$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: QCl8ufvPzCorxUh/B6y9gjrzUy3YghgebP58LWwfBMM= Subject key identifier: 49:7F:75:AB:36:A1:65:A3:6E:4A:9D:AC:F6:8E:69:DC:6D:3C:12:C7 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019EB657116311B07082664C11E4A8A73DBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 1212 Signing time: Thu 11 Jun 2026 11:00:19 +0000 Manifest this update: Thu 11 Jun 2026 11:00:19 +0000 Manifest next update: Fri 12 Jun 2026 11:00:19 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: GOGh2sTsOuZITVF6nApdfflFCui1NLqZcUCxhAiZY5w=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 11:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:57:11:63:11:b0:70:82:66:4c:11:e4:a8:a7:3d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jun 11 11:00:19 2026 GMT Not After : Jun 12 11:00:19 2026 GMT Subject: CN=497f75ab36a165a36e4a9dacf68e69dc6d3c12c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:84:c9:fa:57:15:02:83:48:73:ce:7f:e3:a2: 0a:9c:dc:64:36:26:67:2d:6d:32:40:05:43:81:f5: c6:95:57:45:8d:11:e5:e1:6a:45:d0:e8:81:8a:54: ff:19:8e:0b:f4:61:91:8b:bf:f9:41:2f:cd:de:e4: 78:1a:04:51:c2:f3:8b:a3:24:fa:63:9a:29:b6:75: 5e:89:2e:56:62:e8:5a:ef:55:9f:1b:0f:55:fc:94: 5d:4a:10:8d:e4:2e:d2:8b:2f:17:41:82:97:da:45: f4:b5:d4:8e:29:c0:66:f2:e6:ce:52:3c:0b:95:e4: df:a9:e8:fb:69:a9:17:fd:8c:3d:27:53:ac:47:9d: 7f:5d:95:12:e5:a6:17:63:82:2d:67:09:62:b0:d1: e0:84:5a:9d:3a:ea:e9:11:da:e9:69:2d:4e:41:af: b0:e7:99:a1:6a:d2:be:c1:3b:a5:21:cf:42:e7:23: 45:54:24:fc:70:da:5f:7b:56:c4:22:fc:fe:c4:d2: b2:a5:cf:74:23:ea:50:2f:ff:57:5a:00:24:ff:c4: 93:ef:40:25:38:57:6b:0a:ff:5f:2f:2a:99:87:13: d3:79:51:44:0d:b5:8e:d9:bb:ae:d7:78:e3:b3:3c: ad:5a:47:ff:5d:70:15:a4:0d:06:c2:0b:8a:b2:ca: c5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7F:75:AB:36:A1:65:A3:6E:4A:9D:AC:F6:8E:69:DC:6D:3C:12:C7 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8c:dd:45:71:e7:4f:a2:f4:d2:90:41:7c:2b:06:d6:f1:61: 9a:e2:34:44:2c:9f:62:40:2a:37:18:9a:b5:b4:c9:b1:94:1e: 9c:cc:3f:8e:bd:e6:ef:fa:61:6a:41:f4:16:f0:a3:63:af:05: 8e:bc:50:3b:2b:64:55:c1:84:9d:9d:c2:60:f8:48:f4:8a:7a: b8:bb:d5:c8:bf:c5:16:34:9c:5c:7c:b7:4c:72:7a:77:9f:76: f8:9b:39:63:ab:98:35:24:fd:d5:46:a3:0e:f2:bc:8e:8f:d7: 97:56:a4:cc:55:4a:90:41:80:31:20:42:df:33:df:b8:08:39: 89:0c:b7:90:90:19:ef:20:39:d0:f7:d3:d9:46:39:ba:a1:df: 3f:ce:94:47:b2:36:da:ba:3f:9f:c2:47:9d:a1:6e:c7:d2:cc: 05:e4:96:f7:87:08:6e:f9:ea:5b:7c:b7:99:76:f5:ae:f4:1e: 04:d3:06:58:8f:fd:7c:87:49:3c:c4:3f:f7:60:c4:8a:d4:b6: 22:c4:a0:1b:8b:2c:65:30:06:99:a4:7d:30:bd:cc:81:3d:6d: 5b:b9:af:6d:8b:b9:74:41:ef:ec:eb:f4:22:ec:02:5f:9a:9f: 5e:27:e0:97:97:b4:6c:34:e5:e5:a5:0d:29:95:e9:c6:40:e6: aa:07:b5:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62VxFjEbBwgmZMEeSopz26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwNjExMTEwMDE5WhcNMjYwNjEyMTEwMDE5WjAzMTEwLwYDVQQD Eyg0OTdmNzVhYjM2YTE2NWEzNmU0YTlkYWNmNjhlNjlkYzZkM2MxMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ITJ+lcVAoNIc85/46IKnNxkNiZn LW0yQAVDgfXGlVdFjRHl4WpF0OiBilT/GY4L9GGRi7/5QS/N3uR4GgRRwvOLoyT6 Y5optnVeiS5WYuha71WfGw9V/JRdShCN5C7Siy8XQYKX2kX0tdSOKcBm8ubOUjwL leTfqej7aakX/Yw9J1OsR51/XZUS5aYXY4ItZwlisNHghFqdOurpEdrpaS1OQa+w 55mhatK+wTulIc9C5yNFVCT8cNpfe1bEIvz+xNKypc90I+pQL/9XWgAk/8ST70Al OFdrCv9fLyqZhxPTeVFEDbWO2buu13jjszytWkf/XXAVpA0GwguKssrFHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl/das2oWWjbkqdrPaOadxtPBLHMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4zdRXHn T6L00pBBfCsG1vFhmuI0RCyfYkAqNxiatbTJsZQenMw/jr3m7/phakH0FvCjY68F jrxQOytkVcGEnZ3CYPhI9Ip6uLvVyL/FFjScXHy3THJ6d592+Js5Y6uYNST91Uaj DvK8jo/Xl1akzFVKkEGAMSBC3zPfuAg5iQy3kJAZ7yA50PfT2UY5uqHfP86UR7I2 2ro/n8JHnaFux9LMBeSW94cIbvnqW3y3mXb1rvQeBNMGWI/9fIdJPMQ/92DEitS2 IsSgG4ssZTAGmaR9ML3MgT1tW7mvbYu5dEHv7Ov0IuwCX5qfXifgl5e0bDTl5aUN KZXpxkDmqge1zw== -----END CERTIFICATE-----Generated at Thu Jun 11 18:10:51 2026 by rpki-client