$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: od5FeATb7xXy1rV9+Jj+HadGl2ILCPDA7eXm6jgD+tY= Subject key identifier: E5:2D:38:2D:B0:16:A2:AE:7A:65:9F:EC:25:FD:E9:B6:DA:4F:50:B4 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 01A1784C66B10E49A18C9507845C5AC31BC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1AE4 Signing time: Mon 26 Oct 2026 13:00:35 +0000 Manifest this update: Mon 26 Oct 2026 13:00:35 +0000 Manifest next update: Tue 27 Oct 2026 13:00:35 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 5: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 6: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 7: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 8: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 9: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 10: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 11: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 12: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 13: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 14: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 15: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 16: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 17: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 18: cIzWNeNZbGQqB6PaAUfFk04qwpw.roa (hash: qXYjYaptAMpe3dpSUVYLnaW4A2Txz8KndGthhN4noC0=) 19: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 20: efwlLLHqb-bdy8PqwUcM4smevIk.roa (hash: dziFMotDF0gnY460BoEIQb6O67mGB4C/hN9W6acAk18=) 21: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 22: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 23: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 24: iPKJwckHS7fTX2BYHqvx9q3JA4g.roa (hash: 2bHm3BwYJ52KpSHXTQlcz+x91m3fEq3PirchX6IlyGw=) 25: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 26: jXlPjmax2D6xk6xk15LqeUs2Fa8.roa (hash: ZUhfEbcBqZVUtm9r9VeW3nIknnrUSnVpiKVvjVmMjCA=) 27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 31: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 32: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 33: x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa (hash: Y+nAlXRY4txRKWouCnodtOhRL0mCZVwY0SjTTDgCeMQ=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: E5kP8H+GTpLSSJN97VczM88EDFqObks7iOQipK+VX3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:78:4c:66:b1:0e:49:a1:8c:95:07:84:5c:5a:c3:1b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Oct 26 13:00:35 2026 GMT Not After : Oct 27 13:00:35 2026 GMT Subject: CN=e52d382db016a2ae7a659fec25fde9b6da4f50b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:27:d7:2a:5e:fa:8d:db:63:b3:c7:16:55: 6b:e9:33:43:3b:f7:59:4d:1a:a7:96:52:8b:88:ee: 66:e4:90:a7:72:7b:f1:ee:a7:4f:6b:26:2a:f7:d3: 06:a7:4d:53:94:b4:0f:ba:fe:fa:08:d3:3a:b0:ac: b3:cf:fb:20:46:7d:84:19:40:c5:b7:bf:23:7b:9d: 2f:25:ba:35:df:b0:2c:f9:7e:d5:e8:21:be:7b:1e: 87:11:9c:09:11:ab:64:63:f3:6c:6f:27:c5:83:48: ea:50:c5:2b:52:29:38:ec:9f:97:b5:2c:30:cd:e5: cd:4b:b7:49:e5:f9:e8:94:10:6f:01:22:4c:0f:96: 4c:46:54:65:b9:c4:b1:8e:e1:29:56:a7:1a:f8:06: 3f:a6:ba:45:ef:1b:de:18:86:92:3b:0c:1a:22:c9: 39:66:7f:7a:b9:91:be:1b:7c:60:b9:d1:86:69:36: 95:35:08:2f:8f:9c:cb:a4:f5:7d:1a:af:04:02:c5: 81:d7:a8:4f:cd:9b:10:ad:a7:ee:7f:0c:73:a8:67: ce:84:d3:a7:f0:78:8c:3e:75:ca:97:bf:bf:75:39: f1:bc:08:b3:7f:11:f9:83:6e:d6:a2:48:d6:29:0a: 7e:56:c9:9e:92:bf:94:cd:66:17:21:b9:9d:e8:15: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2D:38:2D:B0:16:A2:AE:7A:65:9F:EC:25:FD:E9:B6:DA:4F:50:B4 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:68:bc:fe:09:73:0c:97:4f:6f:ee:18:48:cd:b6:24:b0:a7: 6f:57:8a:3d:ef:88:25:d1:53:89:43:16:cf:10:91:df:05:7e: 17:db:01:8e:52:8b:5f:fb:6f:29:6a:7e:c4:ad:ea:a7:f2:48: 99:9a:14:49:b7:a8:04:d8:a7:be:28:f6:45:f6:c4:7f:b0:f1: 15:33:21:a6:17:a6:ca:be:e6:7a:05:b9:a8:3b:31:01:84:f0: 0e:c9:93:a9:b2:a8:31:82:eb:5e:c5:54:74:29:c8:6f:6d:5b: 48:a4:c1:67:7e:a2:40:c2:13:88:76:1c:a7:3e:ff:49:ab:44: 47:47:a9:a8:0e:35:de:6a:aa:80:7f:15:07:f0:b0:1f:41:75: e0:f5:52:15:62:4e:20:a1:79:d2:bd:46:e8:89:aa:39:92:e7: e8:57:36:18:0b:e3:43:5c:75:d2:84:aa:55:2a:3f:1c:4c:87: 3a:7c:a8:50:38:11:15:19:02:e5:30:e1:75:73:83:d9:2d:98: 7b:8a:c5:20:52:af:4d:bc:9a:7c:0f:34:bd:ca:df:f2:48:3f: 57:f8:af:c4:a4:22:47:83:54:e5:9e:4f:8d:a5:bf:0f:6f:39: db:c9:65:cd:55:dc:bc:5c:f0:08:80:f8:9d:5b:fc:b3:69:da: 09:74:d6:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF4TGaxDkmhjJUHhFxawxvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYxMDI2MTMwMDM1WhcNMjYxMDI3MTMwMDM1WjAzMTEwLwYDVQQD EyhlNTJkMzgyZGIwMTZhMmFlN2E2NTlmZWMyNWZkZTliNmRhNGY1MGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQYn1ype+o3bY7PHFlVr6TNDO/dZ TRqnllKLiO5m5JCncnvx7qdPayYq99MGp01TlLQPuv76CNM6sKyzz/sgRn2EGUDF t78je50vJbo137As+X7V6CG+ex6HEZwJEatkY/NsbyfFg0jqUMUrUik47J+XtSww zeXNS7dJ5fnolBBvASJMD5ZMRlRlucSxjuEpVqca+AY/prpF7xveGIaSOwwaIsk5 Zn96uZG+G3xgudGGaTaVNQgvj5zLpPV9Gq8EAsWB16hPzZsQrafufwxzqGfOhNOn 8HiMPnXKl7+/dTnxvAizfxH5g27WokjWKQp+Vsmekr+UzWYXIbmd6BVSywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUtOC2wFqKuemWf7CX96bbaT1C0MB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmi8/glz DJdPb+4YSM22JLCnb1eKPe+IJdFTiUMWzxCR3wV+F9sBjlKLX/tvKWp+xK3qp/JI mZoUSbeoBNinvij2RfbEf7DxFTMhphemyr7megW5qDsxAYTwDsmTqbKoMYLrXsVU dCnIb21bSKTBZ36iQMITiHYcpz7/SatER0epqA413mqqgH8VB/CwH0F14PVSFWJO IKF50r1G6ImqOZLn6Fc2GAvjQ1x10oSqVSo/HEyHOnyoUDgRFRkC5TDhdXOD2S2Y e4rFIFKvTbyafA80vcrf8kg/V/ivxKQiR4NU5Z5PjaW/D28528llzVXcvFzwCID4 nVv8s2naCXTWOw== -----END CERTIFICATE-----Generated at Mon Oct 26 20:36:50 2026 by rpki-client