$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: aSbsQquFNULRpfRnEYCMXNpIj3pyB3xLZFH/Mtwenjs= Subject key identifier: EB:59:5C:23:1B:B4:51:C8:E5:6E:67:6E:3C:4C:E0:47:30:67:5A:9F Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 01A17C608DF538193FDAD4DCBB8730151CE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1688 Signing time: Tue 27 Oct 2026 08:01:04 +0000 Manifest this update: Tue 27 Oct 2026 08:01:04 +0000 Manifest next update: Wed 28 Oct 2026 08:01:04 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 4dxsHt0mCJAaZqOG9sRO0MCHndU.roa (hash: +XemRnswSWDUSYTgW9V1NyXjW5VqdupBO8dB19F/xw4=) 3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 4: 8B0ybuszrJP-SYemF-uQdt2SNk0.roa (hash: payoeKzJic32kfvM1q1SXaHj6ZYf16MvCGVAXHfXiqA=) 5: 9UorqUntgUcQCAGY-wQJUUZyCU8.roa (hash: PpTY10RVywOudMA5753VFciBE3YsC4c4YmP92Sp1ZQo=) 6: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 7: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 8: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 9: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 10: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 11: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: z2E5HnQA7plRIkKJkjh2h2rBrQnpM0MP080aJwlPQj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7c:60:8d:f5:38:19:3f:da:d4:dc:bb:87:30:15:1c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Oct 27 08:01:04 2026 GMT Not After : Oct 28 08:01:04 2026 GMT Subject: CN=eb595c231bb451c8e56e676e3c4ce04730675a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:11:b5:fc:47:71:6f:c3:8f:6e:6a:b3:c4:1d: e9:f3:1b:72:f7:9b:43:d2:dc:e8:bc:9e:51:ff:50: a2:6d:7c:ec:8a:85:58:c0:e4:92:a3:1e:72:59:d6: 9f:fe:af:58:b8:35:0d:fc:75:0d:53:ea:67:c2:47: 0f:9c:de:dd:2e:c8:58:d5:59:19:03:32:64:31:89: 0b:83:aa:19:d4:7f:56:bd:d9:bf:0d:90:45:61:43: 31:c7:a0:15:1d:d1:75:68:00:07:ca:09:00:e6:13: 91:3e:9e:89:ab:40:73:8e:83:0c:06:fd:66:2f:79: 7e:6f:cf:8c:5a:cb:45:43:08:2c:85:38:07:5c:bb: 8b:0f:67:b3:63:bc:db:c0:86:ed:5f:ab:19:f3:cb: 1b:6a:f8:42:38:3e:89:d1:d9:e7:ae:7f:77:9f:91: c5:f8:ea:94:60:2b:6b:cc:a0:8c:7c:bd:85:ec:82: 13:c8:3e:42:a9:72:76:26:6e:ce:b1:f9:0f:2f:6f: b7:74:a8:f2:af:af:dd:be:64:fc:db:66:2f:f4:55: 68:81:8b:0b:c5:4f:2e:33:2d:d1:f1:d9:e8:38:70: 64:9d:50:b9:14:93:82:b3:16:c7:2e:6e:d2:46:61: ab:57:c9:06:c3:ed:cc:ab:c0:3c:92:7f:40:6a:bb: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:59:5C:23:1B:B4:51:C8:E5:6E:67:6E:3C:4C:E0:47:30:67:5A:9F X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:4d:52:53:25:12:69:51:59:22:7f:ee:3c:29:c5:c5:e2:df: 9f:54:97:b8:9b:5d:6e:cb:ac:c4:bb:6f:83:5a:91:f7:e0:c7: 8f:9e:90:aa:f8:fc:34:d7:1f:15:35:b6:fa:f4:95:03:4a:95: 40:de:d6:3d:00:d2:e7:1f:8d:89:14:fb:7a:29:78:28:fb:b9: 78:54:86:bd:1a:b9:b0:8a:8b:9d:06:51:df:68:58:51:68:3d: f2:80:e8:a7:41:6d:c9:b7:d2:bc:ef:43:8d:ac:c1:11:e8:9f: 49:32:e2:34:91:60:c0:5a:b7:91:e2:d8:73:5e:31:5c:69:3e: 9e:98:ab:e5:9e:6f:41:97:72:d5:28:1c:c9:4b:65:ac:9d:ff: 56:80:2e:ea:34:fb:bb:ca:5b:32:60:5d:0f:70:40:04:b9:ad: 6e:01:d5:0b:50:61:3e:c7:cf:22:11:e0:23:e6:ea:e5:82:8a: af:56:d4:14:ca:d2:43:0e:c1:f7:f0:8b:85:ba:6c:83:54:ba: 19:8e:1c:00:fe:c5:33:de:37:2c:3d:32:68:9d:d3:1b:ec:d4: 6c:e3:43:b6:3b:24:8e:c8:e7:7e:0c:eb:9d:18:72:95:2a:f1: 98:61:5f:cb:0e:f4:0e:f0:a6:83:38:7e:7a:70:c0:a0:d2:16: 42:61:b1:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF8YI31OBk/2tTcu4cwFRznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYxMDI3MDgwMTA0WhcNMjYxMDI4MDgwMTA0WjAzMTEwLwYDVQQD EyhlYjU5NWMyMzFiYjQ1MWM4ZTU2ZTY3NmUzYzRjZTA0NzMwNjc1YTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BG1/Edxb8OPbmqzxB3p8xty95tD 0tzovJ5R/1CibXzsioVYwOSSox5yWdaf/q9YuDUN/HUNU+pnwkcPnN7dLshY1VkZ AzJkMYkLg6oZ1H9Wvdm/DZBFYUMxx6AVHdF1aAAHygkA5hORPp6Jq0BzjoMMBv1m L3l+b8+MWstFQwgshTgHXLuLD2ezY7zbwIbtX6sZ88sbavhCOD6J0dnnrn93n5HF +OqUYCtrzKCMfL2F7IITyD5CqXJ2Jm7OsfkPL2+3dKjyr6/dvmT822Yv9FVogYsL xU8uMy3R8dnoOHBknVC5FJOCsxbHLm7SRmGrV8kGw+3Mq8A8kn9AarsTUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtZXCMbtFHI5W5nbjxM4EcwZ1qfMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqU1SUyUS aVFZIn/uPCnFxeLfn1SXuJtdbsusxLtvg1qR9+DHj56Qqvj8NNcfFTW2+vSVA0qV QN7WPQDS5x+NiRT7eil4KPu5eFSGvRq5sIqLnQZR32hYUWg98oDop0FtybfSvO9D jazBEeifSTLiNJFgwFq3keLYc14xXGk+npir5Z5vQZdy1SgcyUtlrJ3/VoAu6jT7 u8pbMmBdD3BABLmtbgHVC1BhPsfPIhHgI+bq5YKKr1bUFMrSQw7B9/CLhbpsg1S6 GY4cAP7FM943LD0yaJ3TG+zUbONDtjskjsjnfgzrnRhylSrxmGFfyw70DvCmgzh+ enDAoNIWQmGx5A== -----END CERTIFICATE-----Generated at Tue Oct 27 16:49:40 2026 by rpki-client