$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft File: xCzMCbGKriXcamxXk_m5IMj2oZA.mft (raw, json) Hash identifier: EQCE3whVrqFgZMsQKwknwqb7fZcIlqrr9onOadgbBAQ= Subject key identifier: 53:82:AE:E2:D8:72:67:9A:28:04:65:22:AE:2E:47:12:D2:7A:43:C6 Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Certificate serial: 01A162329FD8162207EA81C209A6D6B30FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft Manifest number: 0131 Signing time: Thu 22 Oct 2026 06:00:47 +0000 Manifest this update: Thu 22 Oct 2026 06:00:47 +0000 Manifest next update: Fri 23 Oct 2026 06:00:47 +0000 Files and hashes: 1: 0EqH53VKbjCBwptRrMrgE491HhQ.roa (hash: hlOlUUZZiEuddmv9KYC5nE6Vh5F6OtggwbOcesZb7ew=) 2: 5o0i3iMYhKiDSsjJw2IO_CJCyRI.roa (hash: cLWDRlb5at0aBAH980evnabI9atanrKNEOAJh0qjBjM=) 3: 9_lEI-YO-xsNbdJzpz_Zj20rYco.roa (hash: oMnrwxFfNZp1LGwhuhUfXcc2UVGqfAbo9ZJKmysRQV0=) 4: E8IDfbPJ-ASUqOO7Y_PebCnfcG8.roa (hash: Y97cV5mLD6OdoMRNkkIiqZ3KZIjQpuOlelMU9OFPxmA=) 5: H9L6_6x2hId55TmALa95rri1bEE.roa (hash: 9r2y4hipyP45iIbJJm1kWRG0SgwtjIdEoYjDvubCc0w=) 6: Rb5WxdniWZJi2uKGt5iSE3imuKY.roa (hash: cEzxV1Ej8qEgHXObAYowb4t+T2HG7fYTPhD2mGI4Ywc=) 7: YpPmYf6zgICwfjz8NuAopnzNieM.roa (hash: Wfroa7HPPkCm63Ywbw+5nQxutBW2wjmxATyJS+4COgo=) 8: Z5KCSZVXGCrp9dNdx67dsrIqMQs.roa (hash: OByLdhjOZ0YIarl8arWqnOnJBvbgrJT1GS2f+GSHfp4=) 9: c4_Bhf2_gp-Hy5KN9JDfGFYxZ78.roa (hash: 1JGwg63mXrikqzD+c6YLgxnjzd6dRLDZcHOVSYL/I9U=) 10: f2uUPGNXC_pxdPQmPP-DpsHFtOQ.roa (hash: mFFk7nFev+G1oGZg2IbBid7J61ARFJ8OWPLRJsrECIA=) 11: w9Z_kQBpH-mdA7iwzKTWMENR2To.roa (hash: rlA3z5HMnFFWQ/5n7/7EQ6au3c+5eK2aDkiGB8PIifk=) 12: xCzMCbGKriXcamxXk_m5IMj2oZA.crl (hash: KyBafGP9KxW/kOgdXD/iRuppjcNBC8bWEx9KrTrf1/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:62:32:9f:d8:16:22:07:ea:81:c2:09:a6:d6:b3:0f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Validity Not Before: Oct 22 06:00:47 2026 GMT Not After : Oct 23 06:00:47 2026 GMT Subject: CN=5382aee2d872679a28046522ae2e4712d27a43c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:22:26:1e:0e:d9:41:00:4e:8b:3f:42:82: 05:0e:ba:8c:f2:8c:ae:2a:b7:9d:38:0a:44:25:62: b8:0d:3f:9d:ea:fe:54:a3:ab:4a:08:74:bb:a3:bb: 22:fd:e1:a7:c3:7e:75:37:1b:22:2a:1f:20:38:36: c5:d9:d6:10:14:95:19:d1:3e:b6:62:3f:41:1f:0d: 1d:d4:8e:97:4a:35:c9:b7:e4:3d:30:06:76:bb:fb: 84:ab:3e:ed:6b:83:ed:fd:8c:90:83:2a:8b:5e:13: c6:36:59:5a:8a:bf:29:20:b1:0a:bc:6a:07:02:b2: 9a:f5:af:86:e5:11:15:d4:cb:86:cb:c4:b0:62:ca: 4c:6f:54:54:fa:10:b9:a6:e7:08:4b:1a:93:0a:bd: 50:4a:5b:76:a3:25:91:0b:53:c6:29:46:80:ce:9a: 