$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: L4ex3qo8/HjuPFcnTk/Agig9/1LEGO9cMqp/WTlUZ9I= Subject key identifier: FA:C7:E1:93:24:5D:07:FE:9F:9D:E3:43:26:C7:5B:57:31:1E:EE:A2 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 01A0D8A8D9980702FC09FF8CD224EC06DA0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 12D6 Signing time: Fri 25 Sep 2026 13:02:19 +0000 Manifest this update: Fri 25 Sep 2026 13:02:19 +0000 Manifest next update: Sat 26 Sep 2026 13:02:19 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: gC6EAneHVAwwCIz7S6MdSD6J4osmWAz2xXdcotIi5wk=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: lFVnv43JGFMjXUtMDg1t8_wpiXE.roa (hash: YLYniFH+If3bpoeshgJ5j5KDhpm+zPn+w+d9vNOzd7M=) 14: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 15: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=) 16: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 17: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 18: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 19: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 20: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 21: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:a8:d9:98:07:02:fc:09:ff:8c:d2:24:ec:06:da:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Sep 25 13:02:19 2026 GMT Not After : Sep 26 13:02:19 2026 GMT Subject: CN=fac7e193245d07fe9f9de34326c75b57311eeea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:95:fb:d4:1f:6f:a3:2b:06:ba:85:74:ef: e8:94:a0:10:97:74:e2:fa:2f:c6:0b:b2:d0:72:2b: 20:e6:70:e5:31:f9:f5:38:89:28:8f:db:a5:2b:cb: 5f:f1:da:f2:32:b9:30:39:e9:99:64:68:65:bb:18: 93:d0:27:6c:c2:d4:78:47:80:60:e0:ae:d5:dc:bb: bc:97:14:16:3b:aa:fc:cf:4c:bd:cd:77:2e:04:18: 64:2b:21:6d:15:6f:1a:47:f9:13:08:59:66:57:71: 81:bf:20:8c:d0:a6:a5:4b:b8:35:72:1f:93:d7:b2: a0:aa:2e:48:1a:2a:bc:b6:87:9c:c1:b3:dd:d9:1b: 50:0d:5e:1a:46:9b:71:6b:2c:0d:5e:f9:f3:25:04: c0:40:eb:7e:bb:ce:a2:df:74:72:ba:67:76:0d:06: 04:1c:3f:3a:ae:cf:4c:6c:4c:a8:8d:47:90:1f:16: b8:3d:9a:ac:f2:50:66:37:cc:32:37:b0:b1:af:da: 70:b3:3f:f2:62:78:16:ac:df:a6:95:59:6d:72:e3: 53:48:26:7d:c9:32:d6:fd:d9:45:e1:93:5a:29:ac: 73:af:6c:7f:18:09:2d:1e:d5:28:7c:8d:05:3e:8d: 74:da:d1:4d:09:6a:05:e8:f0:22:ed:1c:7e:a2:7a: f9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C7:E1:93:24:5D:07:FE:9F:9D:E3:43:26:C7:5B:57:31:1E:EE:A2 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:38:83:31:62:e0:ce:9b:20:de:af:d9:d4:f7:e1:44:a4:26: 91:71:1a:1b:3c:7b:92:d9:e2:82:30:5b:15:f1:c0:1d:74:e9: df:ee:5b:bf:18:e5:e5:21:d5:2f:dc:5a:7c:19:78:b4:67:d5: e7:d5:2d:b8:94:ba:83:64:ef:01:15:6f:2f:48:a3:35:a4:00: a9:86:a4:4d:1d:46:30:0c:c6:37:89:54:7e:fa:4c:91:01:68: 94:fb:d7:9c:9e:17:fb:f3:4a:0b:3f:c5:63:e7:8c:15:65:f1: 3e:47:16:57:2c:ab:68:8c:52:a8:89:61:18:9f:32:e9:38:fb: 89:d5:85:21:a6:29:a8:29:67:3f:e3:a8:6a:ed:15:7c:ee:42: 92:2f:0b:00:f7:c2:e6:a4:66:f7:2b:87:ce:5c:b9:1f:da:01: c8:d9:8f:e0:7a:93:f2:f3:5c:53:91:56:84:60:a4:75:f8:b1: 49:f5:16:3a:e3:1f:43:0d:94:b6:01:7b:74:e5:e3:02:47:34: e6:77:e3:b6:96:0c:a4:dd:e1:fe:13:fc:e4:03:c0:59:75:ed: 11:19:46:22:e6:93:9e:c1:c9:ed:76:d8:d6:62:e8:ce:49:26: a1:80:c1:7d:da:78:fe:82:4e:9c:b9:25:fa:78:63:10:0b:3f: f2:c5:45:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYqNmYBwL8Cf+M0iTsBtoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwOTI1MTMwMjE5WhcNMjYwOTI2MTMwMjE5WjAzMTEwLwYDVQQD EyhmYWM3ZTE5MzI0NWQwN2ZlOWY5ZGUzNDMyNmM3NWI1NzMxMWVlZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC+V+9Qfb6MrBrqFdO/olKAQl3Ti +i/GC7LQcisg5nDlMfn1OIkoj9ulK8tf8dryMrkwOemZZGhluxiT0CdswtR4R4Bg 4K7V3Lu8lxQWO6r8z0y9zXcuBBhkKyFtFW8aR/kTCFlmV3GBvyCM0KalS7g1ch+T 17Kgqi5IGiq8toecwbPd2RtQDV4aRptxaywNXvnzJQTAQOt+u86i33Ryumd2DQYE HD86rs9MbEyojUeQHxa4PZqs8lBmN8wyN7Cxr9pwsz/yYngWrN+mlVltcuNTSCZ9 yTLW/dlF4ZNaKaxzr2x/GAktHtUofI0FPo102tFNCWoF6PAi7Rx+onr5YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrH4ZMkXQf+n53jQybHW1cxHu6iMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgziDMWLg zpsg3q/Z1PfhRKQmkXEaGzx7ktnigjBbFfHAHXTp3+5bvxjl5SHVL9xafBl4tGfV 59UtuJS6g2TvARVvL0ijNaQAqYakTR1GMAzGN4lUfvpMkQFolPvXnJ4X+/NKCz/F Y+eMFWXxPkcWVyyraIxSqIlhGJ8y6Tj7idWFIaYpqClnP+Ooau0VfO5Cki8LAPfC 5qRm9yuHzly5H9oByNmP4HqT8vNcU5FWhGCkdfixSfUWOuMfQw2UtgF7dOXjAkc0 5nfjtpYMpN3h/hP85APAWXXtERlGIuaTnsHJ7XbY1mLozkkmoYDBfdp4/oJOnLkl +nhjEAs/8sVFgA== -----END CERTIFICATE-----Generated at Fri Sep 25 18:25:48 2026 by rpki-client