$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: Ev8daa8SA4BwGN/T5Ml7YeoyP9F8wmJ3YObglXH/vlg= Subject key identifier: 4C:D6:28:D2:64:30:F8:F2:D3:11:7B:3E:11:7B:D9:F7:06:4C:EC:F3 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019D299726D131A5E2D111ED817AB6141C61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1448 Signing time: Thu 26 Mar 2026 10:01:04 +0000 Manifest this update: Thu 26 Mar 2026 10:01:04 +0000 Manifest next update: Fri 27 Mar 2026 10:01:04 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 18Szc_NOHV7yuL-RPwFFVIdly00.roa (hash: ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=) 3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 4: 7lXBjbngAvV9gHuyOcicow6UdVo.roa (hash: BQCTu2EQ42JTon6DFlUxY4dueGNRFijDWqRTzuT0vfE=) 5: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 6: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 9: iYmfX-Xr2WV-ryyeYGg2faUJK3c.roa (hash: 42KCUZzyT040surN1C17Y5tix8TWbmapzOCWog8iRSA=) 10: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 11: oSKHmVNGFh3OpJke3WnxdXvCjgc.roa (hash: Jbe/LRuw53xo+FdeFOv1OWeqAR3sX4SCDTXs5bJaUEE=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: VOwGBxm2DwXlV0nxFTvRUTQXmhYCmIA7tN61qusW3H0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:97:26:d1:31:a5:e2:d1:11:ed:81:7a:b6:14:1c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Mar 26 10:01:04 2026 GMT Not After : Mar 27 10:01:04 2026 GMT Subject: CN=4cd628d26430f8f2d3117b3e117bd9f7064cecf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:c4:32:72:e6:51:5a:9a:66:66:0c:4d:ce: b7:ee:3a:7a:df:45:ed:2e:1a:37:fa:39:6d:6c:ae: e8:eb:e9:66:08:7d:1b:29:3b:16:f3:99:1c:d2:26: 86:be:9f:d7:33:f0:f4:ab:45:31:08:27:cc:8b:6b: 67:99:cc:d0:7d:65:8d:7a:1c:aa:1b:c0:c7:96:c8: 83:35:23:4c:09:2e:36:cd:da:90:36:8f:80:ae:be: 90:09:f3:4f:7b:1e:2a:88:3a:14:8b:18:28:c9:6f: 7c:17:2c:fb:a7:fc:bd:35:1b:0a:f8:c6:f4:54:af: cb:e9:17:b8:1a:ae:0b:57:c7:b6:25:f2:d1:9a:a5: 8d:24:11:eb:3a:7c:d6:b9:17:fa:3c:b8:0c:da:b4: 68:f4:a6:c0:17:d6:49:1c:ec:d7:93:05:21:c4:49: 4f:f5:da:00:31:ba:93:e7:25:e7:f9:0d:30:10:21: 12:20:74:05:01:9e:65:9b:10:48:4a:cc:64:23:a9: 50:6c:c6:0e:c6:04:31:d9:ef:20:8f:85:fd:23:09: fd:11:0a:de:82:f5:b9:b1:1b:bd:25:ca:62:51:1e: df:08:31:65:25:38:11:b0:a4:6e:c6:ba:14:64:61: 19:9f:3a:07:b3:3a:ac:ea:9e:71:24:09:e1:fb:7d: 5e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D6:28:D2:64:30:F8:F2:D3:11:7B:3E:11:7B:D9:F7:06:4C:EC:F3 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c1:e8:30:77:a5:7e:cd:08:d5:09:5c:c1:8e:ac:21:db:26: 51:35:ef:ac:ae:03:de:55:0b:b0:3a:95:a7:36:eb:16:17:6c: 79:d9:fa:fc:39:42:04:91:fc:89:6b:4f:0f:56:4e:70:db:5f: ea:31:79:b8:b9:32:2c:54:cd:af:51:ca:fa:c8:60:e3:40:d2: 3a:f6:9a:c8:ec:ad:70:3e:aa:af:aa:15:bb:ea:2e:7f:98:0d: e9:ef:c7:6e:aa:93:18:0c:c3:d7:97:53:04:6b:35:46:5e:28: 29:5c:c4:8f:1e:92:cd:71:4e:22:0b:e0:59:e0:61:f3:43:40: 95:ca:6e:a1:55:db:d8:0e:6d:aa:35:cd:e6:cc:d0:d8:d4:ab: 9c:f6:e8:29:9a:f6:60:ce:32:6c:69:cf:a1:0c:73:21:b6:a2: 72:b4:37:9d:85:a0:48:5a:a6:78:e7:09:a6:2d:df:c2:b7:5a: 28:a1:d1:99:e4:29:86:8f:cb:db:05:55:1a:21:0b:de:a0:2f: dc:79:f4:c0:3d:a1:04:37:e8:a3:13:c9:45:96:6e:83:0a:04: 26:00:87:8a:e9:93:06:76:9f:91:6e:9b:f9:9d:f1:fe:8a:16: f4:cb:0d:cb:84:92:65:87:34:ab:13:40:61:7d:7b:20:c6:42: 63:08:a4:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0plybRMaXi0RHtgXq2FBxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwMzI2MTAwMTA0WhcNMjYwMzI3MTAwMTA0WjAzMTEwLwYDVQQD Eyg0Y2Q2MjhkMjY0MzBmOGYyZDMxMTdiM2UxMTdiZDlmNzA2NGNlY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoovEMnLmUVqaZmYMTc637jp630Xt Lho3+jltbK7o6+lmCH0bKTsW85kc0iaGvp/XM/D0q0UxCCfMi2tnmczQfWWNehyq G8DHlsiDNSNMCS42zdqQNo+Arr6QCfNPex4qiDoUixgoyW98Fyz7p/y9NRsK+Mb0 VK/L6Re4Gq4LV8e2JfLRmqWNJBHrOnzWuRf6PLgM2rRo9KbAF9ZJHOzXkwUhxElP 9doAMbqT5yXn+Q0wECESIHQFAZ5lmxBISsxkI6lQbMYOxgQx2e8gj4X9Iwn9EQre gvW5sRu9JcpiUR7fCDFlJTgRsKRuxroUZGEZnzoHszqs6p5xJAnh+31euwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzWKNJkMPjy0xF7PhF72fcGTOzzMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8HoMHel fs0I1QlcwY6sIdsmUTXvrK4D3lULsDqVpzbrFhdsedn6/DlCBJH8iWtPD1ZOcNtf 6jF5uLkyLFTNr1HK+shg40DSOvaayOytcD6qr6oVu+ouf5gN6e/HbqqTGAzD15dT BGs1Rl4oKVzEjx6SzXFOIgvgWeBh80NAlcpuoVXb2A5tqjXN5szQ2NSrnPboKZr2 YM4ybGnPoQxzIbaicrQ3nYWgSFqmeOcJpi3fwrdaKKHRmeQpho/L2wVVGiEL3qAv 3Hn0wD2hBDfooxPJRZZugwoEJgCHiumTBnafkW6b+Z3x/ooW9MsNy4SSZYc0qxNA YX17IMZCYwikow== -----END CERTIFICATE-----Generated at Thu Mar 26 12:48:00 2026 by rpki-client