$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: zINC+0eij+CUbOlFINv3PDaJ6F9dKm9OYz3d7kFlzn4= Subject key identifier: FC:42:56:5E:6E:9C:C1:EB:3C:7A:67:DA:E3:AD:05:45:3F:5E:26:CB Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 01A1219C8DD4B48FA1C52CB5AB97F154D48E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1680 Signing time: Fri 09 Oct 2026 17:01:10 +0000 Manifest this update: Fri 09 Oct 2026 17:01:10 +0000 Manifest next update: Sat 10 Oct 2026 17:01:10 +0000 Files and hashes: 1: 4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa (hash: AcFtBAJ8L85K3ER5s0exdifY6WeWVCgPuREiTI5SL1o=) 2: DaIOsBAUTocNWtQ487tz4YWipHI.roa (hash: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=) 3: FgJP64FoJV8_hIK2IAid-gzEPOA.roa (hash: W1tB5nUgJwSISrimA3Glw9hH6mwOZ6v4Q1ppt5jQ0nk=) 4: MgKqc1aKvwt_F0DsLE--UTJHQcA.roa (hash: +BChKL+YmtQ67SHBWUTbFvOW0BIZ913gq5gwRTYNuUo=) 5: R5S--utC9laYMZLaK8e5y0xU4YE.roa (hash: TDBMDGa2/0sxnlzLOujaeEN+d/Z+bRBFPSV66wTIH5k=) 6: Smw8KxULxNV1U3wUVaTgjVcAEN0.roa (hash: xaQVLJNe1R846qUde4wi8d2fl1ASkR/w9PUCNskHzmg=) 7: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 8: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 9: XKGUjZlD7tskIQ5vBU5XUtZBdFU.roa (hash: 4Dp/honokh4JVg16NS/ziIGrcbXgziNFinLk2g3lzv8=) 10: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: 8QoyzrnpGpEpjkaDrfsqXeZQJZX/s1duCGeQM8lkMD8=) 11: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 12: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 13: somfiJ2imAgUIPFKEceqOz351PE.roa (hash: Xyi4uD7LPy6XNWQPjK5KAiBxJgZx+gzHc61t4D4w+zo=) 14: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 13:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:21:9c:8d:d4:b4:8f:a1:c5:2c:b5:ab:97:f1:54:d4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Oct 9 17:01:10 2026 GMT Not After : Oct 10 17:01:10 2026 GMT Subject: CN=fc42565e6e9cc1eb3c7a67dae3ad05453f5e26cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:e3:ca:66:a0:fe:15:80:59:2f:43:4e:74: 57:66:4e:ee:c1:9e:6f:36:dd:f2:fb:79:cc:77:95: 58:1a:61:de:c5:fd:1d:37:4c:80:34:6b:a5:f1:1d: ed:89:ea:b1:73:b5:74:47:a1:ee:93:c2:ba:e2:b8: e3:43:ec:4d:db:5b:bc:40:db:d1:87:33:24:4e:88: bb:e1:03:27:c9:39:fd:20:00:23:04:8f:32:ae:a0: b9:e8:1d:cd:af:15:69:b6:7b:22:f2:a5:5c:1e:1e: 41:b1:89:23:b6:6a:79:8d:12:cf:27:83:ef:56:fe: 70:58:5d:6d:7a:f0:33:da:89:fe:d7:4d:b9:c3:65: b1:03:98:7d:9d:93:90:85:fe:0f:a6:5f:c6:7b:4e: 98:84:66:a6:d0:10:f5:40:6f:1a:41:02:9c:11:f8: