$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: lK3j3y0Ma3e6gQcnhxh5jHQ7pYSfkqnBXwGqhgm1USQ= Subject key identifier: C9:6E:34:E9:E6:0D:B8:6A:F1:AF:1F:D0:9A:CA:A6:47:22:63:1A:56 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019D262884F85C5F4FE29DB08B23CC5A83CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 1768 Signing time: Wed 25 Mar 2026 18:01:22 +0000 Manifest this update: Wed 25 Mar 2026 18:01:22 +0000 Manifest next update: Thu 26 Mar 2026 18:01:22 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: EsMvnkbwEht7x122JcrCOY8l3w7tMBzqoQlvslJchw4=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:28:84:f8:5c:5f:4f:e2:9d:b0:8b:23:cc:5a:83:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Mar 25 18:01:22 2026 GMT Not After : Mar 26 18:01:22 2026 GMT Subject: CN=c96e34e9e60db86af1af1fd09acaa64722631a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:e3:14:89:15:ad:90:15:48:31:3e:cf:b2: 54:0c:1b:9a:bf:1b:70:ac:b8:ec:a6:1c:20:01:9c: 70:ab:5e:62:dd:56:a2:04:c9:c2:a7:18:f4:f4:65: ae:da:a8:f2:69:34:a3:10:a0:b7:cb:8c:98:ef:47: 1f:49:c7:08:a6:39:51:9b:4b:23:99:9c:d1:a3:38: 73:a3:b2:05:c1:7c:03:d5:b5:49:0d:cf:de:c9:4d: 39:d6:a2:3c:2d:e5:fb:fc:33:d5:c2:e1:a2:1f:03: 1f:77:8d:81:fb:55:1e:a7:76:5b:53:92:0a:e6:56: 64:91:c8:01:c8:9e:b3:cc:bb:23:4f:c8:f0:61:9c: aa:dd:bf:f8:2f:c0:2a:9d:eb:2b:d0:e8:88:1f:8b: b1:9c:52:4c:41:b7:05:09:62:58:ff:d1:0f:26:d6: 20:6c:3f:35:43:4a:fa:32:86:50:fe:08:85:0a:c4: af:4f:dc:15:80:ff:7d:6c:e3:38:e4:a8:8d:3d:1d: 7d:f3:e7:7a:37:de:ef:b7:47:83:6e:71:87:20:3d: 08:e2:a6:1c:33:84:ca:e0:ea:36:55:14:02:9e:6a: cb:9e:e0:31:15:2f:ef:10:21:6c:2b:be:e9:47:c4: a9:18:50:c3:a5:3a:0c:d7:2d:d3:04:50:2c:ce:c2: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6E:34:E9:E6:0D:B8:6A:F1:AF:1F:D0:9A:CA:A6:47:22:63:1A:56 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6e:27:06:e3:03:d3:a2:10:a0:06:74:62:a5:0b:ca:b6:50: e3:2e:0c:c0:b6:b5:df:ac:58:8c:20:c9:86:46:0e:b5:c2:63: 89:8f:bb:6f:6b:dd:88:c3:47:5c:ec:f5:97:3c:0b:54:5f:4c: 19:87:7d:5e:50:c2:2e:32:82:25:2a:9c:dc:7a:72:28:c4:48: 81:ad:97:7d:32:40:2d:24:e2:50:50:3e:8d:75:bc:fe:37:b2: cd:3f:7f:6a:11:98:6f:1a:10:a9:87:f8:d8:48:03:4f:5b:8a: a8:cf:1e:88:0c:93:87:dd:81:22:d7:70:f3:77:84:c5:06:cc: 26:a3:12:01:19:82:a3:e8:50:ee:96:9e:0c:27:6a:ae:e1:b9: ea:da:25:ba:be:96:21:15:50:73:76:d6:4d:f2:87:9c:46:a4: 3a:5f:7a:b2:58:8c:b8:b2:bf:95:8e:9a:cd:92:6b:ea:ca:c1: 53:bb:7f:e7:7f:b1:a3:91:79:7c:eb:09:26:b2:04:1e:05:29: dc:41:57:da:b7:00:15:ad:0b:68:59:96:a1:26:ba:08:54:98: 34:22:10:80:a0:aa:4e:66:14:47:79:11:76:11:e2:bf:76:50: a1:44:8a:b3:d6:7b:d9:57:1c:2a:34:2a:4a:db:ee:1f:e6:81: a9:b8:8c:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mKIT4XF9P4p2wiyPMWoPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwMzI1MTgwMTIyWhcNMjYwMzI2MTgwMTIyWjAzMTEwLwYDVQQD EyhjOTZlMzRlOWU2MGRiODZhZjFhZjFmZDA5YWNhYTY0NzIyNjMxYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmLjFIkVrZAVSDE+z7JUDBuavxtw rLjsphwgAZxwq15i3VaiBMnCpxj09GWu2qjyaTSjEKC3y4yY70cfSccIpjlRm0sj mZzRozhzo7IFwXwD1bVJDc/eyU051qI8LeX7/DPVwuGiHwMfd42B+1Uep3ZbU5IK 5lZkkcgByJ6zzLsjT8jwYZyq3b/4L8Aqnesr0OiIH4uxnFJMQbcFCWJY/9EPJtYg bD81Q0r6MoZQ/giFCsSvT9wVgP99bOM45KiNPR198+d6N97vt0eDbnGHID0I4qYc M4TK4Oo2VRQCnmrLnuAxFS/vECFsK77pR8SpGFDDpToM1y3TBFAszsLO0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMluNOnmDbhq8a8f0JrKpkciYxpWMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp24nBuMD 06IQoAZ0YqULyrZQ4y4MwLa136xYjCDJhkYOtcJjiY+7b2vdiMNHXOz1lzwLVF9M GYd9XlDCLjKCJSqc3HpyKMRIga2XfTJALSTiUFA+jXW8/jeyzT9/ahGYbxoQqYf4 2EgDT1uKqM8eiAyTh92BItdw83eExQbMJqMSARmCo+hQ7paeDCdqruG56tolur6W IRVQc3bWTfKHnEakOl96sliMuLK/lY6azZJr6srBU7t/53+xo5F5fOsJJrIEHgUp 3EFX2rcAFa0LaFmWoSa6CFSYNCIQgKCqTmYUR3kRdhHiv3ZQoUSKs9Z72VccKjQq StvuH+aBqbiMSQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:58:23 2026 by rpki-client