$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: AinUYiydvyjN8GDpzM+DDLJjsH56/oofE0tudjQB54g= Subject key identifier: 2E:A7:9C:D7:B8:6C:01:91:E5:BB:6C:C2:29:AC:CC:A8:8A:0C:5C:BE Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019E1DFE65FBC1AE913C9AB7FAC520BFF376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0F9D Signing time: Tue 12 May 2026 21:01:11 +0000 Manifest this update: Tue 12 May 2026 21:01:11 +0000 Manifest next update: Wed 13 May 2026 21:01:11 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 18LcGFaA85L2PFhGmCXVUOoWIl4.roa (hash: 4CfPxdyovYZLWsCd3zC7X3GJYkpt6Kyh3yiKuvnwRcQ=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 5: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 6: 6DAgtZi47nehUjXXTU_IBnF5YW4.roa (hash: Dpma5XKqXI2J8Gsz1+CwwsgqLXij/CGgvv2gTyr8Lt8=) 7: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 8: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 9: Eiim02ghBCwS5ot2vJXFepCzz9U.roa (hash: /907tU35HYtvqYYUjHp1pohLa92BU9Q56ucgrNUsIGE=) 10: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 11: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 12: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 13: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 14: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 15: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 16: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: uiEec5Vb4+EPc9F2zwlN0H/4obicyqWDzi5nwxCZI4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:65:fb:c1:ae:91:3c:9a:b7:fa:c5:20:bf:f3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: May 12 21:01:11 2026 GMT Not After : May 13 21:01:11 2026 GMT Subject: CN=2ea79cd7b86c0191e5bb6cc229accca88a0c5cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:44:a7:a4:af:0a:ac:fd:a2:4a:a8:79:70: 2f:94:e8:82:85:45:a1:4b:ae:7a:e3:72:fa:6e:e7: f9:a3:04:0e:8e:a4:de:e8:3d:cf:d1:5c:fb:e3:68: 93:14:b0:64:1f:eb:be:e7:e0:51:ed:05:3d:35:b0: 7b:e0:14:21:f4:78:d5:6a:49:c9:e4:99:04:a6:e4: aa:c1:18:dc:2e:0e:60:35:da:2d:1a:9e:d3:4a:55: 10:bc:5d:5c:e4:03:14:07:70:15:05:0d:91:0b:ff: 37:3f:ba:de:6b:61:f0:e8:36:d6:4a:da:6a:61:ba: ae:97:72:c1:bb:c4:45:63:bf:e1:55:7f:44:b0:6d: e2:58:78:b3:55:08:2b:ff:86:df:64:69:22:07:08: dd:0f:22:67:81:fa:3f:1b:9c:8e:f6:b0:58:29:00: c0:ff:31:11:9d:a8:42:24:ae:e1:81:cc:e1:2e:7e: 91:32:6e:9a:40:b4:42:dd:86:b1:da:b9:1f:1e:bd: 6f:b9:02:e5:2a:04:c6:4b:19:c7:23:a6:f0:95:a8: c8:a0:9f:64:75:58:ef:9f:7c:d7:cd:68:12:10:6b: eb:f9:cf:b3:ee:01:d5:18:0c:15:8c:cd:bb:d4:c8: 5d:21:0b:43:13:08:fb:02:d3:64:d8:39:f7:19:2e: 52:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A7:9C:D7:B8:6C:01:91:E5:BB:6C:C2:29:AC:CC:A8:8A:0C:5C:BE X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bb:d8:43:c8:d5:92:24:db:c4:73:b0:a6:d8:cd:50:da:18: 7d:f1:8f:90:0f:1b:75:fd:44:6d:14:29:37:2f:5a:3a:82:63: 34:20:40:3e:b7:4b:bb:21:71:92:32:15:82:47:bb:81:a7:da: cb:40:42:cd:bf:25:34:05:08:51:cb:5c:99:01:9d:e8:51:64: 80:5b:be:9a:05:4d:98:3c:87:d1:14:1d:3b:65:c2:7d:c2:3f: 79:c1:40:9a:c8:41:be:c6:0e:6d:e7:1e:02:10:a7:97:6e:ff: 4a:e3:87:2d:d7:03:e7:2f:be:af:13:bb:74:e6:2e:23:b3:29: 41:63:92:37:d5:7e:ed:6c:a6:be:8d:43:b1:a0:bb:1c:22:11: 23:00:13:9a:68:d3:54:9b:72:fb:72:07:3c:78:c5:4f:22:6a: 18:56:6f:d4:25:f1:8a:8f:50:e4:7c:76:fc:47:2e:66:40:8a: 0a:00:b6:8c:38:24:48:af:c7:a1:a8:22:95:09:f2:54:83:44: b9:cd:0c:31:25:36:b7:16:5f:df:41:48:86:fd:f5:c8:44:68: 5d:a6:59:c9:2a:da:81:a0:17:7d:9c:b3:c9:ee:6b:92:ff:3f: a6:39:2d:ab:f2:b9:0f:9f:68:02:4d:6c:47:ee:f9:c1:5d:aa: a8:d1:66:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/mX7wa6RPJq3+sUgv/N2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwNTEyMjEwMTExWhcNMjYwNTEzMjEwMTExWjAzMTEwLwYDVQQD EygyZWE3OWNkN2I4NmMwMTkxZTViYjZjYzIyOWFjY2NhODhhMGM1Y2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq1Ep6SvCqz9okqoeXAvlOiChUWh S65643L6buf5owQOjqTe6D3P0Vz742iTFLBkH+u+5+BR7QU9NbB74BQh9HjVaknJ 5JkEpuSqwRjcLg5gNdotGp7TSlUQvF1c5AMUB3AVBQ2RC/83P7rea2Hw6DbWStpq Ybqul3LBu8RFY7/hVX9EsG3iWHizVQgr/4bfZGkiBwjdDyJngfo/G5yO9rBYKQDA /zERnahCJK7hgczhLn6RMm6aQLRC3Yax2rkfHr1vuQLlKgTGSxnHI6bwlajIoJ9k dVjvn3zXzWgSEGvr+c+z7gHVGAwVjM271MhdIQtDEwj7AtNk2Dn3GS5SZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6nnNe4bAGR5btswimszKiKDFy+MB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7vYQ8jV kiTbxHOwptjNUNoYffGPkA8bdf1EbRQpNy9aOoJjNCBAPrdLuyFxkjIVgke7gafa y0BCzb8lNAUIUctcmQGd6FFkgFu+mgVNmDyH0RQdO2XCfcI/ecFAmshBvsYObece AhCnl27/SuOHLdcD5y++rxO7dOYuI7MpQWOSN9V+7Wymvo1DsaC7HCIRIwATmmjT VJty+3IHPHjFTyJqGFZv1CXxio9Q5Hx2/EcuZkCKCgC2jDgkSK/HoagilQnyVINE uc0MMSU2txZf30FIhv31yERoXaZZySragaAXfZyzye5rkv8/pjktq/K5D59oAk1s R+75wV2qqNFm0w== -----END CERTIFICATE-----Generated at Wed May 13 04:02:07 2026 by rpki-client