$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: sWv+zXmgF09RagWhB6LNRYhc5kj3XrP6E5LQckfEbik= Subject key identifier: E6:EC:14:C8:A2:1E:92:30:5B:79:B7:5A:2B:3C:2F:2C:7B:EB:3C:FF Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019FF9B63DA6DC362DD8A657E07F57F68A72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 15E1 Signing time: Thu 13 Aug 2026 06:01:37 +0000 Manifest this update: Thu 13 Aug 2026 06:01:37 +0000 Manifest next update: Fri 14 Aug 2026 06:01:37 +0000 Files and hashes: 1: 4VJZqkfUJa_Xkc9Gw2XQgDrUF8w.roa (hash: wMKG5waD9dq652WoI6y7txGtOApLPWS45V20JnyJaXM=) 2: 4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa (hash: AcFtBAJ8L85K3ER5s0exdifY6WeWVCgPuREiTI5SL1o=) 3: DaIOsBAUTocNWtQ487tz4YWipHI.roa (hash: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=) 4: Smw8KxULxNV1U3wUVaTgjVcAEN0.roa (hash: xaQVLJNe1R846qUde4wi8d2fl1ASkR/w9PUCNskHzmg=) 5: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 6: TRJJWKb_7wjkntp3CGcdbFhOQt4.roa (hash: lX5LetRpzJkeJpuP3t0ci+4Aa6qHVDBr2/L7PwVh+Os=) 7: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 8: XKGUjZlD7tskIQ5vBU5XUtZBdFU.roa (hash: 4Dp/honokh4JVg16NS/ziIGrcbXgziNFinLk2g3lzv8=) 9: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: jHfzUM/bnlZ4TOZY/r/girfThlc1HzgmK6/jZDtaIEw=) 10: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 11: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 12: tGWG_qgfSiL49D5l9SowKgnIWKQ.roa (hash: mKrVkBXjSw+SHCw28P6sj6VJGBsiYIOzWegDSxHSOOQ=) 13: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 06:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f9:b6:3d:a6:dc:36:2d:d8:a6:57:e0:7f:57:f6:8a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Aug 13 06:01:37 2026 GMT Not After : Aug 14 06:01:37 2026 GMT Subject: CN=e6ec14c8a21e92305b79b75a2b3c2f2c7beb3cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:ce:2c:4d:b0:da:1e:52:12:35:83:42:d8: 02:d4:61:af:69:04:85:1d:9c:7d:5c:3f:84:92:6d: 44:f9:f3:23:9c:ff:88:1f:b1:cf:e7:99:7b:48:f8: 67:37:49:91:e8:b7:c6:ab:76:7f:c3:23:13:c0:b7: 30:33:0a:9a:90:81:46:a3:69:09:6f:72:b7:95:de: 4f:46:fd:a1:f3:2b:a5:6f:b9:8a:b8:56:72:74:cf: ef:ba:74:2f:f8:e2:36:0f:eb:81:d5:7e:da:ee:71: ee:f8:82:e1:52:f8:b7:cf:2f:25:06:bf:59:0f:46: 1d:f9:fc:d2:ca:bd:a8:5c:3f:35:c3:a3:af:d7:54: 40:70:c7:0c:11:4f:8c:06:1d:b1:cf:a0:57:cc:7f: f2:69:34:de:8a:fb:07:78:56:b0:f9:cd:bc:8c:00: da:eb:11:ab:a9:ec:89:39:b4:d5:88:7a:7a:62:c8: 