$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft File: X-U8C_w8j7VrgRkTFxREQ-DinSU.mft (raw, json) Hash identifier: EjOZgNp5PSeG7oaoitQQZZIPj1eVY3cR3eUpmUQ9Sr8= Subject key identifier: 6C:CE:57:A0:3C:36:0A:C1:89:43:02:E0:37:A9:DC:D7:CB:80:26:B3 Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Certificate serial: 01A0D012DC6B20C83907FC016356C7E94768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft Manifest number: 0320 Signing time: Wed 23 Sep 2026 21:01:31 +0000 Manifest this update: Wed 23 Sep 2026 21:01:31 +0000 Manifest next update: Thu 24 Sep 2026 21:01:31 +0000 Files and hashes: 1: 1-WRMeWAjzgb312ndWDBDDXMQ_vI.roa (hash: XzPUGdJfunU8R7/FSgEPmq2u3oT+muSY+llXKr6PBAw=) 2: 1UR7iOUK7d39VgLhHHYabfCLfOQ.roa (hash: oXZ47tHg5pSp0xSQ+s2LJEyC4fnJ8Z/RFiohj4q0860=) 3: 3D91aJc1b1Xugh3NpwokFVe9EHE.roa (hash: RPyCzjrPqhXSX0bgmE4+2E9x3ipWzKg8e+mZU3iZEOQ=) 4: 3Y-eHCCgunD3UqlvqBOXGz_h0B0.roa (hash: 5gPJOtrd7/FR9Rg8PU5TgNYEDSQkiUigOipqFHdBnGw=) 5: 64_DVKhgRZa50PRzVHzS-MDphcc.roa (hash: x0NJJwNguwUvUcOSX51gUnlCVVesftaz8k3Yekk+glY=) 6: 6Kn6KERntDi_4eNpvTRVmFsjPbs.roa (hash: S7y4QiK56lUGKhpEffmK8PyadtfZ3aD7k2+Jzek5K7Y=) 7: FONMbE7JQ_555_AhVQTIUm9lk_Y.roa (hash: GG4U0G3QeJ4kcb/w+WXTiBuOwG5JvNB4bAGnAM53Suc=) 8: INuj-mdGt6rVjs3vF-tqkz-ZTnY.roa (hash: +5qeByzEneEsC8OBCRKdqJbbnxdRus+dvidceYaX+Zw=) 9: JJSXlUjdgsXsxr441kL45vuNPlQ.roa (hash: RV4cugeNLggjz/BuldqDCL7PylisxFfq49zCoougTQc=) 10: LdkzKbOc6UBBYQHPpJdrnxEq4OU.roa (hash: S6QhP5xEUXEZ2xSFH+U8Yf9LI+j3ApeUra07WFUy0N0=) 11: MW7a5ozeRK7aTF0-v1kkuN3zmBw.roa (hash: v0rscB9FZzDyiyT/UQbPiAzxWoDQj9aXYnD+nqDYtG0=) 12: O8fDHPNLTZwX_qmdf9SxlFaFWP4.roa (hash: UJICWm/siXAH3HAjYmp8Fd0w20+HEeezizMeKw3NbcM=) 13: P4OtQvDUkCMuJskgBHh-vNxJu1I.roa (hash: yqqu/7j4s+Y4/ylDF+aywZRspIGl1aQhkK6q+AAIbdQ=) 14: SC9MOMjrqmbOVAWcGnRcQF-RFqE.roa (hash: eQcJ+zf8+aHLfgfb+8QPSi/V+ow88wMOF3ndX9/Y9o8=) 15: X-U8C_w8j7VrgRkTFxREQ-DinSU.crl (hash: 9NI+5okMDi5whfi+E1CQvuxQUBwxYijJFdSCnNuehUI=) 16: YR5NHny-H5eU5tgqNNy6P-03Z9Q.roa (hash: XN+oOCB4Fs/+me/Qvw4xaRoHKMmthIb2bcNRuvZmhx4=) 17: bnmuHr70BJVsgOcpxZizqtCasww.roa (hash: Nkv2j5AyKeUwX+JWCkDpHg3DA6I8oDo313t6v/WpZI8=) 18: