$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json) Hash identifier: hnwilZ7lPTq4gHftBIq1S8hOR98rDl7F6nGCzWeXD5g= Subject key identifier: 38:BC:A2:6C:50:35:78:77:9C:3E:4A:02:A7:20:00:18:1F:D8:09:92 Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Certificate serial: 01A0CD8B34A930729E6F66DCA68865B56B30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft Manifest number: 1318 Signing time: Wed 23 Sep 2026 09:14:07 +0000 Manifest this update: Wed 23 Sep 2026 09:14:07 +0000 Manifest next update: Thu 24 Sep 2026 09:14:07 +0000 Files and hashes: 1: F_efPUkbYJiwgXfhbrfqTy7pzl4.roa (hash: DBFGNPIUNOOmBZc6f7YXGHxHQkj2ijxWbr4/ap8nEM8=) 2: U0zFycq25PPn0dlxRYsOouqMHlQ.roa (hash: 0/WeAZRiRBLJaCyVnQwSNF+wkwCVBcyTTJkapLynjLs=) 3: VhdKFflL6wzVMXCQhX8bkLBALKo.roa (hash: GmQzzs1E/5GYPLQuRjYECvhEeGtOhpZPCBL21n8gXMM=) 4: VllzRPRKTVqoKCv6C6XbpsT1mlw.roa (hash: AwMpFygRvq1JwWMWPLbmaZCSHpec1V7IeWXb7LTJvto=) 5: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: wvE0u31RqqWMMgSNT06XmUogmj9xLU4aVWxvwuCiGyU=) 6: _7XaiiyBAJ5Eqd5vKuAqx4PW0hM.roa (hash: iqPKLFA+g5deNUkHvdEQM9uLDsaW9rYQtZs9LzN5kwg=) 7: aBRByi6HtqSTkTwS-fInKVGreVM.roa (hash: L+8L7FrVL2l9rPUgEQqLrjnJQ1XfFBQi0mPOySPHZwc=) 8: ak_zpBeCzF7k-sZZ4UqlvJ4hCyQ.roa (hash: B78IwndzlBG3qE9BrzBg3u/j7NoujFELRCBgQIuL/JU=) 9: hzP1qnHmPnnJOM7e8mwB2JQgWlw.roa (hash: P7S5XXCI5WhORMniLgG3Xqv8lUXzGtRjkmzYHiVxmxw=) 10: jSTmw6QNVRai_EuoNhY73OP3VjE.roa (hash: AYD6OFv8HTxuycJJf0ziwoDHoVKLGuICS6c+LYT5M5c=) 11: jkRp-_i-nDw-ctHbmCB-SpszI24.roa (hash: VMluiKRy3ZyrIcXpCPyHe6iAxdnlIHxQpXGdv6vg60U=) 12: mCy7hS8qB_vm_oJsB9qaLGKlYEs.roa (hash: Ul861aCSvme8oLj/mvAnopiu+aRS2VSuHznhSML8kVk=) 13: nfoxxfL1_UxuFVWik4k6cxK90gs.roa (hash: O64GHljWbd//dEjoPcyNnBvf4qkuPCRCXpuFuF0/Spo=) 14: qHgbTLKhQlwyDn4W47Nn2XhrvEQ.roa (hash: e4vTmIa36MwpM5S5DLu7QHR1O71kqBkmpQlt4QzUxjA=) 15: rN4NLaMID6DZ_1Tf-dsWVDuA2X4.roa (hash: 7gf462IZs1uEZ6uPb1SMqjZ8MS74g0QNcTk84kmywms=) 16: rjJfP-cMk7Eo1gcf4GJv-6fZ8wA.roa (hash: X60K0VdLBIECsdh4cUymksKwrOGj9pXkUyJRydUZqtU=) 17: wTiLBx3d6nArSMvvuGONeX8tzoU.roa (hash: wWQ4VBFuaNpyEOuyC6Zr3NF5Y4tz4sd8I+MyslECmcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 09:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:8b:34:a9:30:72:9e:6f:66:dc:a6:88:65:b5:6b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Validity Not Before: Sep 23 09:14:07 2026 GMT Not After : Sep 24 09:14:07 2026 GMT Subject: CN=38bca26c503578779c3e4a02a72000181fd80992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:30:31:9f:c9:7d:45:d5:c4:98:19:ed:46: bd:a6:16:5c:86:21:ba:47:fa:9e:35:7f:cb:87:7e: db:5d:34:de:3f:11:41:cb:90:55:45:d2:ac:7a:19: 3d:53:70:9e:0a:e7:ee:61:70:29:80:37:da:78:25: 4d:f7:70:a9:e0:9e:6c:61:d8:78:93:d8:e8:cf:1a: d0:cd:ef:7d:16:cf:5b:46:5c:1b:05:b8:97:b9:29: 