$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: 7OUyij4Q7YX9Jkq9j18gjaE6t8J70zblXOf8FyK1hAw= Subject key identifier: A4:EF:49:FE:6F:8B:BF:66:BB:20:5B:E3:7E:B4:25:D9:E0:21:E3:38 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019D288479BFA42C05A173040FD4A47A24DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 1144 Signing time: Thu 26 Mar 2026 05:01:03 +0000 Manifest this update: Thu 26 Mar 2026 05:01:03 +0000 Manifest next update: Fri 27 Mar 2026 05:01:03 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: wdOhzz3Tk6antaIImVLtVCtdUNNOVeJYNcR8QG3Q+68=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:84:79:bf:a4:2c:05:a1:73:04:0f:d4:a4:7a:24:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Mar 26 05:01:03 2026 GMT Not After : Mar 27 05:01:03 2026 GMT Subject: CN=a4ef49fe6f8bbf66bb205be37eb425d9e021e338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:72:d4:d1:b3:f2:13:af:14:2d:9e:88:47: 4b:16:f0:71:e4:08:14:63:e0:67:af:b0:89:43:ec: 65:22:33:63:c0:f2:fb:10:22:81:05:e7:2a:bc:70: 1b:29:b2:f8:55:ed:e3:0a:b7:88:48:8d:f1:47:6f: c6:53:06:64:04:c7:70:98:55:16:5e:01:64:b4:c5: 50:c2:06:6f:3f:9a:a6:85:37:70:a9:34:38:06:d3: f1:ac:62:e2:77:e5:21:64:33:98:a1:fa:7c:e3:7f: 14:5f:61:f8:c9:9b:57:84:86:bb:25:bf:2a:12:3a: 9d:71:a7:59:f4:f5:8d:ed:0a:97:bd:0b:87:3e:5c: 3e:ba:36:12:9d:70:4a:0d:56:91:96:b8:69:54:8b: 02:5e:8c:95:f5:25:ee:b3:04:84:bd:5b:02:87:2f: fd:f7:37:c9:38:9c:11:af:a2:ac:7b:cf:84:a0:4f: 34:be:16:73:b0:8d:ae:9e:67:f1:65:4f:a2:a6:2a: 4c:4b:85:62:3c:43:ab:1b:ed:81:e5:f4:e8:b8:74: 73:4d:78:f9:e9:60:03:7f:d4:bb:07:9d:2e:57:83: 8a:8d:99:be:d7:f1:7f:dc:b9:ae:fc:38:85:76:7f: 98:bc:b1:54:6f:a1:ff:bc:fd:47:a7:f0:92:6f:39: b0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EF:49:FE:6F:8B:BF:66:BB:20:5B:E3:7E:B4:25:D9:E0:21:E3:38 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:08:99:65:8d:17:ed:b0:94:ec:f1:5a:b9:f5:43:3f:dd:b8: 1a:3b:35:59:90:38:1d:b8:ce:99:a3:94:c1:9f:b7:69:59:a6: 13:5b:94:88:39:59:0b:77:0d:ba:24:80:6e:8b:b8:5d:dc:ea: d3:9f:10:7e:56:64:89:57:20:8c:db:89:ab:63:8e:54:a0:b0: d5:9f:ed:de:4f:52:cc:4e:8b:08:64:f9:93:90:93:0f:36:cd: f7:2e:35:9a:14:14:2c:a5:4a:a5:98:c5:1c:28:90:38:6c:0d: d9:bf:fb:8b:8b:10:c1:e4:9d:cb:66:f1:1e:a8:09:f5:ae:6f: 20:de:04:48:69:02:3d:b3:b8:c1:20:95:79:81:b6:11:8b:90: c9:23:f2:42:0a:8e:1d:75:bd:11:f9:7a:48:0c:2b:37:2a:e8: 61:8b:36:8b:d1:16:2e:2b:c1:fe:9c:c7:4f:9f:88:f9:ab:0c: 56:ad:79:0d:87:39:52:0e:32:d0:f7:0a:08:fe:0b:57:e7:07: be:e3:76:c7:ac:01:cd:09:64:f0:8c:a8:d3:ef:5b:7d:71:d6: 67:2f:24:52:89:71:01:17:a4:7b:56:2e:e5:20:08:03:79:da: 6b:02:58:8f:e6:f6:03:85:fc:39:6c:c6:ca:5b:e1:de:70:10: 65:a3:d2:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ohHm/pCwFoXMED9SkeiTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMzI2MDUwMTAzWhcNMjYwMzI3MDUwMTAzWjAzMTEwLwYDVQQD EyhhNGVmNDlmZTZmOGJiZjY2YmIyMDViZTM3ZWI0MjVkOWUwMjFlMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsFy1NGz8hOvFC2eiEdLFvBx5AgU Y+Bnr7CJQ+xlIjNjwPL7ECKBBecqvHAbKbL4Ve3jCreISI3xR2/GUwZkBMdwmFUW XgFktMVQwgZvP5qmhTdwqTQ4BtPxrGLid+UhZDOYofp8438UX2H4yZtXhIa7Jb8q EjqdcadZ9PWN7QqXvQuHPlw+ujYSnXBKDVaRlrhpVIsCXoyV9SXuswSEvVsChy/9 9zfJOJwRr6Kse8+EoE80vhZzsI2unmfxZU+ipipMS4ViPEOrG+2B5fTouHRzTXj5 6WADf9S7B50uV4OKjZm+1/F/3Lmu/DiFdn+YvLFUb6H/vP1Hp/CSbzmwywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTvSf5vi79muyBb4360JdngIeM4MB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgiZZY0X 7bCU7PFaufVDP924Gjs1WZA4HbjOmaOUwZ+3aVmmE1uUiDlZC3cNuiSAbou4Xdzq 058QflZkiVcgjNuJq2OOVKCw1Z/t3k9SzE6LCGT5k5CTDzbN9y41mhQULKVKpZjF HCiQOGwN2b/7i4sQweSdy2bxHqgJ9a5vIN4ESGkCPbO4wSCVeYG2EYuQySPyQgqO HXW9Efl6SAwrNyroYYs2i9EWLivB/pzHT5+I+asMVq15DYc5Ug4y0PcKCP4LV+cH vuN2x6wBzQlk8Iyo0+9bfXHWZy8kUolxAReke1Yu5SAIA3naawJYj+b2A4X8OWzG ylvh3nAQZaPSBw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:27:01 2026 by rpki-client