$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: szkKEqTJqgM9b9DeFDc1CtLjyMi3gyttRRIRF/RBbrA= Subject key identifier: 52:1C:12:72:49:AA:0F:EC:18:39:CE:EE:B9:22:06:2D:2E:41:2B:A3 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019CE5FF590C12C4D04D380520B21D5C8966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1874 Signing time: Fri 13 Mar 2026 07:00:42 +0000 Manifest this update: Fri 13 Mar 2026 07:00:42 +0000 Manifest next update: Sat 14 Mar 2026 07:00:42 +0000 Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=) 2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=) 3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=) 4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=) 5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=) 6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=) 7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=) 8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=) 9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=) 10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: wF2yotufhq35sCc/mUwNgwn9OL1khlyh5k9wF0VL8Wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e5:ff:59:0c:12:c4:d0:4d:38:05:20:b2:1d:5c:89:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Mar 13 07:00:42 2026 GMT Not After : Mar 14 07:00:42 2026 GMT Subject: CN=521c127249aa0fec1839ceeeb922062d2e412ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:0f:34:62:50:b1:3d:36:2c:c6:8d:0f:3f: 3e:83:fa:d5:db:10:73:cd:7c:40:5e:73:22:18:98: e3:eb:4a:27:01:32:84:1e:c3:0b:f5:d0:42:9d:54: cd:ae:d2:55:47:9f:0f:4e:bd:b5:2c:73:7f:d3:69: 0c:5a:3b:20:62:2f:b8:15:31:cd:ac:f7:69:ff:a0: 31:8f:ea:39:04:72:c0:3c:f1:dc:d6:ae:d8:9e:c6: ea:f7:05:8a:76:44:97:82:6a:4f:31:25:e5:35:b6: 6f:d9:56:8c:53:35:a0:df:bb:5f:e6:8f:b5:15:8e: 38:f3:4c:52:09:8e:99:8b:88:f0:c4:e1:33:74:5c: 6b:20:58:50:49:19:e0:3e:a6:df:6f:2a:b3:ea:6f: 01:3b:66:28:59:54:cb:53:fe:2d:56:bb:7d:09:4b: eb:a2:93:9d:0a:aa:b6:20:9f:5a:a8:9f:69:06:6d: 50:78:3e:45:82:b8:98:bb:9b:4e:10:85:31:70:30: c8:f6:50:14:29:82:95:cc:cf:a8:75:60:7c:7b:b9: 2d:4a:b9:4e:48:82:2d:de:ee:48:d4:05:0e:b1:d5: 66:c7:30:46:f8:5a:f1:3d:df:6b:5a:54:70:c0:26: 8b:b8:ab:73:ef:bf:9f:de:54:93:9f:d1:9e:76:96: ca:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1C:12:72:49:AA:0F:EC:18:39:CE:EE:B9:22:06:2D:2E:41:2B:A3 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a0:7b:3d:e6:ab:b3:5b:c2:fa:2b:97:02:57:f7:e6:7e:16: 13:3b:1e:5e:72:34:f0:20:48:d5:93:cd:a0:5d:84:87:2a:d2: d1:27:a1:86:f7:1a:1c:fd:a7:8a:d9:82:fb:dc:ab:0b:c7:b5: d7:c8:03:d5:58:44:8c:dc:32:a9:35:f3:42:4e:e1:5d:5a:f6: 75:05:61:a5:92:a9:1f:de:ae:1f:82:7f:35:c4:b0:6f:10:44: f2:67:be:f7:68:7d:74:13:24:a4:27:79:5f:7e:b5:9d:55:8e: 21:0e:fa:08:45:41:ce:4b:61:24:ae:06:43:88:2f:4d:c7:83: 22:51:08:7d:c7:5e:d9:81:66:86:5e:d3:7b:8a:fb:34:4e:e9: ff:0a:fb:dc:32:26:9d:f2:5e:6c:b4:c1:25:0c:96:2a:e7:84: 8d:b9:48:f9:77:7c:27:5b:56:b6:3a:37:02:92:17:c8:15:24: da:83:3d:b3:a1:d4:d0:bc:28:36:58:1a:de:5b:a6:0e:f4:45: 80:e8:95:b3:9d:6d:8d:68:bb:c2:e0:94:4e:7b:a9:74:66:2c: 5d:58:d0:73:7a:eb:af:3d:47:f5:7b:23:cb:ee:53:57:4e:92: 44:89:33:d5:32:db:a1:22:b6:ab:60:ca:e6:82:aa:15:e3:55: be:98:84:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzl/1kMEsTQTTgFILIdXIlmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwMzEzMDcwMDQyWhcNMjYwMzE0MDcwMDQyWjAzMTEwLwYDVQQD Eyg1MjFjMTI3MjQ5YWEwZmVjMTgzOWNlZWViOTIyMDYyZDJlNDEyYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ8PNGJQsT02LMaNDz8+g/rV2xBz zXxAXnMiGJjj60onATKEHsML9dBCnVTNrtJVR58PTr21LHN/02kMWjsgYi+4FTHN rPdp/6Axj+o5BHLAPPHc1q7Ynsbq9wWKdkSXgmpPMSXlNbZv2VaMUzWg37tf5o+1 FY4480xSCY6Zi4jwxOEzdFxrIFhQSRngPqbfbyqz6m8BO2YoWVTLU/4tVrt9CUvr opOdCqq2IJ9aqJ9pBm1QeD5FgriYu5tOEIUxcDDI9lAUKYKVzM+odWB8e7ktSrlO SIIt3u5I1AUOsdVmxzBG+FrxPd9rWlRwwCaLuKtz77+f3lSTn9GedpbKuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIcEnJJqg/sGDnO7rkiBi0uQSujMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6B7Pear s1vC+iuXAlf35n4WEzseXnI08CBI1ZPNoF2EhyrS0SehhvcaHP2nitmC+9yrC8e1 18gD1VhEjNwyqTXzQk7hXVr2dQVhpZKpH96uH4J/NcSwbxBE8me+92h9dBMkpCd5 X361nVWOIQ76CEVBzkthJK4GQ4gvTceDIlEIfcde2YFmhl7Te4r7NE7p/wr73DIm nfJebLTBJQyWKueEjblI+Xd8J1tWtjo3ApIXyBUk2oM9s6HU0LwoNlga3lumDvRF gOiVs51tjWi7wuCUTnupdGYsXVjQc3rrrz1H9Xsjy+5TV06SRIkz1TLboSK2q2DK 5oKqFeNVvpiErg== -----END CERTIFICATE-----Generated at Fri Mar 13 09:56:57 2026 by rpki-client