$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: PBw7Y3hmnkCPEpZqbqIds/vPRYgdlamlp8efYhkeogM= Subject key identifier: 7F:06:59:B8:B1:64:F0:8F:56:A6:F7:78:D5:4C:1B:3A:75:C5:7E:82 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 01A1803D711AC02DF4275C3B8EE1AA1F5EB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 168A Signing time: Wed 28 Oct 2026 02:01:12 +0000 Manifest this update: Wed 28 Oct 2026 02:01:12 +0000 Manifest next update: Thu 29 Oct 2026 02:01:12 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 4dxsHt0mCJAaZqOG9sRO0MCHndU.roa (hash: +XemRnswSWDUSYTgW9V1NyXjW5VqdupBO8dB19F/xw4=) 3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 4: 8B0ybuszrJP-SYemF-uQdt2SNk0.roa (hash: payoeKzJic32kfvM1q1SXaHj6ZYf16MvCGVAXHfXiqA=) 5: 9UorqUntgUcQCAGY-wQJUUZyCU8.roa (hash: PpTY10RVywOudMA5753VFciBE3YsC4c4YmP92Sp1ZQo=) 6: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 7: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 8: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 9: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 10: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 11: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: mY+OU6yMlC5cOqt8yh/dAGWPL5VLGwoVde7OirOK7xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:3d:71:1a:c0:2d:f4:27:5c:3b:8e:e1:aa:1f:5e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Oct 28 02:01:12 2026 GMT Not After : Oct 29 02:01:12 2026 GMT Subject: CN=7f0659b8b164f08f56a6f778d54c1b3a75c57e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:39:64:52:01:f8:28:8c:ea:f3:18:d0:b1:0f: 68:c9:72:4a:f9:ad:ef:f0:27:85:b6:dd:be:97:34: 3c:ea:30:d7:67:3b:37:87:82:29:ee:c4:b7:c3:58: ec:62:1d:9b:e3:09:00:ec:74:27:1a:5b:89:bc:59: c8:1c:d2:23:ee:2b:0d:f4:3d:a6:e9:61:3d:f1:08: 2c:8e:78:2f:a9:b5:b5:3d:cb:e1:80:36:50:e3:f2: 4c:0f:08:97:8e:35:19:da:15:89:8b:85:ce:05:0a: 74:38:16:00:56:3e:eb:b2:0c:20:71:71:65:1c:1c: b1:b3:cc:ee:c5:43:3b:db:a5:e4:3b:06:d7:c7:88: 46:86:d5:9a:0b:86:44:fe:a3:21:a7:93:6f:2c:9f: ae:e5:46:05:14:63:63:b8:e7:4d:29:dc:ba:b3:d2: e7:f6:d0:b2:58:9a:0e:67:93:8e:38:b8:e0:4f:b4: 76:73:8a:b5:48:a5:98:60:20:36:9c:fe:ba:e6:4b: b3:c6:fc:bb:f3:25:ca:b5:75:d7:24:a4:a1:59:ac: ba:bd:60:64:2a:1d:10:e7:eb:b4:49:cc:c6:ee:d4: db:b5:25:35:19:bf:28:8f:56:cb:1c:ef:ce:1c:18: c9:9a:20:5b:f8:2a:f8:93:d7:19:24:02:b2:d8:15: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:06:59:B8:B1:64:F0:8F:56:A6:F7:78:D5:4C:1B:3A:75:C5:7E:82 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:16:6d:82:63:42:92:d1:cb:f7:6b:b1:80:67:41:ca:48:16: 3c:69:b8:e3:8f:8d:be:19:2a:a2:d4:1a:d7:62:8b:4d:60:bb: 97:eb:9b:08:ea:a9:6a:7c:e7:36:0d:9b:ef:2e:7c:68:e4:8d: 53:15:88:99:27:f0:7d:56:82:db:d8:27:31:c0:f1:46:e9:5a: c8:01:a6:dd:5a:94:0b:38:97:d8:10:fb:9e:a5:80:3a:e7:ef: 38:7f:bb:14:ef:7e:a1:e7:56:e4:3c:da:e0:24:5e:5b:2f:54: 2e:61:1b:7d:ce:5b:3a:ef:d2:3b:62:71:ba:4b:d6:ae:19:57: 93:a7:65:e2:37:a4:95:49:5d:07:0f:6e:b9:ab:50:e3:d4:19: be:05:2a:45:54:ed:d4:27:dd:6e:74:a7:a0:be:11:ce:04:df: ab:7c:6c:45:63:b0:d6:0c:bf:c7:69:b0:1c:71:62:65:ef:7a: 1e:47:4d:23:a3:fe:c1:34:ba:a3:aa:31:0a:b6:16:d4:92:64: ab:92:11:13:82:fe:75:4c:7a:96:12:3d:26:e6:3f:79:67:59: a6:28:b1:92:0c:3b:98:c3:69:72:b4:00:70:96:aa:03:a1:dd: 36:2f:02:77:c7:43:fc:9c:b2:61:64:70:65:99:ab:18:c0:2e: 0a:ba:54:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGAPXEawC30J1w7juGqH16wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYxMDI4MDIwMTEyWhcNMjYxMDI5MDIwMTEyWjAzMTEwLwYDVQQD Eyg3ZjA2NTliOGIxNjRmMDhmNTZhNmY3NzhkNTRjMWIzYTc1YzU3ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzlkUgH4KIzq8xjQsQ9oyXJK+a3v 8CeFtt2+lzQ86jDXZzs3h4Ip7sS3w1jsYh2b4wkA7HQnGluJvFnIHNIj7isN9D2m 6WE98QgsjngvqbW1PcvhgDZQ4/JMDwiXjjUZ2hWJi4XOBQp0OBYAVj7rsgwgcXFl HByxs8zuxUM726XkOwbXx4hGhtWaC4ZE/qMhp5NvLJ+u5UYFFGNjuOdNKdy6s9Ln 9tCyWJoOZ5OOOLjgT7R2c4q1SKWYYCA2nP665kuzxvy78yXKtXXXJKShWay6vWBk Kh0Q5+u0SczG7tTbtSU1Gb8oj1bLHO/OHBjJmiBb+Cr4k9cZJAKy2BVMRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8GWbixZPCPVqb3eNVMGzp1xX6CMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxZtgmNC ktHL92uxgGdBykgWPGm444+NvhkqotQa12KLTWC7l+ubCOqpanznNg2b7y58aOSN UxWImSfwfVaC29gnMcDxRulayAGm3VqUCziX2BD7nqWAOufvOH+7FO9+oedW5Dza 4CReWy9ULmEbfc5bOu/SO2JxukvWrhlXk6dl4jeklUldBw9uuatQ49QZvgUqRVTt 1CfdbnSnoL4RzgTfq3xsRWOw1gy/x2mwHHFiZe96HkdNI6P+wTS6o6oxCrYW1JJk q5IRE4L+dUx6lhI9JuY/eWdZpiixkgw7mMNpcrQAcJaqA6HdNi8Cd8dD/JyyYWRw ZZmrGMAuCrpUuA== -----END CERTIFICATE-----Generated at Wed Oct 28 07:26:19 2026 by rpki-client