$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: cP7eoVGifIxWZTRXeFop8x6SxKPiuZKZXg2xZfaTzes= Subject key identifier: 32:D5:B5:B4:A6:A8:95:07:EC:84:2C:E4:05:E0:F6:0D:CE:90:98:C1 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019CE4EC72038E25F982A2D6EAB4F4B483D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 1121 Signing time: Fri 13 Mar 2026 02:00:26 +0000 Manifest this update: Fri 13 Mar 2026 02:00:26 +0000 Manifest next update: Sat 14 Mar 2026 02:00:26 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: gNGHstWgoX9eUCwcAoKtv9DDsU/ijmUg2arsaz7c2Nw=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 21:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:ec:72:03:8e:25:f9:82:a2:d6:ea:b4:f4:b4:83:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Mar 13 02:00:26 2026 GMT Not After : Mar 14 02:00:26 2026 GMT Subject: CN=32d5b5b4a6a89507ec842ce405e0f60dce9098c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:ae:d3:1e:26:73:53:57:e8:e7:c9:d8:bc: 69:05:7c:4d:97:60:88:f2:21:f2:60:83:41:96:b3: 03:7a:a0:96:63:df:bf:fe:99:89:72:c6:52:43:a5: ac:64:16:c3:f0:a5:b4:76:8a:7a:a3:b1:0a:5c:36: f9:86:f8:b7:1b:d0:52:7f:f4:40:68:7f:80:19:9a: b4:53:48:a2:db:45:47:49:20:89:48:cd:dc:8e:78: 16:b4:86:fb:cb:11:ae:d8:94:16:c3:33:3f:0b:90: d0:3c:56:08:0d:af:13:e4:6b:81:8a:07:af:bc:70: 29:10:8d:50:72:be:69:46:a3:ed:6a:99:75:7d:ce: 09:69:ec:f6:c0:98:50:18:e2:e7:e2:b9:a5:c0:29: 2d:95:0f:a5:95:c3:8f:5f:f4:19:84:1f:1c:00:48: f6:0b:a9:1b:eb:5c:f0:dd:cc:91:21:57:fe:d2:07: 86:5f:29:87:9f:28:ca:7f:4b:bd:ce:4c:de:ca:e5: 66:3d:ab:7f:84:96:5b:78:7a:d7:3c:4d:0d:66:22: df:4b:8e:0c:22:ba:3a:39:e7:df:62:ae:bc:ef:64: 0c:b8:20:d7:68:b1:f8:ae:ff:10:c8:90:6a:2f:ac: 3f:fb:68:8f:21:a4:55:b7:0e:79:77:91:48:d8:f2: 7b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D5:B5:B4:A6:A8:95:07:EC:84:2C:E4:05:E0:F6:0D:CE:90:98:C1 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:db:fe:98:cb:aa:9a:49:0f:d3:3a:eb:13:5c:39:40:16:61: 6f:f6:3d:a5:1c:02:d4:ce:3e:50:c2:ef:ce:c5:6d:4d:bd:85: 12:16:5e:60:a5:96:e7:bf:3e:7b:8f:3f:19:3d:ee:a6:16:b7: 7d:de:5b:08:fc:49:b0:89:a1:cd:0a:6e:ba:59:41:3f:73:98: c1:68:24:73:39:1e:e2:6e:4a:35:09:27:7c:9a:0b:cc:66:3a: 1f:f0:31:af:76:e3:1d:c2:ae:18:4f:f4:b8:05:ba:74:dd:40: 16:4a:a1:27:a3:ef:bf:98:8e:ad:f8:88:63:1b:3a:17:82:83: ef:c0:eb:9b:e5:0e:35:d5:e1:ae:89:84:e6:94:19:91:b7:34: 0d:3e:25:81:f9:98:d2:69:a2:32:13:20:c8:3d:44:c6:e6:fa: 13:6f:d4:fb:fc:36:4b:fc:3e:1d:d1:e4:3e:6e:d8:36:a9:42: 6f:94:73:db:46:97:92:ae:96:29:12:69:40:50:58:8a:13:ff: 37:08:87:1f:19:7b:a6:2c:8f:8b:0e:6d:83:98:7e:7d:c9:1d: 36:88:f5:6c:e5:fc:bb:8c:b2:81:57:73:77:93:5d:23:ad:e7: 6a:c7:c5:7d:73:91:0f:59:21:fd:9b:50:62:67:99:c4:71:90: 67:0b:c6:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzk7HIDjiX5gqLW6rT0tIPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMzEzMDIwMDI2WhcNMjYwMzE0MDIwMDI2WjAzMTEwLwYDVQQD EygzMmQ1YjViNGE2YTg5NTA3ZWM4NDJjZTQwNWUwZjYwZGNlOTA5OGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdyu0x4mc1NX6OfJ2LxpBXxNl2CI 8iHyYINBlrMDeqCWY9+//pmJcsZSQ6WsZBbD8KW0dop6o7EKXDb5hvi3G9BSf/RA aH+AGZq0U0ii20VHSSCJSM3cjngWtIb7yxGu2JQWwzM/C5DQPFYIDa8T5GuBigev vHApEI1Qcr5pRqPtapl1fc4Jaez2wJhQGOLn4rmlwCktlQ+llcOPX/QZhB8cAEj2 C6kb61zw3cyRIVf+0geGXymHnyjKf0u9zkzeyuVmPat/hJZbeHrXPE0NZiLfS44M Iro6OeffYq6872QMuCDXaLH4rv8QyJBqL6w/+2iPIaRVtw55d5FI2PJ72wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLVtbSmqJUH7IQs5AXg9g3OkJjBMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNv+mMuq mkkP0zrrE1w5QBZhb/Y9pRwC1M4+UMLvzsVtTb2FEhZeYKWW578+e48/GT3upha3 fd5bCPxJsImhzQpuullBP3OYwWgkczke4m5KNQknfJoLzGY6H/Axr3bjHcKuGE/0 uAW6dN1AFkqhJ6Pvv5iOrfiIYxs6F4KD78Drm+UONdXhromE5pQZkbc0DT4lgfmY 0mmiMhMgyD1Exub6E2/U+/w2S/w+HdHkPm7YNqlCb5Rz20aXkq6WKRJpQFBYihP/ NwiHHxl7piyPiw5tg5h+fckdNoj1bOX8u4yygVdzd5NdI63nasfFfXORD1kh/ZtQ YmeZxHGQZwvGmw== -----END CERTIFICATE-----Generated at Fri Mar 13 04:32:02 2026 by rpki-client