$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: eAu3D7SuLdvJWlTXdtckZMgUtbXWhFxdsZ2zu2K0dYc= Subject key identifier: 28:C3:4D:45:39:E8:68:F9:8F:86:AE:C0:E0:E7:CC:DF:08:1C:75:3D Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019DCC064312E65BA27A019EE1BC216F6763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 149D Signing time: Sun 26 Apr 2026 23:00:55 +0000 Manifest this update: Sun 26 Apr 2026 23:00:55 +0000 Manifest next update: Mon 27 Apr 2026 23:00:55 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 18Szc_NOHV7yuL-RPwFFVIdly00.roa (hash: ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=) 3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 4: 7lXBjbngAvV9gHuyOcicow6UdVo.roa (hash: BQCTu2EQ42JTon6DFlUxY4dueGNRFijDWqRTzuT0vfE=) 5: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 6: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 7: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 8: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 9: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 10: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 11: oSKHmVNGFh3OpJke3WnxdXvCjgc.roa (hash: Jbe/LRuw53xo+FdeFOv1OWeqAR3sX4SCDTXs5bJaUEE=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: TYrHT9sIcf28hnOBSTYzc5UtsaFc5m14udFcZ2WqoXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:06:43:12:e6:5b:a2:7a:01:9e:e1:bc:21:6f:67:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Apr 26 23:00:55 2026 GMT Not After : Apr 27 23:00:55 2026 GMT Subject: CN=28c34d4539e868f98f86aec0e0e7ccdf081c753d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:3e:3c:00:6e:6c:e4:f7:26:09:16:fd:90: 9e:a0:5d:60:bc:27:d2:50:8e:c3:f8:0f:30:a3:86: 37:87:de:ab:c3:18:df:dc:95:9c:42:0c:31:ce:c9: 93:bb:3c:df:96:ec:7b:c4:01:08:26:a7:86:52:36: 3f:cd:8e:92:f5:06:45:40:61:fd:64:f7:03:2e:45: d1:87:dd:5e:e7:45:d6:04:8c:db:a0:fa:b6:d0:64: 4b:dd:ef:c7:15:97:60:31:6f:6c:9b:f3:2a:74:68: 31:47:56:ae:0a:97:b7:54:fc:c8:66:f0:13:5f:09: 85:fe:25:fe:81:98:55:aa:bc:a6:65:0d:27:ac:d5: d1:46:0e:6a:49:2a:4c:e5:4a:aa:49:59:0a:13:31: 49:f0:e9:e9:2e:d7:04:0e:f5:86:cf:e6:70:a1:f5: 48:97:8f:c2:fe:0e:fc:4e:28:fc:f1:e7:4f:2b:a5: 6c:a8:61:a6:74:da:96:0b:53:72:b7:0e:25:24:69: 8e:58:02:e4:15:80:d5:12:49:89:a1:0f:a8:fd:37: 26:24:32:16:53:72:05:28:4e:8a:3a:e0:f8:c7:75: 83:7a:e9:80:dc:26:3c:c6:67:d7:7a:99:2c:c2:f7: 3c:fe:37:26:ed:92:3e:a2:f1:8a:62:33:1a:b8:91: 25:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C3:4D:45:39:E8:68:F9:8F:86:AE:C0:E0:E7:CC:DF:08:1C:75:3D X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b3:c8:09:0d:98:b4:b4:9e:11:ae:e0:c5:90:06:17:e4:8a: 0d:b1:bd:be:7e:16:a0:0c:ab:0a:c5:6d:1f:6c:fa:06:4f:80: 3d:d5:39:8f:09:17:fe:fc:b3:2c:d7:8f:de:ac:26:9e:a5:66: 37:79:8d:87:ff:f2:2e:67:12:f5:e7:a0:81:72:8e:75:3f:07: a2:86:12:6b:dd:d4:87:a8:19:5c:e6:7c:ff:f4:22:a3:2c:ac: 5b:26:93:67:4e:dc:91:ea:31:b9:16:97:86:e7:71:04:74:f2: 2d:3a:f1:e0:83:19:26:7b:b9:a0:a1:7e:61:37:bb:7b:ac:11: f9:9d:fc:bc:fe:b5:65:5c:10:ec:34:07:fc:fc:90:24:ff:75: 03:37:35:6f:65:a3:9e:54:d1:54:58:31:f0:a8:cc:99:d5:89: a1:89:93:08:be:80:ea:18:d8:96:93:ff:66:09:f6:e6:52:99: 68:81:ab:ed:f7:32:b6:07:f6:d6:81:0e:b1:6d:3e:17:1a:fe: e4:b5:19:52:83:d4:b9:2c:23:29:3d:91:07:32:a0:eb:34:4e: 80:0a:b5:5e:b1:a2:8b:9c:7f:90:b9:7e:3e:2c:a2:8d:af:af: 1a:79:db:5a:2a:dc:9c:85:32:a1:1b:7e:26:7b:2d:14:c0:56: d5:61:99:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MBkMS5luiegGe4bwhb2djMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwNDI2MjMwMDU1WhcNMjYwNDI3MjMwMDU1WjAzMTEwLwYDVQQD EygyOGMzNGQ0NTM5ZTg2OGY5OGY4NmFlYzBlMGU3Y2NkZjA4MWM3NTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswk+PABubOT3JgkW/ZCeoF1gvCfS UI7D+A8wo4Y3h96rwxjf3JWcQgwxzsmTuzzflux7xAEIJqeGUjY/zY6S9QZFQGH9 ZPcDLkXRh91e50XWBIzboPq20GRL3e/HFZdgMW9sm/MqdGgxR1auCpe3VPzIZvAT XwmF/iX+gZhVqrymZQ0nrNXRRg5qSSpM5UqqSVkKEzFJ8OnpLtcEDvWGz+ZwofVI l4/C/g78Tij88edPK6VsqGGmdNqWC1Nytw4lJGmOWALkFYDVEkmJoQ+o/TcmJDIW U3IFKE6KOuD4x3WDeumA3CY8xmfXepkswvc8/jcm7ZI+ovGKYjMauJEliQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjDTUU56Gj5j4auwODnzN8IHHU9MB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbPICQ2Y tLSeEa7gxZAGF+SKDbG9vn4WoAyrCsVtH2z6Bk+APdU5jwkX/vyzLNeP3qwmnqVm N3mNh//yLmcS9eeggXKOdT8HooYSa93Uh6gZXOZ8//QioyysWyaTZ07ckeoxuRaX hudxBHTyLTrx4IMZJnu5oKF+YTe7e6wR+Z38vP61ZVwQ7DQH/PyQJP91Azc1b2Wj nlTRVFgx8KjMmdWJoYmTCL6A6hjYlpP/Zgn25lKZaIGr7fcytgf21oEOsW0+Fxr+ 5LUZUoPUuSwjKT2RBzKg6zROgAq1XrGii5x/kLl+Piyija+vGnnbWircnIUyoRt+ JnstFMBW1WGZ/w== -----END CERTIFICATE-----Generated at Mon Apr 27 09:17:12 2026 by rpki-client