8c:02:5c:70:06:c5:c6:ab:db:91:4f:e0:ea:43:65: c5:47:6f:13:91:58:06:f7:56:d8:90:fa:3d:cc:25: 6a:58:1b:62:9b:8c:97:da:62:b2:d7:c6:25:ca:8c: 72:17:4f:88:1d:21:56:41:4d:9a:1e:c8:ba:bf:a0: d2:42:97:cb:92:29:e4:cc:e0:93:5c:40:99:d9:24: 78:9d:9c:8a:d1:33:d1:6d:29:c8:fd:04:22:ea:86: 06:f4:e3:de:96:55:0e:4a:07:05:43:e1:ef:18:f1: c4:c2:5f:08:09:4a:ef:68:4a:da:91:2c:87:24:88: 6f:54:35:7a:76:05:53:c3:63:1e:80:e9:c0:7c:e1: cb:ca:42:f2:8a:dc:50:0b:de:9c:51:b7:80:8e:6e: b7:48:2b:4c:03:5a:ba:77:84:c1:6c:c2:89:9e:39: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BC:A2:6C:50:35:78:77:9C:3E:4A:02:A7:20:00:18:1F:D8:09:92 X509v3 Authority Key Identifier: keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a9:6f:44:9a:4d:a6:48:ba:e5:b4:f9:e4:db:6f:9f:ae:95: d1:5b:47:3c:31:42:be:d4:51:5b:2e:0d:ac:f4:34:a5:15:0c: 33:3d:e4:1c:e3:d8:44:39:f0:6c:22:d4:c3:97:fd:04:20:9d: 88:77:93:a9:87:f4:15:db:57:c0:ef:b3:14:bc:71:d9:49:5b: 8d:4e:cf:7b:3c:13:35:2a:6d:2c:6e:25:68:8b:fa:3a:9c:b1: 1b:5a:57:fe:7d:37:f5:8d:a7:c8:a2:ee:30:f4:6e:bd:0e:8d: c2:d3:5d:95:ba:31:f1:29:58:36:b2:57:b3:aa:ff:86:62:ce: a4:b5:e1:78:d3:2e:5f:a4:9f:55:ff:d6:77:55:9e:4b:43:d5: be:ad:7a:a3:de:37:f3:2c:b4:85:22:29:af:da:55:d1:54:e1: b4:c6:46:01:1e:3d:e0:b7:1d:01:df:61:00:5c:2c:df:ab:7c: cb:74:24:3a:57:88:d9:88:c0:e2:50:72:56:b2:88:c1:0a:42: be:5d:5e:a5:52:d9:ba:34:86:0a:1a:2c:8b:db:9a:57:5b:b4: d5:d4:86:03:b0:2a:28:99:f7:de:d5:3a:73:69:b8:31:f1:30: 98:10:d8:a9:66:8a:1d:c9:80:74:1c:f6:cf:ff:57:68:dc:cf: 35:2d:87:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNizSpMHKeb2bcpohltWswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw M2MwMTkwHhcNMjYwOTIzMDkxNDA3WhcNMjYwOTI0MDkxNDA3WjAzMTEwLwYDVQQD EygzOGJjYTI2YzUwMzU3ODc3OWMzZTRhMDJhNzIwMDAxODFmZDgwOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSYwMZ/JfUXVxJgZ7Ua9phZchiG6 R/qeNX/Lh37bXTTePxFBy5BVRdKsehk9U3CeCufuYXApgDfaeCVN93Cp4J5sYdh4 k9jozxrQze99Fs9bRlwbBbiXuSmMAlxwBsXGq9uRT+DqQ2XFR28TkVgG91bYkPo9 zCVqWBtim4yX2mKy18YlyoxyF0+IHSFWQU2aHsi6v6DSQpfLkinkzOCTXECZ2SR4 nZyK0TPRbSnI/QQi6oYG9OPellUOSgcFQ+HvGPHEwl8ICUrvaErakSyHJIhvVDV6 dgVTw2MegOnAfOHLykLyitxQC96cUbeAjm63SCtMA1q6d4TBbMKJnjnf9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDi8omxQNXh3nD5KAqcgABgf2AmSMB8GA1UdIwQY MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt YzE4ZTNjY2M3NDJiLzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqlvRJpN pki65bT55Ntvn66V0VtHPDFCvtRRWy4NrPQ0pRUMMz3kHOPYRDnwbCLUw5f9BCCd iHeTqYf0FdtXwO+zFLxx2UlbjU7PezwTNSptLG4laIv6OpyxG1pX/n039Y2nyKLu MPRuvQ6NwtNdlbox8SlYNrJXs6r/hmLOpLXheNMuX6SfVf/Wd1WeS0PVvq16o943 8yy0hSIpr9pV0VThtMZGAR494LcdAd9hAFws36t8y3QkOleI2YjA4lByVrKIwQpC vl1epVLZujSGChosi9uaV1u01dSGA7AqKJn33tU6c2m4MfEwmBDYqWaKHcmAdBz2 z/9XaNzPNS2H9w== -----END CERTIFICATE-----Generated at Wed Sep 23 17:32:30 2026 by rpki-client