$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: 8obSWKB+GN3zCoiMX7DetSIYYiX1q5lgklZAQ/cvoCk= Subject key identifier: 56:61:F5:BA:7E:1C:CC:1A:72:16:5A:3B:DF:29:F8:76:8A:A0:57:0B Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019FA18429B35F8C90DDA56961B3F78A8599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1A07 Signing time: Mon 27 Jul 2026 03:00:20 +0000 Manifest this update: Mon 27 Jul 2026 03:00:20 +0000 Manifest next update: Tue 28 Jul 2026 03:00:20 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: QJJxORWNL6I2LbmUvJvyjXYTMVyUSmRzv5657lqhmzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:84:29:b3:5f:8c:90:dd:a5:69:61:b3:f7:8a:85:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jul 27 03:00:20 2026 GMT Not After : Jul 28 03:00:20 2026 GMT Subject: CN=5661f5ba7e1ccc1a72165a3bdf29f8768aa0570b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:ab:ec:34:c1:dd:31:61:2e:ec:43:9a:a8: 01:90:48:9e:99:0d:51:0e:11:dd:a1:7f:43:ce:71: 49:6f:8b:a5:4b:33:0d:54:68:aa:c4:06:d7:e6:61: 8f:3c:2c:ec:00:1a:8f:54:a2:8d:5a:bc:06:d6:a5: 64:84:80:f5:99:6f:ca:91:8f:30:d2:07:f3:bc:5a: b7:80:42:8c:58:12:a0:8b:55:f1:9a:be:fa:47:da: 84:59:05:b0:28:0f:be:f4:60:f4:71:a7:32:56:b1: 66:26:20:d5:d9:d3:41:70:9d:bc:dc:0d:33:75:51: b2:c1:76:22:70:ff:08:c1:61:99:fb:4c:65:da:74: b2:d6:b2:c3:7d:93:95:6a:64:9e:94:bb:1e:25:6f: 65:7d:8f:28:30:40:37:cc:e7:90:0f:c9:72:09:2a: 98:40:8e:41:a4:bf:8f:d6:7b:8f:08:63:39:6e:a5: 33:31:ae:5c:1b:a0:ff:7b:15:18:cf:89:f1:63:6a: bc:de:1b:5a:eb:59:9f:ab:53:33:8f:97:1a:cc:3e: 76:1b:35:c3:67:5f:13:b7:c5:8c:65:e6:06:34:fa: 7e:b3:59:93:15:71:bd:0b:7c:a4:6a:b9:34:76:63: 67:4d:0b:64:5e:c3:77:07:6b:80:3e:3a:4b:a1:89: 7a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:61:F5:BA:7E:1C:CC:1A:72:16:5A:3B:DF:29:F8:76:8A:A0:57:0B X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:18:37:d8:46:07:88:fe:62:06:43:9b:c4:4d:38:cf:44:f9: 9c:de:5b:14:99:69:b9:3a:98:7c:1c:6d:73:4e:de:8c:2b:11: 14:38:a5:c9:1f:19:4b:77:b0:c5:8b:c1:e1:7c:91:b7:39:6f: 0d:2c:d9:03:bc:6b:30:60:66:9b:f0:fe:1c:d7:d9:9a:02:73: 25:4a:55:a9:1a:ba:a4:59:54:8a:1f:6a:99:0e:c2:b5:57:0f: 3e:4d:0a:2b:37:3c:1c:58:c8:6d:7e:14:e3:dd:d5:6f:bc:64: d0:71:ea:0f:5d:99:26:3e:70:ed:6a:8b:2c:3b:8e:21:67:97: 48:2d:32:52:5b:ea:f8:aa:a1:b5:8a:8e:8b:15:2b:fa:4e:56: 97:d8:d6:85:00:aa:5e:9e:a6:d0:fd:e0:7e:fe:97:5f:b8:1e: 7f:c4:a1:ef:e9:8c:6f:16:86:4a:97:40:92:7b:c0:6f:04:fe: 0a:b0:1e:f9:f6:aa:45:8f:ab:23:c3:19:58:69:68:e1:fc:e4: 27:3f:cf:4f:9b:76:14:0e:1c:87:c2:ad:14:f0:c2:0d:5d:c0: 53:10:28:27:a9:81:ec:1f:5b:30:29:7b:b0:c9:09:54:2d:c5: 90:3f:a2:99:bb:ad:f6:2e:4f:b9:f4:0d:52:8b:73:93:60:3a: ed:06:dc:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hhCmzX4yQ3aVpYbP3ioWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwNzI3MDMwMDIwWhcNMjYwNzI4MDMwMDIwWjAzMTEwLwYDVQQD Eyg1NjYxZjViYTdlMWNjYzFhNzIxNjVhM2JkZjI5Zjg3NjhhYTA1NzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRSr7DTB3TFhLuxDmqgBkEiemQ1R DhHdoX9DznFJb4ulSzMNVGiqxAbX5mGPPCzsABqPVKKNWrwG1qVkhID1mW/KkY8w 0gfzvFq3gEKMWBKgi1Xxmr76R9qEWQWwKA++9GD0cacyVrFmJiDV2dNBcJ283A0z dVGywXYicP8IwWGZ+0xl2nSy1rLDfZOVamSelLseJW9lfY8oMEA3zOeQD8lyCSqY QI5BpL+P1nuPCGM5bqUzMa5cG6D/exUYz4nxY2q83hta61mfq1Mzj5cazD52GzXD Z18Tt8WMZeYGNPp+s1mTFXG9C3ykark0dmNnTQtkXsN3B2uAPjpLoYl6vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZh9bp+HMwachZaO98p+HaKoFcLMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhg32EYH iP5iBkObxE04z0T5nN5bFJlpuTqYfBxtc07ejCsRFDilyR8ZS3ewxYvB4XyRtzlv DSzZA7xrMGBmm/D+HNfZmgJzJUpVqRq6pFlUih9qmQ7CtVcPPk0KKzc8HFjIbX4U 493Vb7xk0HHqD12ZJj5w7WqLLDuOIWeXSC0yUlvq+KqhtYqOixUr+k5Wl9jWhQCq Xp6m0P3gfv6XX7gef8Sh7+mMbxaGSpdAknvAbwT+CrAe+faqRY+rI8MZWGlo4fzk Jz/PT5t2FA4ch8KtFPDCDV3AUxAoJ6mB7B9bMCl7sMkJVC3FkD+imbut9i5PufQN Uotzk2A67QbcYA== -----END CERTIFICATE-----Generated at Mon Jul 27 05:47:00 2026 by rpki-client