$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: YZcAi3Q4XGga8dv62jpFtMGWIW20LzmrvY0IqQWjpyw= Subject key identifier: 0F:C2:F0:11:65:D0:3A:1D:1F:C0:D9:42:17:8D:F8:B7:24:3E:28:25 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 01A0D0B688B672A736CA1D793044FE7BB6A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1AA4 Signing time: Thu 24 Sep 2026 00:00:18 +0000 Manifest this update: Thu 24 Sep 2026 00:00:18 +0000 Manifest next update: Fri 25 Sep 2026 00:00:18 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: IQ5g9AWqAFFgmFmNLGNwJo/sVWTa7C422JQdK26BVGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:b6:88:b6:72:a7:36:ca:1d:79:30:44:fe:7b:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Sep 24 00:00:18 2026 GMT Not After : Sep 25 00:00:18 2026 GMT Subject: CN=0fc2f01165d03a1d1fc0d942178df8b7243e2825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:e8:71:dc:1e:de:8d:c8:ca:74:bc:1c:d1: b0:2a:05:b9:ae:f3:46:2c:94:ed:6c:53:40:be:0f: be:44:0d:cc:e5:09:29:c0:e7:d2:12:ab:4c:4d:60: 3d:2c:24:9d:91:8e:fc:27:96:48:74:26:af:1a:2d: 42:96:b9:7f:00:5e:87:ae:1a:72:bf:c4:c2:75:bd: ce:25:f2:ee:2c:cb:f2:c0:0c:b1:db:62:e4:8f:5a: 57:10:be:db:11:19:d8:0e:8f:89:75:c8:2b:c9:83: 15:2a:8a:fb:88:d9:e6:f2:f4:32:c8:fe:44:e4:1f: e5:5d:bf:43:b4:25:91:e4:40:36:c8:9d:38:b4:7b: 13:44:f6:e1:1b:8f:64:eb:2c:f7:41:c1:c6:b7:b3: 65:8e:d0:98:c8:ba:bb:21:c1:fe:73:7c:f5:dc:3e: 10:fb:70:a7:50:e3:81:de:d5:ec:52:6b:3d:e3:9c: f6:16:56:7a:07:21:9b:c7:b5:be:75:21:21:df:87: 0b:6c:71:1f:cf:b2:c1:b1:86:0c:64:af:04:ff:ee: 49:17:a3:d5:11:ac:ce:0a:9a:b0:20:17:7a:a2:91: 71:61:4b:a7:8b:47:6d:7d:4d:cc:18:05:26:01:c0: 5c:ea:3c:df:2e:da:a3:a6:55:99:7f:3b:0d:2f:ac: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C2:F0:11:65:D0:3A:1D:1F:C0:D9:42:17:8D:F8:B7:24:3E:28:25 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:cb:9d:58:38:51:38:0d:cd:aa:6a:cd:01:11:9e:ad:a0:ec: 50:f1:6c:70:b8:31:dc:14:3d:e3:72:30:c3:5d:80:e2:ab:18: 54:74:ee:6c:b6:de:d4:f4:67:14:81:4c:b8:67:7e:f7:27:19: 40:b5:99:7d:d8:a4:ea:a0:e1:7b:3b:9f:54:12:f2:d2:9e:d8: 40:0d:0c:d0:78:fd:26:5f:84:0d:a4:dc:61:49:b2:6b:35:57: cb:0e:91:bf:86:ab:c4:e8:ff:c5:ca:1b:0d:60:20:28:19:69: c7:e9:a7:f5:ed:ce:1c:f8:ed:7a:5f:39:34:37:63:1c:93:b2: 81:f9:ef:25:f8:0e:0f:67:69:7e:6e:a5:f3:4e:1a:8d:de:58: 7d:b2:a4:e4:ac:b4:38:40:8f:a2:8f:2d:d7:a0:0b:d7:83:64: 29:67:39:c1:99:56:ec:5e:5b:f1:1e:41:5f:8c:e6:de:76:fe: 1a:d5:14:11:ea:85:6b:a9:62:2f:c8:09:4b:ca:ae:a1:d5:68: cf:a9:93:48:d2:14:ae:fe:0d:d1:87:06:1c:36:84:90:96:1c: c8:9e:7a:59:f3:fa:d7:31:2c:dd:7b:b6:55:1e:72:b8:cd:bc: f6:6f:72:48:c9:21:58:4b:57:f5:9b:1a:10:36:a9:be:d9:41: 80:8e:1a:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQtoi2cqc2yh15MET+e7agMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwOTI0MDAwMDE4WhcNMjYwOTI1MDAwMDE4WjAzMTEwLwYDVQQD EygwZmMyZjAxMTY1ZDAzYTFkMWZjMGQ5NDIxNzhkZjhiNzI0M2UyODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5jocdwe3o3IynS8HNGwKgW5rvNG LJTtbFNAvg++RA3M5QkpwOfSEqtMTWA9LCSdkY78J5ZIdCavGi1Clrl/AF6Hrhpy v8TCdb3OJfLuLMvywAyx22Lkj1pXEL7bERnYDo+JdcgryYMVKor7iNnm8vQyyP5E 5B/lXb9DtCWR5EA2yJ04tHsTRPbhG49k6yz3QcHGt7NljtCYyLq7IcH+c3z13D4Q +3CnUOOB3tXsUms945z2FlZ6ByGbx7W+dSEh34cLbHEfz7LBsYYMZK8E/+5JF6PV EazOCpqwIBd6opFxYUuni0dtfU3MGAUmAcBc6jzfLtqjplWZfzsNL6wkOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/C8BFl0DodH8DZQheN+LckPiglMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcudWDhR OA3NqmrNARGeraDsUPFscLgx3BQ943Iww12A4qsYVHTubLbe1PRnFIFMuGd+9ycZ QLWZfdik6qDhezufVBLy0p7YQA0M0Hj9Jl+EDaTcYUmyazVXyw6Rv4arxOj/xcob DWAgKBlpx+mn9e3OHPjtel85NDdjHJOygfnvJfgOD2dpfm6l804ajd5YfbKk5Ky0 OECPoo8t16AL14NkKWc5wZlW7F5b8R5BX4zm3nb+GtUUEeqFa6liL8gJS8quodVo z6mTSNIUrv4N0YcGHDaEkJYcyJ56WfP61zEs3Xu2VR5yuM289m9ySMkhWEtX9Zsa EDapvtlBgI4ayQ== -----END CERTIFICATE-----Generated at Thu Sep 24 03:47:40 2026 by rpki-client