$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: jAkkhAvCh6FBdJdefOVovEcbCB68/OJQXfHL/iUOha0= Subject key identifier: 4C:43:69:BA:AB:3F:C5:76:5A:7C:99:29:BB:C4:94:E9:95:8F:25:55 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 01A1DB0172E170FECF42EFD55528370BEDFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 1B0E Signing time: Sat 14 Nov 2026 17:01:07 +0000 Manifest this update: Sat 14 Nov 2026 17:01:07 +0000 Manifest next update: Sun 15 Nov 2026 17:01:07 +0000 Files and hashes: 1: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (hash: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4=) 2: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (hash: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8=) 3: NklSIVNcNIWeMyDnmkM31BBhz1c.roa (hash: UKSW2BDTyMNTJDzhPRFU+Wzj1R5uLkgmHOPWx5CWEqQ=) 4: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (hash: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig=) 5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: wRJAEnU5XqfRQa4NjTGqsjeBThpPQtrYBcL+MWXg8tI=) 6: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (hash: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE=) 7: _YOXL7ZxwGLyAFtXgmbGoGmsxw0.roa (hash: oYcEDHMjBaLjLdS2+cnHZQVD1ORy9f2L160BSTCgJ4c=) 8: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (hash: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=) 9: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (hash: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis=) 10: szXceV_8JO0f_7ooL6S8iduW9xI.roa (hash: xeJBYCAXDOSNVRxdgWGAZ1ipDc3y7H3KXIsJs1D2FK4=) 11: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (hash: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:01:72:e1:70:fe:cf:42:ef:d5:55:28:37:0b:ed:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Nov 14 17:01:07 2026 GMT Not After : Nov 15 17:01:07 2026 GMT Subject: CN=4c4369baab3fc5765a7c9929bbc494e9958f2555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:fd:9c:26:af:f9:0d:89:1a:fc:58:28:25: f3:94:72:30:2d:ce:92:7b:35:4b:92:ca:8d:5a:55: 76:b0:a4:86:6b:83:e2:a2:ce:ae:c8:12:8f:ff:a0: 8c:d5:2c:5a:bc:24:1d:1a:52:2b:ec:c7:69:2c:f5: 48:99:f2:78:24:9d:0c:c9:c7:2d:48:fb:7f:a1:3b: b0:59:8c:83:85:51:05:48:a8:25:f3:21:3f:69:94: c7:ed:74:e8:cf:2b:07:48:ef:9e:20:b0:34:7d:40: aa:18:86:b5:23:ee:38:10:3c:df:65:b6:3e:cf:83: 4c:d0:56:7c:16:e3:6b:5f:3f:76:b8:e4:08:f4:aa: 09:d3:0d:bb:55:a1:bd:0f:d1:30:04:68:2d:17:a9: 0d:25:1c:54:ca:f2:24:0e:28:17:a6:cc:de:22:0b: ab:15:a6:43:e2:38:7a:55:c1:bf:c7:c8:fb:60:79: 68:a3:c8:2a:d2:0d:fe:5d:67:01:f5:18:12:ac:f5: 8b:18:e2:b6:50:35:29:0c:62:e6:f4:eb:44:57:88: 62:78:d7:13:53:63:b6:c6:dc:bb:b9:e9:d6:7c:7f: 15:65:0b:a5:56:f4:48:9e:93:71:3d:2d:1b:ba:f4: 36:10:8e:a8:55:ae:e6:5a:3d:9c:10:32:13:bc:3e: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:43:69:BA:AB:3F:C5:76:5A:7C:99:29:BB:C4:94:E9:95:8F:25:55 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:32:36:fa:74:e7:ae:a2:53:d3:be:96:b2:d5:04:ba:84:fc: 65:9e:99:fb:10:d3:85:98:af:5b:2f:02:df:51:fe:08:5d:de: e8:be:3b:ae:2d:12:4f:77:4a:b1:53:c5:52:28:10:1f:6a:62: 92:61:07:0b:05:c8:45:9a:85:94:4f:b8:aa:53:f7:5a:6d:06: e9:6d:aa:cc:6d:f5:84:47:aa:8c:da:1a:3e:ca:39:ba:ce:3a: 7d:25:42:ca:53:99:e8:ce:32:58:13:16:fc:f7:4a:60:8d:85: de:88:f9:73:80:5c:ee:d5:1e:d2:8b:04:96:1b:cb:86:ab:79: 57:b1:61:eb:55:f5:a0:b3:7a:9a:1d:8f:b8:73:03:e5:02:8b: e8:6e:6e:fe:03:0d:00:77:14:dd:bb:e8:84:60:5d:6e:ba:de: 35:df:76:63:f6:85:fc:8a:15:ac:2f:1e:4f:c7:bb:dd:c8:ae: d8:1d:d2:fd:09:29:2f:d9:53:18:3c:00:3a:da:19:2b:0e:8b: 8e:94:93:72:52:de:1e:61:ae:72:48:b8:56:4f:fa:19:50:de: ee:b5:d8:b4:c1:1e:04:68:6c:ee:10:e1:af:8f:98:b2:2e:6c: 39:46:38:d7:b0:d6:42:ab:af:62:c6:ff:89:47:a7:b7:8c:f8: 55:05:45:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbAXLhcP7PQu/VVSg3C+3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYxMTE0MTcwMTA3WhcNMjYxMTE1MTcwMTA3WjAzMTEwLwYDVQQD Eyg0YzQzNjliYWFiM2ZjNTc2NWE3Yzk5MjliYmM0OTRlOTk1OGYyNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I79nCav+Q2JGvxYKCXzlHIwLc6S ezVLksqNWlV2sKSGa4Pios6uyBKP/6CM1SxavCQdGlIr7MdpLPVImfJ4JJ0Mycct SPt/oTuwWYyDhVEFSKgl8yE/aZTH7XTozysHSO+eILA0fUCqGIa1I+44EDzfZbY+ z4NM0FZ8FuNrXz92uOQI9KoJ0w27VaG9D9EwBGgtF6kNJRxUyvIkDigXpszeIgur FaZD4jh6VcG/x8j7YHloo8gq0g3+XWcB9RgSrPWLGOK2UDUpDGLm9OtEV4hieNcT U2O2xty7uenWfH8VZQulVvRInpNxPS0buvQ2EI6oVa7mWj2cEDITvD7rbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExDabqrP8V2WnyZKbvElOmVjyVVMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDI2+nTn rqJT076WstUEuoT8ZZ6Z+xDThZivWy8C31H+CF3e6L47ri0ST3dKsVPFUigQH2pi kmEHCwXIRZqFlE+4qlP3Wm0G6W2qzG31hEeqjNoaPso5us46fSVCylOZ6M4yWBMW /PdKYI2F3oj5c4Bc7tUe0osElhvLhqt5V7Fh61X1oLN6mh2PuHMD5QKL6G5u/gMN AHcU3bvohGBdbrreNd92Y/aF/IoVrC8eT8e73ciu2B3S/QkpL9lTGDwAOtoZKw6L jpSTclLeHmGucki4Vk/6GVDe7rXYtMEeBGhs7hDhr4+Ysi5sOUY417DWQquvYsb/ iUent4z4VQVFLg== -----END CERTIFICATE-----Generated at Sat Nov 14 21:53:09 2026 by rpki-client