$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: dQcmT6ocS4/oMkQ6IcX5rCadpJLB/jAVFKs+RhtC0+I= Subject key identifier: 7D:DE:6E:4F:4C:CC:79:8B:8F:DE:AB:5D:00:1E:10:AC:B2:48:62:68 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 01A0D4266B2C5C1A43CB433C0C0665B07115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1A7D Signing time: Thu 24 Sep 2026 16:01:22 +0000 Manifest this update: Thu 24 Sep 2026 16:01:22 +0000 Manifest next update: Fri 25 Sep 2026 16:01:22 +0000 Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=) 2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=) 3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=) 4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=) 5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=) 6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=) 7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=) 8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=) 9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=) 10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: DeewDm64ONLGdIsrXV4y8xObKlIt9kJx8Jhs0Em13lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:26:6b:2c:5c:1a:43:cb:43:3c:0c:06:65:b0:71:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Sep 24 16:01:22 2026 GMT Not After : Sep 25 16:01:22 2026 GMT Subject: CN=7dde6e4f4ccc798b8fdeab5d001e10acb2486268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:61:84:a5:f2:5e:60:a4:7a:c1:58:47:74: 81:6f:b5:6d:31:59:7b:00:48:74:71:c6:b5:8c:f1: b9:f7:0b:0e:7a:10:b4:95:6f:86:02:50:ab:ad:82: 5a:5c:18:f4:f1:40:f3:dd:1b:7f:d3:5f:58:80:37: 83:ba:4b:0d:92:5b:c0:1d:c3:73:0b:46:ca:4a:1f: 73:67:fe:af:98:c0:c1:5b:38:2c:2a:73:e6:21:c0: 7b:a8:78:c0:dd:6b:ea:2e:93:dc:c0:01:55:67:50: 77:79:41:c4:59:01:9d:07:6d:2a:8a:b4:73:29:f5: 84:b8:00:76:e2:c3:db:4e:02:c9:67:6d:ca:12:44: c5:6b:18:af:65:1b:d4:d4:5c:09:41:bf:9d:4f:1a: 12:10:99:7c:3c:9f:d5:3b:19:3f:98:bc:c5:ce:d9: d2:da:76:7c:ef:0a:bd:85:b3:da:e0:db:58:d5:28: 0f:1a:aa:f5:e3:5a:6e:97:7d:2c:c9:fc:cf:c8:b4: 33:b0:49:0a:91:58:29:ce:78:b2:53:c1:00:06:6e: 64:e0:b6:3a:3c:2b:e7:e6:02:bb:87:5c:bc:c2:08: 46:96:13:5a:cd:6d:14:68:ad:41:e7:d5:b6:89:f4: 05:e0:22:6d:70:b1:8c:a8:a1:ec:a2:3f:21:69:d0: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DE:6E:4F:4C:CC:79:8B:8F:DE:AB:5D:00:1E:10:AC:B2:48:62:68 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5f:cd:5a:bb:76:82:01:f7:9d:d6:7d:c3:61:00:bc:82:25: 1d:98:41:7a:37:bf:92:6b:5e:a3:48:a9:df:46:cc:99:14:b8: 25:94:de:e5:bd:aa:10:4b:07:71:5b:ef:ac:8e:13:6a:db:06: 26:07:ed:6f:2c:9a:50:6a:6a:9c:87:fc:17:27:62:e7:b4:b8: d8:47:97:64:34:f0:28:bb:48:85:95:f5:cc:38:6f:01:3d:ac: 9a:1f:d6:c4:11:8a:16:df:1b:a1:57:07:99:13:48:9b:8c:47: 35:2d:58:03:2b:2f:97:83:9d:22:f9:97:20:e0:67:58:5d:e9: 4d:bf:54:93:1d:35:2e:d9:63:ca:84:51:9f:cd:db:90:d7:e3: 7e:42:0a:ff:dd:74:01:a1:bf:9c:42:fe:8d:21:4e:ef:0b:7c: 55:9a:a0:c2:ff:b1:82:42:50:73:58:1f:40:b1:08:d3:be:a1: 29:84:0a:0a:ba:aa:90:24:cc:0f:d3:e3:55:b7:4c:3d:2d:4e: 2b:8e:ce:a2:9e:33:13:b0:cb:ed:9f:4b:63:c0:67:47:59:c6: 2c:99:a1:dc:f5:a3:a4:4d:73:a6:76:ca:10:be:fd:10:e2:51: 51:fe:26:fa:b3:69:f1:3f:67:65:d7:f9:21:89:e7:5a:67:25: a5:2f:09:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUJmssXBpDy0M8DAZlsHEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwOTI0MTYwMTIyWhcNMjYwOTI1MTYwMTIyWjAzMTEwLwYDVQQD Eyg3ZGRlNmU0ZjRjY2M3OThiOGZkZWFiNWQwMDFlMTBhY2IyNDg2MjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3FhhKXyXmCkesFYR3SBb7VtMVl7 AEh0cca1jPG59wsOehC0lW+GAlCrrYJaXBj08UDz3Rt/019YgDeDuksNklvAHcNz C0bKSh9zZ/6vmMDBWzgsKnPmIcB7qHjA3WvqLpPcwAFVZ1B3eUHEWQGdB20qirRz KfWEuAB24sPbTgLJZ23KEkTFaxivZRvU1FwJQb+dTxoSEJl8PJ/VOxk/mLzFztnS 2nZ87wq9hbPa4NtY1SgPGqr141pul30syfzPyLQzsEkKkVgpzniyU8EABm5k4LY6 PCvn5gK7h1y8wghGlhNazW0UaK1B59W2ifQF4CJtcLGMqKHsoj8hadCnAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3ebk9MzHmLj96rXQAeEKyySGJoMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1/NWrt2 ggH3ndZ9w2EAvIIlHZhBeje/kmteo0ip30bMmRS4JZTe5b2qEEsHcVvvrI4TatsG JgftbyyaUGpqnIf8Fydi57S42EeXZDTwKLtIhZX1zDhvAT2smh/WxBGKFt8boVcH mRNIm4xHNS1YAysvl4OdIvmXIOBnWF3pTb9Ukx01LtljyoRRn83bkNfjfkIK/910 AaG/nEL+jSFO7wt8VZqgwv+xgkJQc1gfQLEI076hKYQKCrqqkCTMD9PjVbdMPS1O K47Oop4zE7DL7Z9LY8BnR1nGLJmh3PWjpE1zpnbKEL79EOJRUf4m+rNp8T9nZdf5 IYnnWmclpS8JHQ== -----END CERTIFICATE-----Generated at Thu Sep 24 23:00:03 2026 by rpki-client