$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: ffCXZlMjC+q8Qi0W4ncH0UGbRCfQnYNKuHcni1Ntxic= Subject key identifier: 37:94:BD:60:22:04:EF:1D:50:52:B5:A0:28:C3:A7:2C:B2:50:25:6B Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019D29CE25091A8AF4C2FD17E57D20A4BB12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 10EC Signing time: Thu 26 Mar 2026 11:01:08 +0000 Manifest this update: Thu 26 Mar 2026 11:01:08 +0000 Manifest next update: Fri 27 Mar 2026 11:01:08 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: ZaZdnbt+F8Dq24xo/cN1ilxqs4GvtSEfPyKWx+2BdFU=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 14: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 15: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 16: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 17: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 18: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 19: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:ce:25:09:1a:8a:f4:c2:fd:17:e5:7d:20:a4:bb:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Mar 26 11:01:08 2026 GMT Not After : Mar 27 11:01:08 2026 GMT Subject: CN=3794bd602204ef1d5052b5a028c3a72cb250256b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:8a:18:13:b9:1f:0f:7b:c0:ae:de:1c:3c: 5f:97:af:e2:4c:76:f6:bc:65:0c:e2:b9:c6:4d:3a: ad:94:a2:26:44:f5:e6:d5:96:fe:15:11:c4:23:f0: e3:1c:30:48:7b:c3:25:21:bf:1a:c3:b3:0c:cc:7b: 35:3e:85:c8:d1:48:47:e6:d8:dd:38:f1:30:fb:e4: ef:27:3a:bf:67:a3:84:c4:1e:4a:3d:a5:7b:35:33: af:83:8f:e6:89:5f:11:d2:25:c1:7f:cc:ec:07:7a: 95:06:29:b8:07:74:10:bb:c3:f8:67:67:57:05:79: be:70:1b:52:10:53:84:51:d0:b0:f0:38:e0:da:3a: 21:77:32:40:e3:ff:43:15:e4:87:b2:36:0b:27:b9: d5:50:42:b3:73:4f:bb:74:29:af:f8:07:74:cf:84: 36:be:f2:ae:55:4f:00:94:63:25:0b:82:e1:71:11: 91:2c:fa:61:b0:27:dc:d4:c8:48:c8:b1:2a:c3:a1: 09:71:5c:9c:01:96:e6:0a:ed:dc:9c:a3:37:8a:25: 63:a5:54:a8:e2:6f:5f:92:f5:4e:28:fc:57:db:dc: 67:bb:1f:8a:65:f4:25:9b:1f:15:50:e9:d1:06:51: c9:6c:f9:c3:05:a0:8c:0d:c4:63:66:ca:2b:8d:59: 44:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:94:BD:60:22:04:EF:1D:50:52:B5:A0:28:C3:A7:2C:B2:50:25:6B X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d4:80:af:b5:c8:a3:4f:b0:df:fb:64:1c:ed:43:64:58:71: 20:da:37:8f:be:56:79:62:5b:e5:9e:18:59:22:b9:3c:90:b8: 55:86:da:83:28:0c:88:b0:64:0d:44:8e:78:1a:40:2c:92:cf: db:ac:50:d3:f5:52:24:68:1f:5b:74:8d:ba:d8:4b:43:32:3b: 7a:c6:d3:fa:1a:9b:d9:9d:da:3e:97:a4:5e:d1:f2:79:2e:ac: 6a:0e:cb:a3:dc:21:24:34:86:5b:d7:8d:b4:eb:27:33:f7:65: 76:0e:47:7f:c3:1d:fb:c4:9e:f6:f7:a8:51:c8:6c:f6:44:3f: 44:38:e7:d8:91:a7:9c:b0:83:01:37:a3:94:ad:19:e4:aa:32: 4a:1c:f3:aa:0f:6f:bf:ec:a7:56:3f:d7:ca:e4:e0:b3:e8:a8: c0:54:92:fe:82:91:2c:d2:cb:97:f8:48:74:0b:1f:bd:e0:77: 87:cc:71:67:bf:32:87:0a:b3:48:07:d2:0b:49:3a:43:65:a5: 93:2c:23:c4:ff:cf:40:07:1c:1f:d9:02:be:f5:75:10:00:e6: 38:3d:59:7f:80:8d:7e:70:1e:7a:28:51:0a:7c:c6:3d:c0:e2: 8f:d8:64:b4:b1:62:26:0d:66:3c:a8:33:2e:1c:4a:e2:67:dc: f9:a9:97:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pziUJGor0wv0X5X0gpLsSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMzI2MTEwMTA4WhcNMjYwMzI3MTEwMTA4WjAzMTEwLwYDVQQD EygzNzk0YmQ2MDIyMDRlZjFkNTA1MmI1YTAyOGMzYTcyY2IyNTAyNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMSKGBO5Hw97wK7eHDxfl6/iTHb2 vGUM4rnGTTqtlKImRPXm1Zb+FRHEI/DjHDBIe8MlIb8aw7MMzHs1PoXI0UhH5tjd OPEw++TvJzq/Z6OExB5KPaV7NTOvg4/miV8R0iXBf8zsB3qVBim4B3QQu8P4Z2dX BXm+cBtSEFOEUdCw8Djg2johdzJA4/9DFeSHsjYLJ7nVUEKzc0+7dCmv+Ad0z4Q2 vvKuVU8AlGMlC4LhcRGRLPphsCfc1MhIyLEqw6EJcVycAZbmCu3cnKM3iiVjpVSo 4m9fkvVOKPxX29xnux+KZfQlmx8VUOnRBlHJbPnDBaCMDcRjZsorjVlEHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeUvWAiBO8dUFK1oCjDpyyyUCVrMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9SAr7XI o0+w3/tkHO1DZFhxINo3j75WeWJb5Z4YWSK5PJC4VYbagygMiLBkDUSOeBpALJLP 26xQ0/VSJGgfW3SNuthLQzI7esbT+hqb2Z3aPpekXtHyeS6sag7Lo9whJDSGW9eN tOsnM/dldg5Hf8Md+8Se9veoUchs9kQ/RDjn2JGnnLCDATejlK0Z5KoyShzzqg9v v+ynVj/XyuTgs+iowFSS/oKRLNLLl/hIdAsfveB3h8xxZ78yhwqzSAfSC0k6Q2Wl kywjxP/PQAccH9kCvvV1EADmOD1Zf4CNfnAeeihRCnzGPcDij9hktLFiJg1mPKgz LhxK4mfc+amX0w== -----END CERTIFICATE-----Generated at Thu Mar 26 14:32:56 2026 by rpki-client