$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: qTT7MH4p1nh9rOgMh2SiAjBZO93mP8+M6tOmvzsTEog= Subject key identifier: 76:0C:3E:20:78:2A:D3:05:D7:8E:2F:3D:21:76:79:16:46:FB:A4:4D Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019D25BA834EEE07CC4F4FF944449ACDDA63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1895 Signing time: Wed 25 Mar 2026 16:01:13 +0000 Manifest this update: Wed 25 Mar 2026 16:01:13 +0000 Manifest next update: Thu 26 Mar 2026 16:01:13 +0000 Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=) 2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=) 3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=) 4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=) 5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=) 6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=) 7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=) 8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=) 9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=) 10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: BXZk3tmAGpYo6ThjLH5vJGyxiup1iAyOprLRKPz8IFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:83:4e:ee:07:cc:4f:4f:f9:44:44:9a:cd:da:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Mar 25 16:01:13 2026 GMT Not After : Mar 26 16:01:13 2026 GMT Subject: CN=760c3e20782ad305d78e2f3d2176791646fba44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:b5:45:83:7d:3d:40:f2:7c:ea:91:11:fc: 5a:50:1e:bf:a0:b8:46:fd:b1:5f:74:1e:6a:a7:dd: e5:b5:6d:f3:c1:fc:3e:10:e1:f7:c9:12:2a:0c:5e: 35:e7:eb:9c:ce:c7:81:f7:52:2d:8e:bc:2b:72:66: 84:f7:c6:e0:32:8a:bd:6a:e9:74:92:fa:83:be:b0: 32:32:11:93:01:8e:3d:2c:a4:60:59:14:58:a0:f6: dc:7c:3e:2b:80:f4:47:1f:b6:df:39:25:67:dd:8f: c3:06:4c:4c:3f:5f:23:3f:90:1c:62:5e:c8:78:74: c9:30:6e:db:ac:58:ca:61:de:9e:f9:d1:dd:94:f1: b8:ee:b6:1a:02:13:21:6f:2b:27:2f:77:ac:47:22: 07:e5:c2:8d:12:07:df:65:1c:e1:92:a6:41:a0:b3: e8:3d:c6:2f:27:ea:dd:67:ee:f2:b7:1a:a7:8a:51: b7:ee:7b:38:b8:a2:bd:76:72:ea:65:09:a0:f2:bd: 7c:fe:c1:95:00:db:e7:cd:e0:a2:0b:d5:03:d9:c9: 37:8f:87:21:fb:e6:6d:cf:6a:44:a8:29:34:4a:33: e5:c4:70:36:c9:69:41:c1:92:da:b7:5d:93:d3:86: e9:8d:52:ca:2e:b3:f2:67:c5:5f:2c:24:2a:ec:33: 07:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0C:3E:20:78:2A:D3:05:D7:8E:2F:3D:21:76:79:16:46:FB:A4:4D X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:95:34:1c:fc:c5:cf:12:74:45:d7:34:34:24:83:91:7e:cc: 68:c3:2f:af:9b:b2:eb:c7:d9:15:0a:39:9a:d3:1d:48:46:c5: 7e:94:a1:bd:61:42:c1:be:84:9a:7c:6e:f7:91:23:6f:c8:53: 92:33:42:2d:99:15:74:e9:5b:66:59:47:68:0b:e0:fa:20:f9: 6c:16:e9:56:6a:e7:54:ff:4c:ca:89:d9:e7:b3:c2:dd:aa:eb: 3c:1c:75:4c:4e:9f:76:c8:d7:08:5a:a4:59:7b:8c:9e:57:5c: f5:63:38:fb:27:09:43:57:89:e1:91:62:0a:53:e1:76:9f:ed: d2:72:bd:d2:30:21:54:8b:f1:48:2d:2a:4e:ef:6d:7b:e1:36: 11:ca:e4:27:30:ae:bc:16:69:ca:a9:99:50:fc:bb:66:d1:98: 29:fa:a2:48:2a:b6:80:1c:d7:a4:2b:f1:04:c7:c4:aa:51:f6: 6c:18:c4:d7:ff:44:23:01:4f:dc:0d:66:2c:31:e7:13:48:c4: b8:bf:6e:aa:0b:98:7f:d3:a6:ee:61:df:8c:21:f1:7a:ec:62: 19:75:c9:e7:bd:b0:67:9b:23:c6:8f:24:a1:f5:85:91:5a:28: 74:df:d7:4f:e9:f2:38:e5:ea:b7:06:9c:c6:a3:d6:7c:d9:05: 52:f4:fb:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0luoNO7gfMT0/5RESazdpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwMzI1MTYwMTEzWhcNMjYwMzI2MTYwMTEzWjAzMTEwLwYDVQQD Eyg3NjBjM2UyMDc4MmFkMzA1ZDc4ZTJmM2QyMTc2NzkxNjQ2ZmJhNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDC1RYN9PUDyfOqREfxaUB6/oLhG /bFfdB5qp93ltW3zwfw+EOH3yRIqDF415+uczseB91ItjrwrcmaE98bgMoq9aul0 kvqDvrAyMhGTAY49LKRgWRRYoPbcfD4rgPRHH7bfOSVn3Y/DBkxMP18jP5AcYl7I eHTJMG7brFjKYd6e+dHdlPG47rYaAhMhbysnL3esRyIH5cKNEgffZRzhkqZBoLPo PcYvJ+rdZ+7ytxqnilG37ns4uKK9dnLqZQmg8r18/sGVANvnzeCiC9UD2ck3j4ch ++Ztz2pEqCk0SjPlxHA2yWlBwZLat12T04bpjVLKLrPyZ8VfLCQq7DMHOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYMPiB4KtMF144vPSF2eRZG+6RNMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5U0HPzF zxJ0Rdc0NCSDkX7MaMMvr5uy68fZFQo5mtMdSEbFfpShvWFCwb6Emnxu95Ejb8hT kjNCLZkVdOlbZllHaAvg+iD5bBbpVmrnVP9MyonZ57PC3arrPBx1TE6fdsjXCFqk WXuMnldc9WM4+ycJQ1eJ4ZFiClPhdp/t0nK90jAhVIvxSC0qTu9te+E2EcrkJzCu vBZpyqmZUPy7ZtGYKfqiSCq2gBzXpCvxBMfEqlH2bBjE1/9EIwFP3A1mLDHnE0jE uL9uqguYf9Om7mHfjCHxeuxiGXXJ572wZ5sjxo8kofWFkVoodN/XT+nyOOXqtwac xqPWfNkFUvT7BA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:37:40 2026 by rpki-client