$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: /jw6j0gx4HIWrEK0SOPumuT1ewUZHUYwkYHWY2+GE6A= Subject key identifier: 57:2B:A9:2B:B5:7E:83:F7:2A:29:93:8A:02:C9:69:E9:85:16:6D:7C Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 01A11A878E6E14E02B94E889CF04777950E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 12A1 Signing time: Thu 08 Oct 2026 08:00:53 +0000 Manifest this update: Thu 08 Oct 2026 08:00:53 +0000 Manifest next update: Fri 09 Oct 2026 08:00:53 +0000 Files and hashes: 1: 0VXk7KxyGNBKoMzTYJumg3MOTyI.roa (hash: OtU0hvX0Vami3LTspcOPpks558imPCiHhI08tCDppGE=) 2: 8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa (hash: bbt0XT/b4GdymMLqxvA9TWB6kuEszEh++apw2K2jMJo=) 3: 8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa (hash: dmXJGV07k4HSNMpFyTWiKNXuMOxONHC1FWpZG/gmuUw=) 4: G4h8rFJLVLZr97fu8lrVsL3JcmU.asa (hash: BltfdMylTTyk8Lzr4zzCWmyb/LgExmTrLFGKeG9MrTA=) 5: IhYNTZJgx4so4FpKD-81FjTRwo4.asa (hash: vZua4msDl0h1MxiF8H+5zAJBnwaqTE2G0oh9vNDYJ9w=) 6: K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa (hash: S3HIvCfdHY15prwrA39u7TMubC1wO10vPZ16cT0joHY=) 7: f3O6sqLkjbn5wGkjt-zZ9pH5ulA.asa (hash: ZE0HojT1vgLYkczZHItGqZlhhnH3kwJ0jcJgds7PX48=) 8: oY3gdIV4n1fET7NwlgUgM7E2A58.roa (hash: 2nAz8MBR7//dDF2SyuP46QueU8MfTaGR1aKMQkQHzBo=) 9: plt_9sG7wtfK-X5IzTU2wQwMo9k.roa (hash: jDkUUlBe6ISyETczyYHxkJjtY7ZB3oieA1Lcm/dcjlE=) 10: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: E8JzrZIrtZ5FoMIhUgqkML9YfiFiUxnEGKHnABW1ESw=) 11: yjSw7EGM3wf6F5BYX5IX39SdB9g.roa (hash: W5I+pZbCjC+Wm9EnLWz0YxI4s3U4AfirO0LVljkjaHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:1a:87:8e:6e:14:e0:2b:94:e8:89:cf:04:77:79:50:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Oct 8 08:00:53 2026 GMT Not After : Oct 9 08:00:53 2026 GMT Subject: CN=572ba92bb57e83f72a29938a02c969e985166d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:7e:fe:5d:08:66:de:4b:1d:62:57:ca:09: 52:a7:1a:d2:2e:95:48:bc:e2:b9:8b:fc:4f:6c:6b: ad:4d:43:33:95:5e:24:35:51:63:57:0e:8d:78:91: e3:0e:b8:7d:48:d3:3a:eb:22:a1:8f:00:76:c7:f6: 2f:e4:8f:1b:99:e0:11:ca:01:72:fe:09:bc:96:92: 49:46:fe:39:3e:13:4c:86:8d:59:b0:51:50:85:2b: ba:a9:5c:59:63:67:fb:16:fd:25:28:8f:5c:ff:55: e7:bd:a0:46:6d:de:76:79:cb:92:0b:a4:17:40:74: d0:a1:63:cb:22:24:38:a5:ec:d7:26:88:6e:23:e8: e4:04:21:db:c2:ef:8b:b2:10:19:c2:38:3e:e5:22: 12:7f:65:8f:37:94:e4:c1:cb:89:2c:ac:c6:d2:fa: 