$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: w2D5fluNu/rUhDo6a04K3sDaDyTAjKKuBY+tttYVCe8= Subject key identifier: 33:0B:B1:31:CC:4E:B1:9B:BD:BC:25:81:BF:E3:31:E1:91:65:F6:47 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 01A14FF585257EF840B72D03B06FC5D6B2E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 1151 Signing time: Sun 18 Oct 2026 17:00:52 +0000 Manifest this update: Sun 18 Oct 2026 17:00:52 +0000 Manifest next update: Mon 19 Oct 2026 17:00:52 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 1nxz0cuRh1bbWRBwHeUoK8qV7Ag.roa (hash: cJl0uLNxWIFkCwsrXzEZ1fzjYpWCkwS20YmjvsnXOuI=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 3I2pFK8nGTJ_uDMRMRqBf5vHxXU.roa (hash: EmVEL6YBB+Z3ZH5Yd/KsUbz2nNCU2trzuyKPxrF9c3s=) 5: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 6: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (hash: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=) 7: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 8: 7dwcBbvVnefNVnS3xa77Chf94xY.roa (hash: VD1nhUhmj/cy239Pjqk6Su3la8qAcLSyM7KYpjO+7HU=) 9: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 10: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 11: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 12: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 13: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 14: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 15: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 16: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 17: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: RzHb8GjMI9ad/NoEFENoDFUMS7+pRXAnu9NSTbqvk7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 14:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:4f:f5:85:25:7e:f8:40:b7:2d:03:b0:6f:c5:d6:b2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Oct 18 17:00:52 2026 GMT Not After : Oct 19 17:00:52 2026 GMT Subject: CN=330bb131cc4eb19bbdbc2581bfe331e19165f647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:d3:37:85:3c:db:1c:7b:0c:ed:b0:ea:05: 8c:b1:5f:98:be:08:ca:3a:1c:c1:0f:94:00:47:4d: 96:f2:1c:d0:0c:dd:d6:8b:05:de:a9:56:d5:a0:c7: a1:19:1f:62:15:14:66:37:50:34:16:2c:f2:8a:8d: 39:9b:85:6c:99:51:a8:0d:0c:d7:84:c5:44:75:c0: 39:a3:46:da:80:b0:31:24:aa:f8:b3:c7:e7:12:61: 4b:df:23:33:16:9c:a6:a8:07:d5:b0:48:f5:b6:b1: e1:42:d4:66:f6:e2:00:e0:8a:36:84:5e:9b:34:b1: 7c:53:48:42:56:1b:f2:51:e7:f7:cd:69:a8:ab:2c: db:01:a0:b4:6b:ab:2d:33:86:8e:5e:e4:7c:9b:16: bc:81:c9:88:13:a7:a0:dd:92:c9:68:04:a8:d8:d6: af:ba:8c:2e:d6:40:ff:7c:b3:d1:c6:68:73:1c:5e: a0:c4:48:5e:13:1f:46:76:12:54:a9:ce:ce:66:87: 74:41:2a:51:9a:d8:17:0e:e0:94:77:f8:53:31:4e: 91:cf:b4:bd:1b:52:ea:a3:b2:a7:a0:29:83:ca:20: 09:ff:77:7e:66:21:f7:78:55:29:18:18:30:ea:21: a7:22:42:8b:14:08:ec:1b:f7:aa:35:8c:13:68:65: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0B:B1:31:CC:4E:B1:9B:BD:BC:25:81:BF:E3:31:E1:91:65:F6:47 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f7:d7:47:69:79:a3:5c:4c:c7:88:03:ac:e7:c8:b5:a4:68: ce:19:a2:74:d6:67:94:0f:aa:3c:9d:9a:e3:2b:f8:c6:ae:40: b6:95:9e:b8:7e:e7:7d:df:d1:b6:f1:1a:f2:93:6a:bc:18:9c: 8a:a9:cf:32:35:e5:9e:e8:87:11:bf:9d:6f:12:c9:3e:c2:63: d3:81:6e:43:0f:0d:b3:18:0c:56:1b:0e:43:f5:3d:13:65:37: 44:0f:6f:31:13:24:04:b2:df:3a:0c:85:ad:45:39:34:55:11: d0:5b:47:a7:af:fd:2f:98:94:26:93:04:23:8c:db:12:1e:3a: 18:d1:0a:8c:4f:c6:03:7e:a6:bc:0e:65:9f:c0:fa:20:f7:cd: e1:89:83:e3:0f:07:75:49:b3:62:dd:eb:21:bc:c3:20:c8:49: 66:12:e6:18:99:84:79:7b:24:56:24:32:d1:25:dc:9b:5b:a1: 8c:7a:e3:1e:ce:d4:64:da:61:0f:3e:0a:4a:48:bf:e0:a0:40: 1d:c5:b0:f4:b2:71:d3:5e:e8:a1:00:ce:95:ba:2e:46:fb:cd: 2f:c8:dd:da:e0:dd:5b:7e:fa:25:36:86:aa:5d:3f:4b:1c:ec: f3:10:64:51:10:a3:7d:cf:29:c0:08:94:84:00:e6:a2:6a:2d: 0a:bf:1b:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFP9YUlfvhAty0DsG/F1rLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYxMDE4MTcwMDUyWhcNMjYxMDE5MTcwMDUyWjAzMTEwLwYDVQQD EygzMzBiYjEzMWNjNGViMTliYmRiYzI1ODFiZmUzMzFlMTkxNjVmNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ULTN4U82xx7DO2w6gWMsV+YvgjK OhzBD5QAR02W8hzQDN3WiwXeqVbVoMehGR9iFRRmN1A0Fizyio05m4VsmVGoDQzX hMVEdcA5o0bagLAxJKr4s8fnEmFL3yMzFpymqAfVsEj1trHhQtRm9uIA4Io2hF6b NLF8U0hCVhvyUef3zWmoqyzbAaC0a6stM4aOXuR8mxa8gcmIE6eg3ZLJaASo2Nav uowu1kD/fLPRxmhzHF6gxEheEx9GdhJUqc7OZod0QSpRmtgXDuCUd/hTMU6Rz7S9 G1Lqo7KnoCmDyiAJ/3d+ZiH3eFUpGBgw6iGnIkKLFAjsG/eqNYwTaGXHywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMLsTHMTrGbvbwlgb/jMeGRZfZHMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvfXR2l5 o1xMx4gDrOfItaRozhmidNZnlA+qPJ2a4yv4xq5AtpWeuH7nfd/RtvEa8pNqvBic iqnPMjXlnuiHEb+dbxLJPsJj04FuQw8NsxgMVhsOQ/U9E2U3RA9vMRMkBLLfOgyF rUU5NFUR0FtHp6/9L5iUJpMEI4zbEh46GNEKjE/GA36mvA5ln8D6IPfN4YmD4w8H dUmzYt3rIbzDIMhJZhLmGJmEeXskViQy0SXcm1uhjHrjHs7UZNphDz4KSki/4KBA HcWw9LJx017ooQDOlbouRvvNL8jd2uDdW376JTaGql0/Sxzs8xBkURCjfc8pwAiU hADmomotCr8b8Q== -----END CERTIFICATE-----Generated at Sun Oct 18 21:04:46 2026 by rpki-client