$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json) Hash identifier: nSmBbjZgzO18rps1S5W+mJEbAURJSGqHesSAtyQp0Ow= Subject key identifier: 17:85:82:67:10:20:81:E7:C4:C7:28:FE:E1:C4:D4:35:E9:8E:B0:CA Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019FF5A2293299D432FF19C0210E86B94722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft Manifest number: 07A4 Signing time: Wed 12 Aug 2026 11:01:13 +0000 Manifest this update: Wed 12 Aug 2026 11:01:13 +0000 Manifest next update: Thu 13 Aug 2026 11:01:13 +0000 Files and hashes: 1: 2ptS9RtqKyQICl-FF5XAQQMG1p8.roa (hash: CnIWNGibVsyJEPJ7wWfI/zOEpiDLnhOyvk0A6/tQZh0=) 2: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=) 3: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=) 4: MHUiyig4q2dE9dcejzFeSdppyes.asa (hash: vsGXprjQpMNWSZX1y2syqnGE09eYObc2WoOHBWaktro=) 5: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: oAsEulfmxhrO1AQ3ZVocAwSmRMYx1AhqOU8Jj2tbqFA=) 6: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=) 7: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=) 8: gbzBHonlRf7ivnA5P_wp2hX0XU4.roa (hash: Bg4gSoBZ6ks0LuCfTWEWHJ+rDpA/oTvHgiBzwgffaf0=) 9: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=) 10: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f5:a2:29:32:99:d4:32:ff:19:c0:21:0e:86:b9:47:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Aug 12 11:01:13 2026 GMT Not After : Aug 13 11:01:13 2026 GMT Subject: CN=17858267102081e7c4c728fee1c4d435e98eb0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:b1:53:d1:f2:de:aa:1f:c3:76:58:81:8b: 12:19:66:f8:85:27:a5:e9:34:ba:81:c0:b8:ca:ec: 84:60:a9:df:2d:8d:fd:30:3a:16:09:8a:c7:13:31: 29:7e:1a:8d:14:37:2f:56:e5:c5:95:d4:bf:9e:51: 04:74:8d:16:c7:c5:01:f6:f0:27:24:03:e5:4f:29: ad:f2:7c:dc:b2:6e:1e:c7:77:3e:36:d1:41:2d:a6: ef:be:4c:fd:7a:0f:13:fb:a3:60:19:a4:43:dd:a4: 7b:ec:80:d8:4e:b9:7a:8b:bc:20:30:12:4d:b6:19: d9:42:4e:b4:ad:d8:96:2c:ed:5c:a7:c5:01:ff:20: a1:a6:b5:f5:8b:9e:da:d2:a1:19:03:b9:5a:29:f7: 88:d0:1c:d8:f8:0e:c1:d8:78:84:86:59:cb:8e:42: d7:58:62:54:6c:93:8b:c9:38:ef:24:6c:a5:fc:d5: 3c:47:fb:99:fc:03:60:49:6e:fe:5a:54:a8:77:c3: 4a:9a:44:d6:26:49:4c:60:db:6a:95:2b:70:33:4a: 15:12:ff:35:fb:ad:c1:35:94:70:97:ac:3b:64:8f: d7:99:7d:f9:53:d1:7a:fe:ce:e8:08:75:8e:e2:3a: fe:55:ce:e6:e9:3f:33:a7:a3:ba:bb:c2:1f:28:dd: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:85:82:67:10:20:81:E7:C4:C7:28:FE:E1:C4:D4:35:E9:8E:B0:CA X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:10:fe:21:9e:86:07:e9:c1:b3:99:f8:51:e4:96:27:bd:c5: a2:44:ee:89:d7:c6:75:75:bf:49:52:9a:13:b8:c3:91:a7:0e: bc:8e:f4:00:ba:b3:f7:1d:33:11:46:ad:63:e3:ed:56:fd:c7: cc:de:aa:79:2f:e0:de:92:83:0f:08:ac:e0:bf:a1:48:e7:7b: 79:cd:01:e4:42:74:1b:72:2c:56:9d:09:1b:9e:a1:fb:55:97: ad:1b:a2:94:58:00:c7:7e:3a:ad:96:81:e2:c2:0c:42:56:87: 93:39:81:97:a4:c5:a9:5f:87:dd:cc:b5:ac:6f:22:c4:91:0d: 3f:8e:50:f3:7a:9f:0a:f0:ab:b5:50:4f:a2:f5:e4:61:1b:38: a3:ff:b8:e1:16:db:78:e2:7d:c5:cc:1b:e3:67:56:18:e5:83: b6:31:2d:e3:82:da:ec:43:63:a8:d9:58:af:c7:34:29:10:fe: 60:86:12:63:19:18:c2:a4:59:76:41:86:1a:07:b7:4b:e2:29: ed:20:1f:bb:c9:65:51:7a:dd:4b:a5:63:03:47:ef:35:22:06: 42:ea:26:bc:51:09:90:ae:7e:ec:a8:ba:67:18:71:51:62:88: 29:e9:23:55:8f:15:09:df:ee:f5:e1:51:99:03:73:02:39:d1: 03:17:68:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/1oikymdQy/xnAIQ6GuUciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjYwODEyMTEwMTEzWhcNMjYwODEzMTEwMTEzWjAzMTEwLwYDVQQD EygxNzg1ODI2NzEwMjA4MWU3YzRjNzI4ZmVlMWM0ZDQzNWU5OGViMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhexU9Hy3qofw3ZYgYsSGWb4hSel 6TS6gcC4yuyEYKnfLY39MDoWCYrHEzEpfhqNFDcvVuXFldS/nlEEdI0Wx8UB9vAn JAPlTymt8nzcsm4ex3c+NtFBLabvvkz9eg8T+6NgGaRD3aR77IDYTrl6i7wgMBJN thnZQk60rdiWLO1cp8UB/yChprX1i57a0qEZA7laKfeI0BzY+A7B2HiEhlnLjkLX WGJUbJOLyTjvJGyl/NU8R/uZ/ANgSW7+WlSod8NKmkTWJklMYNtqlStwM0oVEv81 +63BNZRwl6w7ZI/XmX35U9F6/s7oCHWO4jr+Vc7m6T8zp6O6u8IfKN211wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeFgmcQIIHnxMco/uHE1DXpjrDKMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvxD+IZ6G B+nBs5n4UeSWJ73FokTuidfGdXW/SVKaE7jDkacOvI70ALqz9x0zEUatY+PtVv3H zN6qeS/g3pKDDwis4L+hSOd7ec0B5EJ0G3IsVp0JG56h+1WXrRuilFgAx346rZaB 4sIMQlaHkzmBl6TFqV+H3cy1rG8ixJENP45Q83qfCvCrtVBPovXkYRs4o/+44Rbb eOJ9xcwb42dWGOWDtjEt44La7ENjqNlYr8c0KRD+YIYSYxkYwqRZdkGGGge3S+Ip 7SAfu8llUXrdS6VjA0fvNSIGQuomvFEJkK5+7Ki6ZxhxUWKIKekjVY8VCd/u9eFR mQNzAjnRAxdo5Q== -----END CERTIFICATE-----Generated at Wed Aug 12 20:09:33 2026 by rpki-client