$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: rRdct3U11Ru5NnSJ2qsU771q6yWsjq6lom2otK0KeXM= Subject key identifier: F1:EE:00:FE:9D:E3:C0:F8:B5:0E:27:9E:34:29:68:12:3A:05:EC:D4 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 01A0D68273F6CE980D432FB8860FFB87F440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 1A8B Signing time: Fri 25 Sep 2026 03:01:08 +0000 Manifest this update: Fri 25 Sep 2026 03:01:08 +0000 Manifest next update: Sat 26 Sep 2026 03:01:08 +0000 Files and hashes: 1: 1-l4RaLfBJyd2MPQTNrHgHOb738I.asa (hash: 7p+VWBjLWtE4REi9BbdzkPj1Ve0U1PFZBt+RJ3xIr6c=) 2: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 3: 5MrbF5bNGEPF9upXfBtS4A4wDl4.roa (hash: cuTzNTZt0vxLLk58kaLIpL4TUhhDviNmQSTtCDK4SsY=) 4: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 5: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 6: KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa (hash: FunXZj+wtacs6pD/kFNFcLd6gqmej6YgcTSrFfpXd0I=) 7: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: FaBu8f5kx3L0yInq/teYPwqwnOBSmZUG1F9RVdQ9gNs=) 8: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 9: Yeq657xhQdSGU8ozMoBAHWz1c7o.roa (hash: R/IQB+JYvEApcpK9ekXgPiUzLmKHajFNMuKejVzFsKs=) 10: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 11: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 12: pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa (hash: g4uEePdexAW53FzeUPyjdIrDSmjkq/x7/+0BrdOJwdU=) 13: ubBrtzGmGbSO-WUwJl4ceatGG7s.roa (hash: HzJ4FfYId8f62Ds2rGoMX1JffixOL9SOPWiVHisDEAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:82:73:f6:ce:98:0d:43:2f:b8:86:0f:fb:87:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Sep 25 03:01:08 2026 GMT Not After : Sep 26 03:01:08 2026 GMT Subject: CN=f1ee00fe9de3c0f8b50e279e342968123a05ecd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:6d:52:d0:0d:7e:13:ab:c3:f9:f0:9a:9d: 34:17:22:f3:18:0d:f8:93:78:fd:7b:95:6c:45:ce: 22:f1:36:ab:c1:61:6c:c1:f6:6d:ca:2a:82:99:fc: a7:fa:c5:7a:06:7c:66:1a:ac:01:e9:d2:89:36:98: 06:7d:c3:aa:8a:a3:6c:a2:06:36:4b:6a:eb:79:56: fb:92:d2:2c:de:51:eb:24:42:0f:4e:9a:38:6e:af: e0:db:b2:06:c1:36:c7:5c:5b:42:1f:9b:87:aa:6f: bd:ba:17:51:e0:48:cc:26:33:b5:19:cc:2d:d5:72: c2:8a:9d:e1:b7:93:46:52:70:a1:78:35:b1:5e:81: 5d:5c:e2:da:d6:5a:08:ec:4c:69:f3:3a:a8:75:ef: 39:55:30:cb:7b:49:a3:a8:d1:ad:6b:2b:57:8a:f6: 1b:80:81:b8:04:bd:3f:b1:87:a9:74:38:cf:4b:11: b1:0c:7e:80:82:49:7f:95:d3:6f:c2:d8:de:5b:97: 6a:18:15:72:d9:33:b3:7e:38:76:0a:57:3c:c8:6c: 47:7b:05:2f:bd:1b:39:1c:f6:92:cf:18:74:00:e8: a9:2e:fa:70:66:ab:01:2b:b7:b6:1e:ae:90:d0:27: da:a2:0a:e7:9c:ff:d9:16:ea:10:75:67:62:7b:1b: e6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EE:00:FE:9D:E3:C0:F8:B5:0E:27:9E:34:29:68:12:3A:05:EC:D4 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4f:27:ab:4f:d0:89:55:24:df:c6:d4:58:e3:d3:94:3a:9b: 07:c4:7e:4a:cf:09:25:dc:39:81:10:57:3e:4e:a1:d0:ca:ec: 32:17:a0:d7:e9:17:ac:cd:4d:88:df:85:39:a6:3e:86:0b:f4: f9:32:6b:75:4f:d4:a2:12:c2:e7:db:28:83:f1:41:a0:9a:22: 89:45:a7:83:31:f5:7e:50:53:1f:34:68:ab:0a:5a:3e:cc:c2: d7:f6:05:6e:fe:af:e2:5f:3f:b5:a8:f3:57:bd:81:aa:28:c6: fa:bd:35:d3:fd:d6:60:3c:49:98:2e:a7:96:96:9f:71:4b:a5: 05:3e:ae:0c:93:66:96:4c:94:47:20:a7:37:18:c9:e0:64:ba: 48:a5:c0:91:2c:3c:8e:b0:05:90:7e:21:6b:41:32:24:22:0a: d4:d4:ab:1a:57:50:6b:c6:d0:af:a9:8a:14:96:6f:ff:f3:20: 20:a5:92:1b:0f:15:43:39:ca:cd:ea:ee:aa:63:a8:bc:20:d0: f4:d2:ef:e2:70:b2:1b:46:0b:c0:34:ad:ab:0c:49:fa:38:48: 78:c8:a9:4d:93:11:3a:8e:db:f7:c6:3d:72:cb:f1:92:ad:cd: 89:38:c5:0b:60:2c:08:08:cb:d1:62:05:db:d8:4a:16:aa:7a: 38:2a:cf:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWgnP2zpgNQy+4hg/7h/RAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwOTI1MDMwMTA4WhcNMjYwOTI2MDMwMTA4WjAzMTEwLwYDVQQD EyhmMWVlMDBmZTlkZTNjMGY4YjUwZTI3OWUzNDI5NjgxMjNhMDVlY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGxtUtANfhOrw/nwmp00FyLzGA34 k3j9e5VsRc4i8TarwWFswfZtyiqCmfyn+sV6BnxmGqwB6dKJNpgGfcOqiqNsogY2 S2rreVb7ktIs3lHrJEIPTpo4bq/g27IGwTbHXFtCH5uHqm+9uhdR4EjMJjO1Gcwt 1XLCip3ht5NGUnCheDWxXoFdXOLa1loI7Exp8zqode85VTDLe0mjqNGtaytXivYb gIG4BL0/sYepdDjPSxGxDH6Agkl/ldNvwtjeW5dqGBVy2TOzfjh2Clc8yGxHewUv vRs5HPaSzxh0AOipLvpwZqsBK7e2Hq6Q0CfaogrnnP/ZFuoQdWdiexvmmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHuAP6d48D4tQ4nnjQpaBI6BezUMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVk8nq0/Q iVUk38bUWOPTlDqbB8R+Ss8JJdw5gRBXPk6h0MrsMheg1+kXrM1NiN+FOaY+hgv0 +TJrdU/UohLC59sog/FBoJoiiUWngzH1flBTHzRoqwpaPszC1/YFbv6v4l8/tajz V72BqijG+r010/3WYDxJmC6nlpafcUulBT6uDJNmlkyURyCnNxjJ4GS6SKXAkSw8 jrAFkH4ha0EyJCIK1NSrGldQa8bQr6mKFJZv//MgIKWSGw8VQznKzeruqmOovCDQ 9NLv4nCyG0YLwDStqwxJ+jhIeMipTZMROo7b98Y9csvxkq3NiTjFC2AsCAjL0WIF 29hKFqp6OCrP3A== -----END CERTIFICATE-----Generated at Fri Sep 25 10:54:14 2026 by rpki-client