$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: kfNXxrUc3gOsB4QNcb7WLlF/qVVM3mnX1H+Xk0UVqNs= Subject key identifier: 07:35:48:11:27:29:F0:6C:56:21:D3:F6:39:EE:E0:AF:10:41:84:0E Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019D27A89EE84FD625A3F1182F57848C551A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0F1C Signing time: Thu 26 Mar 2026 01:00:55 +0000 Manifest this update: Thu 26 Mar 2026 01:00:55 +0000 Manifest next update: Fri 27 Mar 2026 01:00:55 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 18LcGFaA85L2PFhGmCXVUOoWIl4.roa (hash: 4CfPxdyovYZLWsCd3zC7X3GJYkpt6Kyh3yiKuvnwRcQ=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 5: 6DAgtZi47nehUjXXTU_IBnF5YW4.roa (hash: Dpma5XKqXI2J8Gsz1+CwwsgqLXij/CGgvv2gTyr8Lt8=) 6: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 7: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 8: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 9: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 10: VeJJmnC-8Q_0a1pLzST4jtM1Hq8.roa (hash: WP4UaUcxrdfBlAMFFsaXmggPZwSD/JcDZLDXI5e7by0=) 11: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 12: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 13: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 14: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: v7HSHEvt9cZhHodOztT3Jh0C1xfM1SLaTSxrrEYOtd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a8:9e:e8:4f:d6:25:a3:f1:18:2f:57:84:8c:55:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Mar 26 01:00:55 2026 GMT Not After : Mar 27 01:00:55 2026 GMT Subject: CN=073548112729f06c5621d3f639eee0af1041840e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:e3:fa:9b:89:80:42:ee:93:d7:7e:cd:10: b3:65:34:14:bc:12:b1:de:ed:b2:37:f4:5e:41:dc: b5:03:8a:8d:38:f3:b8:ba:bf:2d:4e:dc:ec:29:37: 76:38:43:ab:dd:88:3e:a6:d0:63:9f:10:08:c0:78: fe:99:12:9a:fc:6a:c0:2e:45:8b:42:55:7e:12:66: 86:11:c5:77:18:f4:29:19:25:1d:26:bc:6e:52:a6: 7f:f2:37:d3:6f:a4:b0:bb:f1:d7:8c:d3:99:28:03: f7:3c:6b:bb:be:2b:90:c5:76:ec:d4:ac:2b:13:77: e8:d3:e3:b6:42:3a:84:3e:09:d0:bc:31:a7:74:81: c8:75:cc:62:47:1f:8d:f3:c9:57:ad:3c:07:08:6a: 16:25:e0:a6:cf:58:70:2d:46:ee:51:de:b4:89:02: 48:5d:ea:0a:36:4a:d2:26:3a:ba:1c:37:fb:8b:89: 84:4f:d1:d3:9d:94:ea:68:51:4c:fc:ef:e1:6e:6e: 54:c8:66:14:2f:e2:f8:d5:c6:89:06:4f:53:0b:11: f6:56:c9:30:e7:1d:36:16:60:e2:fc:b1:d4:55:86: 0d:3e:7f:67:a4:51:c9:de:9a:44:0f:d1:3b:4a:29: 17:db:56:1c:d9:38:d2:bb:68:8d:e0:bf:7d:00:cc: 8e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:35:48:11:27:29:F0:6C:56:21:D3:F6:39:EE:E0:AF:10:41:84:0E X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:52:e0:bc:1f:f9:91:21:d8:f2:f9:2b:a8:0b:1b:5a:72:44: ae:8c:e3:0b:52:12:23:3e:5b:47:d4:48:8d:a2:d9:91:ec:58: f7:6d:af:f1:36:47:b0:38:09:41:3d:df:4d:ba:fe:7f:48:bd: 3a:ec:44:0f:9f:83:ba:61:b4:3c:95:4e:b2:5d:5a:18:e9:7a: 99:e4:64:80:b4:54:10:71:5f:62:e1:67:63:ba:87:2f:4b:e6: a7:4e:2b:56:1e:b7:c3:60:bb:b4:fc:23:73:1e:11:d7:8f:ed: f2:98:6d:f4:10:cd:df:8d:ed:b9:9c:2d:73:5c:0b:c5:40:70: fe:87:4d:a4:ba:41:cf:6b:0e:88:46:3f:4e:63:e2:ad:37:11: 92:b9:ac:b8:f1:70:70:0d:59:60:e0:28:02:0a:b5:4c:f9:47: cb:aa:eb:3f:7c:7e:b8:db:e3:97:f0:ae:ca:6b:02:3b:5e:78: 28:bb:73:9b:78:13:5b:3b:50:df:e5:89:87:d9:96:a7:8c:52: e3:4b:5f:53:f9:ae:ef:89:05:6b:bd:45:b1:71:39:4f:68:ee: 19:65:43:f3:0e:84:9f:9d:8b:31:b6:19:ce:2c:95:21:7d:49: e3:c1:30:6c:f5:0a:d1:f3:86:82:1b:f9:bb:05:39:62:b8:11: 3e:1c:9d:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqJ7oT9Ylo/EYL1eEjFUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwMzI2MDEwMDU1WhcNMjYwMzI3MDEwMDU1WjAzMTEwLwYDVQQD EygwNzM1NDgxMTI3MjlmMDZjNTYyMWQzZjYzOWVlZTBhZjEwNDE4NDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI/j+puJgELuk9d+zRCzZTQUvBKx 3u2yN/ReQdy1A4qNOPO4ur8tTtzsKTd2OEOr3Yg+ptBjnxAIwHj+mRKa/GrALkWL QlV+EmaGEcV3GPQpGSUdJrxuUqZ/8jfTb6Swu/HXjNOZKAP3PGu7viuQxXbs1Kwr E3fo0+O2QjqEPgnQvDGndIHIdcxiRx+N88lXrTwHCGoWJeCmz1hwLUbuUd60iQJI XeoKNkrSJjq6HDf7i4mET9HTnZTqaFFM/O/hbm5UyGYUL+L41caJBk9TCxH2Vskw 5x02FmDi/LHUVYYNPn9npFHJ3ppED9E7SikX21Yc2TjSu2iN4L99AMyOwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAc1SBEnKfBsViHT9jnu4K8QQYQOMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvlLgvB/5 kSHY8vkrqAsbWnJErozjC1ISIz5bR9RIjaLZkexY922v8TZHsDgJQT3fTbr+f0i9 OuxED5+DumG0PJVOsl1aGOl6meRkgLRUEHFfYuFnY7qHL0vmp04rVh63w2C7tPwj cx4R14/t8pht9BDN343tuZwtc1wLxUBw/odNpLpBz2sOiEY/TmPirTcRkrmsuPFw cA1ZYOAoAgq1TPlHy6rrP3x+uNvjl/CuymsCO154KLtzm3gTWztQ3+WJh9mWp4xS 40tfU/mu74kFa71FsXE5T2juGWVD8w6En52LMbYZziyVIX1J48EwbPUK0fOGghv5 uwU5YrgRPhydSA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:56 2026 by rpki-client