$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: dqJU3nwjuHH9ALcx1hrtJ0+jniRw8RE431fyUUkm14Y= Subject key identifier: 2F:D1:78:AF:BC:FB:BF:17:77:EE:ED:A8:9B:38:3A:32:F2:0F:54:BF Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019D27E00ADD1061CD5AAE32BA21EE470768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 10EB Signing time: Thu 26 Mar 2026 02:01:27 +0000 Manifest this update: Thu 26 Mar 2026 02:01:27 +0000 Manifest next update: Fri 27 Mar 2026 02:01:27 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: 2vh2iqa/YtpiSUBzdJb3zhNA+yUFlh7A+neY3eukXlE=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 14: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 15: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 16: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 17: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 18: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 19: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:e0:0a:dd:10:61:cd:5a:ae:32:ba:21:ee:47:07:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Mar 26 02:01:27 2026 GMT Not After : Mar 27 02:01:27 2026 GMT Subject: CN=2fd178afbcfbbf1777eeeda89b383a32f20f54bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:de:7f:00:b3:39:f2:fb:d2:d5:5c:05:96:aa: b1:fa:58:33:4a:27:4d:2a:c6:d6:b6:92:74:69:78: 69:25:13:c7:21:4c:d9:48:66:2d:ef:f3:85:74:28: 5c:57:91:62:4b:5c:4f:cb:31:37:2b:5b:0d:2d:ad: d5:23:f9:04:f6:7b:6f:5f:a8:1f:4c:3a:28:27:b0: 00:3d:74:b6:9f:de:89:01:f9:79:0b:aa:12:a9:68: ec:4e:0d:fb:17:43:1f:78:cd:70:8b:53:37:56:fc: 6e:1d:9a:ae:4c:35:5e:1e:38:57:fd:fc:38:31:fb: 93:77:f7:dd:05:9c:91:93:11:78:10:df:b6:fb:c1: 84:ac:7b:27:2a:71:2d:a6:b5:86:a1:94:ba:fe:a5: 0d:22:78:f7:6c:6b:26:0a:d3:0f:1b:37:05:3f:21: da:fe:36:f6:2a:d7:14:dc:bd:45:ce:21:89:0d:05: 3e:bb:c2:06:c2:43:59:e5:f3:2f:b8:f6:5b:8c:9c: 56:e7:f4:ee:39:2c:1e:3a:d2:86:93:56:8b:77:ac: da:2d:3a:2a:a9:1d:ac:47:59:cb:4b:46:27:c7:da: 61:55:3d:4f:5d:33:42:24:df:31:8a:3e:e7:11:4e: a8:93:0d:87:b5:f8:26:61:9d:d2:90:de:74:a4:eb: b2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D1:78:AF:BC:FB:BF:17:77:EE:ED:A8:9B:38:3A:32:F2:0F:54:BF X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fb:7d:28:2a:79:0c:b2:a6:c6:57:15:62:dd:b4:f7:12:22: ab:c2:3d:39:cc:c1:96:5b:15:a8:02:00:6c:f3:9a:76:8c:f0: 56:02:9c:1e:f2:34:b5:f6:4f:21:8a:13:97:cd:68:77:db:ff: 3c:c9:fe:0d:fa:4c:09:49:f8:2e:72:4a:6b:35:bc:7b:6c:37: a3:1f:d1:bb:4f:8b:8a:ff:c6:b7:a2:cf:94:79:e2:f6:8d:b3: ba:59:ab:0a:5b:8b:06:a4:d5:d9:89:c2:11:e3:e7:45:4d:b6: 6a:11:3a:d4:c1:9a:f8:73:d2:94:3d:d1:d2:f3:2e:6d:20:1e: 95:aa:8e:21:b3:70:e2:02:5c:ef:6c:92:d0:96:cd:6f:49:92: 79:ef:4f:ac:5d:9c:15:08:ec:39:3d:9c:8b:34:4b:a9:a4:78: ce:86:b3:24:93:6f:0a:ae:af:c7:25:86:d4:12:94:a4:c7:f6: ea:86:36:ad:13:de:fc:4d:67:64:ef:dd:36:0f:ea:c6:fa:5f: 4f:d7:8e:f9:69:b1:b6:7a:4d:de:87:b6:f0:8f:b5:05:1d:09: e4:7d:d2:a5:99:2c:d6:f3:8d:51:06:a6:59:e1:72:51:b2:9a: 67:94:85:a3:92:77:9c:0b:b2:df:9a:f7:42:58:6c:ab:cb:3e: 43:3c:0a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n4ArdEGHNWq4yuiHuRwdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMzI2MDIwMTI3WhcNMjYwMzI3MDIwMTI3WjAzMTEwLwYDVQQD EygyZmQxNzhhZmJjZmJiZjE3NzdlZWVkYTg5YjM4M2EzMmYyMGY1NGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d5/ALM58vvS1VwFlqqx+lgzSidN KsbWtpJ0aXhpJRPHIUzZSGYt7/OFdChcV5FiS1xPyzE3K1sNLa3VI/kE9ntvX6gf TDooJ7AAPXS2n96JAfl5C6oSqWjsTg37F0MfeM1wi1M3VvxuHZquTDVeHjhX/fw4 MfuTd/fdBZyRkxF4EN+2+8GErHsnKnEtprWGoZS6/qUNInj3bGsmCtMPGzcFPyHa /jb2KtcU3L1FziGJDQU+u8IGwkNZ5fMvuPZbjJxW5/TuOSweOtKGk1aLd6zaLToq qR2sR1nLS0Ynx9phVT1PXTNCJN8xij7nEU6okw2HtfgmYZ3SkN50pOuyLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/ReK+8+78Xd+7tqJs4OjLyD1S/MB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACft9KCp5 DLKmxlcVYt209xIiq8I9OczBllsVqAIAbPOadozwVgKcHvI0tfZPIYoTl81od9v/ PMn+DfpMCUn4LnJKazW8e2w3ox/Ru0+Liv/Gt6LPlHni9o2zulmrCluLBqTV2YnC EePnRU22ahE61MGa+HPSlD3R0vMubSAelaqOIbNw4gJc72yS0JbNb0mSee9PrF2c FQjsOT2cizRLqaR4zoazJJNvCq6vxyWG1BKUpMf26oY2rRPe/E1nZO/dNg/qxvpf T9eO+WmxtnpN3oe28I+1BR0J5H3SpZks1vONUQamWeFyUbKaZ5SFo5J3nAuy35r3 Qlhsq8s+QzwK4g== -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:55 2026 by rpki-client