$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: Ogo7MI8kYrZPY5dfPzbDhdQjkfgAC36jYZyKYaiEuLc= Subject key identifier: 80:D8:F9:D7:67:3E:E7:58:26:03:B2:40:AF:1C:DD:A8:A6:47:9C:5C Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019D2AA94CC70762330043BD077307F38CF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1468 Signing time: Thu 26 Mar 2026 15:00:31 +0000 Manifest this update: Thu 26 Mar 2026 15:00:31 +0000 Manifest next update: Fri 27 Mar 2026 15:00:31 +0000 Files and hashes: 1: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 2: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 3: N2mIezuMwglH5z9Sw394yPABh_Y.roa (hash: yGQ16rD5VkDHl88O+y0XucdcYEVXoD+T2CoyV9LtCBE=) 4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 5: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 6: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 7: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: 4T8hv4bqjMPMHm30X9junjMdMf19mFh7aYsO+E41kv0=) 8: _Vz2AEmZ4dDgj8Ud8EDnRZzqDhg.roa (hash: a0HQa5htazrnK7Glu+swssGtSBkAyFnuHUYyfJ+ATNo=) 9: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 10: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 11: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 12: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:a9:4c:c7:07:62:33:00:43:bd:07:73:07:f3:8c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Mar 26 15:00:31 2026 GMT Not After : Mar 27 15:00:31 2026 GMT Subject: CN=80d8f9d7673ee7582603b240af1cdda8a6479c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:43:a8:79:46:f1:0e:dd:cf:0f:59:ba:14: 1c:a5:8d:32:f0:de:23:0a:40:62:4d:93:9f:ee:b8: fa:92:9d:c7:e2:73:cd:97:29:9e:a6:22:03:a5:72: 48:f1:ca:71:aa:85:2b:e7:bc:35:2e:35:4f:14:7e: f4:fc:0c:fc:e2:38:66:77:3f:38:a5:93:cd:da:4c: 4e:29:26:c4:be:aa:03:ae:61:56:9f:83:f2:a4:15: 4c:0f:be:de:a0:6a:21:3c:24:94:2c:c2:f4:1a:83: 61:5e:cb:d0:33:a9:61:92:a1:e3:9c:9d:7e:50:d5: c2:f8:a7:7c:d3:f0:b4:fa:56:47:9f:af:ff:cf:b2: 13:b6:0c:f7:ac:e8:b7:ca:cd:2c:54:74:c2:4c:d4: 14:58:e2:4f:e1:30:98:57:ba:24:aa:9f:33:22:6b: b5:1b:ff:6b:ba:c6:50:bc:98:54:f3:19:5d:49:cf: 68:0e:e6:62:d3:3d:73:b8:fb:8f:ce:d9:dc:2a:5c: 60:bc:9a:b2:20:41:9f:bb:9c:78:b1:90:35:2e:1d: 43:d3:34:8d:31:de:4f:1d:a4:bd:13:e5:f4:29:fd: 3e:41:7c:9f:7f:bd:41:d8:36:f5:68:b9:a2:60:4a: 91:cc:72:05:a3:cd:32:0d:32:b8:c0:5e:7b:23:c0: f2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D8:F9:D7:67:3E:E7:58:26:03:B2:40:AF:1C:DD:A8:A6:47:9C:5C X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c7:71:dc:6d:63:4d:19:c6:26:74:27:a2:41:e4:67:ad:68: 71:93:d7:d2:f7:15:d7:d6:bf:f3:8b:f2:51:04:92:04:be:cb: 4a:37:48:2b:52:7f:59:0e:a6:d4:5e:ce:4b:0f:52:96:7b:1c: 1f:b0:84:2d:4c:58:26:3e:65:4d:4f:10:6e:0c:04:89:26:a1: 44:18:69:4c:2f:a0:6a:4f:39:2d:5d:ff:8b:17:98:15:d0:10: c7:4a:50:0d:6e:17:61:9d:b0:7b:9a:80:1a:5e:87:7d:a2:16: 36:b7:42:12:8b:b8:9d:08:27:ee:4c:a3:6c:b0:f5:13:7e:aa: fb:5b:9e:32:19:c8:3e:e0:4f:ce:28:48:07:26:57:77:8b:7d: 7b:31:fe:55:b6:8e:2e:bd:5a:15:ab:87:5f:51:80:be:c2:a6: 53:0a:25:d6:33:e6:55:cd:32:46:16:a2:79:ca:4f:63:c1:ba: 16:3e:3b:f8:aa:4b:23:bc:0a:1d:70:ab:7f:e4:10:36:72:c5: e8:0e:1c:26:35:8e:0e:c9:49:a7:3f:01:df:8a:98:d9:bb:48: 77:16:16:f5:1f:61:d9:c5:3f:dc:30:f1:7e:24:07:dc:52:11: 9b:90:f1:81:e1:4d:b5:cb:0e:02:8b:74:f2:48:b3:78:75:80: ef:25:29:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qqUzHB2IzAEO9B3MH84zxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMzI2MTUwMDMxWhcNMjYwMzI3MTUwMDMxWjAzMTEwLwYDVQQD Eyg4MGQ4ZjlkNzY3M2VlNzU4MjYwM2IyNDBhZjFjZGRhOGE2NDc5YzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBpDqHlG8Q7dzw9ZuhQcpY0y8N4j CkBiTZOf7rj6kp3H4nPNlymepiIDpXJI8cpxqoUr57w1LjVPFH70/Az84jhmdz84 pZPN2kxOKSbEvqoDrmFWn4PypBVMD77eoGohPCSULML0GoNhXsvQM6lhkqHjnJ1+ UNXC+Kd80/C0+lZHn6//z7ITtgz3rOi3ys0sVHTCTNQUWOJP4TCYV7okqp8zImu1 G/9rusZQvJhU8xldSc9oDuZi0z1zuPuPztncKlxgvJqyIEGfu5x4sZA1Lh1D0zSN Md5PHaS9E+X0Kf0+QXyff71B2Db1aLmiYEqRzHIFo80yDTK4wF57I8Dy5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDY+ddnPudYJgOyQK8c3aimR5xcMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMdx3G1j TRnGJnQnokHkZ61ocZPX0vcV19a/84vyUQSSBL7LSjdIK1J/WQ6m1F7OSw9Slnsc H7CELUxYJj5lTU8QbgwEiSahRBhpTC+gak85LV3/ixeYFdAQx0pQDW4XYZ2we5qA Gl6HfaIWNrdCEou4nQgn7kyjbLD1E36q+1ueMhnIPuBPzihIByZXd4t9ezH+VbaO Lr1aFauHX1GAvsKmUwol1jPmVc0yRhaiecpPY8G6Fj47+KpLI7wKHXCrf+QQNnLF 6A4cJjWODslJpz8B34qY2btIdxYW9R9h2cU/3DDxfiQH3FIRm5DxgeFNtcsOAot0 8kizeHWA7yUp/w== -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:25 2026 by rpki-client