$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: 8zXrvETP8pKgnSESs2nV5k3UU1+Xi0pZc3b9PEGwKLg= Subject key identifier: 90:52:D2:C8:5D:B1:AD:BF:EF:F9:57:F1:92:C8:97:2F:4C:02:28:2B Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 01A0CF6CDE79A9BEDE390D30C0E83EB62F46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1654 Signing time: Wed 23 Sep 2026 18:00:13 +0000 Manifest this update: Wed 23 Sep 2026 18:00:13 +0000 Manifest next update: Thu 24 Sep 2026 18:00:13 +0000 Files and hashes: 1: 4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa (hash: AcFtBAJ8L85K3ER5s0exdifY6WeWVCgPuREiTI5SL1o=) 2: DaIOsBAUTocNWtQ487tz4YWipHI.roa (hash: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=) 3: FsUwTKEoeuKYMmnk_mWWy6-qdAo.roa (hash: kxhMJxapdCPykD+F2D9TyndT9oVuTTd+gUFsUUrezQc=) 4: NjjGyupk2EJG8TJjJA1Myg_WAwA.roa (hash: 1JLpN2xJETUSv+Ius8OCYEkY3ODiPgVoMCOqIZ1UHNY=) 5: R5S--utC9laYMZLaK8e5y0xU4YE.roa (hash: TDBMDGa2/0sxnlzLOujaeEN+d/Z+bRBFPSV66wTIH5k=) 6: Smw8KxULxNV1U3wUVaTgjVcAEN0.roa (hash: xaQVLJNe1R846qUde4wi8d2fl1ASkR/w9PUCNskHzmg=) 7: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 8: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 9: XKGUjZlD7tskIQ5vBU5XUtZBdFU.roa (hash: 4Dp/honokh4JVg16NS/ziIGrcbXgziNFinLk2g3lzv8=) 10: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: bWQ9amrrJ4MKNOxtFG6YbKySY1UblTrEEUxkz2iIpK4=) 11: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 12: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 13: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:6c:de:79:a9:be:de:39:0d:30:c0:e8:3e:b6:2f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Sep 23 18:00:13 2026 GMT Not After : Sep 24 18:00:13 2026 GMT Subject: CN=9052d2c85db1adbfeff957f192c8972f4c02282b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5f:7f:4b:e3:9e:93:26:3d:9a:9b:24:7a:ee: 3c:bf:64:92:a0:84:09:e3:ca:f7:e7:1c:f2:bb:13: e4:ac:ae:d9:40:ee:3f:66:20:38:3d:df:50:cc:45: f4:93:12:18:be:52:be:75:bf:d0:18:18:63:0e:96: e4:20:07:5b:ca:3b:cc:c7:21:32:81:8a:a9:87:15: df:3b:bc:e6:0e:67:2f:53:cf:f8:fc:31:22:00:17: c7:09:8c:9b:bb:fa:b8:3c:09:ec:15:31:a1:e9:04: 3e:eb:36:55:7f:48:14:dd:9b:b4:33:06:82:80:5f: 6b:23:5a:a6:91:c3:0b:a9:14:f6:83:15:11:82:3e: 5b:15:6c:d4:d7:b7:cd:3d:d4:85:df:5b:b4:7f:95: 29:40:01:a0:bd:85:ab:26:28:fc:6c:d8:83:83:50: 5f:90:00:17:1d:c7:ea:95:3b:59:91:2d:87:da:b3: 