$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: s7ewEhTPrhga0Wo/sfbUo9wJ9Fdnj1S21YVgF82QK/U= Subject key identifier: A4:1D:BB:CD:D7:72:24:06:E1:EB:8E:AC:B6:84:FB:34:DD:60:8E:69 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 01A0CE5A946C7EB4E682BDE14F8F12BA103D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1A8C Signing time: Wed 23 Sep 2026 13:00:37 +0000 Manifest this update: Wed 23 Sep 2026 13:00:37 +0000 Manifest next update: Thu 24 Sep 2026 13:00:37 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 5: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 6: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 7: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 8: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 9: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 10: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 11: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 12: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 13: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 14: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 15: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 16: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 17: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 18: cIzWNeNZbGQqB6PaAUfFk04qwpw.roa (hash: qXYjYaptAMpe3dpSUVYLnaW4A2Txz8KndGthhN4noC0=) 19: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 20: efwlLLHqb-bdy8PqwUcM4smevIk.roa (hash: dziFMotDF0gnY460BoEIQb6O67mGB4C/hN9W6acAk18=) 21: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 22: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 23: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 24: iPKJwckHS7fTX2BYHqvx9q3JA4g.roa (hash: 2bHm3BwYJ52KpSHXTQlcz+x91m3fEq3PirchX6IlyGw=) 25: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 26: jXlPjmax2D6xk6xk15LqeUs2Fa8.roa (hash: ZUhfEbcBqZVUtm9r9VeW3nIknnrUSnVpiKVvjVmMjCA=) 27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 31: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 32: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 33: x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa (hash: Y+nAlXRY4txRKWouCnodtOhRL0mCZVwY0SjTTDgCeMQ=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: 3qE5Wwgg1LMPf5nvWWvWB9WtoX+lnNleq0OjHKIym1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:5a:94:6c:7e:b4:e6:82:bd:e1:4f:8f:12:ba:10:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Sep 23 13:00:37 2026 GMT Not After : Sep 24 13:00:37 2026 GMT Subject: CN=a41dbbcdd7722406e1eb8eacb684fb34dd608e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:21:ff:67:a1:47:80:4a:c5:1b:2c:4a:1d:3c: 6c:a4:25:0a:d3:6e:90:61:f7:44:2f:47:20:cf:5d: 1f:e4:ac:91:85:55:89:c0:84:03:8d:54:03:7d:10: a3:93:5b:60:47:33:97:ea:66:29:ac:e2:50:d6:86: f1:2a:97:19:76:3d:c5:76:26:24:2f:07:00:8d:ea: 20:3e:58:6c:1a:ec:68:b4:58:4b:38:32:47:29:ae: 73:1f:7f:c3:0d:76:da:7f:88:7d:a9:d1:d6:d5:e7: f2:be:a3:9e:89:84:39:f1:be:bd:81:b1:1e:8a:40: f9:5a:de:2f:5b:9b:ef:06:0c:6d:4b:0d:51:69:5a: cf:f5:56:09:03:ce:91:78:d4:8a:9e:f4:74:f6:60: 27:66:1c:a8:08:ea:fe:07:f5:cb:54:dc:30:a7:2d: 8a:f8:c7:f7:3a:c3:f2:39:61:1f:ed:86:10:03:96: 26:ca:b4:33:3c:4b:61:4d:59:67:fb:2c:74:a8:24: 39:36:69:2e:15:1f:a1:54:fc:e1:a0:05:15:a5:bf: 30:01:f5:81:c0:4f:01:11:00:71:78:e9:96:99:81: d2:42:9f:41:0f:19:09:dd:48:cf:0b:5d:f4:75:f2: b9:88:16:b7:f3:9a:a7:c4:08:27:9a:dc:ea:16:b1: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1D:BB:CD:D7:72:24:06:E1:EB:8E:AC:B6:84:FB:34:DD:60:8E:69 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a8:5f:1c:35:af:2a:ad:25:9d:28:98:08:73:af:fa:fa:19: d6:54:50:ae:4c:6d:22:13:c8:ad:49:22:88:97:c1:82:e2:bb: a4:ab:74:a5:54:56:e4:93:09:26:7c:17:8d:0e:76:3e:25:19: ce:31:88:8b:cd:4e:af:f5:f3:9a:5a:bf:9d:61:79:c6:d9:f2: 8a:74:38:bf:30:09:c8:20:0c:9b:d8:c2:73:b4:b2:78:d5:81: c8:32:05:ba:9e:1d:7f:18:47:77:69:23:f2:9e:c7:b1:a7:22: f9:0a:77:03:a9:f6:a8:5e:29:ba:1f:66:6c:fa:4e:c9:37:b1: d1:05:72:94:17:63:f7:8a:81:55:18:c4:41:1d:8c:e6:5a:db: 92:b0:7f:34:25:9b:08:90:71:e8:be:b4:ea:ab:02:4a:58:1f: 74:ee:65:cd:e6:09:2e:fd:86:f2:b7:62:20:a6:d3:7b:a0:9e: e0:7c:43:96:28:7c:62:bb:2e:7d:85:4e:75:ed:d9:db:2a:0b: 5d:17:48:50:58:fe:7b:d4:a8:90:cf:81:98:72:19:12:b5:24: 8a:59:ac:5b:30:32:a9:22:b7:47:58:43:90:6b:5c:eb:c8:0c: 28:92:36:b0:91:13:61:ee:eb:6f:15:fb:a0:b5:fe:21:2e:33: 56:86:02:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOWpRsfrTmgr3hT48SuhA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwOTIzMTMwMDM3WhcNMjYwOTI0MTMwMDM3WjAzMTEwLwYDVQQD EyhhNDFkYmJjZGQ3NzIyNDA2ZTFlYjhlYWNiNjg0ZmIzNGRkNjA4ZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSH/Z6FHgErFGyxKHTxspCUK026Q YfdEL0cgz10f5KyRhVWJwIQDjVQDfRCjk1tgRzOX6mYprOJQ1obxKpcZdj3FdiYk LwcAjeogPlhsGuxotFhLODJHKa5zH3/DDXbaf4h9qdHW1efyvqOeiYQ58b69gbEe ikD5Wt4vW5vvBgxtSw1RaVrP9VYJA86ReNSKnvR09mAnZhyoCOr+B/XLVNwwpy2K +Mf3OsPyOWEf7YYQA5YmyrQzPEthTVln+yx0qCQ5NmkuFR+hVPzhoAUVpb8wAfWB wE8BEQBxeOmWmYHSQp9BDxkJ3UjPC130dfK5iBa385qnxAgnmtzqFrGPBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQdu83XciQG4euOrLaE+zTdYI5pMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqhfHDWv Kq0lnSiYCHOv+voZ1lRQrkxtIhPIrUkiiJfBguK7pKt0pVRW5JMJJnwXjQ52PiUZ zjGIi81Or/Xzmlq/nWF5xtnyinQ4vzAJyCAMm9jCc7SyeNWByDIFup4dfxhHd2kj 8p7Hsaci+Qp3A6n2qF4puh9mbPpOyTex0QVylBdj94qBVRjEQR2M5lrbkrB/NCWb CJBx6L606qsCSlgfdO5lzeYJLv2G8rdiIKbTe6Ce4HxDlih8YrsufYVOde3Z2yoL XRdIUFj+e9SokM+BmHIZErUkilmsWzAyqSK3R1hDkGtc68gMKJI2sJETYe7rbxX7 oLX+IS4zVoYChw== -----END CERTIFICATE-----Generated at Wed Sep 23 21:19:37 2026 by rpki-client