$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: bg7g/WfHC0x/+usUQ5LruWcS0Ee8HSS3r8hX6+qmE28= Subject key identifier: 7F:E5:8F:0E:17:40:93:A7:F7:B3:04:2E:43:97:59:8B:72:DF:75:0B Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019F9022AD86DB299C76922734849120EC92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 18A8 Signing time: Thu 23 Jul 2026 18:00:19 +0000 Manifest this update: Thu 23 Jul 2026 18:00:19 +0000 Manifest next update: Fri 24 Jul 2026 18:00:19 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: 6zVgLUh5FDP8Geh4lm2FMeLcVZLLETvjN1U0gkXNQk8=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:22:ad:86:db:29:9c:76:92:27:34:84:91:20:ec:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jul 23 18:00:19 2026 GMT Not After : Jul 24 18:00:19 2026 GMT Subject: CN=7fe58f0e174093a7f7b3042e4397598b72df750b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:ba:a0:64:05:d7:c6:d3:ff:3d:9c:f8:09: 6a:ef:28:42:09:a0:f5:76:62:8e:05:92:80:29:ca: fe:c8:16:a5:13:01:86:5d:23:4d:4f:a1:a3:83:52: 6e:7d:c6:82:c8:b9:93:7f:99:5c:76:47:d5:d7:27: 2a:0b:66:15:ed:5f:d1:ae:61:c1:38:0a:d9:0b:d9: d2:bb:01:75:d1:e8:ab:68:ec:c6:ed:e2:a9:db:bc: a0:38:3c:6e:66:a1:da:b0:74:f2:3c:66:f9:01:a3: 9a:22:06:1c:63:f0:36:d3:1e:5f:b7:cf:f8:bf:20: 04:36:85:28:90:b0:43:5e:3c:d4:8b:63:69:da:20: 2e:9d:d5:fb:e9:1a:42:68:e1:69:79:df:05:43:33: 8a:6e:7d:39:de:01:7f:55:05:6b:49:62:15:28:f2: 15:07:fa:ca:4f:c1:df:c1:fa:bf:32:d9:93:aa:42: a6:75:46:ee:45:fa:2b:65:03:1e:61:23:53:37:04: 63:b1:3a:5b:33:97:8e:0b:fd:6b:16:a6:aa:8e:86: 67:fa:52:e1:af:3b:0f:45:ab:8b:25:48:40:0e:1c: 68:e4:ca:a5:5b:13:13:b8:ec:6c:c3:87:b5:0e:28: a4:71:38:2b:77:cd:3c:fb:ee:da:5d:5c:08:a6:65: 64:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E5:8F:0E:17:40:93:A7:F7:B3:04:2E:43:97:59:8B:72:DF:75:0B X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:03:51:bd:cd:6d:8c:12:7d:49:93:ab:18:df:4f:30:62:11: 4a:47:39:6e:36:1d:16:39:f3:49:93:99:6a:1c:1e:2a:a6:c5: dd:84:58:1e:b8:19:08:06:75:28:8a:92:3f:a0:34:de:be:51: fd:c6:83:20:65:87:9f:30:16:9d:c8:24:7c:7d:d0:f0:03:b3: 94:11:60:21:60:03:1c:8a:b3:ce:82:34:b8:10:6a:bc:28:fa: 91:db:c9:0a:b6:5d:6e:8e:ad:f4:0f:43:01:c9:19:c5:98:26: 10:6f:5e:b9:42:c6:15:08:a0:ae:b8:fe:5a:07:ba:68:a9:2f: a5:a9:47:e3:06:3d:03:8e:ca:c8:88:d9:2f:3b:4f:b2:97:91: f8:09:94:e9:ca:5d:45:66:fc:a0:92:3a:05:cc:24:18:8e:e2: f8:c6:41:81:5b:52:90:94:9a:03:e4:8e:b7:81:63:a9:e7:14: 2b:cd:36:e7:c9:70:63:aa:19:20:85:a4:a9:85:d1:90:c7:18: f8:ec:03:14:61:d4:72:ab:bc:60:81:ef:c0:6f:a9:28:27:d4: c7:ed:2e:76:fb:4c:0d:5f:67:42:20:2e:0c:15:25:f6:f9:59: 8f:ae:61:84:89:8e:c0:7b:18:0a:bf:d4:e2:2c:0d:d1:0d:07: ef:c2:a7:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QIq2G2ymcdpInNISRIOySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwNzIzMTgwMDE5WhcNMjYwNzI0MTgwMDE5WjAzMTEwLwYDVQQD Eyg3ZmU1OGYwZTE3NDA5M2E3ZjdiMzA0MmU0Mzk3NTk4YjcyZGY3NTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvu6oGQF18bT/z2c+Alq7yhCCaD1 dmKOBZKAKcr+yBalEwGGXSNNT6Gjg1JufcaCyLmTf5lcdkfV1ycqC2YV7V/RrmHB OArZC9nSuwF10eiraOzG7eKp27ygODxuZqHasHTyPGb5AaOaIgYcY/A20x5ft8/4 vyAENoUokLBDXjzUi2Np2iAundX76RpCaOFped8FQzOKbn053gF/VQVrSWIVKPIV B/rKT8Hfwfq/MtmTqkKmdUbuRforZQMeYSNTNwRjsTpbM5eOC/1rFqaqjoZn+lLh rzsPRauLJUhADhxo5MqlWxMTuOxsw4e1DiikcTgrd808++7aXVwIpmVk/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/ljw4XQJOn97MELkOXWYty33ULMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQNRvc1t jBJ9SZOrGN9PMGIRSkc5bjYdFjnzSZOZahweKqbF3YRYHrgZCAZ1KIqSP6A03r5R /caDIGWHnzAWncgkfH3Q8AOzlBFgIWADHIqzzoI0uBBqvCj6kdvJCrZdbo6t9A9D AckZxZgmEG9euULGFQigrrj+Wge6aKkvpalH4wY9A47KyIjZLztPspeR+AmU6cpd RWb8oJI6BcwkGI7i+MZBgVtSkJSaA+SOt4FjqecUK80258lwY6oZIIWkqYXRkMcY +OwDFGHUcqu8YIHvwG+pKCfUx+0udvtMDV9nQiAuDBUl9vlZj65hhImOwHsYCr/U 4iwN0Q0H78Kngg== -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:09 2026 by rpki-client