$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: pEe4HNrFxkcTXH663LREkW1gDPaxiID3Ccef1aHbM5k= Subject key identifier: B7:33:C1:6E:6C:07:54:EB:76:24:B2:91:D9:15:FC:B3:B6:02:BE:3C Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019D281652A6EC42FFF185123CDC271CB219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 18BF Signing time: Thu 26 Mar 2026 03:00:44 +0000 Manifest this update: Thu 26 Mar 2026 03:00:44 +0000 Manifest next update: Fri 27 Mar 2026 03:00:44 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: HtEiqccLP5xaqNpysyZjRnoCIQA2b88Ycy+zxc72dXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:52:a6:ec:42:ff:f1:85:12:3c:dc:27:1c:b2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Mar 26 03:00:44 2026 GMT Not After : Mar 27 03:00:44 2026 GMT Subject: CN=b733c16e6c0754eb7624b291d915fcb3b602be3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:79:52:9a:77:58:1d:dd:45:6e:9a:9b:be:b4: 8a:d0:20:3c:78:68:ab:4e:95:5f:53:04:7f:30:ec: 0b:43:c0:03:2a:c5:07:da:97:ea:81:cc:59:97:40: ef:0d:14:a5:ca:00:94:8a:7f:de:a2:26:b0:3c:23: 57:33:ff:68:67:d8:82:07:98:6a:8c:e1:11:6a:62: fe:40:9d:a6:2c:aa:a2:8a:5f:c8:cf:19:da:e7:56: 6f:2e:1c:9a:83:61:39:a8:51:7d:a3:be:a2:6b:24: a5:c9:dd:1f:3e:b7:8b:68:4d:bc:d6:08:6f:7c:10: 6e:ad:aa:c8:5d:50:d2:8d:cb:8c:1b:1d:86:88:5f: a3:1e:4c:ce:f3:3b:e1:f3:15:3a:f6:80:77:c7:21: fb:2d:84:6a:60:33:09:6d:b4:68:10:66:8b:3c:61: cf:7f:66:d7:41:d4:57:4a:be:92:7b:60:0e:2c:cb: ec:b1:d4:e7:aa:1a:8c:cf:a0:92:35:85:70:e4:6a: 48:19:2a:78:75:f3:d7:bc:0c:57:44:be:bc:0f:cb: 3f:d5:73:b2:05:1b:8d:98:ac:8b:40:9c:d9:ec:4b: 31:be:30:ad:8a:cb:96:16:ad:15:3b:ca:83:ea:6a: 79:4d:1e:c6:f8:ff:76:e3:db:9f:aa:2e:52:48:81: a2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:33:C1:6E:6C:07:54:EB:76:24:B2:91:D9:15:FC:B3:B6:02:BE:3C X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:48:c5:4c:c4:85:66:8c:4e:2e:d0:98:28:63:69:ed:5c:19: 63:62:cb:1d:e8:5d:50:e2:de:0c:9d:0b:43:fd:e8:81:c9:d4: 1a:14:81:3c:c4:2d:0c:12:ef:dc:03:fb:fc:25:e4:e9:53:d4: f6:23:c8:8e:be:45:ab:54:37:0d:6e:4b:d2:d1:4b:21:cf:8f: 9b:9b:c4:03:80:30:50:cf:20:ff:a6:a3:69:8b:1c:f8:e6:b9: c6:84:b1:01:26:fd:26:c2:65:1c:e7:f9:71:04:fa:c5:ea:15: db:e6:f1:14:a2:e8:b9:a7:5d:32:c2:04:90:08:bd:c5:57:29: 69:a3:20:61:15:4a:08:66:40:22:a2:9f:40:13:cc:2b:fa:84: e5:29:8c:84:39:81:1a:f6:b8:71:4e:a8:fd:0a:cc:66:ec:8d: 29:eb:89:30:6c:25:44:10:80:51:ec:11:91:df:cf:a2:a1:ae: 05:38:9a:75:9f:f6:f0:cd:e6:98:82:b9:55:3c:00:f5:ef:48: 0b:53:c2:d5:f5:f3:39:7f:75:9e:5f:2a:85:af:0d:bd:ed:d6: fc:f0:a1:c7:60:e9:af:3a:8d:d5:d1:86:17:0c:0b:d8:80:1e: 7b:09:ba:bd:c6:25:db:40:c3:72:4d:59:b3:2f:7c:72:1d:8e: f9:e4:65:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFlKm7EL/8YUSPNwnHLIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMzI2MDMwMDQ0WhcNMjYwMzI3MDMwMDQ0WjAzMTEwLwYDVQQD EyhiNzMzYzE2ZTZjMDc1NGViNzYyNGIyOTFkOTE1ZmNiM2I2MDJiZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XlSmndYHd1FbpqbvrSK0CA8eGir TpVfUwR/MOwLQ8ADKsUH2pfqgcxZl0DvDRSlygCUin/eoiawPCNXM/9oZ9iCB5hq jOERamL+QJ2mLKqiil/Izxna51ZvLhyag2E5qFF9o76iaySlyd0fPreLaE281ghv fBBurarIXVDSjcuMGx2GiF+jHkzO8zvh8xU69oB3xyH7LYRqYDMJbbRoEGaLPGHP f2bXQdRXSr6Se2AOLMvssdTnqhqMz6CSNYVw5GpIGSp4dfPXvAxXRL68D8s/1XOy BRuNmKyLQJzZ7EsxvjCtisuWFq0VO8qD6mp5TR7G+P9249ufqi5SSIGi8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLczwW5sB1TrdiSykdkV/LO2Ar48MB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkjFTMSF ZoxOLtCYKGNp7VwZY2LLHehdUOLeDJ0LQ/3ogcnUGhSBPMQtDBLv3AP7/CXk6VPU 9iPIjr5Fq1Q3DW5L0tFLIc+Pm5vEA4AwUM8g/6ajaYsc+Oa5xoSxASb9JsJlHOf5 cQT6xeoV2+bxFKLouaddMsIEkAi9xVcpaaMgYRVKCGZAIqKfQBPMK/qE5SmMhDmB Gva4cU6o/QrMZuyNKeuJMGwlRBCAUewRkd/PoqGuBTiadZ/28M3mmIK5VTwA9e9I C1PC1fXzOX91nl8qha8Nve3W/PChx2DprzqN1dGGFwwL2IAeewm6vcYl20DDck1Z sy98ch2O+eRleA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:52:56 2026 by rpki-client