6e:42:f1:7f:7e:a1:f2:dc:04:3f:0e:48:03:4b:92: 7d:22:45:2d:a8:a3:fa:b1:47:93:67:c3:7d:b0:b6: cf:91:01:12:e1:4f:c7:03:c6:5d:02:9d:82:06:83: 83:d4:74:8e:cb:1d:9b:47:16:df:3a:91:14:18:3c: 87:29:a9:47:35:97:17:15:5f:42:68:06:71:74:89: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:52:D2:C8:5D:B1:AD:BF:EF:F9:57:F1:92:C8:97:2F:4C:02:28:2B X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9a:b8:73:ec:3f:64:12:89:0e:90:c7:18:b1:5e:6e:fd:24: 54:85:e1:29:d2:3a:eb:cc:49:42:8a:0d:23:7f:b2:aa:f8:68: db:66:cd:85:77:57:36:74:fe:5b:6b:13:1f:3f:0c:13:43:19: 5d:42:0c:c2:0d:e4:60:0b:87:55:2f:ab:ec:f5:43:74:99:0c: 3b:8d:2b:e4:f6:4d:a7:9e:d3:ca:ad:4f:21:8e:68:68:f3:a5: 6a:6b:21:3b:29:28:45:57:07:e9:5f:b4:3d:d9:25:25:00:52: 10:cb:67:2c:c7:97:ca:c8:5f:f5:10:e8:a3:62:c0:8f:1e:73: ee:d2:55:e8:ed:a9:8b:3f:18:4b:ae:58:47:1e:81:2e:2c:44: 03:74:2a:29:a0:93:3d:85:f4:62:4b:68:b5:dd:73:c0:0b:93: 9c:32:33:ca:bd:bc:a4:0e:7b:81:cb:3d:05:d1:4d:3f:41:62: 46:fb:40:da:ba:7b:84:0c:64:8c:7e:51:8b:d2:ba:51:19:8a: 67:c8:39:0f:ed:a8:1b:bc:02:c7:f6:03:61:94:67:ba:ed:cb: e1:87:c7:25:f9:1c:55:fc:22:e5:79:35:4d:60:86:92:90:ff: b1:59:e7:b1:7f:30:bf:1b:71:85:4c:19:30:5f:79:5a:a9:e9: 21:f0:fe:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPbN55qb7eOQ0wwOg+ti9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwOTIzMTgwMDEzWhcNMjYwOTI0MTgwMDEzWjAzMTEwLwYDVQQD Eyg5MDUyZDJjODVkYjFhZGJmZWZmOTU3ZjE5MmM4OTcyZjRjMDIyODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql9/S+OekyY9mpskeu48v2SSoIQJ 48r35xzyuxPkrK7ZQO4/ZiA4Pd9QzEX0kxIYvlK+db/QGBhjDpbkIAdbyjvMxyEy gYqphxXfO7zmDmcvU8/4/DEiABfHCYybu/q4PAnsFTGh6QQ+6zZVf0gU3Zu0MwaC gF9rI1qmkcMLqRT2gxURgj5bFWzU17fNPdSF31u0f5UpQAGgvYWrJij8bNiDg1Bf kAAXHcfqlTtZkS2H2rNuQvF/fqHy3AQ/DkgDS5J9IkUtqKP6sUeTZ8N9sLbPkQES 4U/HA8ZdAp2CBoOD1HSOyx2bRxbfOpEUGDyHKalHNZcXFV9CaAZxdImoCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBS0shdsa2/7/lX8ZLIly9MAigrMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpq4c+w/ ZBKJDpDHGLFebv0kVIXhKdI668xJQooNI3+yqvho22bNhXdXNnT+W2sTHz8ME0MZ XUIMwg3kYAuHVS+r7PVDdJkMO40r5PZNp57Tyq1PIY5oaPOlamshOykoRVcH6V+0 PdklJQBSEMtnLMeXyshf9RDoo2LAjx5z7tJV6O2piz8YS65YRx6BLixEA3QqKaCT PYX0Yktotd1zwAuTnDIzyr28pA57gcs9BdFNP0FiRvtA2rp7hAxkjH5Ri9K6URmK Z8g5D+2oG7wCx/YDYZRnuu3L4YfHJfkcVfwi5Xk1TWCGkpD/sVnnsX8wvxtxhUwZ MF95WqnpIfD+Ng== -----END CERTIFICATE-----Generated at Thu Sep 24 03:09:47 2026 by rpki-client