c6:ed:7d:fb:af:23:f7:e6:9c:31:fa:9c:fb:d8:39: 9e:8d:17:cd:3d:d8:08:e8:67:2a:d0:a3:4d:0b:9d: 6f:c5:4e:64:ad:ba:67:db:be:ce:2c:41:49:8d:2f: e8:50:6f:d7:99:a5:43:48:33:3d:6a:b5:a0:0b:74: e0:9d:13:ba:de:b3:63:2a:9b:42:5d:ec:be:a9:e2: 3d:a8:05:1d:48:01:be:ab:3b:1e:ea:17:70:c0:2e: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:42:56:5E:6E:9C:C1:EB:3C:7A:67:DA:E3:AD:05:45:3F:5E:26:CB X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f6:4d:ee:76:e3:64:94:15:2c:72:0a:2f:db:08:1a:04:9b: 4a:f7:34:2a:cd:69:3d:f7:2f:93:eb:cc:77:e4:be:29:f2:01: da:58:5d:41:d2:c3:94:17:64:65:ba:08:57:20:61:14:03:0b: 80:fb:ea:c2:91:4b:d8:f2:eb:b9:50:fe:f1:35:4e:89:9b:55: f5:85:cd:b4:04:05:4f:6a:39:e2:58:35:ed:0a:13:90:c1:09: 86:86:f5:95:7b:45:0e:49:59:0a:94:72:f7:3c:07:ef:89:51: d1:8b:7b:c4:3a:ee:e5:4a:b8:57:ae:b9:7f:a3:cd:10:f5:e4: 36:a5:c4:cb:00:fd:0e:4c:49:74:08:59:e7:b2:5e:a5:fb:94: 35:cf:d7:66:93:03:43:e6:e4:2f:1b:aa:74:32:56:76:20:fe: 86:51:81:94:2d:b9:ab:56:bf:2e:f4:eb:1e:b7:89:6f:92:cb: 82:70:20:b3:3c:82:5a:d6:a8:af:71:2c:c0:b7:d0:cb:1a:59: 04:d4:b9:6d:50:1f:9d:bd:c1:2b:d6:bc:e7:f5:02:78:a3:04: 5d:c8:61:78:4e:88:d5:2a:78:40:58:cb:21:53:d5:58:e7:94: 9f:42:14:6e:ae:23:60:35:a0:f3:0f:74:b9:cc:9a:64:60:d4: 3f:48:ae:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEhnI3UtI+hxSy1q5fxVNSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYxMDA5MTcwMTEwWhcNMjYxMDEwMTcwMTEwWjAzMTEwLwYDVQQD EyhmYzQyNTY1ZTZlOWNjMWViM2M3YTY3ZGFlM2FkMDU0NTNmNWUyNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE/jymag/hWAWS9DTnRXZk7uwZ5v Nt3y+3nMd5VYGmHexf0dN0yANGul8R3tieqxc7V0R6Huk8K64rjjQ+xN21u8QNvR hzMkToi74QMnyTn9IAAjBI8yrqC56B3NrxVptnsi8qVcHh5BsYkjtmp5jRLPJ4Pv Vv5wWF1tevAz2on+1025w2WxA5h9nZOQhf4Ppl/Ge06YhGam0BD1QG8aQQKcEfjG 7X37ryP35pwx+pz72DmejRfNPdgI6Gcq0KNNC51vxU5krbpn277OLEFJjS/oUG/X maVDSDM9arWgC3TgnRO63rNjKptCXey+qeI9qAUdSAG+qzse6hdwwC5KowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxCVl5unMHrPHpn2uOtBUU/XibLMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvZN7nbj ZJQVLHIKL9sIGgSbSvc0Ks1pPfcvk+vMd+S+KfIB2lhdQdLDlBdkZboIVyBhFAML gPvqwpFL2PLruVD+8TVOiZtV9YXNtAQFT2o54lg17QoTkMEJhob1lXtFDklZCpRy 9zwH74lR0Yt7xDru5Uq4V665f6PNEPXkNqXEywD9DkxJdAhZ57JepfuUNc/XZpMD Q+bkLxuqdDJWdiD+hlGBlC25q1a/LvTrHreJb5LLgnAgszyCWtaor3EswLfQyxpZ BNS5bVAfnb3BK9a85/UCeKMEXchheE6I1Sp4QFjLIVPVWOeUn0IUbq4jYDWg8w90 ucyaZGDUP0iujQ== -----END CERTIFICATE-----Generated at Fri Oct 9 20:03:15 2026 by rpki-client