$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: 86za/3Ti0rn2ECAsJnciOp+k+TXQKCyMCdT4ClVn4yk= Subject key identifier: 65:5D:42:D7:2A:2E:12:BB:A1:E5:BD:05:26:C3:51:CC:97:A4:45:73 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 01A0CFDAF2CB6FA96538967C78A5B3D2DA7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1A89 Signing time: Wed 23 Sep 2026 20:00:27 +0000 Manifest this update: Wed 23 Sep 2026 20:00:27 +0000 Manifest next update: Thu 24 Sep 2026 20:00:27 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: Ikkeya1yJgRDS-xhPDlnuPLetJs.roa (hash: glwjFgIZfVLfz8kep2uiVu5O3LaEznaNtCEp/lC03fQ=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sFANASik-wL_AAsMTGDepkCLru8.roa (hash: hsLxQEI+C24jdO2zBJxR+yNy+Qjt/yzfuOvytd9u6lw=) 13: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 14: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: xf8We0j7woZAEOReF/l43ZkqdBOR0uCctxX8Z/rET4Y=) 15: y2cm6-exYMkmOGgTU1Cd07TyLP8.roa (hash: VU+nMgrW6E4VxS9BCUWRqC49ToNwPX6PlXdXakhEGJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:da:f2:cb:6f:a9:65:38:96:7c:78:a5:b3:d2:da:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Sep 23 20:00:27 2026 GMT Not After : Sep 24 20:00:27 2026 GMT Subject: CN=655d42d72a2e12bba1e5bd0526c351cc97a44573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:d3:f9:72:de:28:f8:1b:29:f0:e1:e4:ff: 30:8d:20:b7:13:3e:17:f2:73:22:ef:47:c6:4c:3d: 3a:04:fb:2c:66:3f:e1:09:dc:79:fb:8d:99:35:9f: 2e:55:35:39:b7:81:3d:a6:de:d5:0f:73:7b:84:d6: af:7d:fc:9d:00:0b:34:ee:22:97:df:67:18:04:61: 5c:ec:29:c5:9a:e5:3f:c3:3d:9a:06:7a:78:b6:ae: 01:68:42:f1:00:b2:f0:a0:fb:10:58:95:00:81:ba: 96:14:dd:d5:fc:0b:fc:38:b4:20:35:dd:b6:3c:1c: c3:04:44:df:4f:dd:41:ed:53:b7:0d:52:87:92:3f: e8:51:df:33:87:a5:ae:52:0d:da:e2:eb:ac:07:98: c0:9a:c0:55:66:62:c9:f2:ea:7e:fb:85:dc:dc:b8: 54:5b:24:24:9b:46:7e:7e:3c:b4:85:03:13:4f:d7: 21:25:d0:71:1f:16:da:a1:7f:3e:82:7c:30:85:02: 9a:b2:34:10:e3:84:96:b4:1b:f6:13:a1:5f:73:89: 34:c7:09:15:83:f7:77:09:9c:a3:2b:6e:07:0d:99: 78:d2:9e:c8:32:e4:fc:72:50:d6:45:33:3c:6b:43: 46:e0:d9:02:19:81:c8:ca:19:a5:fd:25:7e:9d:16: fd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5D:42:D7:2A:2E:12:BB:A1:E5:BD:05:26:C3:51:CC:97:A4:45:73 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:83:34:30:49:12:a8:81:58:c2:50:59:c8:77:1f:68:1e:fe: 24:3c:3a:7a:00:7e:71:cd:83:6f:20:c7:27:d8:6c:0c:ae:99: 55:89:b1:bd:b0:19:e3:1a:4f:e4:bf:22:45:ec:3b:df:46:a3: 2b:3c:56:88:00:b1:38:ef:2f:d3:eb:94:62:d7:85:7d:85:a8: ae:18:95:37:58:0b:2a:c7:16:c8:8f:a2:5d:31:38:11:17:e1: 0e:3c:5e:c2:4e:09:b0:bf:29:2e:b2:4d:9e:13:f1:4a:f8:3b: 2e:01:0c:5a:03:69:f2:77:04:75:3b:26:75:0d:f0:54:af:50: e7:fb:5e:29:7f:23:b6:dc:1f:95:58:66:3b:58:41:21:33:79: 1e:f2:53:a5:63:81:78:e8:e6:65:80:2d:8d:77:dc:be:c5:04: 3a:fd:fd:55:2a:4a:63:73:22:d6:2f:79:49:00:d8:31:5c:f9: 9e:ed:60:ed:2e:f3:35:be:76:b3:19:7b:cb:a3:09:d5:87:b2: ff:9a:7b:4c:c3:69:87:6d:d2:fc:af:03:45:f3:20:27:de:be: cf:1c:4b:19:8c:a8:68:45:28:d6:a4:89:77:66:12:72:3a:04: d8:55:bc:c5:b4:11:e0:6d:0a:88:2c:09:b2:06:44:15:93:6e: 8f:b7:60:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDP2vLLb6llOJZ8eKWz0tp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwOTIzMjAwMDI3WhcNMjYwOTI0MjAwMDI3WjAzMTEwLwYDVQQD Eyg2NTVkNDJkNzJhMmUxMmJiYTFlNWJkMDUyNmMzNTFjYzk3YTQ0NTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvfT+XLeKPgbKfDh5P8wjSC3Ez4X 8nMi70fGTD06BPssZj/hCdx5+42ZNZ8uVTU5t4E9pt7VD3N7hNavffydAAs07iKX 32cYBGFc7CnFmuU/wz2aBnp4tq4BaELxALLwoPsQWJUAgbqWFN3V/Av8OLQgNd22 PBzDBETfT91B7VO3DVKHkj/oUd8zh6WuUg3a4uusB5jAmsBVZmLJ8up++4Xc3LhU WyQkm0Z+fjy0hQMTT9chJdBxHxbaoX8+gnwwhQKasjQQ44SWtBv2E6Ffc4k0xwkV g/d3CZyjK24HDZl40p7IMuT8clDWRTM8a0NG4NkCGYHIyhml/SV+nRb9PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVdQtcqLhK7oeW9BSbDUcyXpEVzMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIM0MEkS qIFYwlBZyHcfaB7+JDw6egB+cc2DbyDHJ9hsDK6ZVYmxvbAZ4xpP5L8iRew730aj KzxWiACxOO8v0+uUYteFfYWorhiVN1gLKscWyI+iXTE4ERfhDjxewk4JsL8pLrJN nhPxSvg7LgEMWgNp8ncEdTsmdQ3wVK9Q5/teKX8jttwflVhmO1hBITN5HvJTpWOB eOjmZYAtjXfcvsUEOv39VSpKY3Mi1i95SQDYMVz5nu1g7S7zNb52sxl7y6MJ1Yey /5p7TMNph23S/K8DRfMgJ96+zxxLGYyoaEUo1qSJd2YScjoE2FW8xbQR4G0KiCwJ sgZEFZNuj7dgbg== -----END CERTIFICATE-----Generated at Thu Sep 24 00:41:00 2026 by rpki-client