$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: jVJkr9FA0wuK0D6F1cAMaPfnrcj7Ymyw5JZNmltQC4I= Subject key identifier: 58:F0:BE:AB:11:5F:BA:22:43:1E:7F:45:38:5B:98:E4:1C:99:B1:4D Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 01A17C9781B8395C4F3BD4010E49122897DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1AFD Signing time: Tue 27 Oct 2026 09:01:06 +0000 Manifest this update: Tue 27 Oct 2026 09:01:06 +0000 Manifest next update: Wed 28 Oct 2026 09:01:06 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: fH19LaOPwBQ6Gmab/Tsb60DpXsGfVszKbNRYo7o5wHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7c:97:81:b8:39:5c:4f:3b:d4:01:0e:49:12:28:97:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Oct 27 09:01:06 2026 GMT Not After : Oct 28 09:01:06 2026 GMT Subject: CN=58f0beab115fba22431e7f45385b98e41c99b14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:24:78:59:db:c4:dc:0c:fc:e7:00:eb:b6: 7a:7e:c2:3e:5d:01:f1:63:85:35:97:c4:67:d1:2d: a0:6e:e9:e1:36:6b:2b:c1:c4:5a:2a:46:27:cf:ab: 06:cd:5a:dd:69:96:a6:85:d5:93:4c:38:4e:ee:b7: 80:16:02:19:44:4d:6c:72:23:f3:a9:df:47:22:13: 9b:ca:93:bc:0a:3e:a6:e1:65:48:fa:0b:c9:47:81: 48:7f:38:b8:ea:85:55:ba:25:b3:7e:c1:30:98:e6: 6c:fc:fd:df:04:58:60:28:9d:e1:1a:92:7b:ac:eb: 03:b1:9a:4e:44:66:18:d4:b8:14:b9:5c:be:df:04: a8:61:3e:37:c4:7e:db:b5:05:58:2a:15:b9:0d:30: 0a:80:46:f2:be:5d:da:31:04:27:a9:2c:33:0a:e3: f7:e8:2b:57:a3:cc:a0:25:85:98:de:5c:86:01:32: a8:a4:c1:65:93:e4:b7:67:96:fb:a3:fc:3a:d5:ff: b1:6e:4c:4a:c1:4d:d6:02:cf:d1:4e:1b:1e:88:ca: b8:d4:09:2a:b4:60:09:3c:07:75:a4:5d:fc:92:e1: 54:bd:bf:9d:f2:35:28:cd:02:3f:76:c7:a2:35:90: a7:10:34:2b:3d:5d:85:80:39:5a:74:32:91:d1:52: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F0:BE:AB:11:5F:BA:22:43:1E:7F:45:38:5B:98:E4:1C:99:B1:4D X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a1:7e:55:42:d4:a6:03:60:c5:7e:c6:72:2a:9d:65:db:9d: 54:3c:99:15:c3:d0:5d:b7:fd:27:0e:be:ae:eb:4a:7a:f8:ef: 35:e9:15:4a:81:42:1a:98:d1:3f:9b:35:75:5c:cb:09:ce:d6: 27:31:d6:5f:75:7c:dd:43:26:6d:88:ac:52:02:a8:7a:a9:4b: 6a:0c:ac:fe:b1:c6:94:55:16:40:1d:70:a0:5a:02:4c:e6:a8: 54:52:0a:5f:11:a5:50:bb:cf:a0:f3:a5:13:ac:b9:74:55:7c: 59:1f:73:80:2b:a5:b0:2a:b6:48:1c:ea:03:1c:f2:37:66:58: e4:3b:62:69:de:8c:06:82:41:8b:de:af:d8:50:31:07:97:39: 2b:a2:62:4e:2c:33:1f:1a:7d:cf:42:90:43:2c:71:28:39:02: be:4e:15:06:9f:5d:c4:31:15:45:21:9f:40:04:21:e4:8b:5c: d0:a8:94:97:c6:2e:c1:8d:7a:96:ee:cf:a6:f1:bc:a5:36:ca: 06:7b:1c:5d:24:a4:53:ec:48:e0:22:75:30:de:db:e3:45:80: 57:ef:d1:7c:50:50:4b:08:e6:55:72:09:a4:ad:dd:79:40:93: d4:2b:48:6a:1e:b7:57:c5:b3:c8:59:62:b3:25:4f:25:e8:cd: 69:0a:db:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF8l4G4OVxPO9QBDkkSKJfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYxMDI3MDkwMTA2WhcNMjYxMDI4MDkwMTA2WjAzMTEwLwYDVQQD Eyg1OGYwYmVhYjExNWZiYTIyNDMxZTdmNDUzODViOThlNDFjOTliMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVwkeFnbxNwM/OcA67Z6fsI+XQHx Y4U1l8Rn0S2gbunhNmsrwcRaKkYnz6sGzVrdaZamhdWTTDhO7reAFgIZRE1sciPz qd9HIhObypO8Cj6m4WVI+gvJR4FIfzi46oVVuiWzfsEwmOZs/P3fBFhgKJ3hGpJ7 rOsDsZpORGYY1LgUuVy+3wSoYT43xH7btQVYKhW5DTAKgEbyvl3aMQQnqSwzCuP3 6CtXo8ygJYWY3lyGATKopMFlk+S3Z5b7o/w61f+xbkxKwU3WAs/RThseiMq41Akq tGAJPAd1pF38kuFUvb+d8jUozQI/dseiNZCnEDQrPV2FgDladDKR0VIqdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjwvqsRX7oiQx5/RThbmOQcmbFNMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKF+VULU pgNgxX7GciqdZdudVDyZFcPQXbf9Jw6+rutKevjvNekVSoFCGpjRP5s1dVzLCc7W JzHWX3V83UMmbYisUgKoeqlLagys/rHGlFUWQB1woFoCTOaoVFIKXxGlULvPoPOl E6y5dFV8WR9zgCulsCq2SBzqAxzyN2ZY5Dtiad6MBoJBi96v2FAxB5c5K6JiTiwz Hxp9z0KQQyxxKDkCvk4VBp9dxDEVRSGfQAQh5Itc0KiUl8YuwY16lu7PpvG8pTbK BnscXSSkU+xI4CJ1MN7b40WAV+/RfFBQSwjmVXIJpK3deUCT1CtIah63V8WzyFli syVPJejNaQrbLw== -----END CERTIFICATE-----Generated at Tue Oct 27 17:30:27 2026 by rpki-client