$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: p5No1oiF09sbCcYlHps7/i0HPTVSIXN2DsgfBy/EBM4= Subject key identifier: 9D:55:F8:46:44:CB:34:BB:8D:74:40:A2:84:57:80:E9:1B:92:4F:0F Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019CE290E317EE00700188B8EE3722C9581E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 189B Signing time: Thu 12 Mar 2026 15:01:11 +0000 Manifest this update: Thu 12 Mar 2026 15:01:11 +0000 Manifest next update: Fri 13 Mar 2026 15:01:11 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: SOyDqXAesZyFgxAaHNb6JimyYwZGE8HCDUjgZuEVHbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e2:90:e3:17:ee:00:70:01:88:b8:ee:37:22:c9:58:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Mar 12 15:01:11 2026 GMT Not After : Mar 13 15:01:11 2026 GMT Subject: CN=9d55f84644cb34bb8d7440a2845780e91b924f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:bd:63:56:b7:b2:a4:f3:ab:4f:5a:12:80: 1d:d5:2a:cc:e1:2d:69:03:65:f9:9e:bf:b6:e1:7d: 7e:52:60:8b:e9:b9:6f:81:65:97:1f:e5:98:1d:1b: c7:53:c9:7c:f7:1c:2a:6c:3e:2c:7c:a1:fd:58:bf: 83:8f:a1:96:6f:e5:6a:2f:ba:ae:dc:ba:2f:b3:e3: 8e:85:d6:f4:20:9a:87:1c:9d:cf:b7:8f:03:4e:cf: 2e:3a:7f:16:2d:d3:8b:2b:c3:cf:d2:e3:be:c8:d4: 2b:5e:e2:2e:e0:d2:6f:b9:be:16:62:19:d1:a1:f0: 3d:c1:8b:00:74:8d:fc:c2:1b:06:b4:62:cc:d3:5b: 1e:a9:4d:3d:b0:1c:00:62:93:f8:cb:6d:86:6a:14: ed:4a:24:49:3c:0b:57:0b:9c:64:fe:61:aa:f2:3a: 72:cd:ba:5f:af:1a:80:91:14:56:4e:7d:04:a0:51: c1:57:c8:eb:7e:d7:f7:1a:f1:bb:c4:0f:95:a5:2c: c8:fa:fe:83:2c:45:67:55:bb:45:02:1b:52:5a:2e: 52:b0:0a:0c:80:d2:7c:9b:ea:a7:6a:51:9d:8e:52: b7:ea:b9:a8:73:1d:46:f6:52:db:a8:e1:8a:3d:26: aa:07:94:59:1f:31:a9:5d:58:63:8e:64:fe:89:46: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:55:F8:46:44:CB:34:BB:8D:74:40:A2:84:57:80:E9:1B:92:4F:0F X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4c:0c:f1:60:68:61:f5:ea:f7:44:fa:1f:48:d2:ec:96:25: 3f:39:21:95:e7:25:23:10:55:58:8f:0e:60:e7:89:93:bd:5f: ec:26:ca:ed:04:85:e2:16:9a:23:8d:50:78:d2:0e:87:70:ee: ab:e4:c6:91:bd:c1:5e:c4:9f:b4:22:0b:90:da:e1:d2:58:fb: ee:e5:28:43:bb:1f:f3:e8:8f:75:4b:58:cf:c8:ea:7a:d0:b8: 56:cc:eb:b4:af:86:6b:33:8f:e3:c4:fb:4b:98:b7:6e:fd:6b: 5f:a7:5a:19:aa:b0:0f:8c:ce:5d:52:77:73:e2:9c:88:69:1e: 49:96:80:72:eb:0d:c1:c4:ae:ab:4b:c0:cd:42:49:3d:c4:60: 01:6b:35:b5:b9:43:46:3e:be:2d:40:51:e1:9e:02:43:da:81: 80:7e:f4:50:86:54:b5:8d:06:3e:8a:e7:4d:93:c8:ce:88:21: fc:47:13:a0:28:be:db:ae:91:c6:22:d3:9f:32:08:62:bc:c9: 29:67:bd:c4:9a:1b:f6:4d:4f:bf:4a:00:4e:70:2a:ae:b4:37: 41:85:0e:73:c6:f2:98:64:f4:75:f2:22:1d:fb:ee:a5:89:99: d5:3b:65:18:6c:59:08:eb:61:2c:1d:f4:a4:80:7e:76:6e:bb: 6b:35:a4:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzikOMX7gBwAYi47jciyVgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMzEyMTUwMTExWhcNMjYwMzEzMTUwMTExWjAzMTEwLwYDVQQD Eyg5ZDU1Zjg0NjQ0Y2IzNGJiOGQ3NDQwYTI4NDU3ODBlOTFiOTI0ZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoy9Y1a3sqTzq09aEoAd1SrM4S1p A2X5nr+24X1+UmCL6blvgWWXH+WYHRvHU8l89xwqbD4sfKH9WL+Dj6GWb+VqL7qu 3Lovs+OOhdb0IJqHHJ3Pt48DTs8uOn8WLdOLK8PP0uO+yNQrXuIu4NJvub4WYhnR ofA9wYsAdI38whsGtGLM01seqU09sBwAYpP4y22GahTtSiRJPAtXC5xk/mGq8jpy zbpfrxqAkRRWTn0EoFHBV8jrftf3GvG7xA+VpSzI+v6DLEVnVbtFAhtSWi5SsAoM gNJ8m+qnalGdjlK36rmocx1G9lLbqOGKPSaqB5RZHzGpXVhjjmT+iUb1+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1V+EZEyzS7jXRAooRXgOkbkk8PMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkwM8WBo YfXq90T6H0jS7JYlPzkhleclIxBVWI8OYOeJk71f7CbK7QSF4haaI41QeNIOh3Du q+TGkb3BXsSftCILkNrh0lj77uUoQ7sf8+iPdUtYz8jqetC4VszrtK+GazOP48T7 S5i3bv1rX6daGaqwD4zOXVJ3c+KciGkeSZaAcusNwcSuq0vAzUJJPcRgAWs1tblD Rj6+LUBR4Z4CQ9qBgH70UIZUtY0GPornTZPIzogh/EcToCi+266RxiLTnzIIYrzJ KWe9xJob9k1Pv0oATnAqrrQ3QYUOc8bymGT0dfIiHfvupYmZ1TtlGGxZCOthLB30 pIB+dm67azWkYQ== -----END CERTIFICATE-----Generated at Thu Mar 12 22:56:10 2026 by rpki-client