$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: Ik8meEYWLmRp5BdIo72+fDtBN8UZxcu/pnrGmbX4gcY= Subject key identifier: 45:1D:53:0D:7F:0D:78:FC:10:9A:17:D5:1A:C7:28:E0:84:8D:41:0D Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 01A15D7A96C7F2873733B7AAC13E1097F623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 1ACD Signing time: Wed 21 Oct 2026 08:01:17 +0000 Manifest this update: Wed 21 Oct 2026 08:01:17 +0000 Manifest next update: Thu 22 Oct 2026 08:01:17 +0000 Files and hashes: 1: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (hash: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4=) 2: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (hash: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8=) 3: NklSIVNcNIWeMyDnmkM31BBhz1c.roa (hash: UKSW2BDTyMNTJDzhPRFU+Wzj1R5uLkgmHOPWx5CWEqQ=) 4: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (hash: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig=) 5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: nUpYAoqCYb9upVuyV1/sqwDdjXOwZqGU+lRXekR+92k=) 6: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (hash: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE=) 7: _YOXL7ZxwGLyAFtXgmbGoGmsxw0.roa (hash: oYcEDHMjBaLjLdS2+cnHZQVD1ORy9f2L160BSTCgJ4c=) 8: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (hash: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=) 9: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (hash: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis=) 10: szXceV_8JO0f_7ooL6S8iduW9xI.roa (hash: xeJBYCAXDOSNVRxdgWGAZ1ipDc3y7H3KXIsJs1D2FK4=) 11: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (hash: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5d:7a:96:c7:f2:87:37:33:b7:aa:c1:3e:10:97:f6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Oct 21 08:01:17 2026 GMT Not After : Oct 22 08:01:17 2026 GMT Subject: CN=451d530d7f0d78fc109a17d51ac728e0848d410d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:da:e0:5d:84:9b:1d:05:6d:3c:67:1c:29: 69:56:3c:38:c7:12:5d:26:aa:11:1a:f2:76:a8:d5: 73:b7:d4:8e:bd:bc:89:c5:3c:bc:db:94:41:d8:c8: 2d:3f:52:eb:d2:ef:6c:e3:59:50:a3:5b:3d:f3:3a: 6f:a0:3d:d6:29:68:5e:37:e9:38:ed:02:bc:91:19: 23:35:ec:01:09:e7:c1:50:c2:96:59:47:72:54:ed: c2:e6:46:39:91:f2:3b:cf:59:ae:a8:8c:e4:55:d6: 73:0c:98:a9:25:90:6c:81:c9:fc:09:9d:2f:af:fb: 6a:77:93:ae:09:4d:90:0a:c7:ca:65:15:5c:04:c3: 7c:4d:d8:ac:26:01:c1:08:02:c4:8c:91:c6:7a:1e: 42:61:2a:96:68:a6:7d:3a:30:d3:fc:0e:26:cd:76: 7e:09:18:9e:bb:27:ff:8c:4d:ad:43:c8:33:bf:d4: 41:cb:93:4a:ce:8c:84:84:8d:e4:b6:00:41:d8:c5: e5:4c:4b:b1:6a:a3:fa:59:9d:52:3e:ba:d0:b0:b0: ab:9b:05:b1:a2:68:ea:d9:0b:f1:2e:2b:be:23:f9: 19:71:ec:6c:88:f3:46:d5:e2:3f:9a:1e:41:fb:2f: ae:0f:ce:94:56:6f:47:11:01:ed:e7:76:1e:d8:21: 8d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1D:53:0D:7F:0D:78:FC:10:9A:17:D5:1A:C7:28:E0:84:8D:41:0D X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:34:e3:b9:58:5c:1b:49:a2:5b:7d:a9:48:5c:4c:75:4f:45: 32:f6:3c:d4:62:1a:b8:f9:66:26:7d:b7:cb:0a:22:5a:a7:ed: 11:f1:62:78:5a:7d:c8:c8:44:bf:43:c0:c4:20:e0:38:e0:6c: 2d:31:f8:39:af:ee:68:44:fb:b5:42:ab:9e:45:5a:9d:9c:2d: 89:72:00:23:15:87:59:9f:b2:7f:fc:a1:0e:7a:a7:b1:43:f1: d7:fd:c8:c9:38:d5:37:f2:6d:d3:33:9e:db:7e:d6:5c:c5:a3: 5f:a3:df:2e:d4:4b:b8:41:b3:41:46:59:bb:e0:4f:0a:6f:a8: 3f:c5:0c:7e:89:e0:f0:d1:e7:90:3e:35:54:1a:72:9c:d9:d5: 32:b4:5a:8d:42:7c:59:11:24:3c:0d:94:a5:1e:be:62:8c:7c: b1:22:50:42:d9:91:99:82:0c:c7:7a:f4:27:6e:e7:33:e2:27: a6:ee:73:57:b0:45:b5:c1:16:82:86:03:4e:24:56:6c:a9:4e: 1f:15:19:8e:e0:e2:5d:68:e8:da:1f:cb:49:c2:a0:48:51:7d: 9e:67:81:a0:79:2f:34:4f:ea:9c:ec:3d:61:ca:33:44:f3:cc: 7f:65:a1:33:02:20:4e:c8:ef:d7:8d:26:40:02:c9:2a:50:15: ce:79:07:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFdepbH8oc3M7eqwT4Ql/YjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYxMDIxMDgwMTE3WhcNMjYxMDIyMDgwMTE3WjAzMTEwLwYDVQQD Eyg0NTFkNTMwZDdmMGQ3OGZjMTA5YTE3ZDUxYWM3MjhlMDg0OGQ0MTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWHa4F2Emx0FbTxnHClpVjw4xxJd JqoRGvJ2qNVzt9SOvbyJxTy825RB2MgtP1Lr0u9s41lQo1s98zpvoD3WKWheN+k4 7QK8kRkjNewBCefBUMKWWUdyVO3C5kY5kfI7z1muqIzkVdZzDJipJZBsgcn8CZ0v r/tqd5OuCU2QCsfKZRVcBMN8TdisJgHBCALEjJHGeh5CYSqWaKZ9OjDT/A4mzXZ+ CRieuyf/jE2tQ8gzv9RBy5NKzoyEhI3ktgBB2MXlTEuxaqP6WZ1SPrrQsLCrmwWx omjq2QvxLiu+I/kZcexsiPNG1eI/mh5B+y+uD86UVm9HEQHt53Ye2CGNpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUdUw1/DXj8EJoX1RrHKOCEjUENMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzTjuVhc G0miW32pSFxMdU9FMvY81GIauPlmJn23ywoiWqftEfFieFp9yMhEv0PAxCDgOOBs LTH4Oa/uaET7tUKrnkVanZwtiXIAIxWHWZ+yf/yhDnqnsUPx1/3IyTjVN/Jt0zOe 237WXMWjX6PfLtRLuEGzQUZZu+BPCm+oP8UMfong8NHnkD41VBpynNnVMrRajUJ8 WREkPA2UpR6+Yox8sSJQQtmRmYIMx3r0J27nM+Inpu5zV7BFtcEWgoYDTiRWbKlO HxUZjuDiXWjo2h/LScKgSFF9nmeBoHkvNE/qnOw9YcozRPPMf2WhMwIgTsjv140m QALJKlAVznkHbw== -----END CERTIFICATE-----Generated at Wed Oct 21 10:46:52 2026 by rpki-client