89:8c:a6:6f:1e:e9:39:b6:2a:f4:ef:5d:6d:7b:b4: 9b:25:db:6d:88:ec:d5:36:83:79:5b:02:86:2a:31: 05:3c:f6:aa:46:c9:d1:cd:8d:89:56:4a:75:a8:f1: d5:b9:fd:73:b9:58:16:c1:98:0d:7c:76:f2:dc:e1: 17:c1:a2:32:bd:4e:01:b1:8c:1f:d9:f0:34:71:d8: 0e:ce:4f:73:5f:d6:3c:41:08:3d:70:14:03:6b:d2: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:82:AE:E2:D8:72:67:9A:28:04:65:22:AE:2E:47:12:D2:7A:43:C6 X509v3 Authority Key Identifier: keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2c:40:f8:8a:9f:b8:d2:24:81:b5:27:ea:43:80:1f:83:c9: ee:22:01:0f:fd:ab:60:1f:04:2d:56:10:9e:bf:ab:a5:e2:21: e9:bd:f0:2a:30:59:32:ed:68:11:02:af:9e:f8:a2:8b:de:e1: 7f:75:2e:cb:83:6e:df:45:d4:08:ba:5a:b6:a4:28:62:99:b5: 0f:ec:65:31:cf:24:38:fa:f3:fd:01:0f:62:0d:9f:f6:9d:1b: 22:6d:08:a8:8c:3f:53:5c:35:e7:a9:9b:3b:f4:20:95:f5:a7: 8f:38:55:8a:28:ce:a6:36:fc:7b:b8:83:34:a1:e5:a6:9b:73: 46:57:4c:18:07:d1:1f:b6:81:7c:bb:bf:52:ca:91:b5:13:d5: b7:b8:8d:51:3d:5e:82:02:46:5f:da:cc:db:8b:14:37:28:75: 7b:98:c6:78:32:5b:bc:82:70:13:12:4c:76:e6:c0:55:6e:64: 44:98:12:f7:09:4b:0f:99:3a:d2:bf:23:8d:20:f2:d7:47:b4: 20:e3:af:38:0a:32:52:a8:b5:a8:42:d4:31:49:14:a2:51:5c: 2f:0d:b7:53:3c:9e:6f:12:23:ca:34:da:42:a4:d1:16:a1:89: c7:b9:c8:bc:74:1b:a3:92:f6:51:89:c9:7d:98:21:74:a3:98: a5:a8:f7:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFiMp/YFiIH6oHCCabWsw+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MmNjYzA5YjE4YWFlMjVkYzZhNmM1NzkzZjliOTIwYzhm NmExOTAwHhcNMjYxMDIyMDYwMDQ3WhcNMjYxMDIzMDYwMDQ3WjAzMTEwLwYDVQQD Eyg1MzgyYWVlMmQ4NzI2NzlhMjgwNDY1MjJhZTJlNDcxMmQyN2E0M2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRQiJh4O2UEATos/QoIFDrqM8oyu KredOApEJWK4DT+d6v5Uo6tKCHS7o7si/eGnw351NxsiKh8gODbF2dYQFJUZ0T62 Yj9BHw0d1I6XSjXJt+Q9MAZ2u/uEqz7ta4Pt/YyQgyqLXhPGNllair8pILEKvGoH ArKa9a+G5REV1MuGy8SwYspMb1RU+hC5pucISxqTCr1QSlt2oyWRC1PGKUaAzpqJ jKZvHuk5tir0711te7SbJdttiOzVNoN5WwKGKjEFPPaqRsnRzY2JVkp1qPHVuf1z uVgWwZgNfHby3OEXwaIyvU4BsYwf2fA0cdgOzk9zX9Y8QQg9cBQDa9JJoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOCruLYcmeaKARlIq4uRxLSekPGMB8GA1UdIwQY MBaAFMQszAmxiq4l3GpsV5P5uSDI9qGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECxA+Iqf uNIkgbUn6kOAH4PJ7iIBD/2rYB8ELVYQnr+rpeIh6b3wKjBZMu1oEQKvnviii97h f3Uuy4Nu30XUCLpatqQoYpm1D+xlMc8kOPrz/QEPYg2f9p0bIm0IqIw/U1w156mb O/QglfWnjzhViijOpjb8e7iDNKHlpptzRldMGAfRH7aBfLu/UsqRtRPVt7iNUT1e ggJGX9rM24sUNyh1e5jGeDJbvIJwExJMdubAVW5kRJgS9wlLD5k60r8jjSDy10e0 IOOvOAoyUqi1qELUMUkUolFcLw23UzyebxIjyjTaQqTRFqGJx7nIvHQbo5L2UYnJ fZghdKOYpaj38g== -----END CERTIFICATE-----Generated at Thu Oct 22 10:01:08 2026 by rpki-client