$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft File: X-U8C_w8j7VrgRkTFxREQ-DinSU.mft (raw, json) Hash identifier: 2z8RVEEbpz7xziocklpSDwzjNbWL1/3gtRKFGvd9zco= Subject key identifier: D1:4A:20:D7:CC:A5:6D:E6:5F:F6:18:52:6C:5D:E1:25:62:78:76:9A Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Certificate serial: 01A0EE1D314B4B0F98F381327561104A2C2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft Manifest number: 0332 Signing time: Tue 29 Sep 2026 17:01:25 +0000 Manifest this update: Tue 29 Sep 2026 17:01:25 +0000 Manifest next update: Wed 30 Sep 2026 17:01:25 +0000 Files and hashes: 1: 1-WRMeWAjzgb312ndWDBDDXMQ_vI.roa (hash: XzPUGdJfunU8R7/FSgEPmq2u3oT+muSY+llXKr6PBAw=) 2: 1UR7iOUK7d39VgLhHHYabfCLfOQ.roa (hash: oXZ47tHg5pSp0xSQ+s2LJEyC4fnJ8Z/RFiohj4q0860=) 3: 3D91aJc1b1Xugh3NpwokFVe9EHE.roa (hash: RPyCzjrPqhXSX0bgmE4+2E9x3ipWzKg8e+mZU3iZEOQ=) 4: 3Y-eHCCgunD3UqlvqBOXGz_h0B0.roa (hash: 5gPJOtrd7/FR9Rg8PU5TgNYEDSQkiUigOipqFHdBnGw=) 5: 64_DVKhgRZa50PRzVHzS-MDphcc.roa (hash: x0NJJwNguwUvUcOSX51gUnlCVVesftaz8k3Yekk+glY=) 6: 6Kn6KERntDi_4eNpvTRVmFsjPbs.roa (hash: S7y4QiK56lUGKhpEffmK8PyadtfZ3aD7k2+Jzek5K7Y=) 7: FONMbE7JQ_555_AhVQTIUm9lk_Y.roa (hash: GG4U0G3QeJ4kcb/w+WXTiBuOwG5JvNB4bAGnAM53Suc=) 8: INuj-mdGt6rVjs3vF-tqkz-ZTnY.roa (hash: +5qeByzEneEsC8OBCRKdqJbbnxdRus+dvidceYaX+Zw=) 9: JJSXlUjdgsXsxr441kL45vuNPlQ.roa (hash: RV4cugeNLggjz/BuldqDCL7PylisxFfq49zCoougTQc=) 10: LdkzKbOc6UBBYQHPpJdrnxEq4OU.roa (hash: S6QhP5xEUXEZ2xSFH+U8Yf9LI+j3ApeUra07WFUy0N0=) 11: MW7a5ozeRK7aTF0-v1kkuN3zmBw.roa (hash: v0rscB9FZzDyiyT/UQbPiAzxWoDQj9aXYnD+nqDYtG0=) 12: O8fDHPNLTZwX_qmdf9SxlFaFWP4.roa (hash: UJICWm/siXAH3HAjYmp8Fd0w20+HEeezizMeKw3NbcM=) 13: P4OtQvDUkCMuJskgBHh-vNxJu1I.roa (hash: yqqu/7j4s+Y4/ylDF+aywZRspIGl1aQhkK6q+AAIbdQ=) 14: SC9MOMjrqmbOVAWcGnRcQF-RFqE.roa (hash: eQcJ+zf8+aHLfgfb+8QPSi/V+ow88wMOF3ndX9/Y9o8=) 15: X-U8C_w8j7VrgRkTFxREQ-DinSU.crl (hash: xDoVNB+nGKvbfVmLLHry5IafUxKPRopWyLX/NQB6MSM=) 16: YR5NHny-H5eU5tgqNNy6P-03Z9Q.roa (hash: XN+oOCB4Fs/+me/Qvw4xaRoHKMmthIb2bcNRuvZmhx4=) 17: alC0M2rqewLujbKVMB7LiOktrg8.roa (hash: sZNgZ8Tha9mdir4YfVv4bJ4R5xcMRPEjbL+NMqh9Cl0=) 18: d3lmTr7PIEzpH3BI6BqiMMOZGzI.roa (hash: 5T88juZeJZkfQqxz39ljaMd8hJFf/Kn+i1imnzr2zME=) 19: fhBwAAAKsFClM1kXSXaAmjf7WA8.roa (hash: ABuKWxwbP2yN2IKq1ZVxmtzpWZDM6jME0HRhZj5X1YU=) 20: gmxsPG4cUoRDhGjGSFZpIBKC3Vc.roa (hash: 34TUxv9nfVy/jkSU3uZVSK5tEVV3b0jLrFwkZpgwR/I=) 21: jPHYOj_6LWYOivdVvMKC2HFIT4M.roa (hash: WNAYcfnTCYvXJjSjaYW8AjeZqY76pySAXbuH7yNIDFc=) 22: n6Cb7AJIjHdUwKjVZviwZnDYIhM.roa (hash: 9Q8TNAnTm2hfdhie9oH3Jcj9om1Q+4fMUBjWp/97vOg=) 23: niBnbMVkqFMwm26EVgCw4EKo_bU.roa (hash: JT24uuA3eMkhOdW2lEUEMqsdJUmG+tYUXEw08dTPMoY=) 24: ppZPPhs9Fk9KthHZECP8i1n-qRw.roa (hash: r3D9XGo0E46YnlFBTi6Wu1H+lI4vmSw50xc2xlIL764=) 25: s_8exuQTcAjiBuqj7Kb6yyZ3URY.roa (hash: 9D4USD9s5nLllsPvmxgsIDc6aBZr9W6ksocrmvoCt7c=) 26: sp_ETP2RaEyKONTOC69EWe73mcc.roa (hash: se3ZtZfgcOxHMacQP3qmA3MHEEjUOar/xVrhe71pNSc=) 27: y1YHL9stLW0EBSHIGE4wu7b_QNg.roa (hash: WD/77vOfUuYMZHL5B9Asts3xM0tFEHZv2a7HErfU5rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 15:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ee:1d:31:4b:4b:0f:98:f3:81:32:75:61:10:4a:2c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Validity Not Before: Sep 29 17:01:25 2026 GMT Not After : Sep 30 17:01:25 2026 GMT Subject: CN=d14a20d7cca56de65ff618526c5de1256278769a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:91:02:2d:42:a8:17:ac:d5:3f:2e:cd:ac: 4f:dc:fb:36:f6:0b:10:b4:07:bc:d4:b6:d1:56:f7: 5a:ab:a7:5f:33:52:7a:c6:ec:cd:6b:26:81:45:54: b8:da:a7:e4:e2:98:51:1d:90:54:76:16:97:36:ef: 63:38:f8:ef:74:4c:df:30:7b:5e:40:9e:57:c1:59: b1:22:cb:c7:bf:1c:52:aa:43:00:91:e7:a8:cf:54: a4:b0:14:fe:5d:70:c4:f4:e5:eb:de:8b:67:54:ad: 43:20:af:01:02:2f:bf:a1:a6:39:76:9c:9e:10:9b: 45:69:de:1c:4c:74:c2:bd:d7:94:2d:22:d2:3b:b3: 42:91:c1:1d:a4:05:4a:02:20:13:9e:28:3e:64:08: 54:b2:1f:3c:a6:66:e6:37:1d:1e:46:21:93:9f:1f: 54:81:a7:3c:10:31:6b:5d:c9:09:19:b8:38:78:c9: dc:29:5a:d4:23:6b:71:12:ff:53:d2:14:55:48:af: 5b:40:28:99:3a:e4:75:b1:6d:aa:d2:7f:88:f9:e4: 6e:ba:90:13:ef:cf:b7:b4:c9:e7:9b:6e:c6:b4:6b: 14:45:2d:f6:a8:73:5c:af:eb:1b:66:61:ff:f6:e7: 62:0f:3c:45:62:29:e4:2e:86:f0:20:7a:7e:31:fe: 05:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4A:20:D7:CC:A5:6D:E6:5F:F6:18:52:6C:5D:E1:25:62:78:76:9A X509v3 