75:c2:1c:1c:a8:7e:cd:d6:11:bb:db:b1:f9:32:13: 18:5a:55:36:1c:8d:15:cb:c9:bc:da:43:3b:05:f4: e2:ad:92:0d:43:5c:b7:c6:85:b2:ad:df:2b:2f:c3: ee:52:9e:2b:b0:52:e3:d9:98:1c:dc:e4:32:f3:a9: 5e:9a:b7:53:dc:6a:ed:21:14:16:8e:20:73:4d:bb: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EC:14:C8:A2:1E:92:30:5B:79:B7:5A:2B:3C:2F:2C:7B:EB:3C:FF X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:49:79:2c:3f:c1:d5:ea:4d:ec:6e:9c:bd:fc:6a:a6:67:fe: 20:12:fb:12:b1:c2:94:82:99:f1:60:37:50:39:e0:b2:d7:8c: fa:a7:13:10:ea:03:13:16:58:54:e4:8f:9c:b9:23:a0:ee:2b: 44:85:72:56:5d:36:e2:d5:df:fd:e3:59:5e:21:22:28:26:f8: be:86:c8:69:f6:b5:e2:5e:6d:77:90:0a:7a:01:1b:61:c8:79: 6a:a9:fa:7c:36:27:9a:08:e8:fe:77:93:41:c8:e9:8c:b2:e0: 55:17:39:1d:31:78:ba:5e:d7:69:e2:73:cc:a7:2a:42:55:3a: 1c:42:8e:23:2a:25:69:56:e9:b0:4e:1f:6c:66:ab:46:8b:20: 3a:5f:38:6e:72:1a:7d:37:7a:e5:b2:28:a7:a9:82:33:00:06: fc:96:59:46:69:73:c0:8f:3c:07:a1:f7:cc:c7:aa:df:be:7d: 6c:bc:1e:d8:c0:6e:f7:26:4d:35:cc:3c:b6:f7:4e:43:2c:91: 56:f9:e6:b0:9b:38:a6:6f:83:55:80:63:f3:96:06:b7:2b:3c: 0c:03:7f:10:ef:7f:55:3b:f2:61:36:d0:4d:20:58:04:79:34: 83:3d:64:01:6f:1e:9c:fa:50:17:44:68:70:c2:67:7f:ea:7e: 96:5f:96:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/5tj2m3DYt2KZX4H9X9opyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwODEzMDYwMTM3WhcNMjYwODE0MDYwMTM3WjAzMTEwLwYDVQQD EyhlNmVjMTRjOGEyMWU5MjMwNWI3OWI3NWEyYjNjMmYyYzdiZWIzY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0TOLE2w2h5SEjWDQtgC1GGvaQSF HZx9XD+Ekm1E+fMjnP+IH7HP55l7SPhnN0mR6LfGq3Z/wyMTwLcwMwqakIFGo2kJ b3K3ld5PRv2h8yulb7mKuFZydM/vunQv+OI2D+uB1X7a7nHu+ILhUvi3zy8lBr9Z D0Yd+fzSyr2oXD81w6Ov11RAcMcMEU+MBh2xz6BXzH/yaTTeivsHeFaw+c28jADa 6xGrqeyJObTViHp6Ysh1whwcqH7N1hG727H5MhMYWlU2HI0Vy8m82kM7BfTirZIN Q1y3xoWyrd8rL8PuUp4rsFLj2Zgc3OQy86lemrdT3GrtIRQWjiBzTbvznQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObsFMiiHpIwW3m3Wis8Lyx76zz/MB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUl5LD/B 1epN7G6cvfxqpmf+IBL7ErHClIKZ8WA3UDngsteM+qcTEOoDExZYVOSPnLkjoO4r RIVyVl024tXf/eNZXiEiKCb4vobIafa14l5td5AKegEbYch5aqn6fDYnmgjo/neT QcjpjLLgVRc5HTF4ul7XaeJzzKcqQlU6HEKOIyolaVbpsE4fbGarRosgOl84bnIa fTd65bIop6mCMwAG/JZZRmlzwI88B6H3zMeq3759bLwe2MBu9yZNNcw8tvdOQyyR VvnmsJs4pm+DVYBj85YGtys8DAN/EO9/VTvyYTbQTSBYBHk0gz1kAW8enPpQF0Ro cMJnf+p+ll+W/Q== -----END CERTIFICATE-----Generated at Thu Aug 13 13:24:10 2026 by rpki-client