$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: qMR9tmNVXU1moHDVsl0Vz/YPSzlj4mXvHkUxLt0MTzU= Subject key identifier: 64:10:27:E3:E4:56:64:CB:C4:23:31:F3:4E:26:D9:E2:5D:FD:08:A6 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019E1F47F192CB5B05395F5FC15CC8B2156B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 17E9 Signing time: Wed 13 May 2026 03:01:08 +0000 Manifest this update: Wed 13 May 2026 03:01:08 +0000 Manifest next update: Thu 14 May 2026 03:01:08 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: YVM3iGZLa0S0+kcoCSbAVjm53rt0fHbVRTt3pMIvGjg=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:47:f1:92:cb:5b:05:39:5f:5f:c1:5c:c8:b2:15:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: May 13 03:01:08 2026 GMT Not After : May 14 03:01:08 2026 GMT Subject: CN=641027e3e45664cbc42331f34e26d9e25dfd08a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1d:4e:a8:9b:de:50:88:49:5f:da:aa:76:7d: 8d:f8:dd:06:a2:c5:c8:5b:34:63:32:b8:65:fe:a9: 4a:9a:f1:74:db:2d:eb:21:28:06:3f:78:22:d0:ac: d5:7b:37:a7:35:e5:86:18:04:bc:fb:56:7b:0c:9c: e7:c3:26:06:cd:a5:9a:27:09:98:6d:fe:08:ac:90: 7d:f9:f0:7b:21:36:8b:de:de:3d:ea:b5:df:5f:12: ea:fd:83:b6:2c:8a:f0:ec:e7:c4:cc:c3:e2:ea:9a: fa:03:07:79:ea:ae:40:cd:d2:2a:b3:24:ce:18:a5: f9:3b:d4:ec:01:90:92:8c:64:5f:a4:53:12:bf:c6: a2:0c:ac:bf:29:50:6c:26:f1:39:24:51:c6:e7:3f: 33:e6:25:34:7d:61:84:5c:f7:94:a0:4c:5f:3b:3c: 0b:7f:32:54:e9:6b:b0:18:db:d1:46:b8:86:a1:25: e9:ad:56:e5:04:2e:99:d1:c7:14:a3:f9:5a:69:8c: 47:a4:a6:e7:60:53:32:a7:a2:19:0f:94:de:7c:51: 22:6a:4f:c7:cf:bf:6d:43:e6:06:be:aa:d1:f1:64: 49:f4:16:ed:68:60:d9:80:cf:25:3c:ca:ff:61:d7: 08:6a:23:a9:63:9b:aa:56:9d:d6:3e:13:9e:20:5a: 03:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:10:27:E3:E4:56:64:CB:C4:23:31:F3:4E:26:D9:E2:5D:FD:08:A6 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c1:65:e9:a1:8b:bb:8e:c4:60:b7:7a:ea:36:2c:6e:c6:14: b4:07:86:4e:52:b4:8b:95:85:63:51:d8:fd:da:28:80:8d:a4: e0:a4:e6:f4:9d:b0:b2:61:6a:c7:05:98:d3:3d:6f:59:c8:52: 93:8f:e6:68:c5:c1:8a:7f:09:1f:c1:2b:06:f2:c3:e2:98:74: 1f:5a:c8:84:00:a6:de:1e:61:55:7f:c2:40:2c:a2:28:88:5f: dc:27:31:b5:ca:ae:ab:4b:8f:6f:57:65:97:da:eb:f6:19:1c: 8c:8a:ef:cf:0e:7e:18:7c:10:69:e8:88:11:10:aa:23:9d:4f: 72:88:7d:9c:e0:35:0f:8d:ab:60:2f:56:52:3e:dd:55:6b:03: 85:8e:7a:df:06:79:f8:64:80:23:82:d1:a6:2b:87:5f:85:b6: d4:c2:a3:7d:3d:a7:6e:dc:df:eb:9a:92:ad:ee:ef:72:66:04: 44:6e:c3:63:59:30:06:f8:c0:91:55:36:31:9e:de:8d:1e:5e: fe:a7:95:f5:de:fd:21:22:9f:d9:d7:36:b6:58:f2:30:fc:52: f6:2f:af:43:86:37:f0:05:ab:f5:d4:ce:78:89:7e:27:e5:35: 36:9f:93:14:62:58:f9:21:ef:31:5d:b8:b0:64:97:cf:6a:29: ed:60:07:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4fR/GSy1sFOV9fwVzIshVrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwNTEzMDMwMTA4WhcNMjYwNTE0MDMwMTA4WjAzMTEwLwYDVQQD Eyg2NDEwMjdlM2U0NTY2NGNiYzQyMzMxZjM0ZTI2ZDllMjVkZmQwOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB1OqJveUIhJX9qqdn2N+N0GosXI WzRjMrhl/qlKmvF02y3rISgGP3gi0KzVezenNeWGGAS8+1Z7DJznwyYGzaWaJwmY bf4IrJB9+fB7ITaL3t496rXfXxLq/YO2LIrw7OfEzMPi6pr6Awd56q5AzdIqsyTO GKX5O9TsAZCSjGRfpFMSv8aiDKy/KVBsJvE5JFHG5z8z5iU0fWGEXPeUoExfOzwL fzJU6WuwGNvRRriGoSXprVblBC6Z0ccUo/laaYxHpKbnYFMyp6IZD5TefFEiak/H z79tQ+YGvqrR8WRJ9BbtaGDZgM8lPMr/YdcIaiOpY5uqVp3WPhOeIFoDtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQQJ+PkVmTLxCMx804m2eJd/QimMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsFl6aGL u47EYLd66jYsbsYUtAeGTlK0i5WFY1HY/doogI2k4KTm9J2wsmFqxwWY0z1vWchS k4/maMXBin8JH8ErBvLD4ph0H1rIhACm3h5hVX/CQCyiKIhf3Ccxtcquq0uPb1dl l9rr9hkcjIrvzw5+GHwQaeiIERCqI51Pcoh9nOA1D42rYC9WUj7dVWsDhY563wZ5 +GSAI4LRpiuHX4W21MKjfT2nbtzf65qSre7vcmYERG7DY1kwBvjAkVU2MZ7ejR5e /qeV9d79ISKf2dc2tljyMPxS9i+vQ4Y38AWr9dTOeIl+J+U1Np+TFGJY+SHvMV24 sGSXz2op7WAHLg== -----END CERTIFICATE-----Generated at Wed May 13 11:28:14 2026 by rpki-client