$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: i5cMjaCNKTVCtXr2i76WinnI44EuWTFeNDTfLJ3zHMM= Subject key identifier: 05:C2:D4:1F:B1:95:88:AE:85:2A:81:94:3F:54:5B:E6:16:CF:C4:25 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019D23CBDA3C8FD3E3E03993A9E006DE9789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0F1A Signing time: Wed 25 Mar 2026 07:00:55 +0000 Manifest this update: Wed 25 Mar 2026 07:00:55 +0000 Manifest next update: Thu 26 Mar 2026 07:00:55 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 18LcGFaA85L2PFhGmCXVUOoWIl4.roa (hash: 4CfPxdyovYZLWsCd3zC7X3GJYkpt6Kyh3yiKuvnwRcQ=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 5: 6DAgtZi47nehUjXXTU_IBnF5YW4.roa (hash: Dpma5XKqXI2J8Gsz1+CwwsgqLXij/CGgvv2gTyr8Lt8=) 6: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 7: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 8: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 9: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 10: VeJJmnC-8Q_0a1pLzST4jtM1Hq8.roa (hash: WP4UaUcxrdfBlAMFFsaXmggPZwSD/JcDZLDXI5e7by0=) 11: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 12: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 13: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 14: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: TBRshv48AGLv8XfnwDBdLs8UwXIcHkW6Rt80g5netsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:23:cb:da:3c:8f:d3:e3:e0:39:93:a9:e0:06:de:97:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Mar 25 07:00:55 2026 GMT Not After : Mar 26 07:00:55 2026 GMT Subject: CN=05c2d41fb19588ae852a81943f545be616cfc425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:d9:bc:af:b4:bf:7a:f3:44:2c:53:7c:b5: 8e:08:67:f9:0c:12:9f:e6:97:37:d9:1e:83:ed:8d: 3e:4b:51:b6:36:8d:1b:19:c2:0c:9a:22:7a:d9:01: e1:ad:fd:14:a8:11:e5:9f:1e:fc:84:4d:21:d4:05: 06:6d:d0:5d:12:4a:a4:4c:98:4b:b7:4f:13:e2:31: ed:59:37:6f:81:db:17:50:2b:be:69:c6:d0:a5:90: e5:4c:e0:09:49:c9:ac:8a:71:40:fc:20:81:cc:55: ed:6f:ff:67:8b:1e:c0:c6:b7:11:73:16:1b:ef:72: a2:d7:72:f7:f8:71:70:9c:6b:0c:19:10:2b:71:1c: 92:3b:f8:ba:b8:a8:e5:ef:30:c0:7d:47:8e:bd:12: d8:c5:56:58:c9:15:1c:0e:a6:57:28:4a:33:57:35: 80:5d:40:18:4d:57:dd:05:68:21:06:1b:90:58:a6: 5f:bf:43:1d:ce:c0:be:22:2e:2d:37:af:00:6f:67: 0c:3c:80:4d:ce:72:ff:01:fb:eb:14:cb:eb:75:c8: d2:91:9a:48:d5:e0:75:cf:c6:e7:a3:b2:c2:51:e7: 8e:90:a3:d2:df:b9:28:06:bb:89:83:10:ba:93:f1: f4:95:20:42:a9:af:7f:f7:fb:97:9e:06:18:22:b3: c3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C2:D4:1F:B1:95:88:AE:85:2A:81:94:3F:54:5B:E6:16:CF:C4:25 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9c:67:d3:a2:89:72:91:ff:1e:c4:c5:3f:cb:50:78:26:c1: c2:5c:1c:37:98:fc:6c:fa:61:3f:c4:bc:3b:85:8a:6d:90:40: 0d:4f:7f:2b:0e:12:43:e7:fa:73:0b:5c:49:14:0a:06:24:0c: e5:46:eb:85:b4:e1:af:fa:c1:37:18:34:50:20:fa:c9:8d:a7: 18:62:f7:1b:32:6d:75:fa:40:97:43:60:ad:ca:14:5b:9b:24: f1:46:c2:c4:2c:21:f0:a7:c4:89:e9:b6:e0:d9:01:42:9e:ac: d5:d8:a5:33:48:f9:cf:d7:f8:b1:b7:6e:6c:c8:bf:c5:17:6f: 79:ca:9f:f6:23:b6:14:b9:f7:9e:10:7a:18:20:c3:67:09:10: d0:51:5b:ba:d2:66:93:e2:6b:1b:2e:40:69:fb:ab:51:f9:52: b1:41:65:79:0e:e9:e5:6c:d4:fa:70:3d:38:1d:4f:59:2b:4c: 8c:0b:7c:69:7c:2f:ff:c9:6a:b4:0a:a9:48:88:ec:e3:3e:9d: de:6c:50:f0:67:09:bd:e2:05:bd:ac:2b:66:f6:35:1a:ac:79: 71:5a:55:58:6f:c0:ab:16:56:8e:c7:35:22:ec:91:66:1f:b1: 8c:86:b2:a3:bf:4a:5a:96:b0:fb:02:65:3c:c9:79:cd:51:cb: 68:89:1b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0jy9o8j9Pj4DmTqeAG3peJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwMzI1MDcwMDU1WhcNMjYwMzI2MDcwMDU1WjAzMTEwLwYDVQQD EygwNWMyZDQxZmIxOTU4OGFlODUyYTgxOTQzZjU0NWJlNjE2Y2ZjNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql3ZvK+0v3rzRCxTfLWOCGf5DBKf 5pc32R6D7Y0+S1G2No0bGcIMmiJ62QHhrf0UqBHlnx78hE0h1AUGbdBdEkqkTJhL t08T4jHtWTdvgdsXUCu+acbQpZDlTOAJScmsinFA/CCBzFXtb/9nix7AxrcRcxYb 73Ki13L3+HFwnGsMGRArcRySO/i6uKjl7zDAfUeOvRLYxVZYyRUcDqZXKEozVzWA XUAYTVfdBWghBhuQWKZfv0MdzsC+Ii4tN68Ab2cMPIBNznL/AfvrFMvrdcjSkZpI 1eB1z8bno7LCUeeOkKPS37koBruJgxC6k/H0lSBCqa9/9/uXngYYIrPDcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXC1B+xlYiuhSqBlD9UW+YWz8QlMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJxn06KJ cpH/HsTFP8tQeCbBwlwcN5j8bPphP8S8O4WKbZBADU9/Kw4SQ+f6cwtcSRQKBiQM 5UbrhbThr/rBNxg0UCD6yY2nGGL3GzJtdfpAl0NgrcoUW5sk8UbCxCwh8KfEiem2 4NkBQp6s1dilM0j5z9f4sbdubMi/xRdvecqf9iO2FLn3nhB6GCDDZwkQ0FFbutJm k+JrGy5AafurUflSsUFleQ7p5WzU+nA9OB1PWStMjAt8aXwv/8lqtAqpSIjs4z6d 3mxQ8GcJveIFvawrZvY1Gqx5cVpVWG/AqxZWjsc1IuyRZh+xjIayo79KWpaw+wJl PMl5zVHLaIkblg== -----END CERTIFICATE-----Generated at Wed Mar 25 16:21:36 2026 by rpki-client