa (hash: qul+FoGF3pEOmc/vqfxBeRQ9gtI1SffvAcYIByELYPs=) 10: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: eZ1BAZ58erX21gDAG1Isp0x7/tOXvHJAzEX8oNW2INg=) 11: yjSw7EGM3wf6F5BYX5IX39SdB9g.roa (hash: W5I+pZbCjC+Wm9EnLWz0YxI4s3U4AfirO0LVljkjaHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:11:c0:ac:39:7f:95:10:fd:00:29:bc:16:73:d9:63:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Jun 29 05:01:07 2026 GMT Not After : Jun 30 05:01:07 2026 GMT Subject: CN=1f44a842d19e25f21b439855356cf49a7830b9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:36:be:a9:74:d4:be:fd:48:59:fd:97:95: 66:49:c2:91:b7:28:bb:36:e8:0c:9a:fb:8f:8b:27: 19:2a:5e:cf:f4:2e:42:36:ba:03:ee:6d:e1:3a:19: d1:80:f5:d7:98:bf:49:bd:0b:c7:55:e2:c8:fc:59: 95:99:72:35:2c:fd:47:08:12:b9:4f:8d:1a:ca:aa: d4:8f:61:0a:51:9e:ba:da:2a:93:81:75:e8:59:6c: 13:02:46:81:7f:e2:65:f1:ae:3e:03:7e:ef:f5:c8: 0d:b3:84:e9:f3:7f:82:ff:9d:77:c2:89:70:cb:0f: 6f:d9:84:ef:e8:76:68:7e:b5:60:ef:ee:f2:5a:8f: 19:65:f9:11:6d:0d:3b:8c:73:24:9a:97:9d:2c:74: 63:6a:ba:ec:58:e9:39:32:31:2d:93:95:91:25:75: fc:12:47:1b:2f:aa:6c:1e:9d:ff:a3:e4:90:a7:0f: 27:bc:4b:c1:ec:f0:ad:a8:f6:fb:30:81:8f:e2:36: 73:ff:c9:f8:69:ed:9c:84:30:25:74:d3:5d:93:3f: f7:46:66:79:26:4a:24:65:a7:b4:8a:a5:e2:05:c1: 94:67:52:bd:c0:b6:f9:c3:1d:e2:cd:76:96:13:b5: 28:39:c1:fc:b4:e5:65:d4:43:8f:6e:46:65:69:ea: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:44:A8:42:D1:9E:25:F2:1B:43:98:55:35:6C:F4:9A:78:30:B9:E5 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:24:99:a7:e7:95:3b:29:79:8e:35:17:cf:e0:a6:7c:ed:26: 80:49:8a:90:75:6b:6d:75:4f:3b:92:31:42:96:75:38:64:ba: 9f:d1:f7:62:ae:c3:d4:24:13:1d:8a:82:3f:ad:4d:51:71:fd: 53:38:d8:aa:0b:9d:87:89:a4:72:e0:8b:75:0a:8d:30:2c:65: 38:2d:82:71:24:ee:6d:89:be:ee:fd:1e:87:21:3a:a6:d6:f9: 5c:85:49:83:68:15:11:06:58:24:3e:dd:38:71:2f:7b:c4:dd: 34:68:ed:ab:df:60:f1:f5:a4:ed:df:9d:4c:88:ec:76:92:db: 5d:5e:c9:bd:24:6a:89:d2:b8:92:a1:81:67:5e:c4:77:78:fb: 0f:f7:4c:7c:ec:b1:5a:77:12:2a:53:27:cb:53:c6:62:54:a5: 70:a3:62:92:15:56:5f:be:fd:14:8c:f1:f8:ea:84:d0:2c:61: ce:2c:41:b4:56:11:35:ac:4d:0b:6d:a5:18:7d:bc:0e:00:74: e1:8a:e8:bf:ee:56:a2:28:24:d1:17:68:ff:90:2e:16:9f:b9: d0:b0:b7:b2:00:84:9f:f4:27:51:e1:a7:5d:17:21:bc:27:66: 3f:c3:db:14:1d:8d:91:b0:0a:f7:d5:2a:f7:e2:0a:3c:62:7f: 67:8d:9f:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8RwKw5f5UQ/QApvBZz2WMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwNjI5MDUwMTA3WhcNMjYwNjMwMDUwMTA3WjAzMTEwLwYDVQQD EygxZjQ0YTg0MmQxOWUyNWYyMWI0Mzk4NTUzNTZjZjQ5YTc4MzBiOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeU2vql01L79SFn9l5VmScKRtyi7 NugMmvuPiycZKl7P9C5CNroD7m3hOhnRgPXXmL9JvQvHVeLI/FmVmXI1LP1HCBK5 T40ayqrUj2EKUZ662iqTgXXoWWwTAkaBf+Jl8a4+A37v9cgNs4Tp83+C/513wolw yw9v2YTv6HZofrVg7+7yWo8ZZfkRbQ07jHMkmpedLHRjarrsWOk5MjEtk5WRJXX8 EkcbL6psHp3/o+SQpw8nvEvB7PCtqPb7MIGP4jZz/8n4ae2chDAldNNdkz/3RmZ5 JkokZae0iqXiBcGUZ1K9wLb5wx3izXaWE7UoOcH8tOVl1EOPbkZlaera/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9EqELRniXyG0OYVTVs9Jp4MLnlMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSSZp+eV Oyl5jjUXz+CmfO0mgEmKkHVrbXVPO5IxQpZ1OGS6n9H3Yq7D1CQTHYqCP61NUXH9 UzjYqgudh4mkcuCLdQqNMCxlOC2CcSTubYm+7v0ehyE6ptb5XIVJg2gVEQZYJD7d OHEve8TdNGjtq99g8fWk7d+dTIjsdpLbXV7JvSRqidK4kqGBZ17Ed3j7D/dMfOyx WncSKlMny1PGYlSlcKNikhVWX779FIzx+OqE0CxhzixBtFYRNaxNC22lGH28DgB0 4Yrov+5Woigk0Rdo/5AuFp+50LC3sgCEn/QnUeGnXRchvCdmP8PbFB2NkbAK99Uq 9+IKPGJ/Z42fgQ== -----END CERTIFICATE-----Generated at Mon Jun 29 10:43:39 2026 by rpki-client