Authority Key Identifier: keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d3:53:24:3d:94:de:9f:71:f7:b7:e1:75:24:68:3b:a1:bf: ba:a9:1e:da:76:aa:1c:7c:e6:d1:6c:a7:3f:ea:1a:2e:da:2a: 61:5a:a6:ed:25:c7:c7:3c:f2:59:fe:12:29:b3:51:8a:a8:89: d8:41:89:43:b3:a5:89:15:21:81:df:6c:d9:ba:8e:58:52:48: ea:db:fa:50:82:de:7d:ee:73:ae:7f:d0:17:7a:26:cd:7a:fc: db:3e:68:a0:9a:7d:79:ec:16:7a:52:8f:4c:f1:b5:15:2b:e0: 7a:42:0a:12:2e:f4:56:51:41:f5:99:7b:45:e5:44:d0:8a:51: 05:08:10:6b:28:f8:e4:bf:5a:f5:41:8f:19:3e:44:f2:3e:e2: 04:fc:a5:54:39:fc:9c:01:0b:bb:6a:c6:db:fd:eb:02:a5:5f: d2:4a:d8:f8:8b:08:9a:27:cb:e2:0d:b9:ea:19:cb:eb:ab:2f: 12:bb:2a:c4:fd:8a:61:f8:08:3b:c3:c2:2d:f9:1b:f9:2b:41: 4f:93:84:cb:ba:77:8a:31:11:a6:c7:68:29:d2:70:1b:e5:4e: f3:2a:29:ba:58:db:18:61:c7:89:90:ed:9c:3b:35:74:49:5a: 40:c8:3d:1a:6e:a7:4b:fe:4d:f0:59:6e:9f:92:a9:78:76:5d: 98:02:6c:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDuHTFLSw+Y84EydWEQSiwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl MjlkMjUwHhcNMjYwOTI5MTcwMTI1WhcNMjYwOTMwMTcwMTI1WjAzMTEwLwYDVQQD EyhkMTRhMjBkN2NjYTU2ZGU2NWZmNjE4NTI2YzVkZTEyNTYyNzg3NjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti6RAi1CqBes1T8uzaxP3Ps29gsQ tAe81LbRVvdaq6dfM1J6xuzNayaBRVS42qfk4phRHZBUdhaXNu9jOPjvdEzfMHte QJ5XwVmxIsvHvxxSqkMAkeeoz1SksBT+XXDE9OXr3otnVK1DIK8BAi+/oaY5dpye EJtFad4cTHTCvdeULSLSO7NCkcEdpAVKAiATnig+ZAhUsh88pmbmNx0eRiGTnx9U gac8EDFrXckJGbg4eMncKVrUI2txEv9T0hRVSK9bQCiZOuR1sW2q0n+I+eRuupAT 78+3tMnnm27GtGsURS32qHNcr+sbZmH/9udiDzxFYinkLobwIHp+Mf4FxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFKINfMpW3mX/YYUmxd4SVieHaaMB8GA1UdIwQY MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct NWNmNTZlZTQzNWIzLzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdNTJD2U 3p9x97fhdSRoO6G/uqke2naqHHzm0WynP+oaLtoqYVqm7SXHxzzyWf4SKbNRiqiJ 2EGJQ7OliRUhgd9s2bqOWFJI6tv6UILefe5zrn/QF3omzXr82z5ooJp9eewWelKP TPG1FSvgekIKEi70VlFB9Zl7ReVE0IpRBQgQayj45L9a9UGPGT5E8j7iBPylVDn8 nAELu2rG2/3rAqVf0krY+IsImifL4g256hnL66svErsqxP2KYfgIO8PCLfkb+StB T5OEy7p3ijERpsdoKdJwG+VO8yopuljbGGHHiZDtnDs1dElaQMg9Gm6nS/5N8Flu n5KpeHZdmAJsDw== -----END CERTIFICATE-----Generated at Tue Sep 29 19:19:11 2026 by rpki-client