$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: GYGVbye0dn6FKgsdl1iQKGs/4a7Er3tb4QItMA8P9jI= Subject key identifier: EF:D4:B9:E1:DA:A3:42:C2:5A:4E:D0:79:AA:06:59:4F:34:41:4D:E0 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 01A0D3B8FE27AB5047358362EE460405E429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1630 Signing time: Thu 24 Sep 2026 14:01:51 +0000 Manifest this update: Thu 24 Sep 2026 14:01:51 +0000 Manifest next update: Fri 25 Sep 2026 14:01:51 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 3: 8B0ybuszrJP-SYemF-uQdt2SNk0.roa (hash: payoeKzJic32kfvM1q1SXaHj6ZYf16MvCGVAXHfXiqA=) 4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 6: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: CMRQJ6Tb1bi043cVdTEfki05DFAJPUTxGoQl/4vsIhw=) 11: z6k43Q6Mlg6101zXMnQ3lKLqrZI.roa (hash: WKsgqY1IGIdnJy6vmh3A6PaJlhcqbIIJGjfXdiXAmvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:b8:fe:27:ab:50:47:35:83:62:ee:46:04:05:e4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Sep 24 14:01:51 2026 GMT Not After : Sep 25 14:01:51 2026 GMT Subject: CN=efd4b9e1daa342c25a4ed079aa06594f34414de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:54:88:24:1f:40:fd:f4:69:22:35:18:12: 8f:f0:b8:bb:c1:5a:d3:60:0e:77:6e:3a:69:57:32: 97:74:ea:b4:0f:97:0d:a3:3b:6f:cf:d5:00:ad:18: 8f:be:57:7f:f3:18:0d:db:e5:46:05:bd:19:49:4b: 38:50:5f:0f:04:02:aa:44:21:b5:a8:2e:d3:8d:f4: 5d:69:46:ae:29:05:cf:9f:fd:bd:ff:da:43:02:72: 52:67:8e:c9:83:c6:3f:5f:93:45:cf:95:67:48:7c: 91:40:fc:45:60:f1:0e:50:e0:4b:4b:d1:f8:ea:df: 54:8e:9e:ab:74:fc:ea:a9:f2:66:bb:3e:1e:ac:6b: 90:c2:60:eb:a4:7d:d2:4f:ae:e8:8a:38:97:8b:27: 5a:6d:3f:35:a0:15:10:08:07:b3:35:17:48:fa:ef: 2a:d5:51:8c:ec:18:27:cd:d2:1b:9c:7c:66:b4:7e: 89:bf:08:82:21:71:ad:0c:9c:bd:97:40:08:1f:2f: 1c:38:e8:77:6a:cc:e5:20:3b:cc:ce:7d:03:92:ac: 7b:74:f9:22:2d:65:13:a8:c7:e7:44:21:66:20:76: c2:89:ae:ce:2e:69:00:d0:a4:45:71:22:72:50:ae: 4d:73:76:77:5d:17:6e:c9:65:8b:02:7e:24:5b:09: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:B9:E1:DA:A3:42:C2:5A:4E:D0:79:AA:06:59:4F:34:41:4D:E0 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:4d:23:53:14:28:71:f8:59:9b:0f:e8:0c:99:57:b4:9f:27: 1d:9b:14:14:73:06:ea:f7:aa:84:3b:59:f7:80:35:51:3e:01: de:35:80:f7:8d:c8:f5:6e:11:61:4f:75:83:38:60:f1:a5:c5: 0d:4d:3a:6b:72:8d:79:27:de:3e:c6:e1:f7:ce:14:17:e8:c5: 7f:36:93:4b:1f:60:38:e6:de:82:69:8b:50:31:ca:c1:30:e0: 22:87:fe:ff:78:b7:82:49:fb:31:5b:8f:0f:dd:8e:bb:7b:7e: 6e:ba:eb:e0:7d:33:d0:82:65:73:e4:b0:0a:6c:70:bb:4a:6a: b9:b3:f0:e0:30:2c:7d:5f:84:a6:41:b3:f4:c2:5e:99:08:ef: d4:59:7f:c0:e1:5c:7a:af:a0:1a:b6:4d:fa:fa:46:2f:13:da: ca:1f:95:9d:8f:7b:4f:23:2d:0a:10:f6:31:b7:7c:c6:54:4e: 16:84:30:34:f9:90:80:d3:2a:2f:e8:6b:ff:e3:7e:95:39:aa: d0:81:bd:8b:9c:3c:e7:6d:e1:72:1e:14:ec:84:eb:70:2f:e6: f6:17:13:f6:3e:67:7d:e1:51:74:dd:fb:35:e1:7b:05:88:18: d1:a0:ce:6c:7e:30:e1:15:48:34:c2:38:6e:43:1b:a5:46:11: 29:c9:ce:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTuP4nq1BHNYNi7kYEBeQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwOTI0MTQwMTUxWhcNMjYwOTI1MTQwMTUxWjAzMTEwLwYDVQQD EyhlZmQ0YjllMWRhYTM0MmMyNWE0ZWQwNzlhYTA2NTk0ZjM0NDE0ZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws9UiCQfQP30aSI1GBKP8Li7wVrT YA53bjppVzKXdOq0D5cNoztvz9UArRiPvld/8xgN2+VGBb0ZSUs4UF8PBAKqRCG1 qC7TjfRdaUauKQXPn/29/9pDAnJSZ47Jg8Y/X5NFz5VnSHyRQPxFYPEOUOBLS9H4 6t9Ujp6rdPzqqfJmuz4erGuQwmDrpH3ST67oijiXiydabT81oBUQCAezNRdI+u8q 1VGM7BgnzdIbnHxmtH6JvwiCIXGtDJy9l0AIHy8cOOh3aszlIDvMzn0Dkqx7dPki LWUTqMfnRCFmIHbCia7OLmkA0KRFcSJyUK5Nc3Z3XRduyWWLAn4kWwn2aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/UueHao0LCWk7QeaoGWU80QU3gMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuE0jUxQo cfhZmw/oDJlXtJ8nHZsUFHMG6veqhDtZ94A1UT4B3jWA943I9W4RYU91gzhg8aXF DU06a3KNeSfePsbh984UF+jFfzaTSx9gOObegmmLUDHKwTDgIof+/3i3gkn7MVuP D92Ou3t+brrr4H0z0IJlc+SwCmxwu0pqubPw4DAsfV+EpkGz9MJemQjv1Fl/wOFc eq+gGrZN+vpGLxPayh+VnY97TyMtChD2Mbd8xlROFoQwNPmQgNMqL+hr/+N+lTmq 0IG9i5w8523hch4U7ITrcC/m9hcT9j5nfeFRdN37NeF7BYgY0aDObH4w4RVINMI4 bkMbpUYRKcnOWw== -----END CERTIFICATE-----Generated at Thu Sep 24 19:39:58 2026 by rpki-client