$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: j0xg3VRhS+pebosFBscoyL+lJfVPTVgnBenuJ9dMgyU= Subject key identifier: FB:AC:40:FB:FA:93:44:18:7C:3E:A5:D4:D8:BE:37:7B:44:C1:6C:EF Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019CE4EC8BF0DED11B295696D89958561BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1880 Signing time: Fri 13 Mar 2026 02:00:33 +0000 Manifest this update: Fri 13 Mar 2026 02:00:33 +0000 Manifest next update: Sat 14 Mar 2026 02:00:33 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 5LAgRSl9fFhy_RrY6Y4h_ItS9pw.roa (hash: 9uPoQd7e20GSb4ZNenQ4RHHLA/wWGAuknlkGqZ4eRPg=) 5: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 6: AyulhXyOhP2buicHYb4PF6awarA.roa (hash: o1jB5gIRXTUngRxBAxg2DTNhVQcSy127ziFioxQ1PVM=) 7: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 8: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 9: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 10: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 11: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 12: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 13: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 14: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 15: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 16: XSRfDKJB1vWxhWr5_nnhi8kY_Ro.roa (hash: vbcx865viaCEEplLJzs5WTHypNQpAu7A3ivTLIG9UFw=) 17: XUBXC0DROf8_aCxS_neH8O6J0e4.roa (hash: /C5B3L/2hO5EvNBmbIy9wgx/1sbjdRkGMDg2OXb+bOM=) 18: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 19: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 20: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 21: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 22: dJOVZhFoAVQ7QvEgQLVQwNsqqd8.roa (hash: eBxeDXSsEBdbyXQmGwMrPJVa9st/vuZ7R99emmZ2iNc=) 23: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 24: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 25: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 26: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 27: ic9El4BtymTELX4tfO85KLsnnzA.roa (hash: Ab+vOEfUlKcuCz2lVkxdfNmPtdmCY2q8gRV8PJiaibk=) 28: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 29: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 30: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 31: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 32: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 33: r5EQFD61hWzkJjB7v7Y30uUhewc.roa (hash: 6ypgI1gg3G9f0KTPTcY2gQYHH5FXI074w6M2BK68aUs=) 34: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 35: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 36: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: Gf0RUtOYuPtHINvmYGbqB4YDVA7hZ+orJbNi4H1MK/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:ec:8b:f0:de:d1:1b:29:56:96:d8:99:58:56:1b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Mar 13 02:00:33 2026 GMT Not After : Mar 14 02:00:33 2026 GMT Subject: CN=fbac40fbfa9344187c3ea5d4d8be377b44c16cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f8:24:29:32:2c:de:3d:0b:c5:d4:e5:36:24: 16:4e:ee:ce:0e:d7:61:18:b3:a4:1d:1b:8d:66:a7: 3b:3c:44:e6:ca:16:0d:ab:75:56:0a:32:37:a2:93: 09:e9:e2:cd:f9:b9:31:a7:3a:4c:86:03:32:99:4a: c8:7c:e4:92:49:a0:3e:a2:a9:a0:04:59:70:f9:95: 10:66:c2:fa:ac:ce:f1:24:9c:ca:09:af:0f:a0:7a: 9b:9f:cb:87:86:33:e2:26:7a:62:27:a4:22:f1:63: 8f:46:b1:74:2d:aa:da:47:13:82:4f:85:21:72:61: 40:62:68:11:94:8f:d1:b2:22:98:1d:a7:15:6b:71: 00:92:47:9a:dd:01:0e:66:a4:b9:0d:35:5e:50:78: 56:7a:25:d9:22:25:1e:0e:97:0f:70:da:b4:32:6b: 07:a2:21:7c:68:f2:17:a4:0a:fb:cf:fe:92:d9:67: a4:93:81:56:1a:2f:e4:33:8b:0b:45:ee:48:50:73: 2e:0c:29:08:91:1b:3a:be:fc:f3:89:23:cf:0b:d1: 50:93:78:1a:8f:86:2c:5e:ab:fa:bb:58:78:e6:34: 2d:62:d1:7d:f7:67:06:6a:db:8e:9c:39:bf:3f:72: c2:1a:cd:8c:d1:d9:9e:19:e8:e6:eb:d5:e5:a1:29: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AC:40:FB:FA:93:44:18:7C:3E:A5:D4:D8:BE:37:7B:44:C1:6C:EF X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:63:08:ec:8b:e9:71:21:5c:ee:71:4d:5b:94:50:49:54:f8: e8:73:5a:11:cf:1c:32:a4:35:e3:2e:8d:82:1e:c2:5f:92:1a: 62:de:14:89:5c:4a:da:d2:48:8e:c2:01:83:32:65:34:40:0d: 21:aa:50:d6:6b:b6:1e:af:aa:25:1f:f1:c4:f1:18:e1:08:00: 77:f7:14:73:d9:ad:df:b9:fa:45:15:e3:33:db:7c:d0:4d:e7: b5:95:55:fa:4a:8b:7c:62:ac:c1:12:ea:7c:fd:8a:59:0c:98: 61:1b:b6:12:fa:d7:31:6d:10:d2:16:19:33:56:bf:1e:4f:8b: 24:3d:8f:af:e3:9b:a1:e8:0f:4b:16:6d:36:3e:bf:48:be:ea: a2:a5:c0:da:5e:83:6a:16:44:9b:83:8b:65:45:d3:ef:7b:5b: 74:87:48:af:3e:5b:f6:93:04:2a:9f:04:24:9c:86:4a:86:77: e4:18:6d:30:c2:a7:b1:de:50:c1:86:a3:a6:b1:b0:64:9a:8b: a5:dd:ad:25:0e:31:fc:f0:b6:cc:98:94:17:13:f6:18:7c:9f: f9:89:96:fd:3c:15:34:96:fd:d9:db:84:c1:2a:b1:dc:0f:f5: 36:99:ee:8a:ec:56:17:83:60:d6:9a:6c:dd:b6:07:7d:5a:a7: 7e:9f:aa:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzk7Ivw3tEbKVaW2JlYVhuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMzEzMDIwMDMzWhcNMjYwMzE0MDIwMDMzWjAzMTEwLwYDVQQD EyhmYmFjNDBmYmZhOTM0NDE4N2MzZWE1ZDRkOGJlMzc3YjQ0YzE2Y2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfgkKTIs3j0LxdTlNiQWTu7ODtdh GLOkHRuNZqc7PETmyhYNq3VWCjI3opMJ6eLN+bkxpzpMhgMymUrIfOSSSaA+oqmg BFlw+ZUQZsL6rM7xJJzKCa8PoHqbn8uHhjPiJnpiJ6Qi8WOPRrF0LaraRxOCT4Uh cmFAYmgRlI/RsiKYHacVa3EAkkea3QEOZqS5DTVeUHhWeiXZIiUeDpcPcNq0MmsH oiF8aPIXpAr7z/6S2Wekk4FWGi/kM4sLRe5IUHMuDCkIkRs6vvzziSPPC9FQk3ga j4YsXqv6u1h45jQtYtF992cGatuOnDm/P3LCGs2M0dmeGejm69XloSkUcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPusQPv6k0QYfD6l1Ni+N3tEwWzvMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWMI7Ivp cSFc7nFNW5RQSVT46HNaEc8cMqQ14y6Ngh7CX5IaYt4UiVxK2tJIjsIBgzJlNEAN IapQ1mu2Hq+qJR/xxPEY4QgAd/cUc9mt37n6RRXjM9t80E3ntZVV+kqLfGKswRLq fP2KWQyYYRu2EvrXMW0Q0hYZM1a/Hk+LJD2Pr+OboegPSxZtNj6/SL7qoqXA2l6D ahZEm4OLZUXT73tbdIdIrz5b9pMEKp8EJJyGSoZ35BhtMMKnsd5QwYajprGwZJqL pd2tJQ4x/PC2zJiUFxP2GHyf+YmW/TwVNJb92duEwSqx3A/1NpnuiuxWF4Ng1pps 3bYHfVqnfp+quA== -----END CERTIFICATE-----Generated at Fri Mar 13 09:59:47 2026 by rpki-client