$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: UiV8Tyj3FCamRZoq7HkPJGnOWlqyZUKpZOjWLqMop50= Subject key identifier: A6:1C:18:E7:99:97:A5:D7:54:09:12:53:20:72:C6:85:79:46:2C:BE Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019D26965AEFEDC7CDDDD68527D55A4F55C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 18A2 Signing time: Wed 25 Mar 2026 20:01:21 +0000 Manifest this update: Wed 25 Mar 2026 20:01:21 +0000 Manifest next update: Thu 26 Mar 2026 20:01:21 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 5LAgRSl9fFhy_RrY6Y4h_ItS9pw.roa (hash: 9uPoQd7e20GSb4ZNenQ4RHHLA/wWGAuknlkGqZ4eRPg=) 5: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 6: AyulhXyOhP2buicHYb4PF6awarA.roa (hash: o1jB5gIRXTUngRxBAxg2DTNhVQcSy127ziFioxQ1PVM=) 7: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 8: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 9: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 10: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 11: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 12: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 13: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 14: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 15: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 16: XSRfDKJB1vWxhWr5_nnhi8kY_Ro.roa (hash: vbcx865viaCEEplLJzs5WTHypNQpAu7A3ivTLIG9UFw=) 17: XUBXC0DROf8_aCxS_neH8O6J0e4.roa (hash: /C5B3L/2hO5EvNBmbIy9wgx/1sbjdRkGMDg2OXb+bOM=) 18: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 19: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 20: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 21: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 22: dJOVZhFoAVQ7QvEgQLVQwNsqqd8.roa (hash: eBxeDXSsEBdbyXQmGwMrPJVa9st/vuZ7R99emmZ2iNc=) 23: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 24: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 25: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 26: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 27: ic9El4BtymTELX4tfO85KLsnnzA.roa (hash: Ab+vOEfUlKcuCz2lVkxdfNmPtdmCY2q8gRV8PJiaibk=) 28: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 29: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 30: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 31: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 32: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 33: r5EQFD61hWzkJjB7v7Y30uUhewc.roa (hash: 6ypgI1gg3G9f0KTPTcY2gQYHH5FXI074w6M2BK68aUs=) 34: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 35: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 36: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: 6v9qlh5zZpyucPd4C8cv5QCKxdAmdWGuEJhdipNr5G0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:5a:ef:ed:c7:cd:dd:d6:85:27:d5:5a:4f:55:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Mar 25 20:01:21 2026 GMT Not After : Mar 26 20:01:21 2026 GMT Subject: CN=a61c18e79997a5d7540912532072c68579462cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:fd:a8:d4:78:84:12:8d:8e:7c:af:94:4c: 33:3e:ed:a6:c7:c1:be:bf:59:d7:88:00:25:b0:b1: a9:2e:5e:f5:ec:78:d8:53:d1:61:f8:80:2f:b2:0c: e8:8d:6f:cc:7d:b1:91:9f:e2:6e:13:51:70:dd:54: 03:f8:e1:3c:a1:d8:27:cf:b3:64:c9:f5:50:89:1e: df:7a:97:a4:b0:d7:a3:26:81:da:b2:4b:55:bb:e6: 2b:6f:36:c6:e6:0a:8a:7c:1f:da:c4:3f:98:28:54: 50:65:eb:ad:df:af:dc:9f:eb:d4:78:a5:1a:f3:f0: 84:d2:2c:57:0d:6f:2b:71:32:e5:00:19:5c:d7:0d: a0:c6:71:1e:48:fe:74:92:50:1f:a0:2c:e0:00:a3: 08:d5:76:7c:1f:d3:cc:6f:d7:af:fd:e5:4f:0f:f7: 3d:36:f2:57:d2:27:7e:c7:05:4f:2f:83:64:81:0e: a5:52:73:64:45:f8:27:d2:77:13:fc:4a:49:cd:95: 42:5f:14:29:e1:f2:4c:cb:d8:aa:77:a2:81:c7:f7: 95:47:d8:d4:db:94:bc:32:2a:5b:f3:a7:65:23:58: a8:a2:c4:32:4e:ae:9f:8f:9a:4e:28:df:1e:be:a1: dd:29:9d:2e:a8:09:8d:6c:67:97:0e:d4:39:0b:74: 70:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1C:18:E7:99:97:A5:D7:54:09:12:53:20:72:C6:85:79:46:2C:BE X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:56:a9:4f:a6:11:dd:52:a9:99:ae:59:f5:69:b1:99:b5:cd: d7:ef:d2:00:b4:16:8d:53:4c:a4:66:f2:45:99:90:67:57:1c: 8d:48:45:07:f7:18:b6:ab:2c:c4:fd:47:87:44:34:b6:9e:58: a9:fe:d0:91:a4:50:2b:44:4a:f9:90:4b:a5:a7:64:95:b9:d1: 9e:52:4c:f4:ea:53:fa:fd:37:db:f1:71:3c:31:f3:03:66:3f: b4:13:44:26:28:84:f8:80:82:ba:be:8e:40:db:71:10:42:5f: 70:a1:62:b9:fa:6d:92:72:10:6e:a2:4c:95:5b:7a:0c:6c:69: cb:b0:1f:ba:de:28:d8:37:7a:6c:58:75:87:8e:f0:62:22:81: b9:b4:23:78:52:dd:42:6f:cf:95:86:66:1c:82:1e:fc:16:05: f2:39:1a:fa:96:73:7d:15:42:17:6f:ba:ac:18:a1:e6:e6:17: 2f:5c:e3:16:28:8e:b1:4f:1b:1c:a4:21:b3:cd:05:f5:d5:48: 76:b9:a2:86:89:ff:fa:78:00:8f:43:3f:0b:ed:85:af:28:7e: 78:a0:93:d7:69:26:b3:b0:20:fd:e1:2b:a6:23:7c:a7:1d:70: 94:08:6c:c4:8a:68:73:83:b7:91:11:6f:67:e7:fe:ac:38:89: 2b:00:c5:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mllrv7cfN3daFJ9VaT1XGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMzI1MjAwMTIxWhcNMjYwMzI2MjAwMTIxWjAzMTEwLwYDVQQD EyhhNjFjMThlNzk5OTdhNWQ3NTQwOTEyNTMyMDcyYzY4NTc5NDYyY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkH9qNR4hBKNjnyvlEwzPu2mx8G+ v1nXiAAlsLGpLl717HjYU9Fh+IAvsgzojW/MfbGRn+JuE1Fw3VQD+OE8odgnz7Nk yfVQiR7fepeksNejJoHasktVu+YrbzbG5gqKfB/axD+YKFRQZeut36/cn+vUeKUa 8/CE0ixXDW8rcTLlABlc1w2gxnEeSP50klAfoCzgAKMI1XZ8H9PMb9ev/eVPD/c9 NvJX0id+xwVPL4NkgQ6lUnNkRfgn0ncT/EpJzZVCXxQp4fJMy9iqd6KBx/eVR9jU 25S8Mipb86dlI1ioosQyTq6fj5pOKN8evqHdKZ0uqAmNbGeXDtQ5C3Rw4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYcGOeZl6XXVAkSUyByxoV5Riy+MB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllapT6YR 3VKpma5Z9WmxmbXN1+/SALQWjVNMpGbyRZmQZ1ccjUhFB/cYtqssxP1Hh0Q0tp5Y qf7QkaRQK0RK+ZBLpadklbnRnlJM9OpT+v032/FxPDHzA2Y/tBNEJiiE+ICCur6O QNtxEEJfcKFiufptknIQbqJMlVt6DGxpy7Afut4o2Dd6bFh1h47wYiKBubQjeFLd Qm/PlYZmHIIe/BYF8jka+pZzfRVCF2+6rBih5uYXL1zjFiiOsU8bHKQhs80F9dVI drmihon/+ngAj0M/C+2Fryh+eKCT12kms7Ag/eErpiN8px1wlAhsxIpoc4O3kRFv Z+f+rDiJKwDFpA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:15:28 2026 by rpki-client