$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json) Hash identifier: ZsY8Fi1ykV3wFqT60w5U5EG3Aja+0T8bXcC9C1yj/YM= Subject key identifier: 17:4B:BA:3A:11:1A:E5:42:8A:21:74:BC:42:48:0C:99:89:B3:85:09 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019E1E35E0CE71C33787B2B327C852FE0C22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft Manifest number: 06AE Signing time: Tue 12 May 2026 22:01:47 +0000 Manifest this update: Tue 12 May 2026 22:01:47 +0000 Manifest next update: Wed 13 May 2026 22:01:47 +0000 Files and hashes: 1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=) 2: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=) 3: Gz_1bJto4c1yEF2Q0CAMMKyQM04.roa (hash: XtyCodmY8171cj6WcCGbm/ih1IwcnbUwaLWquFazgPc=) 4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: l22k5NUKEQP6+3OktC4/Ea078QT4Ob3OVvRD2pN+1yI=) 5: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=) 6: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=) 7: _uvgyWXgVjcCMDVIAS2TiGgJzn4.asa (hash: 3vhPLU52VG2IqwsUeX1JgGIBJOR8BqW4eXYGkP1270Q=) 8: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=) 9: r7okYEliiPaYGayWJrORm3iOHe0.roa (hash: Ry7pFD2VVeVJdZ2ogqW8WamtLwX0AlhiB6D7DLFsEGw=) 10: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 22:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:35:e0:ce:71:c3:37:87:b2:b3:27:c8:52:fe:0c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: May 12 22:01:47 2026 GMT Not After : May 13 22:01:47 2026 GMT Subject: CN=174bba3a111ae5428a2174bc42480c9989b38509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:8e:e3:00:d0:01:ea:7f:11:0c:db:b2:e6: de:e1:ac:ee:60:a8:24:b6:3f:4b:41:9b:9c:8f:27: 29:82:15:84:d6:bd:d7:e5:dc:ed:1a:98:46:3e:f7: 57:cb:4e:10:c0:9f:90:33:a7:bd:e5:23:42:c5:d6: ab:3b:8c:54:9d:59:57:ea:f3:eb:82:24:27:fe:cc: d6:4a:c6:01:0f:bc:85:0b:15:f2:04:9c:b2:1d:cd: e4:55:33:24:54:87:91:eb:00:52:85:ec:e1:09:2f: ab:24:46:6f:53:56:1e:0e:00:98:6e:1d:2a:e5:bb: 98:a6:d2:9a:b4:9d:1e:3a:f4:48:d2:5e:66:fd:7a: 88:64:b5:c3:1f:4f:a4:f5:67:11:a3:1f:26:8f:df: 47:30:29:29:c4:42:1b:e4:cd:31:8d:00:29:78:a1: 6c:cc:47:8f:94:93:f8:98:16:78:41:07:07:f9:d7: 2b:94:7c:2d:e4:b3:ad:92:f8:e7:d5:c3:d4:f3:b6: 28:57:1f:b4:77:15:ff:da:74:98:4e:9a:a1:e8:0e: 76:19:67:5c:6b:87:10:cf:df:e2:14:eb:0e:1c:ac: 3f:72:07:11:66:fe:55:45:51:11:76:be:54:d0:18: f7:b9:99:a8:7a:41:dc:a0:2d:34:c7:b8:c1:b9:7d: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4B:BA:3A:11:1A:E5:42:8A:21:74:BC:42:48:0C:99:89:B3:85:09 X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:62:6d:e7:31:4a:e1:dc:0c:6b:c4:66:f4:b3:0a:c9:08:1d: 0b:3b:0a:76:01:3a:ca:75:8f:44:b0:8b:b8:41:27:e9:69:0e: 63:2f:f1:dc:02:60:47:8b:da:21:9c:c2:cf:a3:4c:2b:49:5e: 73:11:a1:bd:d6:a4:3d:f0:33:dd:e7:12:da:6e:7d:51:39:52: 2b:af:ed:ae:ad:7b:9f:f9:52:2f:30:c3:f6:44:f5:cf:f8:17: 9a:a6:dc:61:53:7c:b1:d9:38:a4:e8:6d:22:f7:e6:5c:18:5e: 20:52:e2:fe:2c:43:a6:24:29:2c:2f:ad:50:39:5c:74:6f:59: ec:01:83:31:f5:24:5c:a1:3f:96:60:bf:dc:f9:76:cd:99:c4: b5:fd:75:6c:a4:0d:94:e9:b6:f5:f3:cf:8a:7e:03:b6:e2:14: 9f:be:0c:c0:72:b0:a6:e8:9f:a7:57:f5:d0:19:39:ff:dc:ea: be:42:2a:3e:e7:a1:d9:65:5d:ad:71:03:2e:64:61:26:06:cb: d9:05:1c:4f:26:c4:1f:48:a9:2c:40:db:9b:04:c3:3a:b6:0e: 23:0c:c9:22:6f:2f:cc:99:9e:95:5f:80:d2:8c:fc:a4:48:63: 0b:d3:75:40:06:36:7b:8f:16:47:94:28:91:6b:79:80:37:7e: ac:bf:2c:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNeDOccM3h7KzJ8hS/gwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjYwNTEyMjIwMTQ3WhcNMjYwNTEzMjIwMTQ3WjAzMTEwLwYDVQQD EygxNzRiYmEzYTExMWFlNTQyOGEyMTc0YmM0MjQ4MGM5OTg5YjM4NTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldaO4wDQAep/EQzbsube4azuYKgk tj9LQZucjycpghWE1r3X5dztGphGPvdXy04QwJ+QM6e95SNCxdarO4xUnVlX6vPr giQn/szWSsYBD7yFCxXyBJyyHc3kVTMkVIeR6wBShezhCS+rJEZvU1YeDgCYbh0q 5buYptKatJ0eOvRI0l5m/XqIZLXDH0+k9WcRox8mj99HMCkpxEIb5M0xjQApeKFs zEePlJP4mBZ4QQcH+dcrlHwt5LOtkvjn1cPU87YoVx+0dxX/2nSYTpqh6A52GWdc a4cQz9/iFOsOHKw/cgcRZv5VRVERdr5U0Bj3uZmoekHcoC00x7jBuX22aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdLujoRGuVCiiF0vEJIDJmJs4UJMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWJt5zFK 4dwMa8Rm9LMKyQgdCzsKdgE6ynWPRLCLuEEn6WkOYy/x3AJgR4vaIZzCz6NMK0le cxGhvdakPfAz3ecS2m59UTlSK6/trq17n/lSLzDD9kT1z/gXmqbcYVN8sdk4pOht IvfmXBheIFLi/ixDpiQpLC+tUDlcdG9Z7AGDMfUkXKE/lmC/3Pl2zZnEtf11bKQN lOm29fPPin4DtuIUn74MwHKwpuifp1f10Bk5/9zqvkIqPueh2WVdrXEDLmRhJgbL 2QUcTybEH0ipLEDbmwTDOrYOIwzJIm8vzJmelV+A0oz8pEhjC9N1QAY2e48WR5Qo kWt5gDd+rL8sxA== -----END CERTIFICATE-----Generated at Wed May 13 04:59:03 2026 by rpki-client