0e:07:e1:0d:bb:a3:84:4e:53:17:03:c2:f1:08:97: ae:18:ce:55:10:96:90:7b:54:de:26:8b:3b:24:38: fb:f5:de:24:d3:dc:66:e2:b1:7f:6d:e8:e2:bf:7d: e2:43:5f:24:4e:50:19:b3:dd:ef:22:f3:81:ef:c1: 41:97:de:8b:e9:d8:ee:05:4f:d8:d0:9e:b8:fd:ef: 93:3a:e5:62:47:02:6d:3c:6d:fb:32:4e:bd:71:72: b2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2B:A9:2B:B5:7E:83:F7:2A:29:93:8A:02:C9:69:E9:85:16:6D:7C X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d4:e6:fc:9e:4a:17:63:28:2f:58:a7:0f:c3:e6:f7:2b:2c: f4:7c:09:25:9b:22:74:1d:7c:f8:71:12:b5:f0:64:db:08:dc: ff:ba:60:00:a1:ae:78:59:99:85:67:eb:e8:12:c0:29:81:ad: 84:af:c1:ac:67:62:f0:a1:f0:21:94:c4:21:eb:9e:1b:7c:43: 5c:30:2f:d1:a4:b7:89:78:ed:55:19:8c:8a:b0:cd:75:2c:f7: 5e:6f:f9:ea:9b:40:e2:c3:68:51:75:1e:d9:db:ad:58:d2:8e: 8a:23:7e:fa:26:68:b5:75:c3:37:86:b3:d6:b9:ab:89:4f:dd: 7a:80:26:72:11:9e:81:74:5c:cf:68:fb:ab:ce:c2:98:81:4a: ac:ec:ae:ff:71:9d:19:27:f2:f3:67:fe:35:5c:83:51:40:e8: 73:33:26:b0:42:1d:dd:72:80:6e:0e:4a:50:b3:1d:1b:e6:66: 99:27:58:23:1f:ee:23:21:00:cf:9d:b8:39:d4:e8:ba:d2:99: b8:d4:5b:59:3f:b0:f0:97:51:b3:09:cb:b1:75:b6:30:29:31: f1:56:50:37:72:28:4c:06:0d:50:8e:3c:68:83:93:ba:7c:10: 76:d0:9d:06:b3:74:db:82:8a:85:7c:74:9f:f5:80:2f:14:c5: 87:f7:59:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEah45uFOArlOiJzwR3eVDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYxMDA4MDgwMDUzWhcNMjYxMDA5MDgwMDUzWjAzMTEwLwYDVQQD Eyg1NzJiYTkyYmI1N2U4M2Y3MmEyOTkzOGEwMmM5NjllOTg1MTY2ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIN+/l0IZt5LHWJXyglSpxrSLpVI vOK5i/xPbGutTUMzlV4kNVFjVw6NeJHjDrh9SNM66yKhjwB2x/Yv5I8bmeARygFy /gm8lpJJRv45PhNMho1ZsFFQhSu6qVxZY2f7Fv0lKI9c/1XnvaBGbd52ecuSC6QX QHTQoWPLIiQ4pezXJohuI+jkBCHbwu+LshAZwjg+5SISf2WPN5TkwcuJLKzG0voO B+ENu6OETlMXA8LxCJeuGM5VEJaQe1TeJos7JDj79d4k09xm4rF/bejiv33iQ18k TlAZs93vIvOB78FBl96L6djuBU/Y0J64/e+TOuViRwJtPG37Mk69cXKyxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcrqSu1foP3KimTigLJaemFFm18MB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9Tm/J5K F2MoL1inD8Pm9yss9HwJJZsidB18+HEStfBk2wjc/7pgAKGueFmZhWfr6BLAKYGt hK/BrGdi8KHwIZTEIeueG3xDXDAv0aS3iXjtVRmMirDNdSz3Xm/56ptA4sNoUXUe 2dutWNKOiiN++iZotXXDN4az1rmriU/deoAmchGegXRcz2j7q87CmIFKrOyu/3Gd GSfy82f+NVyDUUDoczMmsEId3XKAbg5KULMdG+ZmmSdYIx/uIyEAz524OdToutKZ uNRbWT+w8JdRswnLsXW2MCkx8VZQN3IoTAYNUI48aIOTunwQdtCdBrN024KKhXx0 n/WALxTFh/dZNw== -----END CERTIFICATE-----Generated at Thu Oct 8 10:43:35 2026 by rpki-client