$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: C5G4M+7bZKt7LINxx+Z7XgW/n23v1v5wgOlXGskmR0k= Subject key identifier: E8:B8:66:19:E7:86:E0:0B:C7:BA:D8:81:57:36:EC:6D:AF:E9:30:87 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 01A1DD26BEB5688BBB96465ED08CBC032B32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1B2F Signing time: Sun 15 Nov 2026 03:01:06 +0000 Manifest this update: Sun 15 Nov 2026 03:01:06 +0000 Manifest next update: Mon 16 Nov 2026 03:01:06 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: mQBRD3dci+sj5gFAgBIN3qyRG2yb99HFRJEMPgoXHD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:26:be:b5:68:8b:bb:96:46:5e:d0:8c:bc:03:2b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Nov 15 03:01:06 2026 GMT Not After : Nov 16 03:01:06 2026 GMT Subject: CN=e8b86619e786e00bc7bad8815736ec6dafe93087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:11:f8:29:1c:c3:3e:00:c5:dd:ef:19:df: 13:24:aa:0e:6e:9a:de:87:b9:24:e5:48:7d:4d:1e: b7:2a:d6:a1:81:7c:99:c7:cc:ff:ed:bb:b9:eb:51: ac:bb:86:20:a8:d9:61:ff:4c:4a:91:cd:76:5b:b6: 16:c9:d3:ed:a4:79:de:2b:5f:6d:ac:24:86:21:87: 2f:0d:59:6a:94:0b:d8:1d:a9:ed:3b:f5:12:06:4d: 03:9a:68:c2:53:b9:91:65:05:19:9f:a5:c5:3b:c6: cb:a7:f7:57:98:0f:de:31:b0:0a:6e:bd:d3:40:04: b8:85:ff:f3:0e:44:b1:7b:4f:fb:e8:8c:af:ec:8e: 6e:1c:f3:97:dd:af:36:fb:7b:a8:86:79:e2:34:dc: 3a:2a:e1:9b:c4:17:f9:8b:c3:cd:b8:97:16:59:79: c8:7c:14:d8:a0:a0:86:b4:72:5b:4a:1b:10:a1:36: 5e:24:f2:1e:52:68:e0:98:6e:97:ab:f0:44:01:50: bc:6a:bb:ea:3d:2b:7c:21:70:cc:c3:e4:62:47:82: 04:a0:50:c5:3a:00:3d:84:39:b7:44:b8:95:0c:ed: 86:5a:40:97:de:d8:da:b1:d2:ee:4f:a1:54:01:3d: 63:85:c1:33:2e:d3:6b:bf:43:fc:5b:43:6f:da:82: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B8:66:19:E7:86:E0:0B:C7:BA:D8:81:57:36:EC:6D:AF:E9:30:87 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:91:74:3c:57:26:bf:38:d0:e4:a5:24:03:db:84:04:3f:d2: 68:33:74:7c:8a:1e:0e:3a:48:72:e3:e1:1f:f9:82:74:fe:71: 62:d6:c3:18:76:18:ed:09:00:1b:2a:97:70:f6:5d:5c:bb:6b: 85:48:61:bf:27:4a:3e:88:3a:fa:b7:e9:a6:73:27:bf:fa:0c: 2c:17:7b:25:7a:67:20:a2:a8:34:e6:2c:eb:f5:82:88:7b:fa: 03:24:2c:cb:1e:2e:92:6e:8b:a1:3f:83:a9:20:47:8d:dd:6b: 2d:88:1c:8d:72:e4:25:4d:4d:d5:48:0c:d3:76:13:93:8a:19: ec:f1:b9:bb:5c:2c:69:6e:a3:bf:01:47:10:e4:a8:2a:be:e3: 90:22:ce:95:e9:64:01:ae:69:3d:d4:f9:18:ae:56:13:80:c0: 46:78:ce:53:76:94:94:75:24:e0:9a:be:9a:8e:9a:a1:90:7c: 41:a6:d0:a5:2a:f2:88:dd:0c:c2:bc:72:12:84:1d:f7:d7:24: 06:9a:d5:68:a8:02:c4:b3:a7:c0:ed:fc:7d:05:db:1b:51:0c: 86:21:c5:48:f9:09:6e:6f:bf:ad:25:73:6f:21:0a:76:73:03: cb:c1:91:ec:db:c3:dc:4d:03:27:90:fe:5b:69:b1:de:57:a4: 9d:45:2e:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdJr61aIu7lkZe0Iy8AysyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYxMTE1MDMwMTA2WhcNMjYxMTE2MDMwMTA2WjAzMTEwLwYDVQQD EyhlOGI4NjYxOWU3ODZlMDBiYzdiYWQ4ODE1NzM2ZWM2ZGFmZTkzMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWcR+Ckcwz4Axd3vGd8TJKoObpre h7kk5Uh9TR63KtahgXyZx8z/7bu561Gsu4YgqNlh/0xKkc12W7YWydPtpHneK19t rCSGIYcvDVlqlAvYHantO/USBk0DmmjCU7mRZQUZn6XFO8bLp/dXmA/eMbAKbr3T QAS4hf/zDkSxe0/76Iyv7I5uHPOX3a82+3uohnniNNw6KuGbxBf5i8PNuJcWWXnI fBTYoKCGtHJbShsQoTZeJPIeUmjgmG6Xq/BEAVC8arvqPSt8IXDMw+RiR4IEoFDF OgA9hDm3RLiVDO2GWkCX3tjasdLuT6FUAT1jhcEzLtNrv0P8W0Nv2oLTcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOi4ZhnnhuALx7rYgVc27G2v6TCHMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJF0PFcm vzjQ5KUkA9uEBD/SaDN0fIoeDjpIcuPhH/mCdP5xYtbDGHYY7QkAGyqXcPZdXLtr hUhhvydKPog6+rfppnMnv/oMLBd7JXpnIKKoNOYs6/WCiHv6AyQsyx4ukm6LoT+D qSBHjd1rLYgcjXLkJU1N1UgM03YTk4oZ7PG5u1wsaW6jvwFHEOSoKr7jkCLOlelk Aa5pPdT5GK5WE4DARnjOU3aUlHUk4Jq+mo6aoZB8QabQpSryiN0MwrxyEoQd99ck BprVaKgCxLOnwO38fQXbG1EMhiHFSPkJbm+/rSVzbyEKdnMDy8GR7NvD3E0DJ5D+ W2mx3leknUUuFQ== -----END CERTIFICATE-----Generated at Sun Nov 15 11:11:14 2026 by rpki-client