d3lmTr7PIEzpH3BI6BqiMMOZGzI.roa (hash: 5T88juZeJZkfQqxz39ljaMd8hJFf/Kn+i1imnzr2zME=) 19: fhBwAAAKsFClM1kXSXaAmjf7WA8.roa (hash: ABuKWxwbP2yN2IKq1ZVxmtzpWZDM6jME0HRhZj5X1YU=) 20: gmxsPG4cUoRDhGjGSFZpIBKC3Vc.roa (hash: 34TUxv9nfVy/jkSU3uZVSK5tEVV3b0jLrFwkZpgwR/I=) 21: jPHYOj_6LWYOivdVvMKC2HFIT4M.roa (hash: WNAYcfnTCYvXJjSjaYW8AjeZqY76pySAXbuH7yNIDFc=) 22: n6Cb7AJIjHdUwKjVZviwZnDYIhM.roa (hash: 9Q8TNAnTm2hfdhie9oH3Jcj9om1Q+4fMUBjWp/97vOg=) 23: niBnbMVkqFMwm26EVgCw4EKo_bU.roa (hash: JT24uuA3eMkhOdW2lEUEMqsdJUmG+tYUXEw08dTPMoY=) 24: ppZPPhs9Fk9KthHZECP8i1n-qRw.roa (hash: r3D9XGo0E46YnlFBTi6Wu1H+lI4vmSw50xc2xlIL764=) 25: s_8exuQTcAjiBuqj7Kb6yyZ3URY.roa (hash: 9D4USD9s5nLllsPvmxgsIDc6aBZr9W6ksocrmvoCt7c=) 26: sp_ETP2RaEyKONTOC69EWe73mcc.roa (hash: se3ZtZfgcOxHMacQP3qmA3MHEEjUOar/xVrhe71pNSc=) 27: y1YHL9stLW0EBSHIGE4wu7b_QNg.roa (hash: WD/77vOfUuYMZHL5B9Asts3xM0tFEHZv2a7HErfU5rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:12:dc:6b:20:c8:39:07:fc:01:63:56:c7:e9:47:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Validity Not Before: Sep 23 21:01:31 2026 GMT Not After : Sep 24 21:01:31 2026 GMT Subject: CN=6cce57a03c360ac1894302e037a9dcd7cb8026b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1e:65:10:8a:63:64:e2:61:bd:2b:11:52:1f: e9:69:24:6e:2d:19:1e:40:1e:1e:b9:f2:97:7e:7e: 1f:cb:6d:8d:ef:31:26:18:aa:4b:06:c0:81:79:1d: fd:dc:d2:a2:5a:25:f1:dd:1a:b8:54:de:35:dc:70: 32:51:cc:65:cd:0e:01:5a:d5:81:88:11:77:da:4d: bd:50:4e:b9:77:30:8a:d8:c6:45:e6:08:cc:a9:f8: 02:b5:17:d4:99:d0:c7:94:12:6c:8a:90:a5:d7:aa: f0:7a:ce:f0:e0:0d:21:71:7c:5e:cf:c1:bb:73:8a: 96:52:53:ba:92:60:cd:44:b3:ce:61:53:cb:18:30: 2a:3e:84:b0:6d:9a:2e:51:e5:90:d0:f3:b4:ea:ec: b0:0a:9e:33:e8:73:b5:22:9f:cb:29:68:56:25:ec: e8:94:3c:ff:a5:80:da:b7:5c:a5:0b:aa:da:53:76: 49:be:e9:51:f0:64:48:ee:93:fc:70:b9:af:71:3f: 27:b8:ae:c7:1d:1c:14:d2:9d:fd:05:cc:78:83:0d: 99:a9:6f:21:09:f8:29:b7:fe:8c:1c:6e:28:63:f4: 76:ac:ac:ab:83:ce:06:0d:eb:76:ba:0e:d1:78:6b: 1a:b9:0f:57:2e:59:21:dd:a9:82:e1:b2:15:7e:a1: dd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CE:57:A0:3C:36:0A:C1:89:43:02:E0:37:A9:DC:D7:CB:80:26:B3 X509v3 Authority Key Identifier: keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:55:ca:1a:66:4d:2a:b5:a8:01:00:36:43:fe:18:ed:fb:75: 36:13:aa:a7:ba:d8:6b:35:16:c1:ed:46:63:82:51:3e:33:94: df:8f:92:c3:9c:e8:c1:3e:20:43:1d:35:7d:8b:44:96:3a:d8: d7:9a:76:78:1b:4f:96:fc:8b:13:0d:fd:3d:b8:0c:86:8d:f9: f5:e4:05:c4:32:6a:72:18:2f:46:73:96:95:aa:e9:8b:2e:5e: 0c:e5:4f:cf:d4:ec:22:6a:30:14:83:5e:54:7e:db:43:1a:53: c8:a7:fc:65:bf:af:f7:58:4f:74:16:7b:5b:6a:37:b8:16:18: b5:aa:c9:56:a2:b5:34:b3:9f:03:7f:e1:c8:9b:ce:d0:d5:06: 15:08:bd:34:b0:24:68:b1:8a:ef:61:80:ab:4d:c9:33:f5:1f: 21:13:e1:8f:ac:1d:42:0c:50:4d:32:b1:5f:b5:42:76:f8:fc: 09:d7:e7:6a:ee:8e:44:a3:f1:b0:08:4f:44:df:3b:f0:14:a0: 68:7b:ee:af:06:5f:04:79:96:0d:f7:9f:f1:d2:f1:28:96:31: a9:10:26:bc:e9:0c:81:0b:e0:1c:60:1f:30:8f:f3:d5:d2:f3: 93:72:78:bc:53:94:96:ed:a9:3b:63:fc:47:73:c9:b0:4a:79: 62:f4:4d:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQEtxrIMg5B/wBY1bH6UdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl MjlkMjUwHhcNMjYwOTIzMjEwMTMxWhcNMjYwOTI0MjEwMTMxWjAzMTEwLwYDVQQD Eyg2Y2NlNTdhMDNjMzYwYWMxODk0MzAyZTAzN2E5ZGNkN2NiODAyNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B5lEIpjZOJhvSsRUh/paSRuLRke QB4eufKXfn4fy22N7zEmGKpLBsCBeR393NKiWiXx3Rq4VN413HAyUcxlzQ4BWtWB iBF32k29UE65dzCK2MZF5gjMqfgCtRfUmdDHlBJsipCl16rwes7w4A0hcXxez8G7 c4qWUlO6kmDNRLPOYVPLGDAqPoSwbZouUeWQ0PO06uywCp4z6HO1Ip/LKWhWJezo lDz/pYDat1ylC6raU3ZJvulR8GRI7pP8cLmvcT8nuK7HHRwU0p39Bcx4gw2ZqW8h Cfgpt/6MHG4oY/R2rKyrg84GDet2ug7ReGsauQ9XLlkh3amC4bIVfqHdzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzOV6A8NgrBiUMC4Dep3NfLgCazMB8GA1UdIwQY MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct NWNmNTZlZTQzNWIzLzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFXKGmZN KrWoAQA2Q/4Y7ft1NhOqp7rYazUWwe1GY4JRPjOU34+Sw5zowT4gQx01fYtEljrY 15p2eBtPlvyLEw39PbgMho359eQFxDJqchgvRnOWlarpiy5eDOVPz9TsImowFINe VH7bQxpTyKf8Zb+v91hPdBZ7W2o3uBYYtarJVqK1NLOfA3/hyJvO0NUGFQi9NLAk aLGK72GAq03JM/UfIRPhj6wdQgxQTTKxX7VCdvj8Cdfnau6ORKPxsAhPRN878BSg aHvurwZfBHmWDfef8dLxKJYxqRAmvOkMgQvgHGAfMI/z1dLzk3J4vFOUlu2pO2P8 R3PJsEp5YvRN/w== -----END CERTIFICATE-----Generated at Thu Sep 24 03:28:50 2026 by rpki-client