$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: ZvvPuyeYoCZF+Tvh7vIMc62eFeGOLocChsstAUF5/Yk= Subject key identifier: C0:A9:57:9E:E4:03:79:8A:A0:BC:AF:8D:1B:39:83:62:09:63:42:9B Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 01A0F18BD9A7D84209CF47B0036363EB1127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 195F Signing time: Wed 30 Sep 2026 09:01:09 +0000 Manifest this update: Wed 30 Sep 2026 09:01:09 +0000 Manifest next update: Thu 01 Oct 2026 09:01:09 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: KJVi4nSIbSgGmJTJGhGvbVUBs8YohjtkJC3UYZ/hf7k=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f1:8b:d9:a7:d8:42:09:cf:47:b0:03:63:63:eb:11:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Sep 30 09:01:09 2026 GMT Not After : Oct 1 09:01:09 2026 GMT Subject: CN=c0a9579ee403798aa0bcaf8d1b3983620963429b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:e4:66:b0:89:e4:8b:e8:60:b1:56:f8:e9: a5:30:01:69:da:11:f7:39:49:26:ae:5b:ae:ff:30: b0:53:f8:ad:5a:bb:24:cd:0b:b2:c4:d9:13:bc:6a: f3:38:3a:74:2d:e3:2c:c2:ca:43:16:a9:bf:18:f5: 6d:00:6b:10:54:7f:de:50:df:c9:55:87:4b:64:68: df:c7:23:a8:77:4b:e6:07:a8:5e:7e:7d:5d:b8:e6: 2c:f8:4b:5a:92:0e:4b:5c:c3:b6:01:ec:f7:ca:94: 10:46:96:29:57:fa:f0:f6:3e:15:8b:97:1b:75:96: 8c:dd:46:dc:d0:7e:21:68:49:89:b9:31:06:32:cb: 55:ae:89:09:9e:73:e1:ee:e6:fa:e0:e4:d4:b8:b9: 9d:e7:4b:8a:c3:c9:ce:13:40:fc:21:cd:24:ec:30: b3:b7:01:16:7e:82:9b:ee:74:0b:ac:f0:d9:3e:81: db:17:1a:6a:55:f5:b0:65:22:65:0a:6c:6d:71:35: d2:86:e1:dc:94:a9:41:ca:ca:b3:2e:ba:0a:d3:63: fb:58:cb:ba:36:64:30:66:40:1b:28:e3:96:f7:3f: 12:bd:51:43:05:a6:7e:b4:7d:c1:4b:69:64:92:7b: 20:84:74:68:d3:5f:9f:3f:30:70:36:ff:c1:0e:94: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A9:57:9E:E4:03:79:8A:A0:BC:AF:8D:1B:39:83:62:09:63:42:9B X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:20:c1:b3:20:68:77:32:4e:84:0f:11:e4:c3:b5:b6:55:d4: aa:83:a6:27:00:db:73:c2:f2:cf:22:11:79:64:79:13:aa:22: 6f:7d:9f:69:42:31:ac:f9:c6:1f:4a:da:f9:ff:05:ac:92:a0: 53:21:33:b6:a9:f3:61:4f:80:12:4e:7c:89:1d:3b:89:96:66: 95:c2:de:76:00:93:14:f5:62:c7:9d:85:a2:ef:eb:cf:c6:45: 64:26:ae:05:f0:c5:98:a5:7f:f4:74:2a:d1:9b:5b:40:18:f7: 26:bf:ec:cf:29:1b:95:3a:28:7c:72:b6:6f:6f:6a:c4:48:c1: a4:f4:fd:4a:2b:8b:85:8e:29:e4:48:32:76:91:20:59:0d:e9: 3c:fb:f3:f6:73:45:d9:f9:c6:76:54:ae:e5:6a:86:64:48:f0: 7c:46:1e:69:ef:fb:46:f0:19:67:61:50:b0:94:ee:2d:15:a8: 49:a4:6f:7b:c0:2a:66:62:33:43:1a:27:95:fb:3a:af:b9:b1: 65:94:2e:70:2c:87:b8:91:40:eb:a3:b2:6c:95:db:05:19:82: 11:88:94:c9:4c:8d:31:64:10:d4:80:86:5b:74:64:5a:c7:8a: 82:a9:8c:3c:01:4c:cf:48:5a:fa:09:a1:b3:36:a3:22:41:a5: 0c:10:4c:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDxi9mn2EIJz0ewA2Nj6xEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwOTMwMDkwMTA5WhcNMjYxMDAxMDkwMTA5WjAzMTEwLwYDVQQD EyhjMGE5NTc5ZWU0MDM3OThhYTBiY2FmOGQxYjM5ODM2MjA5NjM0MjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWfkZrCJ5IvoYLFW+OmlMAFp2hH3 OUkmrluu/zCwU/itWrskzQuyxNkTvGrzODp0LeMswspDFqm/GPVtAGsQVH/eUN/J VYdLZGjfxyOod0vmB6hefn1duOYs+Etakg5LXMO2Aez3ypQQRpYpV/rw9j4Vi5cb dZaM3Ubc0H4haEmJuTEGMstVrokJnnPh7ub64OTUuLmd50uKw8nOE0D8Ic0k7DCz twEWfoKb7nQLrPDZPoHbFxpqVfWwZSJlCmxtcTXShuHclKlBysqzLroK02P7WMu6 NmQwZkAbKOOW9z8SvVFDBaZ+tH3BS2lkknsghHRo01+fPzBwNv/BDpTxZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCpV57kA3mKoLyvjRs5g2IJY0KbMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiDBsyBo dzJOhA8R5MO1tlXUqoOmJwDbc8LyzyIReWR5E6oib32faUIxrPnGH0ra+f8FrJKg UyEztqnzYU+AEk58iR07iZZmlcLedgCTFPVix52Fou/rz8ZFZCauBfDFmKV/9HQq 0ZtbQBj3Jr/szykblToofHK2b29qxEjBpPT9SiuLhY4p5EgydpEgWQ3pPPvz9nNF 2fnGdlSu5WqGZEjwfEYeae/7RvAZZ2FQsJTuLRWoSaRve8AqZmIzQxonlfs6r7mx ZZQucCyHuJFA66OybJXbBRmCEYiUyUyNMWQQ1ICGW3RkWseKgqmMPAFMz0ha+gmh szajIkGlDBBMiw== -----END CERTIFICATE-----Generated at Wed Sep 30 15:27:10 2026 by rpki-client