$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json) Hash identifier: 7dAkHxjBOlLiVluv9l6bD4tbo9bS+HjAr8ihiO3rrzY= Subject key identifier: E8:7D:6D:55:34:57:3E:37:ED:14:D2:D4:4E:25:6F:3B:2A:59:DF:B4 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019F8E34FED657425279C3275A16336E276A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft Manifest number: 076D Signing time: Thu 23 Jul 2026 09:01:05 +0000 Manifest this update: Thu 23 Jul 2026 09:01:05 +0000 Manifest next update: Fri 24 Jul 2026 09:01:05 +0000 Files and hashes: 1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=) 2: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=) 3: Gz_1bJto4c1yEF2Q0CAMMKyQM04.roa (hash: XtyCodmY8171cj6WcCGbm/ih1IwcnbUwaLWquFazgPc=) 4: MHUiyig4q2dE9dcejzFeSdppyes.asa (hash: vsGXprjQpMNWSZX1y2syqnGE09eYObc2WoOHBWaktro=) 5: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: EAcvvtgMNCPrnOR+5dhgEnTd67U19ePhGisCd8pd6OA=) 6: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=) 7: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=) 8: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=) 9: r7okYEliiPaYGayWJrORm3iOHe0.roa (hash: Ry7pFD2VVeVJdZ2ogqW8WamtLwX0AlhiB6D7DLFsEGw=) 10: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:34:fe:d6:57:42:52:79:c3:27:5a:16:33:6e:27:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Jul 23 09:01:05 2026 GMT Not After : Jul 24 09:01:05 2026 GMT Subject: CN=e87d6d5534573e37ed14d2d44e256f3b2a59dfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:e3:76:fa:af:76:43:cf:0f:01:b8:ef:6a: dc:62:d1:b5:74:9c:88:ae:fe:46:4f:5e:9e:40:6f: 77:82:86:de:f4:d2:cf:02:15:01:c1:5d:14:18:28: 75:61:49:62:c3:84:51:3c:8e:67:5d:a6:53:e3:07: 22:a3:bd:46:fa:a7:e5:7c:f5:1a:e2:3f:46:a7:8d: 70:a3:ef:0f:c8:4b:0d:75:e1:d0:19:90:b6:77:0c: d5:a4:06:4f:98:ce:20:fb:29:34:dc:dd:b0:9b:41: 24:6d:df:eb:dc:e5:72:f3:9e:33:9f:07:f9:5c:b0: f4:94:b4:31:b6:66:75:e1:23:c1:9d:ba:76:ce:7d: 54:73:d8:05:b2:72:1e:a2:9b:a4:df:04:aa:5a:cf: 38:88:c6:20:2e:ac:f4:5c:0f:cc:cd:24:23:ce:94: b3:5f:09:ed:39:3c:f8:d5:0a:4e:62:0b:3d:a8:ab: 6f:a9:78:76:a7:9a:05:00:dd:02:0d:19:84:9f:9c: 2f:f8:69:98:cd:31:9b:18:ce:10:e5:05:c3:2b:e3: bf:c1:fc:4b:9f:04:96:cc:a9:1f:b0:f3:80:21:d6: 2e:d2:90:1f:30:28:75:98:99:ca:85:4e:88:6a:34: 5e:64:94:74:16:2c:ad:3c:90:5d:ea:f2:c3:02:d3: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7D:6D:55:34:57:3E:37:ED:14:D2:D4:4E:25:6F:3B:2A:59:DF:B4 X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:6e:8f:51:5b:99:ec:ed:51:7f:33:2c:60:1e:30:fa:3a:c3: ca:74:0f:cb:a6:70:a9:4e:a0:52:4e:f7:a9:ef:f0:27:64:2a: 24:a3:8d:b9:18:09:bc:f8:7a:c5:88:dc:37:59:e0:93:79:f5: d0:e9:90:ae:58:21:38:3e:11:f5:67:23:f7:a2:4c:09:b9:c5: b7:0e:bb:d3:ff:15:a7:fe:59:9a:93:22:c6:fe:4b:61:9d:2b: e6:c9:3a:db:45:99:66:96:1e:bc:6a:c1:95:27:c0:68:7a:9f: 60:d8:ec:ce:09:41:2b:48:2b:90:b8:15:d4:9b:5c:2c:57:02: b5:c1:a1:d6:2f:44:0e:be:34:14:16:09:37:8b:a7:7b:a1:a9: 93:d3:ca:06:70:b7:67:49:94:ea:a5:ad:71:52:15:b1:e9:f8: b5:d7:c9:d1:7e:5c:76:84:86:53:c0:c1:6d:80:b0:d1:4a:47: b2:28:70:97:1b:a8:b0:7c:5a:26:24:6e:a8:c8:8e:f5:47:08: bf:a1:13:2b:5e:b6:25:0a:4e:57:5b:70:7e:c3:57:cb:10:1e: b7:50:e1:09:af:aa:c9:51:ae:73:cf:a8:5b:22:59:c3:95:2e: ec:bb:ee:e9:ed:33:ba:2f:da:1d:db:e6:1c:f3:35:2e:6e:e1: 64:4e:79:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+ONP7WV0JSecMnWhYzbidqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjYwNzIzMDkwMTA1WhcNMjYwNzI0MDkwMTA1WjAzMTEwLwYDVQQD EyhlODdkNmQ1NTM0NTczZTM3ZWQxNGQyZDQ0ZTI1NmYzYjJhNTlkZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3LjdvqvdkPPDwG472rcYtG1dJyI rv5GT16eQG93gobe9NLPAhUBwV0UGCh1YUliw4RRPI5nXaZT4wcio71G+qflfPUa 4j9Gp41wo+8PyEsNdeHQGZC2dwzVpAZPmM4g+yk03N2wm0Ekbd/r3OVy854znwf5 XLD0lLQxtmZ14SPBnbp2zn1Uc9gFsnIeopuk3wSqWs84iMYgLqz0XA/MzSQjzpSz XwntOTz41QpOYgs9qKtvqXh2p5oFAN0CDRmEn5wv+GmYzTGbGM4Q5QXDK+O/wfxL nwSWzKkfsPOAIdYu0pAfMCh1mJnKhU6IajReZJR0FiytPJBd6vLDAtOSywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOh9bVU0Vz437RTS1E4lbzsqWd+0MB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw26PUVuZ 7O1RfzMsYB4w+jrDynQPy6ZwqU6gUk73qe/wJ2QqJKONuRgJvPh6xYjcN1ngk3n1 0OmQrlghOD4R9Wcj96JMCbnFtw670/8Vp/5ZmpMixv5LYZ0r5sk620WZZpYevGrB lSfAaHqfYNjszglBK0grkLgV1JtcLFcCtcGh1i9EDr40FBYJN4une6Gpk9PKBnC3 Z0mU6qWtcVIVsen4tdfJ0X5cdoSGU8DBbYCw0UpHsihwlxuosHxaJiRuqMiO9UcI v6ETK162JQpOV1twfsNXyxAet1DhCa+qyVGuc8+oWyJZw5Uu7Lvu6e0zui/aHdvm HPM1Lm7hZE55Zw== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:15 2026 by rpki-client